This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft File: K9LDcoTYRCbwXjJbawR61c8_5PI.mft (raw, json) Hash identifier: Fj3fehLrIuRPMIUmMIssS7EY8To9R5+VnrXk9Uk49L8= Subject key identifier: 03:1A:F9:C9:65:36:FA:59:D0:E3:2B:B7:DE:D7:23:23:16:99:9D:F9 Authority key identifier: 2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2 Certificate issuer: /CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2 Certificate serial: 019BD43291ED9CB8727B4F620B9DB1F7BAF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft Manifest number: 17D8 Signing time: Mon 19 Jan 2026 03:00:42 +0000 Manifest this update: Mon 19 Jan 2026 03:00:42 +0000 Manifest next update: Tue 20 Jan 2026 03:00:42 +0000 Files and hashes: 1: HXApDbBFjZ5P8YYPxxOP43B_61E.roa (hash: PABHtWG+f2nnmj23DcOFA1VpAaq32GiJAfPfR67Vqzs=) 2: K9LDcoTYRCbwXjJbawR61c8_5PI.crl (hash: BYpzO7cAPdZqJhF5uFVzI/bngGWAcdivNEVwp9k2Msk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d4:32:91:ed:9c:b8:72:7b:4f:62:0b:9d:b1:f7:ba:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2 Validity Not Before: Jan 19 03:00:42 2026 GMT Not After : Jan 20 03:00:42 2026 GMT Subject: CN=031af9c96536fa59d0e32bb7ded7232316999df9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:68:e3:4e:67:7f:3a:7f:ea:4d:a3:79:93:30: 5d:a7:cf:6b:1e:20:b6:ec:0a:7d:9e:58:ed:c8:d4: 2b:63:52:40:80:03:be:bd:4d:0d:ac:d5:b9:dc:93: 6b:84:e4:64:be:4f:90:bb:45:43:f9:bf:4e:30:ba: 4d:1f:2d:5e:95:5a:61:0b:c2:cc:99:c3:7e:98:0e: 7d:85:65:e1:ba:9a:0a:01:bc:e1:ee:e9:eb:16:c5: e1:74:bf:ae:59:25:0d:83:fc:18:74:c1:61:e7:3d: 96:e7:e1:f3:56:f1:48:1c:bc:1e:4e:cd:82:db:55: 7e:86:07:5f:0d:d9:b5:b0:2f:61:d5:39:90:d5:16: d5:b6:ad:55:76:63:86:9a:20:81:3a:80:46:80:67: 8b:25:0b:ef:b6:c4:61:ef:1a:0e:05:ad:1d:3c:e2: a9:a8:89:52:ce:3b:42:ad:c5:3b:c6:0a:08:a0:a1: 95:48:80:f6:51:1b:25:97:54:ca:1d:5e:f7:ed:06: 4e:20:0d:04:6c:27:76:48:dd:70:12:1a:24:4a:3c: a5:74:9b:33:ff:1f:9b:13:a5:22:4e:4f:1f:ec:1a: b6:eb:05:c5:0c:58:1a:b2:47:91:cf:52:36:01:75: 61:00:04:d8:ec:88:57:85:d8:d2:66:5f:c8:7d:1f: 5d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:1A:F9:C9:65:36:FA:59:D0:E3:2B:B7:DE:D7:23:23:16:99:9D:F9 X509v3 Authority Key Identifier: keyid:2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:54:e9:25:04:c8:7f:86:9f:a7:08:39:f4:de:d3:58:74:46: e3:d6:7f:d6:46:74:9d:f4:eb:21:8c:d9:f3:a4:06:cd:52:ef: