This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft File: KYOEG8CfH9T-PemRAWwLcSb7pS4.mft (raw, json) Hash identifier: 1AX8VwcDxEKDX+JW7nRCxEbVdELW63LbWvG6DDGCrPQ= Subject key identifier: 27:0D:F8:29:C3:B6:6F:4E:39:EE:52:0B:FB:95:0D:59:78:CF:58:60 Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E Certificate issuer: /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e Certificate serial: 019BF4D0DB36B8BBD7BE00721AB51530A8AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft Manifest number: 1018 Signing time: Sun 25 Jan 2026 11:01:26 +0000 Manifest this update: Sun 25 Jan 2026 11:01:26 +0000 Manifest next update: Mon 26 Jan 2026 11:01:26 +0000 Files and hashes: 1: EOjWQSQb7ZQ10u-ZgMDwYKKu1o4.roa (hash: hrdH4gBWBAuOWZkBtg5Qonx+V+TKKgAG0J50XIArrgE=) 2: GW786ZAo9o6aG6R8or6IyYUM610.roa (hash: 5S3yILVPVQsvYnYYATkA7sNaoSvTWdIxhm26IIo2wDM=) 3: KYOEG8CfH9T-PemRAWwLcSb7pS4.crl (hash: 1XWt2Y8oKKnFySIai34I192jRONh3Tl2cNCcBH1js+Q=) 4: arRXEDQu4ezQScl8N1kwDYWEUTA.roa (hash: ubPgNFBnWZXISvamvl80AgMPXYqGnpjauqbO6JMCTVc=) 5: cC0R0U3yLfyeHy34sQf62c4Yd5I.roa (hash: Ftp3hYIhod4N2TGi5f485eZqNTbbJ0tpe9F/qj+8t1w=) 6: oidyzZNtucuXDORhUnc_enodjqc.roa (hash: DRv8W7PqvucKqgRhrWT7C5z20IqpO4qn8uXxa3BmMhc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:db:36:b8:bb:d7:be:00:72:1a:b5:15:30:a8:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e Validity Not Before: Jan 25 11:01:26 2026 GMT Not After : Jan 26 11:01:26 2026 GMT Subject: CN=270df829c3b66f4e39ee520bfb950d5978cf5860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:36:24:83:d5:6d:c3:18:41:4a:9f:56:d3:06: 4f:40:6a:f6:63:45:9c:8c:07:15:8b:fc:ec:82:f9: b2:2b:80:64:17:ca:6d:3b:8e:e9:01:03:7f:c8:de: 2a:9b:6f:2b:91:c9:e0:f5:c1:f1:9b:8c:6d:31:6a: 72:09:da:0d:09:e6:f0:b1:00:09:50:42:72:f1:c9: fa:7a:08:dd:d3:cb:63:ab:54:b6:d5:26:ec:f6:a7: 9c:d3:ef:f8:0f:c4:6a:95:00:bd:11:20:e0:0f:ef: 85:5d:f0:8d:59:73:8a:8a:2a:a0:ae:9a:47:ac:eb: 23:d4:05:89:33:4e:76:59:c6:30:04:65:b9:94:d6: 70:b0:9e:7c:11:0f:80:49:99:0e:b4:73:aa:16:4a: 2c:33:74:fb:d0:85:91:36:02:4d:7c:83:72:86:a0: b0:fa:96:0d:6b:7b:cc:8b:48:3c:fc:3e:8d:29:39: a4:2b:b5:33:03:98:6a:4d:25:50:7a:e5:9f:94:93: 51:cf:f8:c0:1d:e6:93:12:e2:e3:e0:3d:f2:90:6b: 94:e0:f5:47:7a:f0:56:d2:af:62:3a:1f:4e:d7:6b: fa:b6:85:2b:d6:c0:ac:a6:b2:ff:09:b5:0d:e7:75: d0:c0:07:8e:8c:d2:e9:08:af:f5:8b:77:39:1f:55: db:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0D:F8:29:C3:B6:6F:4E:39:EE:52:0B:FB:95:0D:59:78:CF:58:60 