This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft File: K0ro4PiNDIw530T_pB4ywmJ8OhU.mft (raw, json) Hash identifier: Yf9NgrpgEyEYMAjNDc18skqc0qJvqxXDSbIAwDatCs8= Subject key identifier: 86:79:36:C4:47:3B:A9:E5:85:F5:84:41:20:EF:53:C5:5C:7B:38:CF Authority key identifier: 2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15 Certificate issuer: /CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15 Certificate serial: 019BF68780940D50AEEC51900D267247F4F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft Manifest number: 0502 Signing time: Sun 25 Jan 2026 19:00:33 +0000 Manifest this update: Sun 25 Jan 2026 19:00:33 +0000 Manifest next update: Mon 26 Jan 2026 19:00:33 +0000 Files and hashes: 1: K0ro4PiNDIw530T_pB4ywmJ8OhU.crl (hash: GR5bUSUwSCSc8J4rxy/XznI5aM2nbcey77vRIS2RXkc=) 2: z5dBX6odp12M_OB_gttLAeXRzfY.roa (hash: H0+1g03VSFVNjWI/Z7WGHpAKWuQ/lvaaEnN2kUyKA+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:80:94:0d:50:ae:ec:51:90:0d:26:72:47:f4:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15 Validity Not Before: Jan 25 19:00:33 2026 GMT Not After : Jan 26 19:00:33 2026 GMT Subject: CN=867936c4473ba9e585f5844120ef53c55c7b38cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d4:09:07:0c:44:88:81:05:8a:dd:17:cd:67: f6:d1:e1:8b:44:a3:4a:d5:76:1f:ea:b9:bf:5f:e5: eb:ad:78:74:10:17:30:d6:cf:50:d5:cb:ea:70:fa: 48:13:d9:51:cd:48:63:ec:09:f4:10:87:86:8d:64: b7:52:0b:5a:1e:07:43:d3:89:83:96:43:ae:a9:04: 54:a2:77:96:44:4a:20:1e:b3:50:f4:32:36:e4:72: d6:15:c1:6a:64:f5:e2:2a:e0:de:73:96:7d:9c:f6: 6e:9f:28:55:f5:bf:1a:3c:27:37:5e:9d:99:fc:aa: be:32:e9:fa:8a:81:ff:6e:38:60:22:d5:e4:5e:67: 3d:76:20:08:e4:e5:f6:74:80:fd:f0:57:b1:1b:c9: 03:9f:ad:85:9a:84:6d:a9:84:68:65:a8:b8:33:be: f6:8c:fa:04:7c:40:fa:37:84:2c:3b:d9:00:7b:50: 34:0e:f9:64:09:bd:6f:c0:84:cf:2b:5d:f9:15:eb: 08:30:d8:68:62:15:d2:45:ab:68:96:f2:ed:ad:38: 5b:78:e1:7d:51:a2:ce:3c:5a:7f:02:8b:68:46:0e: 4c:8d:12:f0:19:cf:e8:b0:c0:2a:eb:26:bc:c4:3a: 29:72:31:f7:8e:62:70:5f:d0:58:f4:7d:ce:2c:30: a8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:79:36:C4:47:3B:A9:E5:85:F5:84:41:20:EF:53:C5:5C:7B:38:CF X509v3 Authority Key Identifier: keyid:2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:38:67:ce:ca:e1:24:b1:af:f6:2e:91:20:8e:93:3d:80:a2: e1:01:9f:47:1e:3e:dc:39:b9:5e:e2:9a:42:5f:4d:ef:42:c2: 