This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft File: ktkImo4yjTLW3hbX2iV7gRsFI50.mft (raw, json) Hash identifier: ZG+9Ylz8tAjD1xIi2XfnuJ5tgY8gHBwklUZai2+B0SA= Subject key identifier: 38:A0:2D:9A:62:27:D9:E4:F1:A0:13:B1:2C:D2:32:C5:32:31:85:DD Authority key identifier: 92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D Certificate issuer: /CN=92d9089a8e328d32d6de16d7da257b811b05239d Certificate serial: 019B9EC57282FAE1A709F2BFA50F7180C960 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft Manifest number: 0716 Signing time: Thu 08 Jan 2026 18:01:38 +0000 Manifest this update: Thu 08 Jan 2026 18:01:38 +0000 Manifest next update: Fri 09 Jan 2026 18:01:38 +0000 Files and hashes: 1: fu5IU6WPn0sEdH25PEGyzdNdz6I.roa (hash: rpHbI6eXYfZK0TKPt9cYIkKp4IE4pJ5rN76FJYrTRkc=) 2: ktkImo4yjTLW3hbX2iV7gRsFI50.crl (hash: cKgG+u5rb+kto+TaPSksa0beRLGDYr8vfHUum3RPFuE=) 3: nTyqnJTXB1VFE3v_ujRIEYl5PYQ.roa (hash: uD3UBbB/9frHLtpYcWN79dWwtH4FQubxDI1VloEZ5ko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9e:c5:72:82:fa:e1:a7:09:f2:bf:a5:0f:71:80:c9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d9089a8e328d32d6de16d7da257b811b05239d Validity Not Before: Jan 8 18:01:38 2026 GMT Not After : Jan 9 18:01:38 2026 GMT Subject: CN=38a02d9a6227d9e4f1a013b12cd232c5323185dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:50:f2:d5:09:3d:3f:9d:19:a2:65:63:ee:32: 09:b7:2b:f0:f5:60:96:c9:a3:06:c2:dd:db:36:5c: b7:8b:14:90:d1:87:57:66:dd:d8:67:11:86:7e:4b: ea:93:d6:88:38:83:d6:ad:e5:d3:be:90:aa:8e:f9: 2f:c6:d7:2f:d9:64:37:fc:a2:0a:a9:17:0a:e4:d8: 39:1e:ac:2a:c1:95:e0:1a:0b:4c:6e:2b:18:e6:e5: 89:76:48:df:df:22:2a:0a:3c:ba:cb:03:5d:3d:d2: 6c:84:d6:a3:44:92:6a:7f:03:6d:85:bc:9f:d5:ef: ad:72:11:55:6d:b5:15:89:02:af:c7:dc:36:07:8b: af:6b:22:4a:10:16:79:91:48:af:18:ef:95:bc:90: d6:7f:db:ea:26:f2:1f:23:9d:10:f6:ef:b3:80:0c: 55:38:4c:5a:f8:93:b5:18:92:e3:51:33:1c:63:da: fe:e7:18:85:3b:8b:21:bc:5e:f5:65:e4:87:ac:f8: d1:e8:b2:2e:09:05:ff:57:3d:c6:88:3a:37:c1:24: b6:ad:43:28:c9:73:3d:6b:9d:99:db:85:67:a4:eb: 7b:ba:7a:df:da:35:94:23:06:dd:da:bd:6a:be:7f: 85:ab:cd:32:6c:10:52:d1:53:1d:d5:b8:93:1a:e6: 5b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A0:2D:9A:62:27:D9:E4:F1:A0:13:B1:2C:D2:32:C5:32:31:85:DD X509v3 Authority Key Identifier: keyid:92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:43:0b:e3:8e:2b:50:67:74:fb:ca:8a:94:78:cd:a7:61:b6: 