This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft File: KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json) Hash identifier: 1OGbpcPxNiOip9eqD7eVi8wueSIdwhCw1HAaFalSEuE= Subject key identifier: C9:33:5A:C0:3C:05:3E:80:BB:C0:F8:2A:97:34:1A:68:5C:9F:D6:89 Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce Certificate serial: 019BF3BE19D50C9AA27DF962472054CAC58C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft Manifest number: 1438 Signing time: Sun 25 Jan 2026 06:01:20 +0000 Manifest this update: Sun 25 Jan 2026 06:01:20 +0000 Manifest next update: Mon 26 Jan 2026 06:01:20 +0000 Files and hashes: 1: 0Id9ZYia89tn9rGbVp1WccKbdLs.roa (hash: H/d3G1LlSq5Lm4RmW5/Q0ROpxkgSnJpVhWwEfjRrmCE=) 2: 4i9ivIesCHsbnVrZP6Me_46hnOo.roa (hash: qu7/9ByyUg/pGlPFs771pDMBYsdYL5/jWLiIBXBq/us=) 3: 5NyfZtZq8I_a22w9fqIDYQ8J3zo.roa (hash: ZXAkN8Owpsubs84/gjn1dQB9OdgtJ+vDayAhe4jgKik=) 4: 9bdi8ZcArF7uIVM_PWOWOKzHAwM.roa (hash: ksm5o6Brqb84qifDdWrqQOIBVSbPQo+Iqz+ko5JrdDE=) 5: AJc1n1WlM_uViiz8P-Q_ZGlrmkI.roa (hash: 5BjqoTSt8ivKeTgUMxzWvODvEYATsy/sKY0BmzBKn2k=) 6: F2qeHQTP3YKUfyoMJ2I6cHyrIBk.roa (hash: FVx/e+sO+XB2wvTGriWONMagJGCQ6hVxISJ0xlebzr0=) 7: GQccrYsGeyc_jz14ZkRPvffaEMY.roa (hash: iZxmpGm8fTch7x8Mf4u1f0OmBwCOdgCfCEjgwepuDV8=) 8: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: BlBEtJd0OcnQonMPNmRbc3GqBA7wBfx9OWMtMQJqRf4=) 9: QtPx4ap949xN5arcMJRpZvFzTfM.roa (hash: KaudJcjJFvIdlbff02gWZxLZI4bRcA90hXhml9h/ITE=) 10: khYS0lYDwiX9lTkfE55JUXtp8-s.roa (hash: bmf6tC0bXLVB4qb1Vl64CHJZEDbU89NkLDTPf7Yci6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:be:19:d5:0c:9a:a2:7d:f9:62:47:20:54:ca:c5:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce Validity Not Before: Jan 25 06:01:20 2026 GMT Not After : Jan 26 06:01:20 2026 GMT Subject: CN=c9335ac03c053e80bbc0f82a97341a685c9fd689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:79:6b:66:a6:18:fb:9d:80:15:4d:6a:58:fe: 79:64:71:47:5d:8d:58:f5:33:89:4a:e1:39:30:b1: fd:64:61:5c:a2:8a:3c:8f:5a:fb:8e:01:1e:19:11: d6:1a:18:b9:1e:03:9a:d0:f6:dc:f9:66:19:03:c9: 93:97:e3:35:60:3d:85:48:f4:48:62:88:8a:65:e7: 63:69:93:4c:35:b3:8c:bb:3d:c1:8b:80:c2:c3:51: af:80:b6:46:3c:65:4b:39:2b:a0:03:a6:c5:2d:9a: 3b:ba:7a:6e:a2:dd:14:c6:d4:95:93:22:da:57:e5: df:d9:6e:39:ff:f4:3c:b0:2a:f2:27:65:64:46:41: 73:81:a0:bb:68:fc:b2:f0:26:c4:b7:c2:c4:1f:a4: a4:d0:73:5a:05:6a:b6:11:ef:85:d9:56:c1:eb:a8: 25:26:3f:a0:37:4f:7a:4b:3a:f5:5a:ad:61:b9:3e: 16:3f:5e:7d:a9:df:9e:72:0c:50:79:d3:26:5a:ee: