This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft File: kfX87b24TdUvxncNfM_T_GaE-kE.mft (raw, json) Hash identifier: W2Tm1fN6KLlrhunp8CzpqNVRk2E+oy/QXpDQAArUPvE= Subject key identifier: 6D:56:DF:0B:1F:72:E2:3A:C8:26:9F:3C:DF:5C:98:06:86:2E:7A:86 Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41 Certificate issuer: /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41 Certificate serial: 019BD80FBBE0FE5AE34C2E85A1B923D88C86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft Manifest number: 17E0 Signing time: Mon 19 Jan 2026 21:01:08 +0000 Manifest this update: Mon 19 Jan 2026 21:01:08 +0000 Manifest next update: Tue 20 Jan 2026 21:01:08 +0000 Files and hashes: 1: 6Cn0LMHPDBsm4Nm8hFcsKS6tY94.roa (hash: z/9ptBlDF2qlVnefOn71sNsKDdTGuybESRF5sZ2Klfw=) 2: 8k1WvdzAQ1Go-lpgTPWDZAKZfQE.roa (hash: us5ahjVDdrm7/ofacEwTdXV/iwMapsRRug2V01x/llc=) 3: KRCT9B4RVN7i0VNkrAXq_wp-rRE.roa (hash: qRSzgiwPczkOjtugbEXqYuJbcG64mRS3bSrnTP92V5I=) 4: Q4csJB5v_eWRRqgvzEAeaFQPUmM.roa (hash: 6rtcBWZHj5iKfuxNemjzbQDA3WB3EhCTz3MwF017Ko8=) 5: kfX87b24TdUvxncNfM_T_GaE-kE.crl (hash: 9wOQaYTIK8yGre4aQyQYuh4cGbC77HdC6siWbNJeDJQ=) 6: q_--4kminZxQx-8CqaEaNqwj4jE.roa (hash: ryH9qdfaBeMvb/1G2KPwMdilt+m41DaYZGZeqOGsiAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:0f:bb:e0:fe:5a:e3:4c:2e:85:a1:b9:23:d8:8c:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41 Validity Not Before: Jan 19 21:01:08 2026 GMT Not After : Jan 20 21:01:08 2026 GMT Subject: CN=6d56df0b1f72e23ac8269f3cdf5c9806862e7a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4c:bf:5e:da:cf:74:ca:a5:1f:56:99:a9:1f: 98:81:b9:37:c3:59:6c:c2:3f:d3:a1:8c:5a:b0:d0: 97:04:63:04:e3:b3:7e:52:49:ac:6c:bd:b9:39:ff: 6c:a6:d1:4e:07:e1:3c:fc:58:7b:e2:cf:34:1f:59: c1:18:b8:05:8e:49:a7:33:89:20:b0:f4:27:3f:cd: 5b:02:2f:d5:ef:06:ec:76:46:8e:d2:b9:44:4e:e4: 20:bb:3d:0c:2d:ca:f2:18:a5:9e:58:1c:e3:86:4f: 48:11:e3:8a:d8:b1:f0:22:2b:6f:43:c8:6f:6e:b2: 13:b9:05:15:f4:37:35:91:1c:1d:e6:8f:7c:36:a9: e6:65:66:a3:e7:3e:e5:5f:25:4a:88:3e:e4:ed:64: ec:80:98:59:13:c3:42:78:0b:ee:88:51:3d:f9:65: 8f:f1:9e:e1:0e:39:77:a0:83:48:64:18:98:43:10: ac:17:67:c5:3c:c3:6c:3d:71:fc:38:32:9b:5c:dd: 46:e8:1d:2d:db:3d:ae:b9:ad:bd:bc:f9:f7:e2:37: 1a:4b:58:ef:95:b8:df:91:14:e1:8a:1a:cb:21:c4: 71:2d:4e:a8:85:83:18:ac:4e:0b:f6:1c:7a:ce:89: a0:50:49:72:6e:3b:c9:ab:7d:56:8e:d7:f5:ef:0f: 2b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:56:DF:0B:1F:72:E2:3A:C8:26:9F:3C:DF:5C:98:06:86:2E:7A:86 