This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft File: rKbwaDzHS63SOoFAw4XxyBziTfc.mft (raw, json) Hash identifier: 9G7ICkr+W7GVvO1WflTfuXiMs9MxeRgp45AUatIqnoM= Subject key identifier: 53:82:42:69:7B:DC:A7:64:01:37:4C:71:E3:A9:5F:A5:31:95:60:A2 Authority key identifier: AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7 Certificate issuer: /CN=aca6f0683cc74badd23a8140c385f1c81ce24df7 Certificate serial: 019BF9BFB434F81B79F192B3627E7693D41B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft Manifest number: 0E93 Signing time: Mon 26 Jan 2026 10:00:48 +0000 Manifest this update: Mon 26 Jan 2026 10:00:48 +0000 Manifest next update: Tue 27 Jan 2026 10:00:48 +0000 Files and hashes: 1: Hl-oGjMEXSHh22tv7GvQWauR6Ls.roa (hash: k0kjDMHyxNG6XHvsH8YWl0QTbYb+WeHWx5ruPE+qWhs=) 2: rKbwaDzHS63SOoFAw4XxyBziTfc.crl (hash: t34DfIAcxmn+CUiwUKdlk7WifIqcLIXlw5FNHoRi/lE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:bf:b4:34:f8:1b:79:f1:92:b3:62:7e:76:93:d4:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca6f0683cc74badd23a8140c385f1c81ce24df7 Validity Not Before: Jan 26 10:00:48 2026 GMT Not After : Jan 27 10:00:48 2026 GMT Subject: CN=538242697bdca76401374c71e3a95fa5319560a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ae:0b:ba:17:0c:7f:c2:e7:c1:97:67:36:4f: 06:ee:91:af:b6:81:a0:e4:6e:9c:d6:b0:02:15:bd: aa:45:7e:5b:48:17:5b:b4:f3:ea:92:15:0a:e2:8b: fb:7d:1e:49:96:6f:fb:6e:62:8b:73:33:df:a0:34: 0a:a6:6e:cb:68:b0:2f:bf:71:16:a4:88:7e:4e:53: ac:8b:6b:d2:91:5d:05:b5:c0:0f:af:f5:39:04:56: 65:5a:8c:bd:aa:0f:6a:a4:3e:9f:b6:2e:bb:d3:7e: c0:5b:48:ae:dc:b4:3c:6b:25:3c:8f:09:c5:b4:23: f5:4c:d2:de:c6:41:7e:6a:4f:8c:51:52:db:11:60: c0:c4:e2:1a:fd:ba:e6:f9:6d:fb:77:bc:10:e6:52: 04:89:e3:cb:6c:4c:f2:1d:e5:35:e4:2f:f4:c4:db: 22:23:ec:bd:e5:11:59:5a:f6:17:eb:4f:86:bf:3f: f2:a8:5f:8b:cc:db:ea:df:4d:27:4a:4d:37:d8:fa: 8e:98:7a:12:da:ea:20:a5:cd:5b:2f:b2:e5:64:8b: ae:f6:65:65:54:c2:c7:46:fd:2a:66:fb:70:3a:05: 92:b5:92:96:ab:86:73:82:01:6a:e6:0f:36:25:b4: ea:67:b0:ef:3f:1d:10:6f:ad:b7:d4:38:b2:7c:23: 5c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:82:42:69:7B:DC:A7:64:01:37:4C:71:E3:A9:5F:A5:31:95:60:A2 X509v3 Authority Key Identifier: keyid:AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ac:34:b3:90:60:d9:9e:04:fe:e5:e3:ad:c1:be:f4:28:f4: e7:96:ba:18:11:06:11:a3:2f:e9:d2:86:ee:8a:af:82:cc:cd: