This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft File: KIVYUqS80b8eyBPzwTsPHzcvOXE.mft (raw, json) Hash identifier: mv9Mq3/8TPExhQIRHJd1ph2SaFMVzzIEvAnnvpnDz+k= Subject key identifier: 0B:54:14:86:70:2C:82:5E:46:B6:84:7E:96:9B:B9:1E:E2:C4:2E:92 Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Certificate serial: 019C107EAD1E554C056ADCEAA9A899599AFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft Manifest number: 1814 Signing time: Fri 30 Jan 2026 20:01:03 +0000 Manifest this update: Fri 30 Jan 2026 20:01:03 +0000 Manifest next update: Sat 31 Jan 2026 20:01:03 +0000 Files and hashes: 1: 8Hj63DuSPA7Ht457MhBvt5rAzCo.roa (hash: /JX6zlbBh/f3Q4c+ifBYnU8yxbIOW6a8gYL/3LC86tc=) 2: 9DusrtcNuEKlX3-m9foPJH2szlI.roa (hash: b8raHEJQGNgJfwuoWcURy2P5Ad5oX4Bo6uvIPpzRudA=) 3: 9tcHbPB03Z8eEKZg676gB-TlqvI.roa (hash: 0EY6tBHpX7uJe3hmSPPM5eq+qwso1DAT1la3CCjjUOs=) 4: EO_HO_nFyWVTdx6SDz8m4wUOlnI.roa (hash: gFB+9g7cOaJTdIFNt34NfO0b7Xz0U9fpgCXRfQJDw48=) 5: KIVYUqS80b8eyBPzwTsPHzcvOXE.crl (hash: EXbYQbhhLFl+61xrcT+htueCg9PslWEe6jyedmqa3r8=) 6: LcfjvM3VKxWMWMCxo2UYzOGhdNM.roa (hash: qwiD82k0GJBEu4EGgOxSBm88SaDWlnEZJMmEJL+CMw8=) 7: LgqwiddErCeqmONalEAccIe_9ZI.roa (hash: vUvF2iqoGKYdCngh26+3XZdI1nh5UcCaB/cJvH2Dedw=) 8: X_WvLqJE85_JLPG8u8QOORQ8vrY.roa (hash: 3lJYcwNuNWaK/TxwzxDQE8C+SHvEtkNNzsxVBp4XmNA=) 9: fNYW0E0mrdFedNKBb3zR-gEkNFA.roa (hash: nh3ZGXFkTGVxlA9H+fmw3V84hDZ1pU+3aDOZwNEcWRI=) 10: mzyrfk0_SKXJ4jm3l-g7rtem-Ng.roa (hash: 64Bq4BjaquUNa/q+gUB1JEszW2wTR9StXwwTroa+sNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:10:7e:ad:1e:55:4c:05:6a:dc:ea:a9:a8:99:59:9a:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Validity Not Before: Jan 30 20:01:03 2026 GMT Not After : Jan 31 20:01:03 2026 GMT Subject: CN=0b541486702c825e46b6847e969bb91ee2c42e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:0d:39:2a:a8:00:2a:2f:7d:40:a4:3c:f5:a2: 67:3c:30:c0:22:81:02:a2:44:2b:85:b0:92:f8:9c: 2b:f6:cc:f6:f4:d2:29:2d:5a:49:10:03:9e:c6:41: 35:d6:04:bd:32:6b:67:a8:7d:df:c2:35:d6:51:b3: b8:7b:65:d0:e3:2a:09:bd:cf:91:af:cf:cf:4d:3f: c7:ef:94:5c:91:26:e4:1d:af:d4:86:91:19:3b:5d: 35:14:b8:0a:44:46:23:a6:9a:2a:37:b8:7f:bd:cd: 0b:e0:f7:54:ea:55:e2:f5:3f:b7:4e:31:77:cb:b2: 9c:12:03:61:e0:3c:3b:ac:68:82:97:d5:0f:b0:54: d7:13:0c:b0:e9:bd:6b:f8:0b:77:ef:bb:4c:8c:5a: fa:d6:a1:20:cd:0f:88:09:48:7d:04:4d:bd:63:1d: b5:e3:94:41:7a:b2:44:14:5c:8f:47:a2:60:73:66: 4f:5b:0e:a7:90:bd:b6:58:4a:e2:49:30:ce:ba:0f: 43:6d:ff:f2:ee:18:ae:4a:7a:cc:fb:e5:4a:40:4a: