This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft File: K1PcIaJCAlQoIMyobiZfioeX0lA.mft (raw, json) Hash identifier: UNCCeVSbVxbNRfn95kiF/Y9sglgpKpsj9lo7B9wOfzs= Subject key identifier: 2D:56:34:FA:F6:61:6A:67:F9:62:C1:09:BF:45:C8:19:D1:C1:12:19 Authority key identifier: 2B:53:DC:21:A2:42:02:54:28:20:CC:A8:6E:26:5F:8A:87:97:D2:50 Certificate issuer: /CN=2b53dc21a24202542820cca86e265f8a8797d250 Certificate serial: 019BFA522515BD9A0F6482AF913641902BC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft Manifest number: 02 Signing time: Mon 26 Jan 2026 12:40:45 +0000 Manifest this update: Mon 26 Jan 2026 12:40:45 +0000 Manifest next update: Tue 27 Jan 2026 12:40:45 +0000 Files and hashes: 1: K1PcIaJCAlQoIMyobiZfioeX0lA.crl (hash: lcxk7G5550h1PYFnxC41WyXQsEYuyVElyzGsUnHq3iI=) 2: kD6G2PoyT4Y9hFb7K8_JYQqd5fY.roa (hash: GDKNpiIO5829SnDrPg3nh1X5rP785rc0edBI69dLKGw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.crl rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:52:25:15:bd:9a:0f:64:82:af:91:36:41:90:2b:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b53dc21a24202542820cca86e265f8a8797d250 Validity Not Before: Jan 26 12:40:45 2026 GMT Not After : Jan 27 12:40:45 2026 GMT Subject: CN=2d5634faf6616a67f962c109bf45c819d1c11219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:06:e4:ad:c8:5e:e5:9e:7c:8e:54:fe:44:aa: fe:4a:21:cc:b3:a0:4b:e6:ec:88:9e:6d:3b:62:39: 9f:3c:f9:5f:e5:8b:0f:a4:9b:2f:36:fe:a9:35:dc: f1:f2:14:9e:0f:1c:25:16:95:4b:c1:ed:67:e1:46: 58:03:bd:0d:b8:ce:e5:42:1e:2a:45:51:27:91:26: 2e:4b:9d:34:ae:36:0a:5b:62:d1:77:26:5d:49:35: ee:fb:2f:56:13:91:f8:c6:e5:d4:51:fa:2f:bc:fc: a4:19:99:85:1c:c0:39:2d:40:0a:d0:22:b2:05:15: 05:0a:b2:97:49:6a:62:da:73:7f:5c:26:22:5c:e0: 02:63:3e:e2:9e:e4:fd:db:fa:0b:73:2c:53:37:49: a1:e6:13:7b:58:9b:b3:84:97:ae:fc:60:73:e9:aa: 83:70:26:b1:f1:ee:10:13:18:99:aa:5e:ac:e6:49: e9:d1:1c:f2:61:f8:1a:3e:a1:68:fe:55:84:5c:b9: 2d:5f:11:60:bd:7e:5f:1f:ea:c6:ac:5d:9b:97:9b: 34:13:18:9e:98:f5:80:bb:7f:c1:28:b0:51:2e:58: 43:ac:55:4b:25:b2:b4:87:2a:6e:a8:13:fb:7a:94: 59:c5:7d:1c:ed:35:e5:46:e5:c7:d3:ee:85:a7:a4: 5e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:56:34:FA:F6:61:6A:67:F9:62:C1:09:BF:45:C8:19:D1:C1:12:19 X509v3 Authority Key Identifier: keyid:2B:53:DC:21:A2:42:02:54:28:20:CC:A8:6E:26:5F:8A:87:97:D2:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:de:2a:55:bd:42:21:4c:d1:7c:cf:10:97:ea:e2:56:6e:ff: a3:32:51:22:1f:ed:75:19:04:0c:52:f6:94:46:b0:25:a8:8b: 93:09:ae:21:08:f5:1a:f3:55:dc:26:cd:d6:4e:00:ad:ee:9b: f7:a0:2f:44:90:40:e2:5c:25:dc:b7:8c:08:05:39:c1:eb:ea: e3:f1:7f:b4:a8:ee:99:55:25:d9:67:84:b3:04:be:98:07:b3: 97:7b:6e:a3:dc:4f:97:34:69:88:4c:9a:e8:43:97:2d:cc:4e: a3:64:67:f5:f7:6e:93:11:e1:2a:25:67:df:78:76:97:81:a0: 2a:cf:5a:ab:7f:88:f0:8a:17:6d:17:73:9d:a7:f7:b3:b6:6b: f0:57:b8:85:cf:11:22:77:a6:01:75:09:19:86:94:66:6b:e4: 90:c7:8b:93:0d:f3:2a:df:fd:a1:31:17:d1:17:59:c4:47:fc: 83:60:b4:47:5b:85:e4:63:f4:0f:22:4b:ec:53:f8:1c:18:32: b0:2d:92:d0:3c:53:a1:00:18:ce:76:1d:a4:ad:ed:72:d2:61: 7b:30:c6:61:04:23:cc:8b:2d:d0:45:3d:a2:82:12:70:1e:de: 95:4d:8d:cc:66:8d:2a:9d:ce:17:a9:47:f0:43:57:de:ee:42: ff:67:c1:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6UiUVvZoPZIKvkTZBkCvEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNTNkYzIxYTI0MjAyNTQyODIwY2NhODZlMjY1ZjhhODc5 N2QyNTAwHhcNMjYwMTI2MTI0MDQ1WhcNMjYwMTI3MTI0MDQ1WjAzMTEwLwYDVQQD EygyZDU2MzRmYWY2NjE2YTY3Zjk2MmMxMDliZjQ1YzgxOWQxYzExMjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwbkrche5Z58jlT+RKr+SiHMs6BL 5uyInm07YjmfPPlf5YsPpJsvNv6pNdzx8hSeDxwlFpVLwe1n4UZYA70NuM7lQh4q RVEnkSYuS500rjYKW2LRdyZdSTXu+y9WE5H4xuXUUfovvPykGZmFHMA5LUAK0CKy BRUFCrKXSWpi2nN/XCYiXOACYz7inuT92/oLcyxTN0mh5hN7WJuzhJeu/GBz6aqD cCax8e4QExiZql6s5knp0RzyYfgaPqFo/lWEXLktXxFgvX5fH+rGrF2bl5s0Exie mPWAu3/BKLBRLlhDrFVLJbK0hypuqBP7epRZxX0c7TXlRuXH0+6Fp6RedQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1WNPr2YWpn+WLBCb9FyBnRwRIZMB8GA1UdIwQY MBaAFCtT3CGiQgJUKCDMqG4mX4qHl9JQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzFQY0lhSkNBbFFvSU15b2JpWmZpb2VYMGxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81NGJjZGItYjVlMi00Mzc3LWI1MzAt ODM1OTNhZmJiNzUzLzEvSzFQY0lhSkNBbFFvSU15b2JpWmZpb2VYMGxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC81NGJjZGItYjVlMi00Mzc3LWI1MzAtODM1OTNhZmJiNzUz LzEvSzFQY0lhSkNBbFFvSU15b2JpWmZpb2VYMGxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO94qVb1C IUzRfM8Ql+riVm7/ozJRIh/tdRkEDFL2lEawJaiLkwmuIQj1GvNV3CbN1k4Are6b 96AvRJBA4lwl3LeMCAU5wevq4/F/tKjumVUl2WeEswS+mAezl3tuo9xPlzRpiEya 6EOXLcxOo2Rn9fdukxHhKiVn33h2l4GgKs9aq3+I8IoXbRdznaf3s7Zr8Fe4hc8R InemAXUJGYaUZmvkkMeLkw3zKt/9oTEX0RdZxEf8g2C0R1uF5GP0DyJL7FP4HBgy sC2S0DxToQAYznYdpK3tctJhezDGYQQjzIst0EU9ooIScB7elU2NzGaNKp3OF6lH 8ENX3u5C/2fB3g== -----END CERTIFICATE-----Generated at Mon Jan 26 22:58:23 2026 by rpki-client