This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft File: KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft (raw, json) Hash identifier: R/v+2EWgOie3oqQ5tsG19xcxhmOda9cGvxC3V3Dfcx8= Subject key identifier: 01:A8:04:87:0E:42:3F:98:F4:56:FF:99:26:A5:96:25:66:59:FA:28 Authority key identifier: 29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A Certificate issuer: /CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a Certificate serial: 019BF5E387438560E0F425E4107CDA5394D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft Manifest number: 03BE Signing time: Sun 25 Jan 2026 16:01:27 +0000 Manifest this update: Sun 25 Jan 2026 16:01:27 +0000 Manifest next update: Mon 26 Jan 2026 16:01:27 +0000 Files and hashes: 1: 77Whh77iKwt1yOOYU4DtYorlBOk.roa (hash: tO7vF8xusHO1O0mKViJ8yyoCaEKBRB4DR9BPRK3Lwnc=) 2: KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl (hash: Xxbc9AraLvGRYZgtDs0YQUnyD2KZ0MEdFHqyqgHvwT8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:87:43:85:60:e0:f4:25:e4:10:7c:da:53:94:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a Validity Not Before: Jan 25 16:01:27 2026 GMT Not After : Jan 26 16:01:27 2026 GMT Subject: CN=01a804870e423f98f456ff9926a596256659fa28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7d:a4:2b:7a:04:85:17:99:b0:a7:c1:a5:53: e6:3e:02:16:29:d8:63:fc:ad:f9:94:39:0b:cf:b8: cd:b2:47:a8:93:9d:d5:fe:81:16:36:5a:9d:03:14: 41:f2:eb:1c:91:f4:78:88:91:84:5b:45:3b:d4:d1: 4f:7f:eb:93:73:c0:3a:65:50:07:05:7d:af:9a:10: ac:51:5d:d6:95:49:34:96:bd:1a:20:2b:e1:6a:29: e5:8f:ff:13:e5:06:cd:f8:b1:88:3a:06:1e:bb:82: eb:44:fd:07:e2:12:1a:89:ff:eb:0c:e3:49:f4:a0: e8:ec:1b:fc:04:9d:10:1d:b6:a9:04:0a:55:2e:5f: 92:b0:58:a5:83:0a:ee:22:e5:c0:27:dc:e0:7e:e7: b3:f3:24:d2:da:9c:01:87:0d:6d:c3:75:16:36:eb: d4:3b:82:2b:e4:c8:6a:b1:4b:ea:1c:4b:3e:11:ec: 72:c3:a3:cb:e7:6e:58:bc:db:86:49:2c:dc:c6:2d: 80:13:02:e8:4b:62:33:bc:41:27:ad:7d:85:23:ef: e4:80:64:4b:0d:a0:01:7d:04:a7:a6:25:03:6d:e0: af:59:04:1b:e0:f8:f1:9a:25:d1:13:65:55:55:0b: ee:09:5f:00:a2:21:66:b5:85:42:c6:74:fe:6c:88: 29:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A8:04:87:0E:42:3F:98:F4:56:FF:99:26:A5:96:25:66:59:FA:28 X509v3 Authority Key Identifier: keyid:29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:33:4c:c7:e1:a7:c0:5e:62:37:66:57:66:7f:a0:30:40:d1: 3f:56:2c:08:76:da:e3:bb:53:62:5a:a2:70:ab:ed:88:7d:eb: 03:b3:a8:e0:99:5f:74:14:da:34:18:d4:5e:af:b0:d8:ba:f2: ec:0f:4b:15:de:02:d3:c2:35:a6:ea:0a:eb:77:43:f2:1a:2e: 17:59:ab:15:bc:3f:28:5c:26:67:58:18:4e:a1:8d:b1:c4:a2: 41:d2:64:b9:ba:18:45:c7:e0:76:93:3b:67:b4:a7:dd:41:6f: 7f:ad:52:46:45:fd:7e:46:f2:f0:05:19:50:20:a7:d3:2c:b7: ba:d7:d6:e9:7e:06:9c:c8:60:1f:03:2b:8d:de:d1:04:ce:71: 9c:5d:71:5e:0c:c7:52:05:50:48:8a:e2:8a:f0:84:f4:fe:fb: 35:2d:20:b3:cb:20:bc:ed:1a:ec:c2:60:5d:ea:8a:0b:9e:f1: a8:32:f8:da:1a:94:55:1f:7f:f4:5e:66:33:6d:4a:2a:29:dc: 0a:2c:bf:22:a3:91:49:49:03:b8:56:dc:29:d8:a0:94:28:91: e1:49:c7:2e:da:73:da:76:25:10:15:7a:26:81:9b:2e:67:12: d0:a7:a3:08:43:4a:74:d7:bd:37:ed:29:79:bc:c9:78:df:57: ac:1e:51:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv144dDhWDg9CXkEHzaU5TSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5OTZjZDY4NTMxODQ3ZTNiMGJlMGQ5M2M2NWNjMWZiNjRl Y2QyMWEwHhcNMjYwMTI1MTYwMTI3WhcNMjYwMTI2MTYwMTI3WjAzMTEwLwYDVQQD EygwMWE4MDQ4NzBlNDIzZjk4ZjQ1NmZmOTkyNmE1OTYyNTY2NTlmYTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH2kK3oEhReZsKfBpVPmPgIWKdhj /K35lDkLz7jNskeok53V/oEWNlqdAxRB8usckfR4iJGEW0U71NFPf+uTc8A6ZVAH BX2vmhCsUV3WlUk0lr0aICvhainlj/8T5QbN+LGIOgYeu4LrRP0H4hIaif/rDONJ 9KDo7Bv8BJ0QHbapBApVLl+SsFilgwruIuXAJ9zgfuez8yTS2pwBhw1tw3UWNuvU O4Ir5MhqsUvqHEs+Eexyw6PL525YvNuGSSzcxi2AEwLoS2IzvEEnrX2FI+/kgGRL DaABfQSnpiUDbeCvWQQb4PjxmiXRE2VVVQvuCV8AoiFmtYVCxnT+bIgpvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGoBIcOQj+Y9Fb/mSalliVmWfooMB8GA1UdIwQY MBaAFCmWzWhTGEfjsL4Nk8Zcwftk7NIaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1piTmFGTVlSLU93dmcyVHhsekItMlRzMGhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84M2NkNDEtNzI1Ni00ZDY2LTk0MmYt NzJlY2JhMTMxYWY4LzEvS1piTmFGTVlSLU93dmcyVHhsekItMlRzMGhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC84M2NkNDEtNzI1Ni00ZDY2LTk0MmYtNzJlY2JhMTMxYWY4 LzEvS1piTmFGTVlSLU93dmcyVHhsekItMlRzMGhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzNMx+Gn wF5iN2ZXZn+gMEDRP1YsCHba47tTYlqicKvtiH3rA7Oo4JlfdBTaNBjUXq+w2Lry 7A9LFd4C08I1puoK63dD8houF1mrFbw/KFwmZ1gYTqGNscSiQdJkuboYRcfgdpM7 Z7Sn3UFvf61SRkX9fkby8AUZUCCn0yy3utfW6X4GnMhgHwMrjd7RBM5xnF1xXgzH UgVQSIriivCE9P77NS0gs8sgvO0a7MJgXeqKC57xqDL42hqUVR9/9F5mM21KKinc Ciy/IqORSUkDuFbcKdiglCiR4UnHLtpz2nYlEBV6JoGbLmcS0KejCENKdNe9N+0p ebzJeN9XrB5R7A== -----END CERTIFICATE-----Generated at Sun Jan 25 19:24:59 2026 by rpki-client