This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft File: KYNUhhlzcozivlBfcnCkNk2U5pE.mft (raw, json) Hash identifier: KM0H6iiQIwdTrWiVcNV3R/JXgvwIH9mo8Xn5qoWeDtc= Subject key identifier: AF:3E:C3:34:1A:21:C0:44:74:18:17:4E:F0:04:76:C9:1A:CD:2D:F8 Authority key identifier: 29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91 Certificate issuer: /CN=298354861973728ce2be505f7270a4364d94e691 Certificate serial: 019BA4FE6A323A5E21621600EE0BA5486B7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft Manifest number: 17C1 Signing time: Fri 09 Jan 2026 23:01:35 +0000 Manifest this update: Fri 09 Jan 2026 23:01:35 +0000 Manifest next update: Sat 10 Jan 2026 23:01:35 +0000 Files and hashes: 1: KYNUhhlzcozivlBfcnCkNk2U5pE.crl (hash: qMuV/tKbrjT4gvOWbY6x+3Cx6PxsTBl70KVmgeSCDPo=) 2: zzm4xYnMOB3jbc8NbBnWyWTRTvA.roa (hash: kFfMKwS5LxfccFDbx+zZKifQAt7o+0DnklToBwmr71Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a4:fe:6a:32:3a:5e:21:62:16:00:ee:0b:a5:48:6b:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=298354861973728ce2be505f7270a4364d94e691 Validity Not Before: Jan 9 23:01:35 2026 GMT Not After : Jan 10 23:01:35 2026 GMT Subject: CN=af3ec3341a21c0447418174ef00476c91acd2df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e1:51:72:77:ed:cb:09:36:59:35:2a:45:80: 87:8b:6a:a9:d7:ad:d5:ac:b0:64:cf:c6:e7:74:c8: d2:26:a3:d0:43:48:28:69:db:31:63:8c:a8:ae:a0: 01:a7:d8:87:d0:ed:3c:bc:70:d5:db:b7:9a:a7:16: eb:2b:ab:e7:32:c9:8c:fd:94:2e:13:72:91:84:ae: 15:dd:07:9c:cc:8b:10:00:3d:ec:94:ab:58:f9:cc: 82:29:f3:24:1a:5a:1d:b3:69:bc:b2:7a:bd:06:e3: ba:f4:27:fc:e9:d9:b3:98:ec:77:1f:5c:81:f0:de: 1d:05:02:d0:b1:0c:47:11:26:7f:da:47:6d:57:d8: b5:bd:b6:9d:b9:b3:35:35:96:39:7c:37:70:fa:a1: b4:7c:6b:69:79:38:ef:cb:c9:37:96:8b:2b:9d:d4: 81:ea:19:3f:80:f8:96:7d:46:d3:0e:3d:0c:e9:37: 90:ae:f3:74:c9:c6:ee:4a:c2:b9:84:1e:a3:cf:f5: 27:27:e8:99:f2:05:40:8b:60:78:4b:82:05:e4:11: 3b:d0:24:02:5b:3e:d3:b7:d4:db:4e:ea:24:e1:89: 30:e4:55:56:df:74:67:03:0b:32:ec:68:2c:4a:cc: 8f:39:c7:90:5f:d5:97:01:a2:00:d6:e6:c2:63:ce: 10:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3E:C3:34:1A:21:C0:44:74:18:17:4E:F0:04:76:C9:1A:CD:2D:F8 X509v3 Authority Key Identifier: keyid:29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:43:ea:a2:f4:6b:4c:33:2a:de:e5:b7:13:61:54:5e:5a:56: 13:08:29:1d:ad:cd:86:7f:1c:a6:f4:cc:48:a2:aa:16:40:a0: 