This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft File: kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft (raw, json) Hash identifier: bZMxP5BVQa/r4J3gn0GuY+4bbYzX/YIMIEH2H7Ni3oI= Subject key identifier: 59:AD:53:22:A5:FC:3B:81:AA:AC:4E:B4:5B:03:C2:FF:BD:A2:AB:30 Authority key identifier: 91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66 Certificate issuer: /CN=9126b19f0e954dcf5816fdf371694b784dd7f366 Certificate serial: 019BFA9BAB614518F7A1094E56061ECA5967 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft Manifest number: 177D Signing time: Mon 26 Jan 2026 14:01:04 +0000 Manifest this update: Mon 26 Jan 2026 14:01:04 +0000 Manifest next update: Tue 27 Jan 2026 14:01:04 +0000 Files and hashes: 1: f_NbFcXhsPWXIxa4Q-RL2lQE9H8.roa (hash: r4M7joZLYltcoMhevwH4wLr16D2gCWd/Vhwm8RHpnDM=) 2: kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl (hash: MfCyARklLNn45ygczO3xe/7xLGNrg+UqRh56FgzsOiQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:ab:61:45:18:f7:a1:09:4e:56:06:1e:ca:59:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9126b19f0e954dcf5816fdf371694b784dd7f366 Validity Not Before: Jan 26 14:01:04 2026 GMT Not After : Jan 27 14:01:04 2026 GMT Subject: CN=59ad5322a5fc3b81aaac4eb45b03c2ffbda2ab30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:19:80:a5:a3:87:38:91:6e:12:bb:02:0d:ef: 5b:dd:48:65:be:fb:f3:3d:18:48:17:e9:6e:63:83: a2:1b:42:d3:96:4d:cc:45:7d:d5:ac:dd:cc:d3:75: 2d:5d:30:f4:63:3d:b5:96:09:73:61:27:4f:17:4f: 13:d5:cd:4c:fa:f9:3c:7c:49:c8:fe:5c:b8:e3:58: 58:10:32:0b:3a:32:75:bc:5a:42:1e:10:c1:9f:93: 80:91:e8:f3:61:b4:b3:f0:a3:d0:9e:80:dc:fa:8f: 2a:a1:c0:b8:1f:82:98:84:98:cc:76:2d:85:96:5b: f7:36:79:6f:7a:32:2b:d5:40:03:4d:d2:f4:26:21: b5:bc:c3:65:ca:28:f9:ff:c3:b8:f2:f2:b4:ed:6e: 93:fc:05:4c:63:69:f9:ba:51:ef:93:21:61:d5:d9: 00:c7:f2:14:51:3b:67:36:9d:e2:57:d1:bf:d3:58: 0f:d1:a8:5c:d3:17:e6:b4:77:06:36:b9:9b:2e:2f: 82:5c:11:29:8d:cd:3d:27:0b:21:67:7b:b8:1a:5f: c0:a4:db:95:30:64:19:17:ce:bc:1a:17:1f:1e:8a: dc:90:d2:b7:06:6b:4e:21:d4:38:8c:64:2c:8d:6b: 63:e8:ed:6a:3a:b2:65:fc:ac:40:ab:0d:83:37:5e: dd:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AD:53:22:A5:FC:3B:81:AA:AC:4E:B4:5B:03:C2:FF:BD:A2:AB:30 X509v3 Authority Key Identifier: keyid:91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:d7:fb:04:fb:34:99:f1:92:ad:48:9e:be:17:3b:81:a6:55: 