This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft File: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft (raw, json) Hash identifier: VC1HbW06sEBJVVLdv+e88ARe0p9O1xXCZX3/SwCYH0Q= Subject key identifier: CC:25:EF:EC:2A:96:86:5C:60:4B:8B:30:32:08:E1:48:D7:0B:84:27 Authority key identifier: 2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1 Certificate issuer: /CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1 Certificate serial: 019BF8AD54AA1B88D9DA6F9DC9CCC9C06406 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 05:01:07 +0000 Manifest this update: Mon 26 Jan 2026 05:01:07 +0000 Manifest next update: Tue 27 Jan 2026 05:01:07 +0000 Files and hashes: 1: 2SDdZbZHox8NMplwQIrxvgKSu34.roa (hash: kvbkJLaXOyyLA1zVWaE+vWipg18u/BOLkqhk/qFEJP8=) 2: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl (hash: pg4ju8CskkY1upSbg2t9nNTkYHCLWReZneFT5ZJqios=) 3: LcyElSfep6rD8AEBau9p4Ves3zY.roa (hash: cVyB/pcI480WEjCma+PMg1jARTqe0Occ2uE2IiVCZZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:54:aa:1b:88:d9:da:6f:9d:c9:cc:c9:c0:64:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1 Validity Not Before: Jan 26 05:01:07 2026 GMT Not After : Jan 27 05:01:07 2026 GMT Subject: CN=cc25efec2a96865c604b8b303208e148d70b8427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8b:00:ee:05:2d:71:aa:1d:9d:f7:53:8f:0a: fb:85:54:6d:45:3b:61:09:3b:c5:88:5c:53:cc:e3: d5:a6:52:d1:5a:7b:94:12:96:2d:5e:79:5c:10:0b: 63:25:28:74:74:f7:cc:e0:ad:51:fc:e0:b9:9b:67: 91:a3:bb:f4:72:7b:5c:51:c5:0a:09:ac:2f:94:15: 29:1d:46:83:71:8e:b6:5d:12:21:51:2f:33:2f:62: 29:a5:80:2d:ec:e4:d7:8e:ca:df:2f:5e:f9:bd:e6: cf:39:ea:09:05:80:b6:fd:71:41:a3:ae:5a:de:83: ba:f0:21:32:c6:33:4b:73:c7:bb:4d:5b:9a:7e:86: c1:25:b4:c5:48:fe:14:83:a1:ab:f5:5a:fa:f4:37: 7b:81:0a:75:0a:0c:ca:b6:0f:07:7f:9d:d4:38:17: 55:98:a8:d6:f9:2e:11:7f:42:36:de:da:44:da:dc: fa:21:d0:45:bb:83:16:b2:e8:75:7d:04:e3:16:76: 34:2b:ca:a3:8f:0c:88:b4:d5:d5:cc:99:0f:6e:82: 9d:18:f0:0d:4d:03:99:cf:a9:92:37:58:f1:99:99: 4c:2d:ab:a2:67:9a:a9:81:67:4d:c2:d0:50:eb:d5: 1a:d5:6d:fe:f4:01:e5:0d:eb:f7:9b:1b:40:d6:a0: 71:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:25:EF:EC:2A:96:86:5C:60:4B:8B:30:32:08:E1:48:D7:0B:84:27 X509v3 Authority Key Identifier: keyid:2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c8:d7:f6:17:86:38:07:6b:78:8e:db:11:62:f0:6b:9d:ac: 01:79:56:d9:00:23:c6:d6:66:7e:41:ae:9f:ff:06:2d:87:4e: 7a:8f:4a:a8:e6:4e:1a:85:45:08:f0:70:71:39:8c:5b:c2:73: ec:65:b0:25:ae:75:bc:66:9f:51:af:b0:43:1a:3f:89:ed:79: ff:7b:d1:fb:8b:31:72:56:d9:91:8a:b3:4a:58:db:d4:eb:b8: 84:00:83:3f:6e:1f:cb:59:f8:44:0f:33:6a:3e:3e:07:69:01: 3b:f8:35:73:89:16:13:17:fb:2a:4e:84:dd:82:08:28:87:bf: 4b:1b:98:c9:93:a4:ec:4a:a9:70:83:e2:a8:bd:41:4b:45:03: 1d:6e:72:d9:5a:d9:50:60:c8:55:9a:5e:cd:29:3a:f6:cf:c1: 78:58:44:42:df:0d:f4:2f:0d:5b:25:29:c1:96:f7:f4:50:bb: 7b:62:f0:24:04:4f:37:a2:42:6f:da:09:1b:dc:ae:07:37:31: 29:52:25:25:38:86:11:49:28:71:d3:85:39:b7:ca:72:d6:a3: 57:94:ff:ed:fd:8a:87:9f:87:4d:37:00:5d:65:f1:df:d6:d9: 72:5f:73:86:60:7d:09:71:38:b7:9a:af:70:42:79:5e:eb:e4: 17:d1:77:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rVSqG4jZ2m+dyczJwGQGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMWU2NWY4MDgzYzg1OWJjZDBkMmM1MmExZTA2MWViNTEz MWY1ZjEwHhcNMjYwMTI2MDUwMTA3WhcNMjYwMTI3MDUwMTA3WjAzMTEwLwYDVQQD EyhjYzI1ZWZlYzJhOTY4NjVjNjA0YjhiMzAzMjA4ZTE0OGQ3MGI4NDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4sA7gUtcaodnfdTjwr7hVRtRTth CTvFiFxTzOPVplLRWnuUEpYtXnlcEAtjJSh0dPfM4K1R/OC5m2eRo7v0cntcUcUK CawvlBUpHUaDcY62XRIhUS8zL2IppYAt7OTXjsrfL175vebPOeoJBYC2/XFBo65a 3oO68CEyxjNLc8e7TVuafobBJbTFSP4Ug6Gr9Vr69Dd7gQp1CgzKtg8Hf53UOBdV mKjW+S4Rf0I23tpE2tz6IdBFu4MWsuh1fQTjFnY0K8qjjwyItNXVzJkPboKdGPAN TQOZz6mSN1jxmZlMLauiZ5qpgWdNwtBQ69Ua1W3+9AHlDev3mxtA1qBx3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwl7+wqloZcYEuLMDII4UjXC4QnMB8GA1UdIwQY MBaAFCoeZfgIPIWbzQ0sUqHgYetRMfXxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kMDk3YmYtYjBmNS00M2UxLTg2YTIt Y2ZiOGRhNTQ5MDY3LzEvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9kMDk3YmYtYjBmNS00M2UxLTg2YTItY2ZiOGRhNTQ5MDY3 LzEvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMjX9heG OAdreI7bEWLwa52sAXlW2QAjxtZmfkGun/8GLYdOeo9KqOZOGoVFCPBwcTmMW8Jz 7GWwJa51vGafUa+wQxo/ie15/3vR+4sxclbZkYqzSljb1Ou4hACDP24fy1n4RA8z aj4+B2kBO/g1c4kWExf7Kk6E3YIIKIe/SxuYyZOk7EqpcIPiqL1BS0UDHW5y2VrZ UGDIVZpezSk69s/BeFhEQt8N9C8NWyUpwZb39FC7e2LwJARPN6JCb9oJG9yuBzcx KVIlJTiGEUkocdOFObfKctajV5T/7f2Kh5+HTTcAXWXx39bZcl9zhmB9CXE4t5qv cEJ5XuvkF9F3lw== -----END CERTIFICATE-----Generated at Mon Jan 26 08:42:04 2026 by rpki-client