This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft File: K-U9NAqL9Hwb800yVeEC77GBrRk.mft (raw, json) Hash identifier: zKrXBA1WusNaoCkcgTyYklvMKButb2xG5zETJHfOv4k= Subject key identifier: 43:08:7F:66:80:C0:51:4E:A4:2C:AF:C8:DC:0D:DF:FC:A9:2E:40:C3 Authority key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19 Certificate issuer: /CN=2be53d340a8bf47c1bf34d3255e102efb181ad19 Certificate serial: 019BF79A3364E3657CF7010CC1B04B4F1622 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft Manifest number: 0C3F Signing time: Mon 26 Jan 2026 00:00:36 +0000 Manifest this update: Mon 26 Jan 2026 00:00:36 +0000 Manifest next update: Tue 27 Jan 2026 00:00:36 +0000 Files and hashes: 1: 7kADj_Exqnkd_NooXivCTNgHMTw.roa (hash: xbxLEV7EBAsCMdM5vvQNxcgu+GmkqM8Q10yUTCA4kNA=) 2: FilFuxaHNlZodlAIrDOhTmh6ldo.roa (hash: uhGLiCFEBOn6o6kgW6SCO1d0PO9VmCMZayR7rM7fOKo=) 3: K-U9NAqL9Hwb800yVeEC77GBrRk.crl (hash: Lx0CX1/6/Ilo5gPoj+6NzKZHAr3N+5HxxlcOanaJUQg=) 4: PE7W5uBW5xpFm8z_X4WySs2k6Yo.roa (hash: wV3X/7HZHZKG/4FgH10MAPrQyf6yj0My6U1gF8qH54U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:33:64:e3:65:7c:f7:01:0c:c1:b0:4b:4f:16:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19 Validity Not Before: Jan 26 00:00:36 2026 GMT Not After : Jan 27 00:00:36 2026 GMT Subject: CN=43087f6680c0514ea42cafc8dc0ddffca92e40c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:23:b3:74:20:54:6e:33:0e:85:5e:cc:45:56: 96:b1:9b:f7:4f:51:10:ce:c3:b3:ea:2e:e3:6b:8f: d5:dd:9e:03:47:c0:58:20:3d:c7:b2:cf:4e:f5:0f: 42:32:c7:fe:6b:b8:ee:95:5c:b9:8c:85:e2:bb:a8: e5:d6:23:16:af:10:33:0f:71:7a:5d:e0:9d:6d:23: 3f:86:a3:ce:91:5c:52:90:fe:af:05:92:7b:83:54: 15:93:d7:33:ce:8b:28:77:82:d4:4e:d1:43:16:f8: 12:d1:0d:44:a5:f8:f0:dc:8c:c7:98:4c:70:42:2a: 60:b0:24:30:09:e3:7f:cf:0f:bf:e6:9c:96:36:32: c3:51:bf:5a:92:54:95:76:7a:1d:ee:c0:9d:74:a7: 41:f4:7e:07:8e:29:5f:a5:56:98:99:f3:99:bf:51: 7e:63:78:3e:71:9e:a4:4c:f8:07:ba:fb:b7:85:96: 49:ea:f8:46:8d:13:6c:ad:54:2f:28:e3:6c:97:37: b1:f7:5a:8b:0d:29:d7:3b:d0:98:77:9e:b3:66:98: e6:bd:a0:4d:e5:24:c5:db:00:84:4f:06:01:1b:df: 2e:8e:5e:b5:ce:44:99:20:42:4e:74:15:98:46:8c: 2d:13:a4:d7:a8:15:24:3b:0e:39:51:47:2b:29:7a: e7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:08:7F:66:80:C0:51:4E:A4:2C:AF:C8:DC:0D:DF:FC:A9:2E:40:C3 X509v3 Authority Key Identifier: