This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft File: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json) Hash identifier: nzSgAfgfxMsJv2gCovYJQk2AqyswnALmRZzimRrEcSs= Subject key identifier: E0:61:2A:F3:77:56:73:DB:B8:32:1D:7F:EB:1B:EA:AB:E1:3F:5D:3D Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A Certificate issuer: /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a Certificate serial: 019BB43A57AA7C65A22EB28E8FDB0AB14B44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft Manifest number: 169F Signing time: Mon 12 Jan 2026 22:01:20 +0000 Manifest this update: Mon 12 Jan 2026 22:01:20 +0000 Manifest next update: Tue 13 Jan 2026 22:01:20 +0000 Files and hashes: 1: 7zz3mufMehUd0c38xX7JTdPEQ7Y.roa (hash: iEmZwp8Gqr2F/CkXFP09kX00HiNuER7AVuZF/jjY/fM=) 2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: qgNv46sTOnyxj7Y3MbxTWd1Tiuxyddku2xwHBvgHObk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 21:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b4:3a:57:aa:7c:65:a2:2e:b2:8e:8f:db:0a:b1:4b:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a Validity Not Before: Jan 12 22:01:20 2026 GMT Not After : Jan 13 22:01:20 2026 GMT Subject: CN=e0612af3775673dbb8321d7feb1beaabe13f5d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c6:e2:62:02:25:d2:7b:1c:06:90:32:85:71: a9:ea:de:eb:b8:42:b6:95:95:58:80:2f:df:65:26: f9:da:11:bf:24:45:fc:d9:6e:35:be:84:3c:4e:28: 32:e2:ca:a3:f6:fc:dd:b2:ca:5a:be:3f:39:24:d1: 8d:0a:81:f4:b7:19:82:00:55:4c:92:28:40:93:0c: ee:5b:6b:7e:b5:3e:8e:79:8d:79:1d:64:23:39:aa: 77:88:65:dc:ae:71:e8:01:45:cc:30:dc:2b:d8:85: a3:c3:a0:70:8d:3b:3a:e6:21:b0:d5:54:92:30:96: 09:5b:3e:2c:be:2a:39:ea:e1:5d:ab:b1:d4:83:f5: 10:a5:75:1e:5c:d7:c0:88:aa:5c:c6:8f:0a:42:09: 45:1e:68:12:87:7e:51:e0:36:e0:db:f8:1e:19:be: 83:2f:06:e1:9d:ed:4e:9c:58:db:73:7f:bf:72:bb: 57:41:60:f9:ed:d9:d7:2c:4f:83:2b:f4:7a:3c:86: 7e:6a:9e:3d:0d:9f:b3:16:4f:45:41:ca:01:a9:fd: aa:d6:35:c3:b6:c0:13:e3:f5:21:58:52:71:64:46: ed:07:07:74:26:a0:95:20:a8:d1:11:92:2c:3b:7c: dd:56:92:4d:36:f9:c9:57:75:69:a6:07:d3:83:3e: d7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:61:2A:F3:77:56:73:DB:B8:32:1D:7F:EB:1B:EA:AB:E1:3F:5D:3D X509v3 Authority Key Identifier: keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:80:e2:ab:08:8b:74:9d:12:c5:3d:28:4b:f8:fb:09:20:3d: 95:e2:f4:67:6c:4d:36:42:14:fd:d4:58:1f:5b:81:13:e5:cc: af:46:63:45:45:19:82:f6:8b:50:f1:fc:a6:1d:22:88:78:bb: 20:72:96:5f:b4:d3:da:71:64:97:a9:4d:a1:aa:56:24:58:c8: 35:a2:e6:1b:49:20:44:dd:a1:69:f3:72:37:fc:e7:cd:aa:ce: 69:1f:af:33:83:85:3d:21:69:56:a2:ac:f5:c1:bd:0f:34:bb: ed:70:76:c6:ea:a5:4a:d9:ef:44:1b:51:6b:f8:4c:5a:9b:6d: 0a:9a:9d:1e:10:21:41:fc:d5:8e:0a:b5:09:28:f9:8e:d3:e9: 53:38:f7:09:71:26:0a:c5:60:b8:41:67:83:7c:76:07:b3:6a: 03:db:66:d4:8b:2d:ea:a4:16:d3:d6:e7:04:34:ba:44:fc:fe: ac:f2:79:14:4e:71:58:85:40:ad:69:07:29:75:59:d6:9b:c8: dc:d1:0f:3e:49:0d:46:78:98:34:c8:89:c6:d9:52:4e:97:20: da:91:f8:dc:d2:aa:75:f1:8d:2c:ee:b8:aa:7c:66:7d:b3:29: 06:2b:c6:88:85:cd:f6:8c:2e:f5:6c:7f:67:de:64:9a:1d:35: ef:e9:8a:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZu0OleqfGWiLrKOj9sKsUtEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDhiNzZiMjE2NDc2OTZjOWY0ZDYzODJiNTI1ZDgzYTA1 ODBmNGEwHhcNMjYwMTEyMjIwMTIwWhcNMjYwMTEzMjIwMTIwWjAzMTEwLwYDVQQD EyhlMDYxMmFmMzc3NTY3M2RiYjgzMjFkN2ZlYjFiZWFhYmUxM2Y1ZDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78biYgIl0nscBpAyhXGp6t7ruEK2 lZVYgC/fZSb52hG/JEX82W41voQ8Tigy4sqj9vzdsspavj85JNGNCoH0txmCAFVM kihAkwzuW2t+tT6OeY15HWQjOap3iGXcrnHoAUXMMNwr2IWjw6BwjTs65iGw1VSS MJYJWz4svio56uFdq7HUg/UQpXUeXNfAiKpcxo8KQglFHmgSh35R4Dbg2/geGb6D Lwbhne1OnFjbc3+/crtXQWD57dnXLE+DK/R6PIZ+ap49DZ+zFk9FQcoBqf2q1jXD tsAT4/UhWFJxZEbtBwd0JqCVIKjREZIsO3zdVpJNNvnJV3VppgfTgz7XewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOBhKvN3VnPbuDIdf+sb6qvhP109MB8GA1UdIwQY MBaAFJLYt2shZHaWyfTWOCtSXYOgWA9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RpM2F5RmtkcGJKOU5ZNEsxSmRnNkJZRDBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi82ZjFmMmQtOTliYi00NGUwLWFkYzUt OGRmZDViMTUyZjc5LzEva3RpM2F5RmtkcGJKOU5ZNEsxSmRnNkJZRDBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi82ZjFmMmQtOTliYi00NGUwLWFkYzUtOGRmZDViMTUyZjc5 LzEva3RpM2F5RmtkcGJKOU5ZNEsxSmRnNkJZRDBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaYDiqwiL dJ0SxT0oS/j7CSA9leL0Z2xNNkIU/dRYH1uBE+XMr0ZjRUUZgvaLUPH8ph0iiHi7 IHKWX7TT2nFkl6lNoapWJFjINaLmG0kgRN2hafNyN/znzarOaR+vM4OFPSFpVqKs 9cG9DzS77XB2xuqlStnvRBtRa/hMWpttCpqdHhAhQfzVjgq1CSj5jtPpUzj3CXEm CsVguEFng3x2B7NqA9tm1Ist6qQW09bnBDS6RPz+rPJ5FE5xWIVArWkHKXVZ1pvI 3NEPPkkNRniYNMiJxtlSTpcg2pH43NKqdfGNLO64qnxmfbMpBivGiIXN9owu9Wx/ Z95kmh017+mKdg== -----END CERTIFICATE-----Generated at Tue Jan 13 04:59:07 2026 by rpki-client