This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft File: klBppddk2iVZVNsu6dEkPeFrkQE.mft (raw, json) Hash identifier: BAAMZRib4nHh0a3ku1cCzBV1ehdgpVit9mmt/DqmwJw= Subject key identifier: 0B:D6:79:E3:A5:AA:DD:C8:A9:08:EC:D8:4E:E6:21:89:25:4C:E4:52 Authority key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01 Certificate issuer: /CN=925069a5d764da255954db2ee9d1243de16b9101 Certificate serial: 019BF83F742B6FCD3D2B0261F09D52585614 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft Manifest number: 1378 Signing time: Mon 26 Jan 2026 03:01:06 +0000 Manifest this update: Mon 26 Jan 2026 03:01:06 +0000 Manifest next update: Tue 27 Jan 2026 03:01:06 +0000 Files and hashes: 1: g7Y0ZBMWW3x2nBvDARRBK02Lebg.roa (hash: +2cc++Wl1u7PjNULA3cbQO5x+A8pMvr+LGUA63FvUlc=) 2: klBppddk2iVZVNsu6dEkPeFrkQE.crl (hash: rGbOk9336YP3JzIBadwrcACUk29y646rzGneg5fRA+0=) 3: rqGjD3vaP5vjh-UbO_Aa0T8TroY.roa (hash: VMdVXfW1qOZfCDo+olo19jtE9+BYNQ4kPi8z5UP7KV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:74:2b:6f:cd:3d:2b:02:61:f0:9d:52:58:56:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=925069a5d764da255954db2ee9d1243de16b9101 Validity Not Before: Jan 26 03:01:06 2026 GMT Not After : Jan 27 03:01:06 2026 GMT Subject: CN=0bd679e3a5aaddc8a908ecd84ee62189254ce452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:22:5a:16:be:72:02:3b:0e:47:d9:da:8d:4b: bc:99:d0:8c:20:4c:f9:04:06:b4:44:e8:bf:9b:8d: b3:03:49:8c:d0:36:c2:ea:ae:57:83:50:bd:d4:cc: 1c:66:76:d4:51:f8:aa:27:3d:b9:c2:44:7e:a3:fd: 40:20:3e:a6:15:b2:bd:67:d2:e5:fb:e8:c5:ca:2f: 7b:16:b9:7c:ba:9f:47:55:90:bf:bb:32:dc:c9:ad: 6a:42:5b:1c:79:79:77:6d:87:f9:33:50:6d:6b:5b: 2e:1b:3a:2f:45:0e:f1:1c:7d:7b:75:1c:df:dc:38: 51:09:d3:b6:3b:d5:94:83:10:34:9c:9f:77:a4:c1: 23:21:62:b9:c1:87:cf:9f:43:5b:40:94:01:6d:32: aa:9f:17:73:d7:0e:56:77:f7:16:9f:a8:9e:d6:ce: a3:88:dd:01:9c:99:e7:dd:d5:7a:d6:0d:c6:69:03: 74:cc:f1:b9:17:af:4e:8b:f2:94:d5:43:ff:20:f1: 23:e8:79:ca:96:db:f6:bf:b8:18:a7:fa:b5:0e:bb: 38:d0:25:3f:ce:a2:1f:74:5e:4c:12:40:7c:62:a5: 18:08:1f:80:b4:07:4b:36:34:f3:48:2d:ff:47:ec: 20:e3:4d:42:3a:44:ae:25:d4:e3:5e:dd:f2:28:aa: a1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D6:79:E3:A5:AA:DD:C8:A9:08:EC:D8:4E:E6:21:89:25:4C:E4:52 X509v3 Authority Key Identifier: keyid:92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:68:3a:d6:2a:fc:09:23:d8:6b:b1:6f:dd:6f:9b:50:7c:dc: 