This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft File: kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft (raw, json) Hash identifier: VFXMNq3XbKndW3QrdXIH9HzxSrgduQIHpXdeJv1tBJM= Subject key identifier: 51:C6:2B:FC:6C:3E:59:1A:C2:9B:58:1E:15:98:D1:80:F6:68:2C:F9 Authority key identifier: 91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5 Certificate issuer: /CN=9189e06c887d3fede88f717bffa43c8cc866c7a5 Certificate serial: 019BF6BF7B5022837795DC4812A649181933 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft Manifest number: 02D4 Signing time: Sun 25 Jan 2026 20:01:42 +0000 Manifest this update: Sun 25 Jan 2026 20:01:42 +0000 Manifest next update: Mon 26 Jan 2026 20:01:42 +0000 Files and hashes: 1: kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl (hash: 4QCd3dqlUlF7dPsTVhq32sV125aknLf+Mnj9f/IgtpA=) 2: p7RfayQGkYVg5d11LiJ1Q0zbyT4.roa (hash: I4DW3u8qF1DUqorT+zF5KoXC1GrV1uanCFydVzAjLr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:7b:50:22:83:77:95:dc:48:12:a6:49:18:19:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9189e06c887d3fede88f717bffa43c8cc866c7a5 Validity Not Before: Jan 25 20:01:42 2026 GMT Not After : Jan 26 20:01:42 2026 GMT Subject: CN=51c62bfc6c3e591ac29b581e1598d180f6682cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c6:1a:ff:4f:26:81:2c:0e:98:56:5c:41:5f: b5:52:40:16:3f:18:82:76:75:79:b7:7d:a4:e5:c7: 17:7c:82:95:e8:21:8f:9c:69:1c:ee:93:e5:7b:f4: b3:a4:e5:11:ba:1a:e0:8f:bc:9d:ff:50:6b:9f:16: af:18:f3:04:05:04:4f:c7:0c:43:2f:54:03:d0:f1: 46:da:28:3a:e8:1a:84:35:11:98:82:8e:86:f1:c9: 50:a8:72:9b:b3:88:b8:91:c6:4c:1b:bd:fc:b9:4d: 55:26:9e:ed:d5:62:4d:72:85:73:7c:82:a5:93:8d: bd:73:6a:20:26:e9:1c:cd:27:cd:32:3b:aa:4d:46: cb:17:cb:d2:f7:c2:94:a0:5d:99:ec:7b:ad:da:87: 99:50:60:51:26:42:6f:73:ae:d1:f3:d0:6d:2a:90: de:9c:ca:9c:80:26:53:5a:b5:67:5e:dd:d4:08:24: 32:13:e3:bb:69:df:97:bd:53:59:cf:36:89:17:ae: 78:be:56:3d:c4:f8:1f:3c:df:4b:88:2f:1a:73:51: f9:57:08:e0:c6:df:c6:73:79:a5:eb:4f:9b:e7:0f: 43:91:03:ea:8f:87:1c:1a:b4:a3:4e:2f:e7:84:4c: 21:c2:f2:61:12:2e:11:7f:d1:20:d3:66:88:32:c3: 4c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C6:2B:FC:6C:3E:59:1A:C2:9B:58:1E:15:98:D1:80:F6:68:2C:F9 X509v3 Authority Key Identifier: keyid:91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:63:9e:43:36:b7:92:3e:bd:ac:b9:62:f5:c8:c0:fa:e1:29: