This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft File: K1wFUAyGXpJL3esa7nsuuMupJ8k.mft (raw, json) Hash identifier: cqGEguwYECJholhmQOa99dwq1tXSIdr6dGifhulguSU= Subject key identifier: D4:DF:5A:50:61:E3:68:5C:4B:17:0C:A7:A6:88:B0:F3:B2:1C:C8:3B Authority key identifier: 2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9 Certificate issuer: /CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9 Certificate serial: 019BF7D17A5F7FA57B365B1D1BB2DFBBEC0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft Manifest number: 02EF Signing time: Mon 26 Jan 2026 01:00:59 +0000 Manifest this update: Mon 26 Jan 2026 01:00:59 +0000 Manifest next update: Tue 27 Jan 2026 01:00:59 +0000 Files and hashes: 1: K1wFUAyGXpJL3esa7nsuuMupJ8k.crl (hash: Ry3LKtiAmtbaFmPoCwvlhQ00sdCrNsopSL4ZQWV7U+0=) 2: a4tcSb4rS0ZTyQ0HQWUrw9ZU1WI.roa (hash: 6y7B5mYALV8RuAK+rFKCQl3TCy8ZRF7yNkPXxeMdXfU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:7a:5f:7f:a5:7b:36:5b:1d:1b:b2:df:bb:ec:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9 Validity Not Before: Jan 26 01:00:59 2026 GMT Not After : Jan 27 01:00:59 2026 GMT Subject: CN=d4df5a5061e3685c4b170ca7a688b0f3b21cc83b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:93:d5:9c:74:39:95:21:cd:0b:ae:66:33:37: 69:8d:94:16:60:90:05:56:35:e0:f4:73:d7:76:86: e6:bb:d8:08:73:82:fe:51:07:4c:25:c4:03:13:4c: a9:e3:68:20:82:ba:ab:1e:fc:09:81:34:4d:b9:ec: 16:a9:0d:de:dc:66:a8:20:7d:eb:ff:15:97:49:83: 8b:01:b9:8d:63:94:f9:89:88:8a:d4:a7:d3:c8:75: 3d:51:59:63:a1:1e:d6:53:34:ef:b9:b5:69:38:4e: a9:75:e6:5f:c4:30:a3:aa:fe:a8:c8:01:d1:d7:31: 7d:b4:b1:b7:7e:20:4d:af:7a:a4:1c:82:db:9a:b5: 14:f8:8a:99:bc:15:bf:7a:9d:97:ec:fd:56:12:7b: 04:19:13:b9:dd:8d:3b:36:03:77:c7:8f:40:0e:27: f7:82:8f:5e:c0:19:59:20:14:d0:78:13:8b:32:d6: 6c:17:e6:bc:6b:77:c8:aa:54:c6:ed:eb:ce:db:ca: 5b:46:87:f5:e5:d3:fc:47:5c:a3:65:fe:a4:ee:55: 78:6e:a7:24:2e:86:8c:67:93:a4:74:a5:be:33:a7: 83:b7:69:2e:db:37:75:93:73:b3:6e:49:a9:9e:22: c7:75:3d:90:8a:30:70:f2:72:cb:fe:0f:19:14:a6: 2a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:DF:5A:50:61:E3:68:5C:4B:17:0C:A7:A6:88:B0:F3:B2:1C:C8:3B X509v3 Authority Key Identifier: keyid:2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:66:36:16:3a:81:43:02:ee:7c:1c:cc:dd:79:f9:eb:84:eb: 6d:37:34:03:31:74:8d:84:2d:67:71:d2:c6:26:84:9f:69:70: 