31:e0:be:f5:2e:5d:2b:eb:86:b9:80:de:47:21:54:45:14:31: ce:7d:8d:76:34:57:7a:a9:db:e9:b8:ea:06:4b:50:24:54:8b: 1e:d2:27:e9:98:10:af:c2:01:30:26:75:b0:3a:f8:96:cf:ef: 6d:90:ac:89:b0:2d:be:a0:ed:1a:70:06:ca:19:dc:e5:56:db: 4d:81:1d:86:9e:bd:7b:2a:5b:54:53:84:a0:21:1f:a5:04:3d: a4:5d:38:24:01:cd:2e:4e:24:d5:33:08:42:0b:12:c9:4b:ca: bc:51:f7:23:ef:33:3b:ec:6a:da:df:12:37:ed:ed:f7:8d:b7: 9f:e4:b9:73:d3:d3:7a:02:d1:14:89:ac:8a:64:be:f1:f7:ee: 2e:55:ca:f4:13:b9:70:df:a7:db:01:38:25:e5:20:a5:cd:52: 85:9d:97:7c:12:cd:36:42:df:b7:af:24:1e:45:c4:eb:51:1b: b4:b8:fb:c9:e9:44:c1:43:d5:cc:aa:2f:7a:6d:5d:81:31:a5: 46:e6:d9:d7:c6:15:ac:84:30:2a:80:4e:0f:62:fe:1f:4b:e7: 67:48:52:71:22:c0:76:4c:0a:17:b2:37:9d:21:9e:10:b3:96: d9:e2:8c:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6m6thRRj3oQlOVgYeyllnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMjZiMTlmMGU5NTRkY2Y1ODE2ZmRmMzcxNjk0Yjc4NGRk N2YzNjYwHhcNMjYwMTI2MTQwMTA0WhcNMjYwMTI3MTQwMTA0WjAzMTEwLwYDVQQD Eyg1OWFkNTMyMmE1ZmMzYjgxYWFhYzRlYjQ1YjAzYzJmZmJkYTJhYjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhmApaOHOJFuErsCDe9b3Uhlvvvz PRhIF+luY4OiG0LTlk3MRX3VrN3M03UtXTD0Yz21lglzYSdPF08T1c1M+vk8fEnI /ly441hYEDILOjJ1vFpCHhDBn5OAkejzYbSz8KPQnoDc+o8qocC4H4KYhJjMdi2F llv3NnlvejIr1UADTdL0JiG1vMNlyij5/8O48vK07W6T/AVMY2n5ulHvkyFh1dkA x/IUUTtnNp3iV9G/01gP0ahc0xfmtHcGNrmbLi+CXBEpjc09JwshZ3u4Gl/ApNuV MGQZF868GhcfHorckNK3BmtOIdQ4jGQsjWtj6O1qOrJl/KxAqw2DN17dcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmtUyKl/DuBqqxOtFsDwv+9oqswMB8GA1UdIwQY MBaAFJEmsZ8OlU3PWBb983FpS3hN1/NmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1NheG53NlZUYzlZRnYzemNXbExlRTNYODJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wNzQ4NTMtMjFlZS00MmQ5LWIzYjUt ZDJlY2I2NDczYjIzLzEva1NheG53NlZUYzlZRnYzemNXbExlRTNYODJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8wNzQ4NTMtMjFlZS00MmQ5LWIzYjUtZDJlY2I2NDczYjIz LzEva1NheG53NlZUYzlZRnYzemNXbExlRTNYODJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOdf7BPs0 mfGSrUievhc7gaZVMeC+9S5dK+uGuYDeRyFURRQxzn2NdjRXeqnb6bjqBktQJFSL HtIn6ZgQr8IBMCZ1sDr4ls/vbZCsibAtvqDtGnAGyhnc5VbbTYEdhp69eypbVFOE oCEfpQQ9pF04JAHNLk4k1TMIQgsSyUvKvFH3I+8zO+xq2t8SN+3t9423n+S5c9PT egLRFImsimS+8ffuLlXK9BO5cN+n2wE4JeUgpc1ShZ2XfBLNNkLft68kHkXE61Eb tLj7yelEwUPVzKovem1dgTGlRubZ18YVrIQwKoBOD2L+H0vnZ0hScSLAdkwKF7I3 nSGeELOW2eKMkw== -----END CERTIFICATE-----Generated at Mon Jan 26 22:40:26 2026 by rpki-client