d1:cf:df:40:b8:db:7e:6a:3f:8c:2e:e6:34:cd:6f:39:75:60: 9d:65:11:3c:a6:33:a7:55:46:b4:21:7d:3f:0a:f4:e3:35:37: 85:db:17:1a:a6:9d:0b:c6:44:69:4b:0f:65:05:fc:b3:2c:16: c1:7b:32:5e:ea:13:e8:56:12:87:ef:9f:d1:20:ea:6f:bf:1f: c8:2a:05:26:e3:0b:a4:4b:74:f5:46:ef:91:fd:c9:9b:20:7a: 47:8a:2a:69:da:f3:e0:8e:2d:ed:59:ec:75:bb:47:e2:d7:32: 1e:bb:c7:24:a7:7d:e8:00:14:31:30:e7:80:dd:52:92:cd:21: 78:df:fc:32:32:4c:35:58:a7:19:bb:fc:52:67:fd:f2:0f:ec: 64:ab:44:6a:8e:9b:54:b7:59:95:ef:14:c4:9d:f0:02:7b:2d: ae:11:e2:2b:00:c2:c6:09:32:9c:18:cd:a7:6e:86:88:67:cc: 8a:9d:06:a1:09:42:32:28:c2:74:ca:f1:d7:3f:ed:5c:12:12: 1d:8c:d1:97:18:2f:21:4a:ef:38:2b:e7:20:19:fe:e5:3b:0b: 56:90:5f:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5v7Q0+Bt58ZKzYn52k9QbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYTZmMDY4M2NjNzRiYWRkMjNhODE0MGMzODVmMWM4MWNl MjRkZjcwHhcNMjYwMTI2MTAwMDQ4WhcNMjYwMTI3MTAwMDQ4WjAzMTEwLwYDVQQD Eyg1MzgyNDI2OTdiZGNhNzY0MDEzNzRjNzFlM2E5NWZhNTMxOTU2MGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0q4LuhcMf8LnwZdnNk8G7pGvtoGg 5G6c1rACFb2qRX5bSBdbtPPqkhUK4ov7fR5Jlm/7bmKLczPfoDQKpm7LaLAvv3EW pIh+TlOsi2vSkV0FtcAPr/U5BFZlWoy9qg9qpD6fti67037AW0iu3LQ8ayU8jwnF tCP1TNLexkF+ak+MUVLbEWDAxOIa/brm+W37d7wQ5lIEiePLbEzyHeU15C/0xNsi I+y95RFZWvYX60+Gvz/yqF+LzNvq300nSk032PqOmHoS2uogpc1bL7LlZIuu9mVl VMLHRv0qZvtwOgWStZKWq4ZzggFq5g82JbTqZ7DvPx0Qb6231DiyfCNciQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOCQml73KdkATdMceOpX6UxlWCiMB8GA1UdIwQY MBaAFKym8Gg8x0ut0jqBQMOF8cgc4k33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcktid2FEekhTNjNTT29GQXc0WHh5QnppVGZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yZDQ4MTgtZjE4Mi00YjQ2LTllOGMt MDgyNzk2MWMwNWUwLzEvcktid2FEekhTNjNTT29GQXc0WHh5QnppVGZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8yZDQ4MTgtZjE4Mi00YjQ2LTllOGMtMDgyNzk2MWMwNWUw LzEvcktid2FEekhTNjNTT29GQXc0WHh5QnppVGZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALaw0s5Bg 2Z4E/uXjrcG+9Cj055a6GBEGEaMv6dKG7oqvgszN0c/fQLjbfmo/jC7mNM1vOXVg nWURPKYzp1VGtCF9Pwr04zU3hdsXGqadC8ZEaUsPZQX8sywWwXsyXuoT6FYSh++f 0SDqb78fyCoFJuMLpEt09Ubvkf3JmyB6R4oqadrz4I4t7VnsdbtH4tcyHrvHJKd9 6AAUMTDngN1Sks0heN/8MjJMNVinGbv8Umf98g/sZKtEao6bVLdZle8UxJ3wAnst rhHiKwDCxgkynBjNp26GiGfMip0GoQlCMijCdMrx1z/tXBISHYzRlxgvIUrvOCvn IBn+5TsLVpBfEQ== -----END CERTIFICATE-----Generated at Mon Jan 26 14:50:34 2026 by rpki-client