This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft File: KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft (raw, json) Hash identifier: eKMu1Ws6kOavqQjvDGdzfH0BLMiOP2ae5vNZ7smKLq0= Subject key identifier: A7:A3:AD:AA:4F:98:7A:1A:68:24:CC:28:57:22:75:14:E4:BC:35:77 Authority key identifier: 29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5 Certificate issuer: /CN=2936f64328c1e66911409ea7c69722f8d26266b5 Certificate serial: 019BF6513F7F2DC6984F3EFEF52FF3EFFCC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft Manifest number: 0BE1 Signing time: Sun 25 Jan 2026 18:01:18 +0000 Manifest this update: Sun 25 Jan 2026 18:01:18 +0000 Manifest next update: Mon 26 Jan 2026 18:01:18 +0000 Files and hashes: 1: KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl (hash: 6UT21DISCE4P+aIMXvZ8+3s4yEupE/ZWomiJevH3IgM=) 2: oXHERV6aA92q4XM2FtjLJ6RybNw.roa (hash: biGeyIKzfwGkq1HyLc7g1XF4DU08F8Q47/MaS1GoJuw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:3f:7f:2d:c6:98:4f:3e:fe:f5:2f:f3:ef:fc:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2936f64328c1e66911409ea7c69722f8d26266b5 Validity Not Before: Jan 25 18:01:18 2026 GMT Not After : Jan 26 18:01:18 2026 GMT Subject: CN=a7a3adaa4f987a1a6824cc2857227514e4bc3577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:45:8e:71:6e:e4:17:40:0a:64:62:c1:0d:c4: 21:b8:0f:be:8d:c7:59:ce:9a:02:d4:20:63:c1:aa: f7:76:ed:35:a0:a9:57:3d:7e:80:00:d0:d6:57:8e: db:ec:82:d4:6d:10:dd:d7:6c:7e:2c:63:2a:e4:99: e3:f2:38:9d:50:85:5f:7b:67:ee:ae:4f:b8:e6:4a: 6f:d4:ec:51:09:97:7c:60:ef:b3:aa:c7:39:e8:de: fb:42:2e:bf:70:13:12:85:57:98:11:ca:d0:d2:68: cc:f5:01:a5:a6:ed:35:ec:1e:46:fa:88:56:a7:e0: 0b:c3:a1:be:4d:17:27:58:de:1f:95:82:56:1b:89: 89:49:75:f4:dc:6f:46:d5:c1:e9:94:62:9b:18:57: 90:76:a7:09:1a:f6:01:72:7b:35:e4:00:53:f7:81: d3:1c:1d:a5:15:42:37:46:4d:8f:8a:61:af:20:74: d1:ae:40:dd:ca:2f:d6:6f:98:9b:d3:d6:d4:e5:d0: e2:47:c7:92:a9:4f:eb:84:5e:bf:a8:97:a0:94:37: 44:88:12:9d:80:d2:8b:ab:75:24:41:d4:9d:ce:09: df:7e:b1:c7:f4:f7:a9:d2:d1:dd:c7:34:ee:81:79: 9b:28:ab:d7:88:ea:10:e3:ee:e8:d2:08:3f:7c:f0: 75:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A3:AD:AA:4F:98:7A:1A:68:24:CC:28:57:22:75:14:E4:BC:35:77 X509v3 Authority Key Identifier: keyid:29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ee:a5:cb:36:31:89:9b:97:72:b1:01:90:11:c9:18:4f:c3: 