d7:a8:b7:f3:a6:f3:0a:d2:df:38:1b:14:f0:09:db: f6:9a:41:44:b4:77:25:5c:31:f6:5b:05:2c:0e:89: 26:65:e1:fb:1d:8f:58:38:7d:66:e7:e0:b2:5a:07: 98:bd:ce:61:c9:ea:53:f5:4e:4e:d5:48:49:e2:63: b5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:33:5A:C0:3C:05:3E:80:BB:C0:F8:2A:97:34:1A:68:5C:9F:D6:89 X509v3 Authority Key Identifier: keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:4b:0f:c6:93:3e:66:32:2c:fd:98:67:46:97:70:e5:7e:48: a2:19:95:d3:b7:6c:ee:b9:5c:c8:0d:d1:6e:e7:4e:a9:8e:46: 1f:fd:25:52:58:0a:07:be:f6:75:b5:12:6f:90:bd:14:78:ee: 87:28:e4:04:e3:9a:83:d0:8d:a6:25:63:83:89:00:de:eb:8c: b1:79:20:34:97:4a:ea:3e:6b:e1:72:ab:9d:a5:78:e6:de:c3: 5e:22:80:12:ea:dd:c9:2a:d5:79:02:e4:dc:c4:ef:44:d2:9f: 20:9f:32:01:db:55:be:92:4b:ae:93:a8:fe:1e:62:6d:44:6f: ff:0f:0b:e7:ae:23:54:dc:71:6a:21:35:a4:62:99:7a:ee:c9: f0:5d:97:79:bb:55:12:d9:18:92:de:98:f3:bc:4d:14:8a:cd: 10:d3:29:6d:41:75:d1:92:a3:2a:f8:12:fe:0f:6f:31:91:ac: b5:c3:60:2b:34:7d:d9:6f:21:12:b3:a5:91:0e:ba:56:a6:5b: 1e:e6:a6:12:53:94:98:4a:5e:48:7e:93:76:92:3f:5b:f3:25: 76:95:dc:44:c1:d2:ed:0f:27:01:1b:91:03:6a:0b:a9:8f:01: b0:17:74:ed:34:f5:2a:9c:49:35:44:54:4b:e9:f0:9f:16:49: c1:e1:aa:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvhnVDJqiffliRyBUysWMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi ZTU3Y2UwHhcNMjYwMTI1MDYwMTIwWhcNMjYwMTI2MDYwMTIwWjAzMTEwLwYDVQQD EyhjOTMzNWFjMDNjMDUzZTgwYmJjMGY4MmE5NzM0MWE2ODVjOWZkNjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXlrZqYY+52AFU1qWP55ZHFHXY1Y 9TOJSuE5MLH9ZGFcooo8j1r7jgEeGRHWGhi5HgOa0Pbc+WYZA8mTl+M1YD2FSPRI YoiKZedjaZNMNbOMuz3Bi4DCw1GvgLZGPGVLOSugA6bFLZo7unpuot0UxtSVkyLa V+Xf2W45//Q8sCryJ2VkRkFzgaC7aPyy8CbEt8LEH6Sk0HNaBWq2Ee+F2VbB66gl Jj+gN096Szr1Wq1huT4WP159qd+ecgxQedMmWu7XqLfzpvMK0t84GxTwCdv2mkFE tHclXDH2WwUsDokmZeH7HY9YOH1m5+CyWgeYvc5hyepT9U5O1UhJ4mO1yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkzWsA8BT6Au8D4Kpc0Gmhcn9aJMB8GA1UdIwQY MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt MjdjMWEzNTk3NmRlLzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoEsPxpM+ ZjIs/ZhnRpdw5X5IohmV07ds7rlcyA3RbudOqY5GH/0lUlgKB772dbUSb5C9FHju hyjkBOOag9CNpiVjg4kA3uuMsXkgNJdK6j5r4XKrnaV45t7DXiKAEurdySrVeQLk 3MTvRNKfIJ8yAdtVvpJLrpOo/h5ibURv/w8L564jVNxxaiE1pGKZeu7J8F2XebtV EtkYkt6Y87xNFIrNENMpbUF10ZKjKvgS/g9vMZGstcNgKzR92W8hErOlkQ66VqZb HuamElOUmEpeSH6TdpI/W/MldpXcRMHS7Q8nARuRA2oLqY8BsBd07TT1KpxJNURU S+nwnxZJweGqYQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:44:59 2026 by rpki-client