X509v3 Authority Key Identifier: keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:4c:86:6e:bf:d7:7c:12:4d:3c:ae:21:62:b2:f6:7a:52:05: 06:c1:8c:60:c8:30:a8:35:2f:31:06:1c:2c:e9:48:83:77:bc: c9:0f:8e:e8:6c:46:ca:eb:7c:ae:51:4a:f0:1b:93:62:71:c1: c0:4a:92:54:da:48:1b:0f:f0:87:00:de:af:5b:ad:7b:37:45: 15:94:36:b5:6b:66:0f:a0:7d:b4:4f:18:66:49:f4:68:87:76: 93:63:61:57:74:18:77:59:64:f5:98:a1:de:bb:c0:92:6f:36: c6:24:d2:ed:59:31:e2:ce:63:3d:99:86:55:70:3d:0c:4e:eb: 73:13:2c:ad:74:82:cf:01:e7:e3:10:9f:b1:b3:98:ad:33:c7: 8d:f2:97:48:3c:32:03:11:54:9a:59:60:22:e2:0e:9d:3e:5a: 7d:f2:3d:70:f2:0e:db:b9:c8:7c:08:e9:47:b2:ed:a7:92:84: c8:cf:3e:02:8b:f6:39:48:aa:6f:24:ab:a4:3e:92:67:ac:e9: 28:71:25:37:a5:b8:56:6a:31:a3:49:9a:c1:62:c0:4b:55:a7: ea:53:62:ed:41:51:14:10:7c:95:59:a6:66:bf:26:4a:dc:8d: 39:0e:ba:05:63:f8:cf:b1:2d:87:41:26:7a:53:6d:a9:9a:e5: ba:a5:c4:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00Ns2uLvXvgByGrUVMKivMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ODM4NDFiYzA5ZjFmZDRmZTNkZTk5MTAxNmMwYjcxMjZm YmE1MmUwHhcNMjYwMTI1MTEwMTI2WhcNMjYwMTI2MTEwMTI2WjAzMTEwLwYDVQQD EygyNzBkZjgyOWMzYjY2ZjRlMzllZTUyMGJmYjk1MGQ1OTc4Y2Y1ODYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDYkg9VtwxhBSp9W0wZPQGr2Y0Wc jAcVi/zsgvmyK4BkF8ptO47pAQN/yN4qm28rkcng9cHxm4xtMWpyCdoNCebwsQAJ UEJy8cn6egjd08tjq1S21Sbs9qec0+/4D8RqlQC9ESDgD++FXfCNWXOKiiqgrppH rOsj1AWJM052WcYwBGW5lNZwsJ58EQ+ASZkOtHOqFkosM3T70IWRNgJNfINyhqCw +pYNa3vMi0g8/D6NKTmkK7UzA5hqTSVQeuWflJNRz/jAHeaTEuLj4D3ykGuU4PVH evBW0q9iOh9O12v6toUr1sCsprL/CbUN53XQwAeOjNLpCK/1i3c5H1XbwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCcN+CnDtm9OOe5SC/uVDVl4z1hgMB8GA1UdIwQY MBaAFCmDhBvAnx/U/j3pkQFsC3Em+6UuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jYzM3Y2YtYjA1Ni00MWQ5LWI1N2It MWRkNWRhYjM2ZjlmLzEvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9jYzM3Y2YtYjA1Ni00MWQ5LWI1N2ItMWRkNWRhYjM2Zjlm LzEvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfkyGbr/X fBJNPK4hYrL2elIFBsGMYMgwqDUvMQYcLOlIg3e8yQ+O6GxGyut8rlFK8BuTYnHB wEqSVNpIGw/whwDer1utezdFFZQ2tWtmD6B9tE8YZkn0aId2k2NhV3QYd1lk9Zih 3rvAkm82xiTS7Vkx4s5jPZmGVXA9DE7rcxMsrXSCzwHn4xCfsbOYrTPHjfKXSDwy AxFUmllgIuIOnT5affI9cPIO27nIfAjpR7Ltp5KEyM8+Aov2OUiqbySrpD6SZ6zp KHElN6W4Vmoxo0mawWLAS1Wn6lNi7UFRFBB8lVmmZr8mStyNOQ66BWP4z7Eth0Em elNtqZrluqXETQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:15:07 2026 by rpki-client