This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft File: klbr9muA8IE1hY0UTO1veFg09fQ.mft (raw, json) Hash identifier: E+PCqn/+plioalS4Jkl6jBOV5ygH4V1Leaov+XhDkB0= Subject key identifier: 33:FB:2C:1E:04:EE:E6:AB:AE:2F:3C:E3:49:28:49:05:7E:2F:B1:0F Authority key identifier: 92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4 Certificate issuer: /CN=9256ebf66b80f08135858d144ced6f785834f5f4 Certificate serial: 019BF499C911297E0D4EE85992F8246D4C55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 10:01:17 +0000 Manifest this update: Sun 25 Jan 2026 10:01:17 +0000 Manifest next update: Mon 26 Jan 2026 10:01:17 +0000 Files and hashes: 1: 40z5BTIzE-Otta9d5IxXlYjWk7Y.roa (hash: /K+vL2kVy1Ot78ZCbPvu7R3pgRcpdRMgsyhuVzNibSE=) 2: FnnFa3pMmqf3MiWUuKMyoAVWg-s.roa (hash: 6fPOtoWUy4XsTgZEttrlKq8GChMydmNHVVGJEIcxPdY=) 3: J4mHGlSY7agF8AXFPW8l8IBLAAI.roa (hash: /s0Afv+pL0DwKivaJvq3/xoIpyRomxE5EF1DLE1ue6g=) 4: ePQMQe046NknExZADvr19blY0SA.roa (hash: wKoVniNasUoMb11Rk/qza9dNeWvntUlfFXzDDxceLEM=) 5: hcjtq7J7FKS0bIahe8TWZOilbrc.roa (hash: uOY6FMIgCoFqDzQfMMnNRctUj2RDP4gSOMAnS9KpjHI=) 6: klbr9muA8IE1hY0UTO1veFg09fQ.crl (hash: vuXbI0+UGWQtJQFMJ7lJgx9IEs+r/G5GKHJPIsJDtLI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:c9:11:29:7e:0d:4e:e8:59:92:f8:24:6d:4c:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9256ebf66b80f08135858d144ced6f785834f5f4 Validity Not Before: Jan 25 10:01:17 2026 GMT Not After : Jan 26 10:01:17 2026 GMT Subject: CN=33fb2c1e04eee6abae2f3ce3492849057e2fb10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e4:e0:a4:a2:cf:16:73:10:c8:02:9f:6e:96: f5:93:4e:d0:82:4c:28:9a:b4:cc:c7:d2:b0:ac:2f: 2e:d4:4c:4d:9a:6d:f7:65:80:bb:dc:e6:c8:7f:65: ff:e6:ca:17:f9:bc:4b:1d:58:78:fc:58:2f:d2:3a: fa:21:2b:46:33:97:f0:b1:5a:8a:e2:f0:3d:c5:95: e8:89:aa:e7:6d:29:bd:01:31:24:1e:c7:88:60:ec: 6e:84:05:80:0c:e2:12:b0:31:8b:14:cb:e6:e2:49: a0:a5:93:01:9e:4b:2b:80:21:04:1e:2b:07:26:7b: 67:25:78:68:6e:e0:f9:06:59:45:c0:c1:f1:ab:05: 53:cb:3d:dc:73:cf:48:74:b0:51:b9:a7:79:47:60: 69:54:7c:3c:b6:49:fd:d7:a6:c6:d8:44:ef:af:5b: c9:37:7c:81:af:96:eb:c7:71:f4:17:9f:1b:2d:70: 06:6c:57:02:9c:d5:e3:bf:b5:fa:e0:41:5f:34:3e: 8b:8b:30:0d:e0:88:ce:bd:0f:44:43:ce:ab:1f:c5: 2b:63:2e:32:ec:72:7d:94:77:3d:eb:5b:8d:d2:e9: c8:62:14:62:8c:49:c1:4d:1c:28:ab:f8:a5:1b:c1: b0:f7:1d:42:44:81:d3:4d:46:3c:73:57:c8:24:62: c9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FB:2C:1E:04:EE:E6:AB:AE:2F:3C:E3:49:28:49:05:7E:2F:B1:0F X509v3 Authority Key Identifier: keyid:92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:ec:08:20:bd:87:d6:e8:ca:e5:2d:11:d8:d0:27:4e:9d:50: 42:bb:c0:9e:93:43:c9:37:42:3f:8d:ae:ba:55:d1:95:65:d6: eb:3c:62:b5:ef:f6:e5:5b:50:58:b8:02:89:18:72:2f:1e:3d: 8b:f9:e3:96:e6:c7:87:4c:9d:0b:ad:20:8e:eb:31:5b:ae:49: 87:c7:3b:d0:16:4d:83:d6:70:6e:da:af:d0:79:22:41:c4:70: 97:c7:63:ca:29:4e:5e:2c:e1:27:a5:1e:f5:22:bb:39:59:b3: a1:5a:46:3d:15:f6:0a:29:45:a6:69:cb:0f:54:0a:a4:fa:ab: f1:1f:86:79:f0:9c:5e:e7:f2:6f:4a:3e:07:66:b2:bc:c9:93: 64:f6:e3:0c:69:16:b8:c9:f2:b8:d9:78:ce:2f:17:a8:9f:21: 99:9c:00:ea:83:a2:9a:d3:7b:8f:7f:5f:09:e2:02:a7:82:b3: fe:c3:44:12:f4:09:a5:2f:3b:a5:71:b2:79:a0:5e:93:9d:3b: ce:6d:ce:7c:eb:3a:af:10:74:ba:8f:1a:6c:ba:00:81:40:fe: 60:c2:04:5a:60:5d:a1:6d:c9:97:2d:c0:c0:e2:a2:a7:0a:b4: 2d:e2:75:92:e1:32:b8:41:dc:42:8d:63:32:9d:e7:dd:a3:b0: 2c:1a:45:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mckRKX4NTuhZkvgkbUxVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNTZlYmY2NmI4MGYwODEzNTg1OGQxNDRjZWQ2Zjc4NTgz NGY1ZjQwHhcNMjYwMTI1MTAwMTE3WhcNMjYwMTI2MTAwMTE3WjAzMTEwLwYDVQQD EygzM2ZiMmMxZTA0ZWVlNmFiYWUyZjNjZTM0OTI4NDkwNTdlMmZiMTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+TgpKLPFnMQyAKfbpb1k07Qgkwo mrTMx9KwrC8u1ExNmm33ZYC73ObIf2X/5soX+bxLHVh4/Fgv0jr6IStGM5fwsVqK 4vA9xZXoiarnbSm9ATEkHseIYOxuhAWADOISsDGLFMvm4kmgpZMBnksrgCEEHisH JntnJXhobuD5BllFwMHxqwVTyz3cc89IdLBRuad5R2BpVHw8tkn916bG2ETvr1vJ N3yBr5brx3H0F58bLXAGbFcCnNXjv7X64EFfND6LizAN4IjOvQ9EQ86rH8UrYy4y 7HJ9lHc961uN0unIYhRijEnBTRwoq/ilG8Gw9x1CRIHTTUY8c1fIJGLJcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDP7LB4E7uarri8840koSQV+L7EPMB8GA1UdIwQY MBaAFJJW6/ZrgPCBNYWNFEztb3hYNPX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2xicjltdUE4SUUxaFkwVVRPMXZlRmcwOWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9iNzE3YzUtYTY0Yi00NDc1LWJlM2Ut NWRhOGQ2NzdkODQ3LzEva2xicjltdUE4SUUxaFkwVVRPMXZlRmcwOWZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9iNzE3YzUtYTY0Yi00NDc1LWJlM2UtNWRhOGQ2NzdkODQ3 LzEva2xicjltdUE4SUUxaFkwVVRPMXZlRmcwOWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlOwIIL2H 1ujK5S0R2NAnTp1QQrvAnpNDyTdCP42uulXRlWXW6zxite/25VtQWLgCiRhyLx49 i/njlubHh0ydC60gjusxW65Jh8c70BZNg9Zwbtqv0HkiQcRwl8djyilOXizhJ6Ue 9SK7OVmzoVpGPRX2CilFpmnLD1QKpPqr8R+GefCcXufyb0o+B2ayvMmTZPbjDGkW uMnyuNl4zi8XqJ8hmZwA6oOimtN7j39fCeICp4Kz/sNEEvQJpS87pXGyeaBek507 zm3OfOs6rxB0uo8abLoAgUD+YMIEWmBdoW3Jly3AwOKipwq0LeJ1kuEyuEHcQo1j Mp3n3aOwLBpFGQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:25:02 2026 by rpki-client