33:1e:ab:0a:08:ae:29:9f:c1:a2:8e:b0:60:7c:5a:dd:c0:34: f2:59:a5:de:c8:65:ff:2a:15:1d:5b:68:3e:1a:ac:d5:a1:cf: ea:63:6b:37:a5:13:5b:c5:28:98:ec:3c:c3:6a:c6:25:4c:8b: 74:be:cf:6f:de:cb:9b:a6:63:e9:22:54:4f:4e:e2:d7:4a:7e: a9:99:e9:23:5f:96:56:af:b8:2a:6d:d4:b1:b5:eb:ca:d4:11: 05:3a:b2:e2:7c:9e:ef:e8:ba:74:2c:b6:3b:c5:a3:9d:30:c3: c2:c3:27:18:68:c1:ce:5c:a7:c4:21:c6:b8:7c:a0:bf:00:b9: 9d:e0:a2:90:28:96:94:bb:22:08:41:19:8d:c9:b9:35:b3:e8: ca:7d:6b:2e:77:aa:f9:69:03:e9:79:59:59:05:a9:bf:41:8f: 25:d0:41:5d:24:64:3a:41:b6:7e:32:88:8b:09:e7:88:e5:ec: 44:8f:cf:1a:7b:ec:98:81:1e:fb:aa:9a:18:f3:f6:4e:aa:a1: e1:53:7c:2d:4e:07:7f:62:21:b3:af:23:17:cb:04:f4:3e:5e: e7:ee:7e:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuk/moyOl4hYhYA7gulSGt+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ODM1NDg2MTk3MzcyOGNlMmJlNTA1ZjcyNzBhNDM2NGQ5 NGU2OTEwHhcNMjYwMTA5MjMwMTM1WhcNMjYwMTEwMjMwMTM1WjAzMTEwLwYDVQQD EyhhZjNlYzMzNDFhMjFjMDQ0NzQxODE3NGVmMDA0NzZjOTFhY2QyZGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleFRcnftywk2WTUqRYCHi2qp163V rLBkz8bndMjSJqPQQ0goadsxY4yorqABp9iH0O08vHDV27eapxbrK6vnMsmM/ZQu E3KRhK4V3QeczIsQAD3slKtY+cyCKfMkGlods2m8snq9BuO69Cf86dmzmOx3H1yB 8N4dBQLQsQxHESZ/2kdtV9i1vbadubM1NZY5fDdw+qG0fGtpeTjvy8k3losrndSB 6hk/gPiWfUbTDj0M6TeQrvN0ycbuSsK5hB6jz/UnJ+iZ8gVAi2B4S4IF5BE70CQC Wz7Tt9TbTuok4Ykw5FVW33RnAwsy7GgsSsyPOceQX9WXAaIA1ubCY84Q4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8+wzQaIcBEdBgXTvAEdskazS34MB8GA1UdIwQY MBaAFCmDVIYZc3KM4r5QX3JwpDZNlOaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1lOVWhobHpjb3ppdmxCZmNuQ2tOazJVNXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9hNmRjZjEtOTdmNC00NWFmLWJiNDgt M2RiNmYwNTcwZDQ4LzEvS1lOVWhobHpjb3ppdmxCZmNuQ2tOazJVNXBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9hNmRjZjEtOTdmNC00NWFmLWJiNDgtM2RiNmYwNTcwZDQ4 LzEvS1lOVWhobHpjb3ppdmxCZmNuQ2tOazJVNXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGUPqovRr TDMq3uW3E2FUXlpWEwgpHa3Nhn8cpvTMSKKqFkCgMx6rCgiuKZ/Boo6wYHxa3cA0 8lml3shl/yoVHVtoPhqs1aHP6mNrN6UTW8UomOw8w2rGJUyLdL7Pb97Lm6Zj6SJU T07i10p+qZnpI1+WVq+4Km3UsbXrytQRBTqy4nye7+i6dCy2O8WjnTDDwsMnGGjB zlynxCHGuHygvwC5neCikCiWlLsiCEEZjcm5NbPoyn1rLneq+WkD6XlZWQWpv0GP JdBBXSRkOkG2fjKIiwnniOXsRI/PGnvsmIEe+6qaGPP2Tqqh4VN8LU4Hf2Ihs68j F8sE9D5e5+5+Wg== -----END CERTIFICATE-----Generated at Sat Jan 10 06:52:55 2026 by rpki-client