This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft File: KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft (raw, json) Hash identifier: ee/8iY4q9uGmuWH/ZK7tjg/od3CR6pg9tbK7JBafKGM= Subject key identifier: A0:59:F5:9E:EA:0F:65:A9:6F:C7:D9:F4:9B:2D:A7:54:91:EF:4D:16 Authority key identifier: 28:36:48:AF:F8:86:18:5F:FC:E3:62:6F:09:0F:11:9A:3E:4E:DE:35 Certificate issuer: /CN=283648aff886185ffce3626f090f119a3e4ede35 Certificate serial: 019BFB77645273C7E3E51A6AA3D130D9C358 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 18:01:04 +0000 Manifest this update: Mon 26 Jan 2026 18:01:04 +0000 Manifest next update: Tue 27 Jan 2026 18:01:04 +0000 Files and hashes: 1: KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl (hash: 0o/voNWKFjVnLnZRjd0vLNG37mvQ1ZUve7KwXHX6Z+8=) 2: eqDlx1dCrwgrxlQ0ydAQFa9N1j8.roa (hash: AcOLiKex+34XfbpE/I3e+xkSlJ3+mpg+qWqvKQ2QsM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 18:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:64:52:73:c7:e3:e5:1a:6a:a3:d1:30:d9:c3:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=283648aff886185ffce3626f090f119a3e4ede35 Validity Not Before: Jan 26 18:01:04 2026 GMT Not After : Jan 27 18:01:04 2026 GMT Subject: CN=a059f59eea0f65a96fc7d9f49b2da75491ef4d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8d:84:c3:51:b3:4f:0c:79:cd:b9:53:3a:38: 0c:93:26:fe:2b:04:60:99:25:12:59:7f:7b:ef:8f: 9a:0e:c0:36:51:97:e5:e4:93:50:92:ef:4f:73:85: a3:74:a8:48:8e:c8:18:90:74:13:c9:71:17:b9:1d: ab:3b:71:5c:02:7e:dd:65:aa:56:33:14:48:e6:e6: 85:1e:c3:da:63:dd:87:a2:a6:ca:32:5e:d0:7d:23: c7:7a:a6:7a:16:e6:e5:43:2f:15:43:ed:dd:48:96: b5:df:f9:71:2f:ea:fe:37:81:9c:63:80:24:d7:41: 9d:df:67:cc:9f:fb:41:e0:f6:86:0a:6d:a1:98:85: 0a:fc:45:4b:b8:2a:59:be:1a:a1:8e:64:d2:52:63: 4a:b5:4a:0d:22:ec:8d:85:01:da:cb:53:f7:eb:46: c8:0a:55:a1:68:f0:51:87:6d:a6:c2:d3:f4:3c:73: 09:1a:04:7a:7f:1a:e2:34:29:3f:eb:7e:86:03:7d: ca:67:d3:97:a8:4e:60:4e:0e:2f:be:14:8e:ae:bb: 79:9e:1f:90:c3:7e:97:69:77:ba:45:d3:28:ac:a9: e0:9f:db:a5:61:ee:24:59:6d:9b:1d:47:a0:3f:3a: 6f:4f:a9:a0:d4:cd:e9:24:0d:76:fa:22:0b:a4:01: 56:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:59:F5:9E:EA:0F:65:A9:6F:C7:D9:F4:9B:2D:A7:54:91:EF:4D:16 X509v3 Authority Key Identifier: keyid:28:36:48:AF:F8:86:18:5F:FC:E3:62:6F:09:0F:11:9A:3E:4E:DE:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:a9:73:03:b5:26:9d:2f:08:0b:0e:46:62:06:fd:7f:44:0d: 