This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft File: KbeTgP5AdDnMLs0_rBgVfbNs92g.mft (raw, json) Hash identifier: NWMPEJPCs6ZD+KW++I4a5Xrbd8+4aFDmv8LC5E1K1Vk= Subject key identifier: B0:DA:13:B1:8F:B1:9D:8F:A7:A4:5B:D4:D1:9A:8A:38:42:0D:49:B4 Authority key identifier: 29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68 Certificate issuer: /CN=29b79380fe407439cc2ecd3fac18157db36cf768 Certificate serial: 019BF9892ACACE2A837D346E3851D260857B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft Manifest number: 1369 Signing time: Mon 26 Jan 2026 09:01:14 +0000 Manifest this update: Mon 26 Jan 2026 09:01:14 +0000 Manifest next update: Tue 27 Jan 2026 09:01:14 +0000 Files and hashes: 1: EDNpAts-6JeGE5wjiUM5BMSnB9k.roa (hash: URMxngJbXriRE2iOut0YpTm56ViTEGhL3sKLZKHuyJ0=) 2: KbeTgP5AdDnMLs0_rBgVfbNs92g.crl (hash: gzR2i3x8b3mNObUmZQuoDOI/rbF8MYjt5bbXbHGDgI0=) 3: Mz1Pckz4GFpvQcLGeGjvkgHgEUc.roa (hash: DDYkbbLPOZouFDJgBa+WHylISlZR4ujlVO/1zXw9mng=) 4: UBjaQjSsvCaMWIObSymTDrfellU.roa (hash: FakZBVr4LoPzsh/Z6oDhedet2QWrNOrHB6+ZNqqvw9I=) 5: g0O8o9hRTm8S4xVKsUK0pxNFTIk.roa (hash: YP1AJ0q+zSM445DjhCgE/dmdRBL7ryjwtDbdKhvu3Rg=) 6: sAk06Tsd-_YR9NQduC3T-piAvWk.roa (hash: xw7/19cXkRCZDOVeEPf+Eoup5YiNyQhWAOUhvYY+IJo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:89:2a:ca:ce:2a:83:7d:34:6e:38:51:d2:60:85:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29b79380fe407439cc2ecd3fac18157db36cf768 Validity Not Before: Jan 26 09:01:14 2026 GMT Not After : Jan 27 09:01:14 2026 GMT Subject: CN=b0da13b18fb19d8fa7a45bd4d19a8a38420d49b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:20:6f:f8:34:1c:1e:fe:52:da:69:14:64:d6: 7a:0a:e3:ae:3b:53:31:72:5c:75:3d:7f:36:82:a4: c1:07:a8:7e:8d:09:15:5a:db:f2:57:4c:1b:4e:b4: 75:24:4b:72:97:57:d1:a6:c3:d0:4e:30:09:a7:0d: 87:7d:06:c2:89:07:ba:22:79:94:2e:19:51:a5:64: 6e:f2:31:77:fb:9f:cf:a0:79:15:a0:9c:7e:45:ce: 1d:5c:5f:44:ed:2a:63:e0:0e:6b:08:3f:54:b8:e0: cf:59:72:fb:61:84:86:02:1b:b9:f0:0e:d9:89:b1: 6e:fe:82:78:ff:4f:c4:75:83:10:6d:d5:51:0b:6a: 3d:98:c5:41:11:bf:2d:26:e7:fc:73:a3:50:e3:70: cc:47:20:ba:59:46:57:02:5e:9a:e4:b4:16:c6:6a: c3:43:0f:60:e9:a8:ce:9e:77:5e:bd:bc:31:1d:bf: 11:d9:2c:30:d4:35:5b:12:dd:b4:32:fd:e5:b8:70: b3:37:44:94:60:14:10:d9:dd:77:33:bc:fa:21:ba: be:93:33:c6:b0:d3:c3:20:11:d1:12:1c:6c:d1:c2: b7:2f:d3:fa:cc:60:39:29:37:a3:15:8d:53:40:2d: c9:9f:1f:a8:a0:b7:e9:6e:be:c3:f1:73:d9:22:0e: 