0f:0f:8b:d6:34:d0:d7:8a:22:c9:1e:dc:9b:bc:2f:24:24:60: 13:08:2d:cd:27:63:42:34:06:82:41:b6:81:28:d7:25:e6:d0: 7b:0c:b2:ea:f9:58:f0:50:06:c5:74:49:6f:f2:8f:81:d7:25: 7c:1c:9c:2f:f4:c6:85:bf:3d:95:64:19:26:73:95:34:2e:60: fa:f2:f6:39:20:b5:dc:55:0a:3d:0a:19:ee:db:7a:0e:2e:05: 99:2b:70:09:e5:77:18:f4:79:e0:cb:06:b5:46:88:0e:f8:35: de:ec:5c:d4:52:9f:b2:e7:3e:b9:8f:42:33:59:56:7a:46:2e: 63:d0:e1:45:04:ec:94:29:15:e4:7e:a4:c4:e3:b8:04:cb:97: fa:6d:f5:76:01:35:36:98:55:62:44:76:bd:3b:f7:19:14:c0: 60:13:b5:2e:7a:98:b5:d1:5f:63:01:fc:43:e1:88:b0:94:e5: 67:54:a6:6c:19:b6:d6:a8:eb:bc:a4:ad:28:28:38:20:f5:b0: fa:09:da:4a:72:be:98:c4:bb:23:cf:49:be:60:d1:a1:c2:7e: 46:90:54:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30Xpff6V7NlsdG7Lfu+wOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNWMwNTUwMGM4NjVlOTI0YmRkZWIxYWVlN2IyZWI4Y2Jh OTI3YzkwHhcNMjYwMTI2MDEwMDU5WhcNMjYwMTI3MDEwMDU5WjAzMTEwLwYDVQQD EyhkNGRmNWE1MDYxZTM2ODVjNGIxNzBjYTdhNjg4YjBmM2IyMWNjODNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZPVnHQ5lSHNC65mMzdpjZQWYJAF VjXg9HPXdobmu9gIc4L+UQdMJcQDE0yp42gggrqrHvwJgTRNuewWqQ3e3GaoIH3r /xWXSYOLAbmNY5T5iYiK1KfTyHU9UVljoR7WUzTvubVpOE6pdeZfxDCjqv6oyAHR 1zF9tLG3fiBNr3qkHILbmrUU+IqZvBW/ep2X7P1WEnsEGRO53Y07NgN3x49ADif3 go9ewBlZIBTQeBOLMtZsF+a8a3fIqlTG7evO28pbRof15dP8R1yjZf6k7lV4bqck LoaMZ5OkdKW+M6eDt2ku2zd1k3OzbkmpniLHdT2QijBw8nLL/g8ZFKYqhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTfWlBh42hcSxcMp6aIsPOyHMg7MB8GA1UdIwQY MBaAFCtcBVAMhl6SS93rGu57LrjLqSfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzF3RlVBeUdYcEpMM2VzYTduc3V1TXVwSjhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8yN2ZkNWUtN2Q1ZS00ODk4LTg2ODkt NTk1ZDQyZDVjMjU0LzEvSzF3RlVBeUdYcEpMM2VzYTduc3V1TXVwSjhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8yN2ZkNWUtN2Q1ZS00ODk4LTg2ODktNTk1ZDQyZDVjMjU0 LzEvSzF3RlVBeUdYcEpMM2VzYTduc3V1TXVwSjhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjmY2FjqB QwLufBzM3Xn564TrbTc0AzF0jYQtZ3HSxiaEn2lwDw+L1jTQ14oiyR7cm7wvJCRg EwgtzSdjQjQGgkG2gSjXJebQewyy6vlY8FAGxXRJb/KPgdclfBycL/TGhb89lWQZ JnOVNC5g+vL2OSC13FUKPQoZ7tt6Di4FmStwCeV3GPR54MsGtUaIDvg13uxc1FKf suc+uY9CM1lWekYuY9DhRQTslCkV5H6kxOO4BMuX+m31dgE1NphVYkR2vTv3GRTA YBO1LnqYtdFfYwH8Q+GIsJTlZ1SmbBm21qjrvKStKCg4IPWw+gnaSnK+mMS7I89J vmDRocJ+RpBUKA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:02:13 2026 by rpki-client