X509v3 Authority Key Identifier: keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:ba:74:cb:02:35:19:06:ae:63:ca:ec:e5:2a:ff:46:f6:8a: ce:79:74:ac:ea:ea:38:05:e1:05:34:60:d3:e1:08:31:2d:27: 21:4b:d0:e2:79:ed:09:ee:2f:e8:56:17:ee:00:e0:a8:3b:c9: 32:1c:ad:94:2b:f9:b3:c8:81:a5:7f:da:82:4f:37:45:c5:20: 4d:c7:c9:aa:52:a8:8b:bd:1a:60:3c:75:18:04:b4:51:9d:66: ed:02:75:4c:1e:9e:4b:84:f6:45:6a:99:2b:36:c2:a0:f7:ac: 48:4c:4b:81:cc:22:00:30:a7:56:94:c1:62:a0:85:0a:00:64: b9:9f:4e:8c:78:73:4e:58:c2:4d:09:c6:2c:1e:e6:4b:8b:49: 1d:19:5a:b1:a8:38:d2:a9:fe:be:b1:7f:f2:99:0d:f4:61:c0: 9c:ed:ca:2a:aa:f9:e3:54:10:8f:81:e2:27:7e:3d:58:8e:27: c1:89:49:41:8c:cf:c8:0a:43:42:19:5d:55:d3:26:4d:e5:35: a5:90:59:ff:df:92:21:d2:3c:b5:45:5d:4d:f0:a8:20:68:31: d3:ea:74:d0:ac:da:c6:1e:ea:2b:b0:52:9d:ec:a3:c2:b6:09: b9:52:52:9c:00:32:aa:0d:f6:da:b6:bd:21:57:32:de:f2:b5: b0:bc:e4:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvYD7vg/lrjTC6Fobkj2IyGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZjVmY2VkYmRiODRkZDUyZmM2NzcwZDdjY2ZkM2ZjNjY4 NGZhNDEwHhcNMjYwMTE5MjEwMTA4WhcNMjYwMTIwMjEwMTA4WjAzMTEwLwYDVQQD Eyg2ZDU2ZGYwYjFmNzJlMjNhYzgyNjlmM2NkZjVjOTgwNjg2MmU3YTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0y/XtrPdMqlH1aZqR+Ygbk3w1ls wj/ToYxasNCXBGME47N+UkmsbL25Of9sptFOB+E8/Fh74s80H1nBGLgFjkmnM4kg sPQnP81bAi/V7wbsdkaO0rlETuQguz0MLcryGKWeWBzjhk9IEeOK2LHwIitvQ8hv brITuQUV9Dc1kRwd5o98NqnmZWaj5z7lXyVKiD7k7WTsgJhZE8NCeAvuiFE9+WWP 8Z7hDjl3oINIZBiYQxCsF2fFPMNsPXH8ODKbXN1G6B0t2z2uua29vPn34jcaS1jv lbjfkRThihrLIcRxLU6ohYMYrE4L9hx6zomgUElybjvJq31Wjtf17w8rrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1W3wsfcuI6yCafPN9cmAaGLnqGMB8GA1UdIwQY MBaAFJH1/O29uE3VL8Z3DXzP0/xmhPpBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85YTA5ODEtMGFkOC00OGE1LWJmZWMt OGNjOTgzMzYxMWU2LzEva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC85YTA5ODEtMGFkOC00OGE1LWJmZWMtOGNjOTgzMzYxMWU2 LzEva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAabp0ywI1 GQauY8rs5Sr/RvaKznl0rOrqOAXhBTRg0+EIMS0nIUvQ4nntCe4v6FYX7gDgqDvJ MhytlCv5s8iBpX/agk83RcUgTcfJqlKoi70aYDx1GAS0UZ1m7QJ1TB6eS4T2RWqZ KzbCoPesSExLgcwiADCnVpTBYqCFCgBkuZ9OjHhzTljCTQnGLB7mS4tJHRlasag4 0qn+vrF/8pkN9GHAnO3KKqr541QQj4HiJ349WI4nwYlJQYzPyApDQhldVdMmTeU1 pZBZ/9+SIdI8tUVdTfCoIGgx0+p00Kzaxh7qK7BSneyjwrYJuVJSnAAyqg322ra9 IVcy3vK1sLzkqg== -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:38 2026 by rpki-client