4d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DA:13:B1:8F:B1:9D:8F:A7:A4:5B:D4:D1:9A:8A:38:42:0D:49:B4 X509v3 Authority Key Identifier: keyid:29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:77:f8:d7:bc:9d:27:24:6b:f8:67:f9:39:72:78:94:a7:7c: 88:89:63:54:4e:a6:9d:4f:68:cc:25:9a:fd:b1:42:65:ca:77: 19:b0:ba:12:ed:29:1c:07:bc:6a:50:f2:d0:31:e3:e3:84:d5: fd:98:99:5e:44:40:53:c2:e4:cd:a0:7c:ba:31:9d:9e:1e:dc: c0:bf:78:94:a4:d9:60:34:98:d5:31:66:cc:58:b8:dc:89:b8: bb:72:e3:18:d4:9e:49:28:01:e4:39:f8:f0:de:52:96:90:63: 07:6e:05:ab:4a:f1:05:d2:d4:6e:16:8a:69:d5:6a:f4:bf:be: 47:43:e9:47:4c:9b:5f:fd:a1:de:75:a0:d0:d4:5b:37:6d:76: bd:b8:a2:76:c8:66:fb:5d:3d:83:bf:52:59:81:da:7c:18:c8: 1d:29:93:fa:45:2d:50:4f:d2:bf:8a:ce:4e:d1:b6:4e:af:d8: 92:2d:c1:75:dd:0e:1a:ee:b0:b1:8a:f1:44:23:ca:29:3c:b4: 1e:aa:7c:45:a0:f5:3f:80:a0:03:b8:fc:9a:4f:ee:97:fb:f1: bc:81:a7:46:bf:5d:87:59:df:04:f4:11:93:f6:ca:90:28:0e: 31:57:69:fa:8b:34:56:4d:1d:80:a2:b4:84:12:6f:b1:66:ca: 72:70:52:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iSrKziqDfTRuOFHSYIV7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5Yjc5MzgwZmU0MDc0MzljYzJlY2QzZmFjMTgxNTdkYjM2 Y2Y3NjgwHhcNMjYwMTI2MDkwMTE0WhcNMjYwMTI3MDkwMTE0WjAzMTEwLwYDVQQD EyhiMGRhMTNiMThmYjE5ZDhmYTdhNDViZDRkMTlhOGEzODQyMGQ0OWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyBv+DQcHv5S2mkUZNZ6CuOuO1Mx clx1PX82gqTBB6h+jQkVWtvyV0wbTrR1JEtyl1fRpsPQTjAJpw2HfQbCiQe6InmU LhlRpWRu8jF3+5/PoHkVoJx+Rc4dXF9E7Spj4A5rCD9UuODPWXL7YYSGAhu58A7Z ibFu/oJ4/0/EdYMQbdVRC2o9mMVBEb8tJuf8c6NQ43DMRyC6WUZXAl6a5LQWxmrD Qw9g6ajOnndevbwxHb8R2Sww1DVbEt20Mv3luHCzN0SUYBQQ2d13M7z6Ibq+kzPG sNPDIBHREhxs0cK3L9P6zGA5KTejFY1TQC3Jnx+ooLfpbr7D8XPZIg5N+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDaE7GPsZ2Pp6Rb1NGaijhCDUm0MB8GA1UdIwQY MBaAFCm3k4D+QHQ5zC7NP6wYFX2zbPdoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zOTM4NDItZTdlZi00ODkzLTljMWIt MWU4NDIxMThkYjZmLzEvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8zOTM4NDItZTdlZi00ODkzLTljMWItMWU4NDIxMThkYjZm LzEvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3f417yd JyRr+Gf5OXJ4lKd8iIljVE6mnU9ozCWa/bFCZcp3GbC6Eu0pHAe8alDy0DHj44TV /ZiZXkRAU8LkzaB8ujGdnh7cwL94lKTZYDSY1TFmzFi43Im4u3LjGNSeSSgB5Dn4 8N5SlpBjB24Fq0rxBdLUbhaKadVq9L++R0PpR0ybX/2h3nWg0NRbN212vbiidshm +109g79SWYHafBjIHSmT+kUtUE/Sv4rOTtG2Tq/Yki3Bdd0OGu6wsYrxRCPKKTy0 Hqp8RaD1P4CgA7j8mk/ul/vxvIGnRr9dh1nfBPQRk/bKkCgOMVdp+os0Vk0dgKK0 hBJvsWbKcnBSPA== -----END CERTIFICATE-----Generated at Mon Jan 26 18:58:12 2026 by rpki-client