This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft File: KBeCQ6CGawkSctHh60UeceQTuZo.mft (raw, json) Hash identifier: Utaa5lPm8KtLsuTTJZAGqrtk8jZO/g/czte+0TbQqrs= Subject key identifier: B6:5E:09:4B:73:74:0B:EA:76:2F:65:3E:5A:D4:D5:2E:9D:34:66:45 Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A Certificate issuer: /CN=28178243a0866b091272d1e1eb451e71e413b99a Certificate serial: 019BFAD24DEA7388EF444C3BC0113F34D076 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft Manifest number: 082E Signing time: Mon 26 Jan 2026 15:00:45 +0000 Manifest this update: Mon 26 Jan 2026 15:00:45 +0000 Manifest next update: Tue 27 Jan 2026 15:00:45 +0000 Files and hashes: 1: KBeCQ6CGawkSctHh60UeceQTuZo.crl (hash: 0+Qs3Evx3Bp8DsewZJ55r1FDZLVY7YUjvke/Afi47o4=) 2: Maj2D8cSqrB3CLI5LyrvNUbe9TI.roa (hash: b021eDbkKPvvVAW1JJTFEOe1gdVYy/RtiqJ/4iLcPI4=) 3: cHGfrQ2RRCrzMuQN1_zdwWiDk3I.roa (hash: EJXHDQe6ZDkATsWeN7+btkC/hG9y8A/gHxLok69CX5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:4d:ea:73:88:ef:44:4c:3b:c0:11:3f:34:d0:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a Validity Not Before: Jan 26 15:00:45 2026 GMT Not After : Jan 27 15:00:45 2026 GMT Subject: CN=b65e094b73740bea762f653e5ad4d52e9d346645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:af:b1:65:cd:98:ea:92:19:28:f0:2b:e7:b0: b6:29:87:07:54:99:62:d3:20:a6:9a:cf:9a:14:62: 29:6e:88:d0:37:5d:29:9d:b8:a4:a3:8e:ab:79:02: 14:6a:e8:4c:4f:f8:4d:8c:b6:2d:92:88:b7:87:ac: d7:a7:18:53:03:ae:db:0a:e2:a4:cf:f1:62:ed:b3: 34:9d:20:75:03:e8:e2:2c:c8:3f:9d:95:37:c4:47: 8a:ea:4e:81:53:db:55:4d:48:37:60:9c:ae:34:16: a1:47:e9:9d:86:aa:48:24:f5:6d:85:92:ef:08:0b: c5:ce:c7:68:1d:70:65:3c:88:85:fb:00:38:22:35: 14:d7:44:3a:07:87:94:43:a9:01:d9:77:5d:67:12: 01:ef:17:d5:3a:fe:35:81:a7:90:06:33:b5:a8:08: c2:5c:83:30:4c:0b:35:59:46:84:b1:25:d4:50:02: a5:52:28:35:8a:a7:66:a4:70:d9:ae:10:6d:b8:7f: 19:4e:61:d0:06:b2:cc:d7:8e:28:86:c2:f1:87:03: 1e:f0:c4:64:09:32:2f:4a:5a:ea:e4:2c:6b:06:48: d5:e6:1c:48:71:ce:eb:73:50:fc:c0:1c:dc:9f:ed: 9a:81:0e:86:b8:f8:43:b5:4d:8f:33:43:68:d4:91: 17:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:5E:09:4B:73:74:0B:EA:76:2F:65:3E:5A:D4:D5:2E:9D:34:66:45 X509v3 Authority Key Identifier: keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:22:31:b1:7d:b7:32:41:0b:df:e4:01:3e:2c:1f:51:37:71: