This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft File: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft (raw, json) Hash identifier: w9zBXL/uBsmnO5NDEAW+PvgYaNWQvOU8hqDKszg8ilU= Subject key identifier: 11:18:43:08:6E:83:30:C5:1A:3D:1A:18:5A:B0:35:31:BB:B5:52:EB Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28 Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28 Certificate serial: 019BF7D22A107E96191952667FC865CAF9E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 01:01:44 +0000 Manifest this update: Mon 26 Jan 2026 01:01:44 +0000 Manifest next update: Tue 27 Jan 2026 01:01:44 +0000 Files and hashes: 1: 2zalanC3hLAiWZsaueYly5WPDys.roa (hash: 3Cvvx3fMpG05zoy3dWgCjRA7P5/lfhhLiU2Ruh29QyA=) 2: 8WiTHhRR5UDbte2ps20s8LuHuFI.roa (hash: hI0ka3m/nqIpOykYSI0iEPcTgskawSt+HKYOhbD4JNw=) 3: 9rAcMb_T-U4PpNzw9_lgrfVKOSg.roa (hash: eOLmOGsXdxwjrVkNUc39nNMoOTMIs4RJ3w9pYcYKSIo=) 4: CDqm3nL-mWUyOy7FztAgewiin3g.roa (hash: Dkjb68aiN/QU/1LeHSAGRrsXMObCtO5LMWVbJ6e1quk=) 5: JKSn3ivcD7ulcEDYFnAk6kK8JVE.roa (hash: Y5qnFyuoFbYoSj1p2Mc4Ujlrd4TbP66nKsTT70JVghI=) 6: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl (hash: MmbJYJl//Y4uZ+raKD8kNx+xYjBfr3p4fjyI7KATREs=) 7: NqHlYSS8cxjiTpKHn6trhssa2iQ.roa (hash: l5a4ldpkJRCpHFzDTjg2f++LcCqwV78yBnjEaKlm1Aw=) 8: bHv6pUCU7PrfMbCa5aK1UeDi_8g.roa (hash: UFUxr/kieGhgzteQIeGPVBH69D8iREI4DsJ6Yi6z7RE=) 9: v6jE1I_1KnawMolAIIFEXyMcQs0.roa (hash: YNPiyPMqq2HOdLiYv7ctfE3scpFNBTASL6D3TCF7mJg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:2a:10:7e:96:19:19:52:66:7f:c8:65:ca:f9:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28 Validity Not Before: Jan 26 01:01:44 2026 GMT Not After : Jan 27 01:01:44 2026 GMT Subject: CN=111843086e8330c51a3d1a185ab03531bbb552eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2f:da:13:ef:ed:2d:64:68:bb:5a:49:0c:78: c2:3c:78:1e:39:6b:f9:52:b2:80:24:bd:51:6e:06: 24:07:7c:f2:47:fe:ec:22:da:c6:32:8d:80:b8:93: 3e:ba:b9:ba:01:c7:af:c6:53:56:08:64:bc:ed:6b: fe:06:a2:75:e9:bb:33:60:a4:05:bd:0f:fb:13:e4: 78:db:fa:bc:d3:72:e4:f8:59:99:c2:dc:ad:ae:0a: 4a:e6:aa:ac:0e:84:c4:a0:ef:96:77:7c:da:6b:04: 19:6f:52:32:e9:0c:8c:c9:09:8a:ae:6d:1f:57:32: df:9e:92:46:ff:ba:16:b8:d7:7e:1c:81:96:a3:02: 46:f4:21:7d:ea:91:a8:3e:03:86:9b:0f:19:f5:e3: 5a:b0:18:ce:18:18:ce:4a:1e:93:10:3c:62:12:df: 25:44:49:85:6d:11:24:89:06:c0:9e:43:40:b8:ab: b6:12:53:7c:e0:61:db:77:af:92:1d:c2:4f:fc:3e: 73:64:dd:f8:08:4b:9a:c6:20:08:2b:72:f3:8c:f3: e5:f0:85:3b:6c:47:8e:78:ec:52:96:72:b6:62:86: 3a:52:c3:eb:49:1d:2c:73:be:95:6b:b6:32:99:5d: 