This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft File: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft (raw, json) Hash identifier: NiAhsOOndM7uEEGv/IJYI4yXcRZ6HWZvvNeS7QlFoqA= Subject key identifier: CD:A5:DB:FD:CA:68:65:AA:1E:36:3C:3D:66:09:BF:92:62:A6:30:27 Authority key identifier: 29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9 Certificate issuer: /CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9 Certificate serial: 019BF72D9D3F39FA734BCB9A3FE822A07E72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft Manifest number: 13DF Signing time: Sun 25 Jan 2026 22:02:00 +0000 Manifest this update: Sun 25 Jan 2026 22:02:00 +0000 Manifest next update: Mon 26 Jan 2026 22:02:00 +0000 Files and hashes: 1: 0xBMzbimSDs_I2nvtM1Y5jK-78k.roa (hash: SgKHLhFkroj2Hq/iLApLxBA7Ln6Ya97UmYFoHMm8u7c=) 2: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl (hash: cOPtZm9lC9z3uAGHPExBp2xw4bvUyWC5WueprVlmVVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:9d:3f:39:fa:73:4b:cb:9a:3f:e8:22:a0:7e:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9 Validity Not Before: Jan 25 22:02:00 2026 GMT Not After : Jan 26 22:02:00 2026 GMT Subject: CN=cda5dbfdca6865aa1e363c3d6609bf9262a63027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:81:ed:c8:0f:0d:a3:6e:e3:bf:4e:4c:aa:4a: e8:a4:a8:c7:49:48:ec:2e:52:24:e0:1a:52:c7:6e: ca:80:b8:8d:db:2d:09:c3:6e:83:45:dd:39:f6:8a: b7:5e:cc:79:04:03:ca:f0:e7:ad:58:a1:8d:ed:2b: 07:08:5a:e4:d5:89:e1:d1:fc:05:a9:f2:2b:d1:be: f0:8d:aa:b1:93:ed:e2:ba:d2:3a:01:ed:43:47:a2: a1:1b:8c:2e:be:9d:be:5c:b7:42:ba:1a:a9:ed:d5: b7:33:ba:f6:12:0b:1a:e8:d2:88:22:c9:53:35:bd: 1c:c9:fe:c3:c7:64:45:8b:e5:71:5d:2d:58:1b:12: 3e:ab:53:d8:4a:c1:d6:a7:b1:3b:fe:a0:da:c9:f1: aa:11:a3:d9:c2:7f:07:75:4c:92:6a:f9:c9:83:fe: 75:a0:20:18:b5:73:14:86:73:e0:5b:58:4d:72:03: 87:f5:6d:a7:fa:c8:de:ce:02:b9:9a:10:d5:b1:0e: ce:ee:6b:01:53:19:88:55:bf:49:30:53:e3:75:14: ff:a0:57:47:b3:cc:4b:b0:cc:dd:b3:dc:4c:48:3a: d1:4f:31:8b:5f:5c:8e:b8:8f:e2:1e:75:ec:94:ba: e2:0c:ae:73:8b:f5:ea:4f:96:dd:78:8b:60:e4:74: dc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A5:DB:FD:CA:68:65:AA:1E:36:3C:3D:66:09:BF:92:62:A6:30:27 X509v3 Authority Key Identifier: keyid:29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:76:a1:88:6a:af:83:aa:8a:c1:9d:2c:29:fa:83:06:1c:b6: ec:69:35:5f:b5:f6:dd:31:cb:30:00:96:01:e5:25:dd:7b:40: 