This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft File: KXnMQ8JGn_pc-LesY5sB86dorFU.mft (raw, json) Hash identifier: 0hclK8ebPFJzS1z3Bxf5zOSDnZoh3fYC86lQklbdYP8= Subject key identifier: A4:59:E7:86:49:1F:67:C6:D1:15:E4:C1:74:44:7F:FA:6C:97:EF:31 Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55 Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55 Certificate serial: 019BFAD2A19FCFDF165584A8E3D9CCFAEA41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft Manifest number: 098B Signing time: Mon 26 Jan 2026 15:01:06 +0000 Manifest this update: Mon 26 Jan 2026 15:01:06 +0000 Manifest next update: Tue 27 Jan 2026 15:01:06 +0000 Files and hashes: 1: 1-3-DY60yPSCu-gGKysRC3swXx_8.roa (hash: UlzeFAwkz1/eAC6acg1mI44oqAC1xGW8wLlCXELgn1c=) 2: FfR87_mXj0CIVmHYTnyUObXrTyI.roa (hash: p3ixpnoniD5wmyp+DsfoQYYTf3OUtsn8VxkoKytvyOM=) 3: KXnMQ8JGn_pc-LesY5sB86dorFU.crl (hash: 3NQ2tMU+y0S+YImhu67VZtKSbLqLu7g3wG32d29kWHo=) 4: RSPqJer2GxHPRRgn7mg4dhkHOBw.roa (hash: 7i2L3D7sVlNeXVt8GqQE+rm6gyBVSmDTLbXKjTKH2nY=) 5: SYlj0A7ENxSNVjYsMjznaXGLRb0.roa (hash: gSHMxEMobAWDQd7qISttpazhHFBCMdL/2XU1+z3hHPw=) 6: cc4XWIaKUX4G7Q_GjtBRl5l9JZE.roa (hash: EeYAGmv4ft4PsUT0/IzIQT/a4vqcFcE3Yy8BWdbkgXk=) 7: fEfL45_nElxBXhUCYxx1XsHuo5c.roa (hash: 4sHhygZisXsBQlSu9JyHHESLzAOFL7W3RM1k1ywaXgU=) 8: v_rtQKnxRRcDJjO2DbHhjK4pGwI.roa (hash: dNVSKhl9/MJthY4QH+PbCcLHkp0+SHaGKi4AwlYRixQ=) 9: vzN3nV9iPcz_PFptK8Xgm9B69kU.roa (hash: ePugewva4SdPAswHM9Dz4qq6ORFFWmGGZvhBBAVOF6c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:a1:9f:cf:df:16:55:84:a8:e3:d9:cc:fa:ea:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55 Validity Not Before: Jan 26 15:01:06 2026 GMT Not After : Jan 27 15:01:06 2026 GMT Subject: CN=a459e786491f67c6d115e4c174447ffa6c97ef31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f6:83:67:c5:ab:93:35:b7:28:be:8c:84:e1: aa:47:9b:7a:f6:d8:f1:d3:c2:21:f5:7d:50:68:f5: 8a:2e:24:b8:46:ce:ba:a2:1e:ae:81:3d:33:f1:77: 95:0a:79:a4:4a:0a:05:4e:17:f1:86:c6:19:90:e9: 2a:53:60:42:6b:62:16:04:7e:b7:e0:5d:f9:3c:94: 7f:5d:61:ef:90:b7:80:24:87:45:d9:99:d9:3d:44: 9d:ee:b3:cc:74:21:8a:4d:12:f3:0b:56:0b:6b:0b: 6a:7b:83:05:49:7f:7c:9c:04:f9:68:59:4f:ed:fc: 90:a1:ea:61:64:b3:3f:4e:29:e3:86:44:c9:05:3c: 18:2a:3f:cd:66:8f:93:a6:c7:3c:4d:b7:9c:65:dc: 80:36:f5:2c:e0:11:24:f4:ce:22:48:8d:84:71:cf: 85:39:f3:12:6d:2e:3a:ce:42:ef:94:5b:e3:22:ec: 52:22:8c:cf:d8:d0:fe:19:db:ab:a0:bd:78:f4:05: ca:ad:59:7a:66:ad:32:a0:6b:61:a2:61:b5:31:1a: 2d:7c:80:ca:a4:16:bb:bd:38:f7:aa:5f:40:d0:16: 9f:ae:f5:8b:ad:f2:f7:55:af:5b:a3:bf:af:a3:72: 