d6:f6:2b:7c:a7:77:51:cd:b2:21:8f:56:fa:41:61: a2:10:2e:48:bd:1d:a5:26:4e:6d:72:1c:30:b5:7f: 6d:13:d0:c9:e0:70:e8:d9:55:9e:28:95:77:0a:93: 04:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:54:14:86:70:2C:82:5E:46:B6:84:7E:96:9B:B9:1E:E2:C4:2E:92 X509v3 Authority Key Identifier: keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:45:26:0b:d0:42:42:a3:02:ec:7f:f6:ef:26:9c:da:12:0a: fa:4c:b0:ce:17:af:50:13:8c:d0:99:60:35:2d:89:ef:bb:bb: 07:84:64:4d:e8:09:70:13:d4:f1:fc:7f:16:c8:72:6e:b3:e3: d4:ff:a9:2d:f3:d5:71:6a:1f:ac:d7:a0:35:fb:01:7d:1e:53: 25:73:e5:63:27:61:6e:8f:01:ce:c0:d0:54:18:26:fd:a1:c2: cf:e6:46:c7:1b:a4:64:1e:20:20:df:53:68:b3:d5:19:d1:ba: 56:65:2c:08:65:7a:9c:0f:5e:d9:a3:60:92:fa:9b:f8:10:35: 70:48:75:53:73:9e:ac:94:80:81:ba:5d:f2:ef:03:9b:0a:7b: 16:c8:fc:66:58:cd:c1:23:d8:2e:06:3f:7d:36:1f:6d:d9:a6: 0b:bd:ac:97:fa:42:a8:63:10:77:cc:b9:f4:69:f3:14:82:a3: a3:de:6b:a5:70:60:45:6b:6c:fe:32:88:f1:11:51:23:c5:65: 8e:b7:0b:7f:63:4d:46:9c:3e:ef:9a:21:da:8b:9c:fe:a9:38: d6:6c:ce:cf:c3:a1:e7:be:6c:30:ea:f1:13:89:eb:c0:20:fa: ba:2a:c0:07:a1:c0:41:05:bc:4f:97:19:e7:d6:d6:a7:a2:d8: e5:a5:68:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwQfq0eVUwFatzqqaiZWZr/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy ZjM5NzEwHhcNMjYwMTMwMjAwMTAzWhcNMjYwMTMxMjAwMTAzWjAzMTEwLwYDVQQD EygwYjU0MTQ4NjcwMmM4MjVlNDZiNjg0N2U5NjliYjkxZWUyYzQyZTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+g05KqgAKi99QKQ89aJnPDDAIoEC okQrhbCS+Jwr9sz29NIpLVpJEAOexkE11gS9MmtnqH3fwjXWUbO4e2XQ4yoJvc+R r8/PTT/H75RckSbkHa/UhpEZO101FLgKREYjppoqN7h/vc0L4PdU6lXi9T+3TjF3 y7KcEgNh4Dw7rGiCl9UPsFTXEwyw6b1r+At377tMjFr61qEgzQ+ICUh9BE29Yx21 45RBerJEFFyPR6Jgc2ZPWw6nkL22WEriSTDOug9Dbf/y7hiuSnrM++VKQErW9it8 p3dRzbIhj1b6QWGiEC5IvR2lJk5tchwwtX9tE9DJ4HDo2VWeKJV3CpME6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtUFIZwLIJeRraEfpabuR7ixC6SMB8GA1UdIwQY MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt NzA0NDYzZWJhZDM2LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2 LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu0UmC9BC QqMC7H/27yac2hIK+kywzhevUBOM0JlgNS2J77u7B4RkTegJcBPU8fx/FshybrPj 1P+pLfPVcWofrNegNfsBfR5TJXPlYydhbo8BzsDQVBgm/aHCz+ZGxxukZB4gIN9T aLPVGdG6VmUsCGV6nA9e2aNgkvqb+BA1cEh1U3OerJSAgbpd8u8Dmwp7Fsj8ZljN wSPYLgY/fTYfbdmmC72sl/pCqGMQd8y59GnzFIKjo95rpXBgRWts/jKI8RFRI8Vl jrcLf2NNRpw+75oh2ouc/qk41mzOz8Oh575sMOrxE4nrwCD6uirAB6HAQQW8T5cZ 59bWp6LY5aVoAQ== -----END CERTIFICATE-----Generated at Sat Jan 31 00:09:55 2026 by rpki-client