c5:52:75:fa:f9:6c:6d:df:7e:61:a5:3d:63:73:15:f4:f6:09: c1:fe:70:90:66:c9:2b:d0:0d:46:5d:c6:0e:ad:b4:88:4a:54: 2e:cb:32:3e:ac:74:67:48:47:d6:81:7d:7f:58:a7:7a:c2:d9: 81:d4:ac:28:4c:ea:ad:44:20:f8:c9:3f:8c:d8:c3:14:10:ce: b2:28:2d:03:55:27:0b:ce:6b:dd:45:e5:8d:30:ec:e1:9b:25: 2d:7a:e6:c3:6f:d8:34:8f:7c:d9:99:86:7b:93:58:e2:89:a4: 4c:f4:0b:d7:c5:03:63:98:01:63:97:2d:71:02:ff:2c:62:20: 27:68:3a:35:db:38:cf:cc:02:cb:a7:d7:a6:8c:64:8a:50:1b: 5d:1d:cf:b2:63:e4:95:a8:4b:1e:6e:8a:21:f9:45:ab:99:08: d3:8d:0f:7a:67:ac:19:ac:8c:09:65:ae:bf:05:50:43:98:07: 6a:20:a4:85:bd:e7:fe:ea:46:b5:83:8f:2c:87:20:d1:c6:a1: 3c:1f:e9:94:6c:2d:bc:7f:bc:3a:d6:89:d8:1e:d8:1c:5c:40: 12:98:94:62:1b:1d:20:3b:93:df:69:0e:d7:49:ba:9d:c2:55: 36:89:bc:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v3tQIoN3ldxIEqZJGBkzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxODllMDZjODg3ZDNmZWRlODhmNzE3YmZmYTQzYzhjYzg2 NmM3YTUwHhcNMjYwMTI1MjAwMTQyWhcNMjYwMTI2MjAwMTQyWjAzMTEwLwYDVQQD Eyg1MWM2MmJmYzZjM2U1OTFhYzI5YjU4MWUxNTk4ZDE4MGY2NjgyY2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMYa/08mgSwOmFZcQV+1UkAWPxiC dnV5t32k5ccXfIKV6CGPnGkc7pPle/SzpOURuhrgj7yd/1BrnxavGPMEBQRPxwxD L1QD0PFG2ig66BqENRGYgo6G8clQqHKbs4i4kcZMG738uU1VJp7t1WJNcoVzfIKl k429c2ogJukczSfNMjuqTUbLF8vS98KUoF2Z7Hut2oeZUGBRJkJvc67R89BtKpDe nMqcgCZTWrVnXt3UCCQyE+O7ad+XvVNZzzaJF654vlY9xPgfPN9LiC8ac1H5Vwjg xt/Gc3ml60+b5w9DkQPqj4ccGrSjTi/nhEwhwvJhEi4Rf9Eg02aIMsNMXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHGK/xsPlkawptYHhWY0YD2aCz5MB8GA1UdIwQY MBaAFJGJ4GyIfT/t6I9xe/+kPIzIZselMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1luZ2JJaDlQLTNvajNGN182UThqTWhteDZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zZDNhMzMtNjFkOS00OTk2LTgxOWMt ZDk3YTU0Y2IzOWUxLzEva1luZ2JJaDlQLTNvajNGN182UThqTWhteDZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8zZDNhMzMtNjFkOS00OTk2LTgxOWMtZDk3YTU0Y2IzOWUx LzEva1luZ2JJaDlQLTNvajNGN182UThqTWhteDZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWOeQza3 kj69rLli9cjA+uEpxVJ1+vlsbd9+YaU9Y3MV9PYJwf5wkGbJK9ANRl3GDq20iEpU LssyPqx0Z0hH1oF9f1inesLZgdSsKEzqrUQg+Mk/jNjDFBDOsigtA1UnC85r3UXl jTDs4ZslLXrmw2/YNI982ZmGe5NY4omkTPQL18UDY5gBY5ctcQL/LGIgJ2g6Nds4 z8wCy6fXpoxkilAbXR3PsmPklahLHm6KIflFq5kI040PemesGayMCWWuvwVQQ5gH aiCkhb3n/upGtYOPLIcg0cahPB/plGwtvH+8OtaJ2B7YHFxAEpiUYhsdIDuT32kO 10m6ncJVNom85A== -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:14 2026 by rpki-client