1a:ba:76:29:74:32:6a:4d:dc:be:d0:4f:09:d4:43:db:d8:ad: 53:19:d9:7a:56:b4:5c:bf:c3:51:fc:b2:f2:10:75:f6:1c:ec: aa:7a:52:7b:26:c9:ba:ee:ef:5f:75:66:d1:f8:88:26:46:de: e4:27:9a:4e:7d:5d:9b:ad:5b:55:d1:9f:77:73:f8:03:f8:3c: 4f:97:bd:9b:85:5d:09:6e:15:4e:cb:b1:1e:f6:3a:10:23:7c: 6f:88:bf:95:6a:4d:de:fb:7e:51:ea:32:c8:58:3e:66:02:d7: 9b:bd:56:26:8d:e8:c7:2d:da:00:67:90:d0:68:72:46:98:0c: a9:b1:09:93:0b:a8:62:7b:45:8e:c3:c2:85:ee:34:e1:ef:09: d4:cc:15:08:39:2a:0b:cd:53:31:d1:67:3e:fc:bb:8c:0a:bb: 56:9d:06:e0:77:57:ec:13:f9:5f:15:a7:04:91:ac:69:0e:43: cb:2d:bd:ff:83:b4:f1:cf:c2:45:be:72:28:92:5c:9f:06:b9: 4d:53:a9:54:7f:58:38:af:1b:e2:40:9b:fa:66:9e:db:0f:60: a9:da:79:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LZ0/OfpzS8uaP+gioH5yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmI3ZGEzYjQ0ZTQxYjMyMzY5ZTRhNWM3OTBkMzA4MWZj NjlhYTkwHhcNMjYwMTI1MjIwMjAwWhcNMjYwMTI2MjIwMjAwWjAzMTEwLwYDVQQD EyhjZGE1ZGJmZGNhNjg2NWFhMWUzNjNjM2Q2NjA5YmY5MjYyYTYzMDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IHtyA8No27jv05MqkropKjHSUjs LlIk4BpSx27KgLiN2y0Jw26DRd059oq3Xsx5BAPK8OetWKGN7SsHCFrk1Ynh0fwF qfIr0b7wjaqxk+3iutI6Ae1DR6KhG4wuvp2+XLdCuhqp7dW3M7r2Egsa6NKIIslT Nb0cyf7Dx2RFi+VxXS1YGxI+q1PYSsHWp7E7/qDayfGqEaPZwn8HdUySavnJg/51 oCAYtXMUhnPgW1hNcgOH9W2n+sjezgK5mhDVsQ7O7msBUxmIVb9JMFPjdRT/oFdH s8xLsMzds9xMSDrRTzGLX1yOuI/iHnXslLriDK5zi/XqT5bdeItg5HTc+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2l2/3KaGWqHjY8PWYJv5JipjAnMB8GA1UdIwQY MBaAFCn7faO0TkGzI2nkpceQ0wgfxpqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2Z0OW83Uk9RYk1qYWVTbHg1RFRDQl9HbXFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xN2EwMTYtMjZjNy00MjRjLTg2MmYt YmNhYzhiNTUyYTlhLzEvS2Z0OW83Uk9RYk1qYWVTbHg1RFRDQl9HbXFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8xN2EwMTYtMjZjNy00MjRjLTg2MmYtYmNhYzhiNTUyYTlh LzEvS2Z0OW83Uk9RYk1qYWVTbHg1RFRDQl9HbXFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAinahiGqv g6qKwZ0sKfqDBhy27Gk1X7X23THLMACWAeUl3XtAGrp2KXQyak3cvtBPCdRD29it UxnZela0XL/DUfyy8hB19hzsqnpSeybJuu7vX3Vm0fiIJkbe5CeaTn1dm61bVdGf d3P4A/g8T5e9m4VdCW4VTsuxHvY6ECN8b4i/lWpN3vt+UeoyyFg+ZgLXm71WJo3o xy3aAGeQ0GhyRpgMqbEJkwuoYntFjsPChe404e8J1MwVCDkqC81TMdFnPvy7jAq7 Vp0G4HdX7BP5XxWnBJGsaQ5Dyy29/4O08c/CRb5yKJJcnwa5TVOpVH9YOK8b4kCb +mae2w9gqdp5jg== -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:46 2026 by rpki-client