keyid:2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:7e:3d:1b:f1:bb:9d:16:21:25:9b:56:a3:00:10:03:0e:16: 24:7b:4b:4c:9c:82:a7:a1:a9:2d:0c:d8:d9:50:05:c4:be:f1: d5:5f:e1:b0:17:ae:bc:3d:d7:37:51:b6:77:ab:1e:f4:9c:2c: be:df:b2:20:f0:0d:e9:fb:e8:22:bd:ac:67:df:99:79:8a:b9: 76:8f:ce:f8:ac:7c:28:05:fc:ee:cd:97:4b:97:7f:2e:72:d3: ba:06:c9:c1:87:df:5c:ed:c7:fa:1b:37:62:12:be:ea:c7:84: 6e:37:8a:0e:41:4f:1f:99:60:b7:70:f2:bc:dd:90:5e:27:87: ab:46:4f:64:76:43:6b:24:79:9c:6e:06:6d:1c:19:fe:a5:8a: 07:a4:77:d2:e6:20:2a:4c:46:77:fe:f5:6e:d4:a9:3a:ad:ae: 31:f6:ec:da:92:32:3e:6d:ac:2c:d9:13:db:bd:9f:eb:62:38: 11:73:c3:f6:8a:e6:74:1b:ac:d6:8e:7b:29:69:fa:7b:72:e7: 63:28:a7:95:88:6c:ba:04:fc:fb:be:de:dd:30:94:69:ae:00: 5e:18:51:e2:f3:56:21:42:ed:eb:18:10:02:87:8e:d9:ee:eb: 4e:53:c6:a0:d9:9b:c1:d7:7b:49:90:b3:dc:f4:8b:a6:10:62: 3e:5b:98:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mjNk42V89wEMwbBLTxYiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZTUzZDM0MGE4YmY0N2MxYmYzNGQzMjU1ZTEwMmVmYjE4 MWFkMTkwHhcNMjYwMTI2MDAwMDM2WhcNMjYwMTI3MDAwMDM2WjAzMTEwLwYDVQQD Eyg0MzA4N2Y2NjgwYzA1MTRlYTQyY2FmYzhkYzBkZGZmY2E5MmU0MGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCOzdCBUbjMOhV7MRVaWsZv3T1EQ zsOz6i7ja4/V3Z4DR8BYID3Hss9O9Q9CMsf+a7julVy5jIXiu6jl1iMWrxAzD3F6 XeCdbSM/hqPOkVxSkP6vBZJ7g1QVk9czzosod4LUTtFDFvgS0Q1Epfjw3IzHmExw QipgsCQwCeN/zw+/5pyWNjLDUb9aklSVdnod7sCddKdB9H4HjilfpVaYmfOZv1F+ Y3g+cZ6kTPgHuvu3hZZJ6vhGjRNsrVQvKONslzex91qLDSnXO9CYd56zZpjmvaBN 5STF2wCETwYBG98ujl61zkSZIEJOdBWYRowtE6TXqBUkOw45UUcrKXrnFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMIf2aAwFFOpCyvyNwN3/ypLkDDMB8GA1UdIwQY MBaAFCvlPTQKi/R8G/NNMlXhAu+xga0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mNzI1NjItNDVmNS00MDE5LTgzYTEt NzRmMGMzZTY2M2NiLzEvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9mNzI1NjItNDVmNS00MDE5LTgzYTEtNzRmMGMzZTY2M2Ni LzEvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApH49G/G7 nRYhJZtWowAQAw4WJHtLTJyCp6GpLQzY2VAFxL7x1V/hsBeuvD3XN1G2d6se9Jws vt+yIPAN6fvoIr2sZ9+ZeYq5do/O+Kx8KAX87s2XS5d/LnLTugbJwYffXO3H+hs3 YhK+6seEbjeKDkFPH5lgt3DyvN2QXieHq0ZPZHZDayR5nG4GbRwZ/qWKB6R30uYg KkxGd/71btSpOq2uMfbs2pIyPm2sLNkT272f62I4EXPD9ormdBus1o57KWn6e3Ln YyinlYhsugT8+77e3TCUaa4AXhhR4vNWIULt6xgQAoeO2e7rTlPGoNmbwdd7SZCz 3PSLphBiPluYdg== -----END CERTIFICATE-----Generated at Mon Jan 26 08:42:53 2026 by rpki-client