78:21:80:9e:79:3c:74:cf:31:87:c1:22:b6:4e:2b: 9e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:18:43:08:6E:83:30:C5:1A:3D:1A:18:5A:B0:35:31:BB:B5:52:EB X509v3 Authority Key Identifier: keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:48:1d:dd:65:c4:2c:23:92:5b:95:15:19:14:64:68:63:9b: 98:95:83:1b:61:d9:52:0e:1b:cf:38:26:64:8b:05:65:2f:18: dc:e8:92:34:33:24:86:0a:11:c5:9e:56:28:b3:a6:b1:67:99: 78:c5:c7:b0:22:e5:29:a8:ce:2f:eb:98:16:9a:8a:e4:50:4a: 1f:47:c3:a3:86:86:f1:67:4c:d7:f6:5e:f0:ba:45:82:19:5d: af:a6:fd:17:26:a5:73:80:c4:34:1b:13:43:de:3a:b9:61:5d: 52:9a:eb:49:30:31:69:7e:81:07:1a:3d:52:e9:2b:b4:72:9a: aa:96:b4:74:f6:62:5c:93:45:32:2b:e9:fa:a2:29:ba:73:63: de:9b:01:41:13:0a:56:9d:e6:22:98:71:68:0f:50:68:c4:0b: 02:3e:90:1d:e7:b6:c4:44:f9:0d:0d:a9:be:27:22:75:de:e0: 1e:04:5f:27:e7:8d:cc:97:5e:61:cb:96:35:d8:16:5b:42:3c: d0:34:fb:fe:46:08:df:25:6c:79:20:44:8d:29:a3:63:b1:d5: 11:a7:58:d3:ed:e2:6e:9c:c4:a8:97:d3:07:63:2e:9c:ed:10: 50:0d:fd:da:30:3f:f3:cc:6a:09:5c:51:ef:a8:81:49:16:23: b3:8b:c0:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30ioQfpYZGVJmf8hlyvnhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MWYwYjczZTY3ZDYzYzVhNGM5MDQ2ODE0MTY2YTllMjE2 MjVmMjgwHhcNMjYwMTI2MDEwMTQ0WhcNMjYwMTI3MDEwMTQ0WjAzMTEwLwYDVQQD EygxMTE4NDMwODZlODMzMGM1MWEzZDFhMTg1YWIwMzUzMWJiYjU1MmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy/aE+/tLWRou1pJDHjCPHgeOWv5 UrKAJL1RbgYkB3zyR/7sItrGMo2AuJM+urm6AcevxlNWCGS87Wv+BqJ16bszYKQF vQ/7E+R42/q803Lk+FmZwtytrgpK5qqsDoTEoO+Wd3zaawQZb1Iy6QyMyQmKrm0f VzLfnpJG/7oWuNd+HIGWowJG9CF96pGoPgOGmw8Z9eNasBjOGBjOSh6TEDxiEt8l REmFbREkiQbAnkNAuKu2ElN84GHbd6+SHcJP/D5zZN34CEuaxiAIK3LzjPPl8IU7 bEeOeOxSlnK2YoY6UsPrSR0sc76Va7YymV14IYCeeTx0zzGHwSK2TiuefQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEYQwhugzDFGj0aGFqwNTG7tVLrMB8GA1UdIwQY MBaAFCkfC3PmfWPFpMkEaBQWap4hYl8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQt MzhlZThmZDY0ZTdkLzEvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQtMzhlZThmZDY0ZTdk LzEvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL0gd3WXE LCOSW5UVGRRkaGObmJWDG2HZUg4bzzgmZIsFZS8Y3OiSNDMkhgoRxZ5WKLOmsWeZ eMXHsCLlKajOL+uYFpqK5FBKH0fDo4aG8WdM1/Ze8LpFghldr6b9Fyalc4DENBsT Q946uWFdUprrSTAxaX6BBxo9UukrtHKaqpa0dPZiXJNFMivp+qIpunNj3psBQRMK Vp3mIphxaA9QaMQLAj6QHee2xET5DQ2pvicidd7gHgRfJ+eNzJdeYcuWNdgWW0I8 0DT7/kYI3yVseSBEjSmjY7HVEadY0+3ibpzEqJfTB2MunO0QUA392jA/88xqCVxR 76iBSRYjs4vA2g== -----END CERTIFICATE-----Generated at Mon Jan 26 07:47:21 2026 by rpki-client