3f:3d:96:ee:e1:25:07:65:dc:86:fe:4b:45:63:dd:84:1f:28: 7f:dc:07:8b:b2:fa:1d:f9:14:ef:db:c2:c0:89:99:72:e2:c6: 54:cb:8d:cb:8b:17:2f:00:9f:eb:1c:b8:8e:a9:d7:58:e9:94: 7b:7d:03:0e:42:65:a6:4f:25:2b:b0:db:4a:f1:bc:14:39:06: 3e:a3:1e:11:59:14:8c:67:e3:76:ea:7b:d1:11:43:67:67:2b: 37:57:32:c8:97:1e:e7:d5:c2:90:53:c9:5a:f4:71:be:28:89: b6:e6:83:5c:d3:20:47:72:38:d0:cd:c2:f6:c1:7a:bc:af:12: 1c:1c:15:41:e8:be:87:3f:ca:7c:a9:5e:0c:07:22:7e:8e:05: 33:c8:69:63:e2:9f:c2:8e:df:8a:e4:24:6d:30:85:85:46:ac: cc:29:17:01:16:c2:a1:7d:50:3b:db:bc:67:30:35:3a:0c:21: f9:e6:e9:c6:cc:27:30:20:63:71:21:c4:b2:66:5e:af:7a:d1: 50:f5:12:15:7f:5c:77:fe:91:9e:cc:fe:3b:08:c4:c1:52:bc: e5:84:b4:fd:8d:a3:21:17:c0:66:3b:fc:94:9d:aa:8a:8b:be: ad:85:ce:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P3Qrb809KwJh8J1SWFYUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNTA2OWE1ZDc2NGRhMjU1OTU0ZGIyZWU5ZDEyNDNkZTE2 YjkxMDEwHhcNMjYwMTI2MDMwMTA2WhcNMjYwMTI3MDMwMTA2WjAzMTEwLwYDVQQD EygwYmQ2NzllM2E1YWFkZGM4YTkwOGVjZDg0ZWU2MjE4OTI1NGNlNDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSJaFr5yAjsOR9najUu8mdCMIEz5 BAa0ROi/m42zA0mM0DbC6q5Xg1C91MwcZnbUUfiqJz25wkR+o/1AID6mFbK9Z9Ll ++jFyi97Frl8up9HVZC/uzLcya1qQlsceXl3bYf5M1Bta1suGzovRQ7xHH17dRzf 3DhRCdO2O9WUgxA0nJ93pMEjIWK5wYfPn0NbQJQBbTKqnxdz1w5Wd/cWn6ie1s6j iN0BnJnn3dV61g3GaQN0zPG5F69Oi/KU1UP/IPEj6HnKltv2v7gYp/q1Drs40CU/ zqIfdF5MEkB8YqUYCB+AtAdLNjTzSC3/R+wg401COkSuJdTjXt3yKKqhAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvWeeOlqt3IqQjs2E7mIYklTORSMB8GA1UdIwQY MBaAFJJQaaXXZNolWVTbLunRJD3ha5EBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2xCcHBkZGsyaVZaVk5zdTZkRWtQZUZya1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82Nzg4ZjUtNDg4OS00YmU3LWJiMTkt YTliOGRlNjExYTk2LzEva2xCcHBkZGsyaVZaVk5zdTZkRWtQZUZya1FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS82Nzg4ZjUtNDg4OS00YmU3LWJiMTktYTliOGRlNjExYTk2 LzEva2xCcHBkZGsyaVZaVk5zdTZkRWtQZUZya1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2g61ir8 CSPYa7Fv3W+bUHzcPz2W7uElB2Xchv5LRWPdhB8of9wHi7L6HfkU79vCwImZcuLG VMuNy4sXLwCf6xy4jqnXWOmUe30DDkJlpk8lK7DbSvG8FDkGPqMeEVkUjGfjdup7 0RFDZ2crN1cyyJce59XCkFPJWvRxviiJtuaDXNMgR3I40M3C9sF6vK8SHBwVQei+ hz/KfKleDAcifo4FM8hpY+Kfwo7fiuQkbTCFhUaszCkXARbCoX1QO9u8ZzA1Ogwh +ebpxswnMCBjcSHEsmZer3rRUPUSFX9cd/6Rnsz+OwjEwVK85YS0/Y2jIRfAZjv8 lJ2qiou+rYXOrQ== -----END CERTIFICATE-----Generated at Mon Jan 26 13:03:03 2026 by rpki-client