This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft File: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft (raw, json) Hash identifier: lRgwbl9kxN/0SaNUHMzeX1yZPm6yhpXwrMK4xOY0a3Q= Subject key identifier: 1D:21:31:6B:49:EB:0D:47:BE:CE:04:57:0A:52:52:8B:E5:84:BD:D5 Authority key identifier: 2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB Certificate issuer: /CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb Certificate serial: 019BFEAF4E6396D966537E3761EBE840670D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft Manifest number: 17EE Signing time: Tue 27 Jan 2026 09:01:00 +0000 Manifest this update: Tue 27 Jan 2026 09:01:00 +0000 Manifest next update: Wed 28 Jan 2026 09:01:00 +0000 Files and hashes: 1: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl (hash: 6LGjpdjMnHYkUre2wwDN5ucaZ1qt0r51daxSFV4jNLE=) 2: xa8hNYnY5YtZ3lvhBoGXHaoWdZs.roa (hash: cfTBRZqteMXbej9rAKnDcge1IuDIIPwXFt2wZ9TtEP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:af:4e:63:96:d9:66:53:7e:37:61:eb:e8:40:67:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb Validity Not Before: Jan 27 09:01:00 2026 GMT Not After : Jan 28 09:01:00 2026 GMT Subject: CN=1d21316b49eb0d47bece04570a52528be584bdd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a2:9f:d2:2f:21:b0:68:65:6f:21:a1:41:40: 7f:4a:ef:ff:ad:f0:13:56:74:37:8d:ad:3c:b4:58: 0d:23:c5:ff:36:68:fc:60:ab:10:61:49:a8:7a:92: 21:f8:ac:7d:ed:eb:a2:f2:04:cf:33:7e:66:5d:e4: c3:7f:df:9e:14:15:4a:6a:eb:da:41:06:b5:b1:25: 2a:bc:7c:f2:23:ae:9c:cb:44:5c:d1:2f:34:7e:c0: 50:72:be:2b:89:47:da:00:aa:d2:94:12:64:ec:12: e2:70:62:d8:03:4d:c7:25:12:82:67:3e:7a:aa:ec: 37:67:13:09:e2:62:5c:2e:fb:e4:36:10:b9:b1:a3: b3:31:45:3d:46:75:0d:3b:06:27:99:b0:e3:41:f8: 62:ec:be:cb:7c:68:ac:88:3d:4a:2b:2f:5e:ef:d1: ce:90:e8:f2:92:63:67:f8:e5:c6:66:e0:1f:8d:6d: fe:40:22:37:bb:ea:cb:29:ca:8a:74:e0:e4:7e:11: ad:fe:cf:f6:59:d7:39:1b:28:77:03:84:cc:af:98: af:15:5d:6d:7d:a1:33:14:1a:3b:d0:ef:18:3e:c7: 0f:44:36:4c:19:23:0f:6e:2b:d1:74:5a:85:a4:3b: 7b:04:9b:4f:15:a7:31:fb:08:48:8d:74:a4:bf:bc: c4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:21:31:6B:49:EB:0D:47:BE:CE:04:57:0A:52:52:8B:E5:84:BD:D5 X509v3 Authority Key Identifier: keyid:2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:e3:b5:a6:63:c2:7c:8e:95:9c:59:84:d5:52:f7:91:be:67: 72:64:6c:31:fe:47:3f:1e:ff:ca:ec:a1:7d:08:90:33:b6:03: 4b:b2:9e:d9:47:89:82:0a:14:a3:10:3b:b6:c4:3f:35:b2:9c: 55:bb:95:25:64:10:ca:4d:2a:73:84:91:4d:77:b0:cc:e8:a4: 1d:df:07:39:b5:d9:a8:f1:6e:19:33:40:a4:17:5a:a5:50:a8: c6:22:c8:29:d6:a3:66:5b:77:f6:04:65:cf:08:fe:44:16:79: 35:6f:57:35:19:b2:ff:19:bb:58:15:05:c2:59:bb:57:83:19: dd:85:90:6f:3b:e8:ad:31:43:9d:e3:0a:a3:df:66:62:35:bb: 38:00:f1:6c:fa:d6:ed:40:d8:91:ab:fa:50:85:f2:f9:19:29: 8a:20:3e:86:73:3f:2a:b4:5b:67:eb:dc:94:42:05:ba:91:4b: 60:2c:a6:1d:f4:a8:4a:e4:48:43:89:60:6c:8e:49:60:62:b9: 94:47:4e:1f:54:cf:f5:63:16:34:95:60:80:db:09:71:37:5e: eb:81:d8:f1:68:dc:a1:68:6b:99:c3:83:06:3c:72:63:47:47: ff:fa:94:2e:af:91:d1:e4:b8:a3:73:2b:89:71:2f:cc:8d:6a: 45:5e:c5:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+r05jltlmU343YevoQGcNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMGU2YTdiZGIxMWM0ZmZkNzc3MTgwODE1MTBjOTE0MzEx NzhjZGIwHhcNMjYwMTI3MDkwMTAwWhcNMjYwMTI4MDkwMTAwWjAzMTEwLwYDVQQD EygxZDIxMzE2YjQ5ZWIwZDQ3YmVjZTA0NTcwYTUyNTI4YmU1ODRiZGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqKf0i8hsGhlbyGhQUB/Su//rfAT VnQ3ja08tFgNI8X/Nmj8YKsQYUmoepIh+Kx97eui8gTPM35mXeTDf9+eFBVKauva QQa1sSUqvHzyI66cy0Rc0S80fsBQcr4riUfaAKrSlBJk7BLicGLYA03HJRKCZz56 quw3ZxMJ4mJcLvvkNhC5saOzMUU9RnUNOwYnmbDjQfhi7L7LfGisiD1KKy9e79HO kOjykmNn+OXGZuAfjW3+QCI3u+rLKcqKdODkfhGt/s/2Wdc5Gyh3A4TMr5ivFV1t faEzFBo70O8YPscPRDZMGSMPbivRdFqFpDt7BJtPFacx+whIjXSkv7zEdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0hMWtJ6w1Hvs4EVwpSUovlhL3VMB8GA1UdIwQY MBaAFCsOanvbEcT/13cYCBUQyRQxF4zbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3c1cWU5c1J4UF9YZHhnSUZSREpGREVYak5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yZDIzOGUtYjMxYy00ZWEwLTk4Y2Mt YzRmZWJjM2Q2ZTUyLzEvS3c1cWU5c1J4UF9YZHhnSUZSREpGREVYak5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yZDIzOGUtYjMxYy00ZWEwLTk4Y2MtYzRmZWJjM2Q2ZTUy LzEvS3c1cWU5c1J4UF9YZHhnSUZSREpGREVYak5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMuO1pmPC fI6VnFmE1VL3kb5ncmRsMf5HPx7/yuyhfQiQM7YDS7Ke2UeJggoUoxA7tsQ/NbKc VbuVJWQQyk0qc4SRTXewzOikHd8HObXZqPFuGTNApBdapVCoxiLIKdajZlt39gRl zwj+RBZ5NW9XNRmy/xm7WBUFwlm7V4MZ3YWQbzvorTFDneMKo99mYjW7OADxbPrW 7UDYkav6UIXy+RkpiiA+hnM/KrRbZ+vclEIFupFLYCymHfSoSuRIQ4lgbI5JYGK5 lEdOH1TP9WMWNJVggNsJcTde64HY8WjcoWhrmcODBjxyY0dH//qULq+R0eS4o3Mr iXEvzI1qRV7FXA== -----END CERTIFICATE-----Generated at Tue Jan 27 17:50:09 2026 by rpki-client