This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft File: KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft (raw, json) Hash identifier: sj1pYAFvtcatBo6HU7aHYNYpN1WbLUGk+uMgXGYmbvQ= Subject key identifier: B7:36:8D:83:52:14:8D:A7:5B:7D:2B:CA:92:82:12:A1:23:BD:B7:AE Authority key identifier: 28:11:81:8F:95:BE:66:90:E8:AA:BC:5B:EF:A2:17:34:6A:BC:D5:74 Certificate issuer: /CN=2811818f95be6690e8aabc5befa217346abcd574 Certificate serial: 019BF6BE7BDF85774977F53D3DD347C0DF57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft Manifest number: 01CE Signing time: Sun 25 Jan 2026 20:00:37 +0000 Manifest this update: Sun 25 Jan 2026 20:00:37 +0000 Manifest next update: Mon 26 Jan 2026 20:00:37 +0000 Files and hashes: 1: KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl (hash: CM8m+iHVzYYXBg1pB9HBnOxMxknY1yLfZcrSvRAacd0=) 2: cjM0znzLJC2QR0PgnNVfAe1h_mI.roa (hash: niPdw0pZGGHLaXhD+OqWZAWoags/W4iskvjHWI94b6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:7b:df:85:77:49:77:f5:3d:3d:d3:47:c0:df:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2811818f95be6690e8aabc5befa217346abcd574 Validity Not Before: Jan 25 20:00:37 2026 GMT Not After : Jan 26 20:00:37 2026 GMT Subject: CN=b7368d8352148da75b7d2bca928212a123bdb7ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c0:82:0c:8f:91:6f:db:86:34:b7:99:02:ff: 7a:18:2f:75:bb:8b:c7:4b:c9:69:ef:76:ec:3d:02: 02:b5:1b:8d:b3:94:e2:92:5c:e8:e8:7a:68:38:01: 64:70:7e:f0:55:f3:41:1b:32:4a:aa:b1:57:a7:44: 86:6f:f9:24:ec:15:c1:d6:23:44:f7:90:b7:5b:ea: 84:3c:fb:e9:1e:55:3e:ad:b6:a2:03:7e:99:d6:05: b8:63:1b:5a:11:fc:df:25:bf:40:8b:b8:2d:5a:c9: b0:06:80:19:4c:7b:56:7b:d0:6d:9f:3e:99:0e:dc: 41:7c:f4:ab:8d:7e:da:5a:b7:a0:83:58:4e:28:73: 6e:e8:29:ba:23:2d:5b:c6:a6:3a:34:ab:09:dd:ec: 6e:a4:22:e0:ce:45:62:eb:48:ff:3a:94:c8:e7:d1: 26:54:d9:a8:b1:fb:d7:7d:bd:19:16:18:cb:a3:f4: e4:a0:15:71:70:5e:2f:77:b0:65:35:a2:5a:0a:7c: 3e:3b:37:8e:fe:ad:cd:8c:4a:b1:d6:1b:e6:3f:e3: 3e:df:9e:72:10:fd:cb:ff:09:1a:2f:d5:e9:7a:b6: 35:f7:76:db:1b:59:ad:87:25:d1:8c:05:7b:61:3d: 78:ba:8f:15:14:1c:59:10:24:65:bb:6a:20:bb:5b: fb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:36:8D:83:52:14:8D:A7:5B:7D:2B:CA:92:82:12:A1:23:BD:B7:AE X509v3 Authority Key Identifier: keyid:28:11:81:8F:95:BE:66:90:E8:AA:BC:5B:EF:A2:17:34:6A:BC:D5:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:9a:80:2e:d0:df:d0:40:42:68:df:69:ff:8a:34:d0:6d:fa: