This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft File: KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft (raw, json) Hash identifier: rfiK5r3PVVSlwU7SeMcbJi/bDBElwfvNUnvYHeT2gNQ= Subject key identifier: 2B:BA:20:4D:1A:EA:32:CA:95:B4:E5:E7:2E:AA:BA:04:5D:0C:08:AD Authority key identifier: 28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F Certificate issuer: /CN=282b2cb977153baad1dd99eec14ce0ca46e2219f Certificate serial: 019BF4D0D784B5DFDF93D944DB2EE6DD9F8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft Manifest number: 09BE Signing time: Sun 25 Jan 2026 11:01:25 +0000 Manifest this update: Sun 25 Jan 2026 11:01:25 +0000 Manifest next update: Mon 26 Jan 2026 11:01:25 +0000 Files and hashes: 1: KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl (hash: ICayR4Uma62za5fxEYoZdE/UQoEiS1dJ8u9p4ta4SaM=) 2: kwICd-Vs81pcwvCcYZ6zEK19fBw.roa (hash: zy91annv+5k1uAmsY5PH/4r77C+x0cRwRxEdrlowj+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:d7:84:b5:df:df:93:d9:44:db:2e:e6:dd:9f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=282b2cb977153baad1dd99eec14ce0ca46e2219f Validity Not Before: Jan 25 11:01:25 2026 GMT Not After : Jan 26 11:01:25 2026 GMT Subject: CN=2bba204d1aea32ca95b4e5e72eaaba045d0c08ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bf:45:e1:8e:3b:db:a6:0b:b8:25:c0:0d:9e: 8b:91:1d:41:67:e9:36:aa:ad:71:1d:dd:1f:db:8e: e9:19:22:99:15:64:aa:55:f2:86:87:ea:f5:75:d7: 75:6d:08:3f:86:58:3c:fd:0c:cb:e7:64:1b:9f:c6: 49:18:af:dc:d3:fa:f2:d9:b4:01:96:84:e3:b8:d6: b5:71:64:44:e7:38:37:51:5a:8f:08:0d:66:d8:b0: dd:a2:9d:4d:56:fa:f9:49:38:12:78:df:20:a4:32: 45:f1:53:76:54:fe:d3:6f:4e:5f:fe:63:1d:e7:56: 1a:ac:db:df:ee:9d:bf:0b:e2:1c:e8:f0:1c:b0:47: 38:c1:9e:48:bb:9f:ee:54:32:79:6d:45:f5:d5:46: df:e5:b9:02:a0:02:fe:6a:3f:5d:01:d6:2b:8b:6c: b8:cd:4b:aa:a0:e8:f8:21:f0:5f:7c:0a:bf:64:2f: fc:2d:1b:3e:ab:45:38:0e:71:e1:a7:09:81:03:fc: b8:3a:10:2b:0a:47:ba:b5:3a:68:e1:f7:5a:52:8e: 48:24:cb:92:9a:88:d1:60:9f:21:9b:bf:4f:94:d5: d0:c2:ac:b5:5c:2d:69:19:3d:25:b0:d3:ff:66:d4: b0:27:9f:0c:5c:f7:4b:8a:e2:84:e4:39:97:f3:6a: b9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:BA:20:4D:1A:EA:32:CA:95:B4:E5:E7:2E:AA:BA:04:5D:0C:08:AD X509v3 Authority Key Identifier: keyid:28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:2c:c9:ff:ea:2b:e9:32:55:bc:5e:d9:ee:76:c9:97:05:ed: 