a6:76:99:37:db:45:4f:3e:97:04:d3:65:16:ed:64:10:0d:1b: bb:60:05:4f:2a:3f:2b:f9:58:a8:92:e9:2a:90:05:89:32:bc: fe:54:cf:14:37:88:f3:82:40:e6:cd:0d:ce:3d:44:1f:a8:b1: 9c:7c:21:75:f6:dd:9c:40:2e:7c:5e:cd:32:2d:e5:db:ad:bd: 28:6b:41:ee:19:ca:15:2b:9b:70:aa:b6:ba:71:a5:5f:a1:62: 0a:13:2a:34:b0:6a:e2:68:15:be:6b:6f:83:46:d5:34:5e:8b: 8c:a5:03:74:5d:72:39:4a:f8:fc:df:13:fb:2b:0b:5f:2b:9b: b7:ea:0a:d9:5d:7d:79:4a:6f:3b:84:90:e8:8b:b7:a3:1b:d3: a8:fa:43:2a:7f:63:1e:f2:81:f9:8f:9a:af:8c:d0:2e:a4:1a: 55:26:ac:3a:b2:c1:b4:a3:0a:91:6c:9b:d9:2a:87:75:31:4c: dc:6e:7f:7f:c9:07:4d:c3:d8:a4:3b:92:3e:23:1d:3d:1c:0a: ce:71:e3:09:9d:07:05:39:b7:9c:d7:58:fd:36:cc:03:23:7e: a1:9e:7e:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvUMpHtnLhye09iC52x97rzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZDJjMzcyODRkODQ0MjZmMDVlMzI1YjZiMDQ3YWQ1Y2Yz ZmU0ZjIwHhcNMjYwMTE5MDMwMDQyWhcNMjYwMTIwMDMwMDQyWjAzMTEwLwYDVQQD EygwMzFhZjljOTY1MzZmYTU5ZDBlMzJiYjdkZWQ3MjMyMzE2OTk5ZGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2jjTmd/On/qTaN5kzBdp89rHiC2 7Ap9nljtyNQrY1JAgAO+vU0NrNW53JNrhORkvk+Qu0VD+b9OMLpNHy1elVphC8LM mcN+mA59hWXhupoKAbzh7unrFsXhdL+uWSUNg/wYdMFh5z2W5+HzVvFIHLweTs2C 21V+hgdfDdm1sC9h1TmQ1RbVtq1VdmOGmiCBOoBGgGeLJQvvtsRh7xoOBa0dPOKp qIlSzjtCrcU7xgoIoKGVSID2URsll1TKHV737QZOIA0EbCd2SN1wEhokSjyldJsz /x+bE6UiTk8f7Bq26wXFDFgaskeRz1I2AXVhAATY7IhXhdjSZl/IfR9dwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAMa+cllNvpZ0OMrt97XIyMWmZ35MB8GA1UdIwQY MBaAFCvSw3KE2EQm8F4yW2sEetXPP+TyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzlMRGNvVFlSQ2J3WGpKYmF3UjYxYzhfNVBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jNDY0ZDYtMGNiZC00ZWZkLTk4YWMt NTNkOWQzYTQ0ZmNmLzEvSzlMRGNvVFlSQ2J3WGpKYmF3UjYxYzhfNVBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9jNDY0ZDYtMGNiZC00ZWZkLTk4YWMtNTNkOWQzYTQ0ZmNm LzEvSzlMRGNvVFlSQ2J3WGpKYmF3UjYxYzhfNVBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWVTpJQTI f4afpwg59N7TWHRG49Z/1kZ0nfTrIYzZ86QGzVLvpnaZN9tFTz6XBNNlFu1kEA0b u2AFTyo/K/lYqJLpKpAFiTK8/lTPFDeI84JA5s0Nzj1EH6ixnHwhdfbdnEAufF7N Mi3l2629KGtB7hnKFSubcKq2unGlX6FiChMqNLBq4mgVvmtvg0bVNF6LjKUDdF1y OUr4/N8T+ysLXyubt+oK2V19eUpvO4SQ6Iu3oxvTqPpDKn9jHvKB+Y+ar4zQLqQa VSasOrLBtKMKkWyb2SqHdTFM3G5/f8kHTcPYpDuSPiMdPRwKznHjCZ0HBTm3nNdY /TbMAyN+oZ5+Eg== -----END CERTIFICATE-----Generated at Mon Jan 19 10:29:52 2026 by rpki-client