a1:eb:a0:f4:93:dd:5a:ae:13:41:58:2e:83:34:52:29:ef:ef: ea:58:b1:6e:b8:8b:58:21:e3:21:1a:02:a5:d4:a3:76:ec:31: a9:6a:19:46:58:80:3b:7c:9e:68:70:d1:b0:68:98:c3:97:31: 1b:50:42:b7:a4:0f:49:c8:2f:07:85:ad:5f:78:d0:41:ee:74: 43:a3:b6:03:51:1e:84:ea:5c:84:6d:74:0f:d3:8f:b4:ec:ea: e5:0d:0e:91:d2:fa:d9:c3:bc:21:cf:22:37:59:5f:07:bb:76: fc:db:49:db:4d:25:fd:d8:dc:51:f2:59:ee:eb:95:ed:cf:8d: 35:1b:cf:94:36:ad:19:e8:a8:04:9c:ab:dd:17:a1:0a:ae:fc: fa:56:3a:aa:08:48:9c:6d:c6:ff:c1:60:29:e5:5f:1a:fb:1f: e6:f8:f0:c2:01:35:60:99:c0:1b:7e:bb:70:0a:71:0c:0c:24: 89:22:cd:de:ca:bc:12:64:73:56:00:65:d2:4a:50:64:be:45: 01:6d:13:a4:9c:28:8a:de:4d:b5:38:18:84:20:29:8f:90:d2: 45:84:00:f3:49:ce:2e:c2:47:cc:f9:cd:cb:9b:cb:1f:d6:76: 05:f8:a4:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv60k3qc4jvREw7wBE/NNB2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MTc4MjQzYTA4NjZiMDkxMjcyZDFlMWViNDUxZTcxZTQx M2I5OWEwHhcNMjYwMTI2MTUwMDQ1WhcNMjYwMTI3MTUwMDQ1WjAzMTEwLwYDVQQD EyhiNjVlMDk0YjczNzQwYmVhNzYyZjY1M2U1YWQ0ZDUyZTlkMzQ2NjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAza+xZc2Y6pIZKPAr57C2KYcHVJli 0yCmms+aFGIpbojQN10pnbiko46reQIUauhMT/hNjLYtkoi3h6zXpxhTA67bCuKk z/Fi7bM0nSB1A+jiLMg/nZU3xEeK6k6BU9tVTUg3YJyuNBahR+mdhqpIJPVthZLv CAvFzsdoHXBlPIiF+wA4IjUU10Q6B4eUQ6kB2XddZxIB7xfVOv41gaeQBjO1qAjC XIMwTAs1WUaEsSXUUAKlUig1iqdmpHDZrhBtuH8ZTmHQBrLM144ohsLxhwMe8MRk CTIvSlrq5CxrBkjV5hxIcc7rc1D8wBzcn+2agQ6GuPhDtU2PM0No1JEXMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZeCUtzdAvqdi9lPlrU1S6dNGZFMB8GA1UdIwQY MBaAFCgXgkOghmsJEnLR4etFHnHkE7maMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS83NDdkYjgtYWM1Ny00NmE4LWI2MzIt NmNlM2MwM2ExMzRjLzEvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS83NDdkYjgtYWM1Ny00NmE4LWI2MzItNmNlM2MwM2ExMzRj LzEvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCIxsX23 MkEL3+QBPiwfUTdxoeug9JPdWq4TQVgugzRSKe/v6lixbriLWCHjIRoCpdSjduwx qWoZRliAO3yeaHDRsGiYw5cxG1BCt6QPScgvB4WtX3jQQe50Q6O2A1EehOpchG10 D9OPtOzq5Q0OkdL62cO8Ic8iN1lfB7t2/NtJ200l/djcUfJZ7uuV7c+NNRvPlDat GeioBJyr3RehCq78+lY6qghInG3G/8FgKeVfGvsf5vjwwgE1YJnAG367cApxDAwk iSLN3sq8EmRzVgBl0kpQZL5FAW0TpJwoit5NtTgYhCApj5DSRYQA80nOLsJHzPnN y5vLH9Z2BfikRw== -----END CERTIFICATE-----Generated at Mon Jan 26 22:40:33 2026 by rpki-client