6c:b3:45:95:bf:a5:52:7f:2f:f8:b4:5b:f5:f1:2d:36:68:42: 29:11:4f:f3:f6:eb:35:32:cb:c7:4b:0f:da:f4:32:c8:77:62: d9:b6:a5:7d:11:6f:04:5e:a9:d5:b5:3d:98:42:e1:6c:87:24: 73:35:92:a0:b9:db:21:70:33:4c:aa:9c:5d:30:be:8e:a9:59: c5:0a:4d:2a:aa:ca:27:45:28:a5:71:d8:2d:fe:82:81:4f:0f: 21:92:4a:03:d6:8f:7b:dd:14:65:d5:32:35:48:70:79:f4:03: b9:87:5b:55:dc:95:cb:25:a3:cf:69:38:13:91:0b:9c:00:1d: d8:bf:01:55:3b:67:74:d3:3e:ea:92:d9:db:ab:46:f7:15:3e: d2:8b:15:dd:41:e1:a3:0d:3d:d6:70:21:57:5e:1e:07:19:d2: 89:64:9f:45:ca:e7:f5:b5:1e:46:35:10:ac:5d:bb:e5:c3:30: 02:5e:40:fe:08:b3:de:b6:b1:af:e2:5d:14:7e:1c:de:d1:f1: 0b:b9:1d:b6:fd:5d:76:6c:a6:bb:2e:17:a9:aa:a9:9c:5a:ed: 06:fa:1d:74:3b:e1:04:5c:8f:27:c3:5d:f6:da:c2:f6:9a:83: 39:9a:7f:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00NeEtd/fk9lE2y7m3Z+OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MmIyY2I5NzcxNTNiYWFkMWRkOTllZWMxNGNlMGNhNDZl MjIxOWYwHhcNMjYwMTI1MTEwMTI1WhcNMjYwMTI2MTEwMTI1WjAzMTEwLwYDVQQD EygyYmJhMjA0ZDFhZWEzMmNhOTViNGU1ZTcyZWFhYmEwNDVkMGMwOGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL9F4Y4726YLuCXADZ6LkR1BZ+k2 qq1xHd0f247pGSKZFWSqVfKGh+r1ddd1bQg/hlg8/QzL52Qbn8ZJGK/c0/ry2bQB loTjuNa1cWRE5zg3UVqPCA1m2LDdop1NVvr5STgSeN8gpDJF8VN2VP7Tb05f/mMd 51YarNvf7p2/C+Ic6PAcsEc4wZ5Iu5/uVDJ5bUX11Ubf5bkCoAL+aj9dAdYri2y4 zUuqoOj4IfBffAq/ZC/8LRs+q0U4DnHhpwmBA/y4OhArCke6tTpo4fdaUo5IJMuS mojRYJ8hm79PlNXQwqy1XC1pGT0lsNP/ZtSwJ58MXPdLiuKE5DmX82q53wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCu6IE0a6jLKlbTl5y6qugRdDAitMB8GA1UdIwQY MBaAFCgrLLl3FTuq0d2Z7sFM4MpG4iGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wYjBiMzMtOThhMS00ODE4LWFkMTgt OTVmMjdkM2U4YWJiLzEvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8wYjBiMzMtOThhMS00ODE4LWFkMTgtOTVmMjdkM2U4YWJi LzEvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaizJ/+or 6TJVvF7Z7nbJlwXtbLNFlb+lUn8v+LRb9fEtNmhCKRFP8/brNTLLx0sP2vQyyHdi 2balfRFvBF6p1bU9mELhbIckczWSoLnbIXAzTKqcXTC+jqlZxQpNKqrKJ0UopXHY Lf6CgU8PIZJKA9aPe90UZdUyNUhwefQDuYdbVdyVyyWjz2k4E5ELnAAd2L8BVTtn dNM+6pLZ26tG9xU+0osV3UHhow091nAhV14eBxnSiWSfRcrn9bUeRjUQrF275cMw Al5A/giz3raxr+JdFH4c3tHxC7kdtv1ddmymuy4XqaqpnFrtBvoddDvhBFyPJ8Nd 9trC9pqDOZp/8Q== -----END CERTIFICATE-----Generated at Sun Jan 25 19:46:33 2026 by rpki-client