55:e1:8a:4e:b3:70:f2:a9:42:67:8c:aa:14:be:47:ca:15:0b: 09:a5:e2:f7:a5:68:48:d9:bc:63:ce:94:b9:70:dd:e9:36:59: f2:61:98:16:c2:f2:75:3e:fa:7c:71:d9:b3:17:6d:6b:9b:95: bc:bf:c9:ed:18:9b:bf:76:38:fc:53:27:ca:dd:1d:cd:8b:95: ef:b6:72:a7:3b:58:9c:01:38:96:b6:82:c3:26:06:d9:8d:50: ba:88:20:47:8b:fc:44:a5:fc:a5:71:2d:90:e3:4c:3b:e0:52: 2e:73:db:0c:20:20:a3:34:0e:57:c7:32:c9:5f:cf:d3:40:3c: 21:3b:ab:6f:02:bd:cb:a6:c8:71:6e:6b:1d:5b:86:30:f3:f7: a8:7e:cd:ea:86:82:ec:eb:c1:9a:6c:39:69:fb:d2:08:f6:5f: da:28:55:47:8b:51:a7:de:1f:de:e8:fb:1a:5c:2d:bd:d5:21: 77:5e:30:9c:2a:ed:7f:92:32:7f:62:e0:aa:38:b6:fd:a1:fd: 74:fa:3e:18:3e:db:18:74:22:ce:fb:10:e4:aa:16:d7:86:bf: 24:2e:58:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h4CUDVCu7FGQDSZyR/T4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNGFlOGUwZjg4ZDBjOGMzOWRmNDRmZmE0MWUzMmMyNjI3 YzNhMTUwHhcNMjYwMTI1MTkwMDMzWhcNMjYwMTI2MTkwMDMzWjAzMTEwLwYDVQQD Eyg4Njc5MzZjNDQ3M2JhOWU1ODVmNTg0NDEyMGVmNTNjNTVjN2IzOGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNQJBwxEiIEFit0XzWf20eGLRKNK 1XYf6rm/X+XrrXh0EBcw1s9Q1cvqcPpIE9lRzUhj7An0EIeGjWS3UgtaHgdD04mD lkOuqQRUoneWREogHrNQ9DI25HLWFcFqZPXiKuDec5Z9nPZunyhV9b8aPCc3Xp2Z /Kq+Mun6ioH/bjhgItXkXmc9diAI5OX2dID98FexG8kDn62FmoRtqYRoZai4M772 jPoEfED6N4QsO9kAe1A0DvlkCb1vwITPK135FesIMNhoYhXSRatolvLtrThbeOF9 UaLOPFp/AotoRg5MjRLwGc/osMAq6ya8xDopcjH3jmJwX9BY9H3OLDCohQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZ5NsRHO6nlhfWEQSDvU8VcezjPMB8GA1UdIwQY MBaAFCtK6OD4jQyMOd9E/6QeMsJifDoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzBybzRQaU5ESXc1MzBUX3BCNHl3bUo4T2hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy85OWMxZjYtZTdjMS00YWIzLTllZDYt MTA2ODBkMjU2YWUwLzEvSzBybzRQaU5ESXc1MzBUX3BCNHl3bUo4T2hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy85OWMxZjYtZTdjMS00YWIzLTllZDYtMTA2ODBkMjU2YWUw LzEvSzBybzRQaU5ESXc1MzBUX3BCNHl3bUo4T2hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARjhnzsrh JLGv9i6RII6TPYCi4QGfRx4+3Dm5XuKaQl9N70LCVeGKTrNw8qlCZ4yqFL5HyhUL CaXi96VoSNm8Y86UuXDd6TZZ8mGYFsLydT76fHHZsxdta5uVvL/J7Ribv3Y4/FMn yt0dzYuV77ZypztYnAE4lraCwyYG2Y1QuoggR4v8RKX8pXEtkONMO+BSLnPbDCAg ozQOV8cyyV/P00A8ITurbwK9y6bIcW5rHVuGMPP3qH7N6oaC7OvBmmw5afvSCPZf 2ihVR4tRp94f3uj7GlwtvdUhd14wnCrtf5Iyf2Lgqji2/aH9dPo+GD7bGHQizvsQ 5KoW14a/JC5Y1w== -----END CERTIFICATE-----Generated at Mon Jan 26 01:52:02 2026 by rpki-client