6c:0e:4d:f1:2d:7e:de:3f:ca:87:06:3b:f5:82:6f:60:e3:67: 60:0b:aa:2d:4a:99:c7:16:45:d2:7a:f1:3d:24:a3:5c:41:28: 34:a7:79:08:7d:82:77:a8:1f:ca:c7:43:7b:1c:14:65:2d:cc: c0:11:71:52:ec:ca:ba:d6:48:50:fb:9b:06:e1:c4:96:97:bf: 68:a5:05:8d:6c:9f:23:d7:4e:7b:2e:de:7d:7e:0f:d8:27:b5: 4a:41:cd:1c:56:29:aa:78:b7:4f:1f:0f:5d:1f:1e:1b:7c:c7: ad:88:ee:5d:f3:7a:45:41:dc:4d:15:3d:6d:4c:bc:a1:0d:84: aa:dc:2e:dd:d7:3e:d9:82:92:7f:bb:63:66:57:77:52:f3:dd: 2f:23:48:67:f5:93:ba:5a:7e:f8:be:ea:f5:4e:e4:ad:ae:7e: 12:31:c5:51:a1:3b:66:f3:99:c7:8b:be:f0:78:73:61:a5:3a: c0:0b:1c:34:bc:d7:cd:9b:29:ab:5f:ad:d2:7b:45:bd:31:05: a5:1a:f0:1c:90:11:90:38:c9:87:8f:83:1c:35:fe:5a:05:5b: 08:5b:34:4c:fe:68:1e:b2:9f:2c:e9:fb:22:c5:0d:b4:c5:f6: 30:01:66:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UT9/LcaYTz7+9S/z7/zDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MzZmNjQzMjhjMWU2NjkxMTQwOWVhN2M2OTcyMmY4ZDI2 MjY2YjUwHhcNMjYwMTI1MTgwMTE4WhcNMjYwMTI2MTgwMTE4WjAzMTEwLwYDVQQD EyhhN2EzYWRhYTRmOTg3YTFhNjgyNGNjMjg1NzIyNzUxNGU0YmMzNTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EWOcW7kF0AKZGLBDcQhuA++jcdZ zpoC1CBjwar3du01oKlXPX6AANDWV47b7ILUbRDd12x+LGMq5Jnj8jidUIVfe2fu rk+45kpv1OxRCZd8YO+zqsc56N77Qi6/cBMShVeYEcrQ0mjM9QGlpu017B5G+ohW p+ALw6G+TRcnWN4flYJWG4mJSXX03G9G1cHplGKbGFeQdqcJGvYBcns15ABT94HT HB2lFUI3Rk2PimGvIHTRrkDdyi/Wb5ib09bU5dDiR8eSqU/rhF6/qJeglDdEiBKd gNKLq3UkQdSdzgnffrHH9Pep0tHdxzTugXmbKKvXiOoQ4+7o0gg/fPB1jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKejrapPmHoaaCTMKFcidRTkvDV3MB8GA1UdIwQY MBaAFCk29kMoweZpEUCep8aXIvjSYma1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1RiMlF5akI1bWtSUUo2bnhwY2ktTkppWnJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS83ZGM3MTItZmY1ZC00ZmYyLWEyYWUt MzlkYzUzZTM3ODJmLzEvS1RiMlF5akI1bWtSUUo2bnhwY2ktTkppWnJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS83ZGM3MTItZmY1ZC00ZmYyLWEyYWUtMzlkYzUzZTM3ODJm LzEvS1RiMlF5akI1bWtSUUo2bnhwY2ktTkppWnJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX+6lyzYx iZuXcrEBkBHJGE/DbA5N8S1+3j/KhwY79YJvYONnYAuqLUqZxxZF0nrxPSSjXEEo NKd5CH2Cd6gfysdDexwUZS3MwBFxUuzKutZIUPubBuHElpe/aKUFjWyfI9dOey7e fX4P2Ce1SkHNHFYpqni3Tx8PXR8eG3zHrYjuXfN6RUHcTRU9bUy8oQ2Eqtwu3dc+ 2YKSf7tjZld3UvPdLyNIZ/WTulp++L7q9U7kra5+EjHFUaE7ZvOZx4u+8HhzYaU6 wAscNLzXzZspq1+t0ntFvTEFpRrwHJARkDjJh4+DHDX+WgVbCFs0TP5oHrKfLOn7 IsUNtMX2MAFmEA== -----END CERTIFICATE-----Generated at Mon Jan 26 02:15:23 2026 by rpki-client