c4:ec:ad:d7:9a:dd:4d:09:04:90:28:ee:67:0e:33:8c:de:45: cc:4c:3d:f6:03:0c:e9:73:3b:91:5c:22:63:b9:77:a1:2b:95: 72:ab:f3:f9:79:15:66:18:54:36:6f:07:71:76:50:8e:0f:2a: 36:35:25:dd:3d:1a:14:eb:8f:53:5a:88:ff:27:48:26:fb:7b: 61:59:03:ef:d4:35:4d:fa:dc:79:3c:94:aa:a5:11:a8:c9:a2: fa:f3:43:94:71:09:d2:b6:f1:5c:67:5c:43:2b:3f:c3:53:1b: b5:67:2e:a0:dc:d9:86:02:c3:d9:e7:4b:ee:01:58:94:79:2a: 3d:63:cf:28:fb:2d:4b:44:44:06:ff:06:83:8a:13:30:22:1f: 6c:1d:83:73:84:48:27:17:f9:24:b1:b1:dd:9f:35:0a:4f:8c: da:bf:85:2f:84:20:1e:ea:24:89:15:d2:5a:f3:e5:b7:e5:eb: b8:49:03:c0:74:27:0c:45:46:c7:7a:3c:7c:24:ba:ff:a9:75: d6:d8:36:bf:1e:8b:d3:84:a7:e9:68:d8:bd:4f:68:5e:f2:e4: f2:06:b5:84:fa:21:94:96:4a:02:cf:1e:4f:8a:b4:d9:cf:44: 0a:2d:8c:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vnvfhXdJd/U9PdNHwN9XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MTE4MThmOTViZTY2OTBlOGFhYmM1YmVmYTIxNzM0NmFi Y2Q1NzQwHhcNMjYwMTI1MjAwMDM3WhcNMjYwMTI2MjAwMDM3WjAzMTEwLwYDVQQD EyhiNzM2OGQ4MzUyMTQ4ZGE3NWI3ZDJiY2E5MjgyMTJhMTIzYmRiN2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sCCDI+Rb9uGNLeZAv96GC91u4vH S8lp73bsPQICtRuNs5Tiklzo6HpoOAFkcH7wVfNBGzJKqrFXp0SGb/kk7BXB1iNE 95C3W+qEPPvpHlU+rbaiA36Z1gW4YxtaEfzfJb9Ai7gtWsmwBoAZTHtWe9Btnz6Z DtxBfPSrjX7aWregg1hOKHNu6Cm6Iy1bxqY6NKsJ3exupCLgzkVi60j/OpTI59Em VNmosfvXfb0ZFhjLo/TkoBVxcF4vd7BlNaJaCnw+OzeO/q3NjEqx1hvmP+M+355y EP3L/wkaL9XperY193bbG1mthyXRjAV7YT14uo8VFBxZECRlu2ogu1v7lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLc2jYNSFI2nW30rypKCEqEjvbeuMB8GA1UdIwQY MBaAFCgRgY+VvmaQ6Kq8W++iFzRqvNV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0JHQmo1Vy1acERvcXJ4Yjc2SVhOR3E4MVhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84OWU2NTUtYmQ3OS00OTg0LWI2NDkt NDJlNTdlZjYwMDBhLzEvS0JHQmo1Vy1acERvcXJ4Yjc2SVhOR3E4MVhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS84OWU2NTUtYmQ3OS00OTg0LWI2NDktNDJlNTdlZjYwMDBh LzEvS0JHQmo1Vy1acERvcXJ4Yjc2SVhOR3E4MVhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJqALtDf 0EBCaN9p/4o00G36xOyt15rdTQkEkCjuZw4zjN5FzEw99gMM6XM7kVwiY7l3oSuV cqvz+XkVZhhUNm8HcXZQjg8qNjUl3T0aFOuPU1qI/ydIJvt7YVkD79Q1TfrceTyU qqURqMmi+vNDlHEJ0rbxXGdcQys/w1MbtWcuoNzZhgLD2edL7gFYlHkqPWPPKPst S0REBv8Gg4oTMCIfbB2Dc4RIJxf5JLGx3Z81Ck+M2r+FL4QgHuokiRXSWvPlt+Xr uEkDwHQnDEVGx3o8fCS6/6l11tg2vx6L04Sn6WjYvU9oXvLk8ga1hPohlJZKAs8e T4q02c9ECi2Mpw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:50 2026 by rpki-client