3d:fe:b6:16:83:c1:31:a2:5e:66:31:1c:c5:c8:61:d4:9d:96: 64:42:95:ad:82:2c:12:45:ec:29:4a:0b:9a:91:4f:d2:3d:35: d7:62:65:09:1a:69:99:fc:a9:40:d0:38:08:0f:51:3d:b4:5c: fb:a2:e3:f6:2b:a4:5e:d0:7e:b2:36:e3:c1:6d:a2:b5:1d:fa: d0:9b:28:cd:01:1f:98:a7:47:ec:d9:a7:5b:b2:67:e7:cc:03: ee:5e:19:14:3e:d1:ae:5f:8b:30:12:42:49:ba:1b:e0:01:72: 66:ae:8a:f0:91:08:2f:62:8b:58:ae:10:c3:c1:0c:e6:5f:90: a6:cf:7a:da:77:11:f7:41:56:06:ee:25:33:c1:b8:a8:df:39: 45:b9:92:4f:f1:88:11:a8:70:15:5e:e0:c7:be:b4:c9:95:93: 20:6b:9b:32:c4:f8:70:9b:38:bd:92:cc:c1:be:a0:97:9f:09: d5:a1:ed:37:8f:86:58:cd:78:df:33:06:34:7a:f3:ad:35:60: 53:0a:01:87:36:6e:0b:3e:9f:8c:d4:74:a5:be:57:e9:d6:eb: 90:d2:d5:6b:64:38:61:94:70:f0:6c:6f:e7:cf:02:09:c5:98: fa:16:d8:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuexXKC+uGnCfK/pQ9xgMlgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDkwODlhOGUzMjhkMzJkNmRlMTZkN2RhMjU3YjgxMWIw NTIzOWQwHhcNMjYwMTA4MTgwMTM4WhcNMjYwMTA5MTgwMTM4WjAzMTEwLwYDVQQD EygzOGEwMmQ5YTYyMjdkOWU0ZjFhMDEzYjEyY2QyMzJjNTMyMzE4NWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9lDy1Qk9P50ZomVj7jIJtyvw9WCW yaMGwt3bNly3ixSQ0YdXZt3YZxGGfkvqk9aIOIPWreXTvpCqjvkvxtcv2WQ3/KIK qRcK5Ng5HqwqwZXgGgtMbisY5uWJdkjf3yIqCjy6ywNdPdJshNajRJJqfwNthbyf 1e+tchFVbbUViQKvx9w2B4uvayJKEBZ5kUivGO+VvJDWf9vqJvIfI50Q9u+zgAxV OExa+JO1GJLjUTMcY9r+5xiFO4shvF71ZeSHrPjR6LIuCQX/Vz3GiDo3wSS2rUMo yXM9a52Z24VnpOt7unrf2jWUIwbd2r1qvn+Fq80ybBBS0VMd1biTGuZbEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDigLZpiJ9nk8aATsSzSMsUyMYXdMB8GA1UdIwQY MBaAFJLZCJqOMo0y1t4W19ole4EbBSOdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RrSW1vNHlqVExXM2hiWDJpVjdnUnNGSTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80MzE2MzQtMzVjYi00NTQ1LTg3N2It ZGYzYzA3ZjM0MTFlLzEva3RrSW1vNHlqVExXM2hiWDJpVjdnUnNGSTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC80MzE2MzQtMzVjYi00NTQ1LTg3N2ItZGYzYzA3ZjM0MTFl LzEva3RrSW1vNHlqVExXM2hiWDJpVjdnUnNGSTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADkML444r UGd0+8qKlHjNp2G2Pf62FoPBMaJeZjEcxchh1J2WZEKVrYIsEkXsKUoLmpFP0j01 12JlCRppmfypQNA4CA9RPbRc+6Lj9iukXtB+sjbjwW2itR360JsozQEfmKdH7Nmn W7Jn58wD7l4ZFD7Rrl+LMBJCSbob4AFyZq6K8JEIL2KLWK4Qw8EM5l+Qps962ncR 90FWBu4lM8G4qN85RbmST/GIEahwFV7gx760yZWTIGubMsT4cJs4vZLMwb6gl58J 1aHtN4+GWM143zMGNHrzrTVgUwoBhzZuCz6fjNR0pb5X6dbrkNLVa2Q4YZRw8Gxv 588CCcWY+hbYgw== -----END CERTIFICATE-----Generated at Fri Jan 9 00:53:37 2026 by rpki-client