75:4f:90:1c:ff:67:e1:6a:2d:b8:88:d3:bc:49:47:26:b3:f9: 67:4f:cf:82:bf:a0:f0:9e:74:c0:6b:9c:4a:a2:9c:c6:7f:16: 39:65:4e:34:e9:de:51:ff:6f:58:31:ad:87:52:a8:b2:0f:8a: b5:34:d5:32:ef:ac:4b:6b:6d:5e:d0:02:f9:a5:47:29:e0:c7: 57:aa:e7:4a:01:cb:eb:01:d5:b3:35:55:9d:8a:36:82:3e:1d: 88:f3:f4:27:b8:cd:29:d3:c2:fe:c3:38:17:d3:86:1c:71:c0: 3d:ff:52:d8:9b:49:3f:e3:02:71:ea:f2:24:7e:45:6b:b8:16: b7:92:7d:31:f7:51:1d:a7:9e:de:44:e5:c4:4a:31:ef:e9:27: 38:a8:c1:67:80:8b:10:79:21:cb:ce:19:86:7e:82:87:a4:0e: b5:be:89:70:8a:9e:46:b0:b0:0c:6b:0c:a0:7e:b0:d2:9a:8e: 15:6c:41:57:65:ef:f1:1a:a4:a9:c0:d9:88:3d:fc:1f:79:7a: a4:1a:25:89:0b:cb:af:03:99:53:9b:73:68:7b:f3:0a:33:52: 1c:79:9c:08:51:cb:b9:a6:90:28:2b:d0:60:d2:ce:1c:ee:ff: 2c:26:7d:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7d2RSc8fj5Rpqo9Ew2cNYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MzY0OGFmZjg4NjE4NWZmY2UzNjI2ZjA5MGYxMTlhM2U0 ZWRlMzUwHhcNMjYwMTI2MTgwMTA0WhcNMjYwMTI3MTgwMTA0WjAzMTEwLwYDVQQD EyhhMDU5ZjU5ZWVhMGY2NWE5NmZjN2Q5ZjQ5YjJkYTc1NDkxZWY0ZDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo2Ew1GzTwx5zblTOjgMkyb+KwRg mSUSWX9774+aDsA2UZfl5JNQku9Pc4WjdKhIjsgYkHQTyXEXuR2rO3FcAn7dZapW MxRI5uaFHsPaY92HoqbKMl7QfSPHeqZ6FublQy8VQ+3dSJa13/lxL+r+N4GcY4Ak 10Gd32fMn/tB4PaGCm2hmIUK/EVLuCpZvhqhjmTSUmNKtUoNIuyNhQHay1P360bI ClWhaPBRh22mwtP0PHMJGgR6fxriNCk/636GA33KZ9OXqE5gTg4vvhSOrrt5nh+Q w36XaXe6RdMorKngn9ulYe4kWW2bHUegPzpvT6mg1M3pJA12+iILpAFW6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBZ9Z7qD2Wpb8fZ9Jstp1SR700WMB8GA1UdIwQY MBaAFCg2SK/4hhhf/ONibwkPEZo+Tt41MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0RaSXJfaUdHRl84NDJKdkNROFJtajVPM2pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9iOGJkM2ItMDAyNi00ZDU2LWJiMjUt NmE1YzljMGQ5MWU5LzEvS0RaSXJfaUdHRl84NDJKdkNROFJtajVPM2pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9iOGJkM2ItMDAyNi00ZDU2LWJiMjUtNmE1YzljMGQ5MWU5 LzEvS0RaSXJfaUdHRl84NDJKdkNROFJtajVPM2pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUKlzA7Um nS8ICw5GYgb9f0QNdU+QHP9n4WotuIjTvElHJrP5Z0/Pgr+g8J50wGucSqKcxn8W OWVONOneUf9vWDGth1Kosg+KtTTVMu+sS2ttXtAC+aVHKeDHV6rnSgHL6wHVszVV nYo2gj4diPP0J7jNKdPC/sM4F9OGHHHAPf9S2JtJP+MCceryJH5Fa7gWt5J9MfdR Haee3kTlxEox7+knOKjBZ4CLEHkhy84Zhn6Ch6QOtb6JcIqeRrCwDGsMoH6w0pqO FWxBV2Xv8RqkqcDZiD38H3l6pBoliQvLrwOZU5tzaHvzCjNSHHmcCFHLuaaQKCvQ YNLOHO7/LCZ9qw== -----END CERTIFICATE-----Generated at Tue Jan 27 03:55:53 2026 by rpki-client