9a:b4:d2:90:d4:22:db:9e:58:de:88:55:3c:7e:39: 84:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:59:E7:86:49:1F:67:C6:D1:15:E4:C1:74:44:7F:FA:6C:97:EF:31 X509v3 Authority Key Identifier: keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:da:f7:be:a2:b6:2c:23:c6:c0:6b:5d:20:37:fe:23:af:58: eb:05:3e:91:e8:7d:fd:28:35:63:c3:22:88:00:62:15:b4:6c: be:8a:0a:49:8a:01:7a:04:55:5a:55:45:16:f0:15:b3:a1:e7: f8:a3:3b:de:c1:47:20:e0:9b:ec:a6:a4:0d:b0:70:26:93:33: cb:35:58:f9:a2:13:f2:39:b4:c7:90:fb:1f:09:af:6c:df:25: aa:6e:da:52:d9:f1:dc:27:c2:80:26:9c:b9:52:87:56:03:73: 25:e0:3c:96:ac:27:b3:33:84:37:bf:a8:fc:6f:54:a6:b0:29: 23:6e:8a:72:20:6a:cc:38:2d:96:28:3a:cb:c2:5a:92:3d:81: f3:36:b0:24:a7:0e:e8:e7:51:25:19:02:f4:79:e9:a5:2b:01: 13:c9:63:97:0a:26:a0:e2:e5:6a:d4:bc:06:b8:0d:ae:d0:28: ea:b4:b5:9c:93:3e:e7:db:9a:b0:c0:ef:d1:05:c8:3a:ac:7a: f9:ba:bd:8e:9c:63:86:55:1b:4f:2c:b7:c9:1b:e8:14:3f:7a: 37:ae:86:d3:29:c0:91:c5:9d:05:71:c1:b6:d6:23:03:3e:5f: 34:66:29:b0:4c:5f:95:d9:45:d5:ed:c8:02:d6:aa:26:82:f9: 5c:cc:e0:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv60qGfz98WVYSo49nM+upBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NzljYzQzYzI0NjlmZmE1Y2Y4YjdhYzYzOWIwMWYzYTc2 OGFjNTUwHhcNMjYwMTI2MTUwMTA2WhcNMjYwMTI3MTUwMTA2WjAzMTEwLwYDVQQD EyhhNDU5ZTc4NjQ5MWY2N2M2ZDExNWU0YzE3NDQ0N2ZmYTZjOTdlZjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvaDZ8WrkzW3KL6MhOGqR5t69tjx 08Ih9X1QaPWKLiS4Rs66oh6ugT0z8XeVCnmkSgoFThfxhsYZkOkqU2BCa2IWBH63 4F35PJR/XWHvkLeAJIdF2ZnZPUSd7rPMdCGKTRLzC1YLawtqe4MFSX98nAT5aFlP 7fyQoephZLM/TinjhkTJBTwYKj/NZo+Tpsc8TbecZdyANvUs4BEk9M4iSI2Ecc+F OfMSbS46zkLvlFvjIuxSIozP2ND+GduroL149AXKrVl6Zq0yoGthomG1MRotfIDK pBa7vTj3ql9A0BafrvWLrfL3Va9bo7+vo3KatNKQ1CLbnljeiFU8fjmEOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKRZ54ZJH2fG0RXkwXREf/psl+8xMB8GA1UdIwQY MBaAFCl5zEPCRp/6XPi3rGObAfOnaKxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lNDBmOWQtMDBmNC00MGQ5LThiOGQt NDBlYWViYzFjNDdlLzEvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9lNDBmOWQtMDBmNC00MGQ5LThiOGQtNDBlYWViYzFjNDdl LzEvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkdr3vqK2 LCPGwGtdIDf+I69Y6wU+keh9/Sg1Y8MiiABiFbRsvooKSYoBegRVWlVFFvAVs6Hn +KM73sFHIOCb7KakDbBwJpMzyzVY+aIT8jm0x5D7HwmvbN8lqm7aUtnx3CfCgCac uVKHVgNzJeA8lqwnszOEN7+o/G9UprApI26KciBqzDgtlig6y8Jakj2B8zawJKcO 6OdRJRkC9HnppSsBE8ljlwomoOLlatS8BrgNrtAo6rS1nJM+59uasMDv0QXIOqx6 +bq9jpxjhlUbTyy3yRvoFD96N66G0ynAkcWdBXHBttYjAz5fNGYpsExfldlF1e3I AtaqJoL5XMzgUg== -----END CERTIFICATE-----Generated at Mon Jan 26 22:11:32 2026 by rpki-client