This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft File: kwd6mXyVvQGmTUCK_PVU2ItNteU.mft (raw, json) Hash identifier: F+VZEeCB3SxFvqerggCzYBTVFYXg4W16mHnW0bZtFWo= Subject key identifier: 68:07:2F:E1:F8:F2:E7:B2:7B:C2:7E:DE:8E:05:9C:D0:05:3B:D9:06 Authority key identifier: 93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5 Certificate issuer: /CN=93077a997c95bd01a64d408afcf554d88b4db5e5 Certificate serial: 019BF8AD5D612860CE409E36A516DEB9F34D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft Manifest number: 06D4 Signing time: Mon 26 Jan 2026 05:01:09 +0000 Manifest this update: Mon 26 Jan 2026 05:01:09 +0000 Manifest next update: Tue 27 Jan 2026 05:01:09 +0000 Files and hashes: 1: kwd6mXyVvQGmTUCK_PVU2ItNteU.crl (hash: wOSbaajhJKno3YSXPkZXY28hJXyGcZKmG0mPT272wKo=) 2: xCA0Tyr9gAJcBb_aRk9f4_-65Hw.roa (hash: vLJiM8h1yXdHJ3CZa6/nqFa+H4CdzM6jrN7A815VTRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:5d:61:28:60:ce:40:9e:36:a5:16:de:b9:f3:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93077a997c95bd01a64d408afcf554d88b4db5e5 Validity Not Before: Jan 26 05:01:09 2026 GMT Not After : Jan 27 05:01:09 2026 GMT Subject: CN=68072fe1f8f2e7b27bc27ede8e059cd0053bd906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:49:1c:ab:52:35:c7:21:4a:56:da:3d:25:14: 74:cb:16:70:19:8a:e7:60:d8:97:f9:dd:52:40:1e: 3b:87:ed:59:08:7a:20:28:e5:8a:64:e4:a9:09:91: cf:7e:09:f2:cb:f4:da:c3:91:b7:d9:23:d8:e8:d4: a4:10:d5:9d:2b:5b:a6:0f:9e:a1:a8:50:62:bf:f9: 51:ec:64:9c:f7:95:4b:62:46:c1:7c:d7:d0:e7:d5: ac:af:d2:0e:34:d0:f8:15:b6:39:a9:62:28:b7:f1: 53:b7:5d:4a:62:7b:17:6d:db:a0:d6:4d:82:64:8c: 9f:d8:0c:6a:01:f4:26:f5:55:56:72:ba:9b:2f:0b: 45:4b:d0:7c:14:2d:4b:8a:6f:41:bc:2f:9f:20:9e: 55:c5:95:92:11:83:2f:b1:5b:1a:6e:e0:f7:26:00: 1c:08:69:dd:65:fb:6b:ef:c5:f7:72:fa:78:a6:6a: f8:a1:54:33:0e:72:6e:4a:44:25:7d:79:bf:f3:df: b6:1e:6a:ac:6a:2b:07:eb:bc:26:28:bf:86:64:78: ef:2f:e6:45:ba:28:78:11:17:15:fb:ed:0e:a6:33: 27:ca:24:30:d9:78:a3:25:a4:23:93:06:ff:32:98: 08:13:1f:ba:bb:b3:38:93:b2:c2:67:a0:2d:fd:11: 81:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:07:2F:E1:F8:F2:E7:B2:7B:C2:7E:DE:8E:05:9C:D0:05:3B:D9:06 X509v3 Authority Key Identifier: keyid:93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:7d:22:50:21:b7:93:3b:29:96:b6:38:25:18:91:30:67:b1: d7:20:7c:84:b3:d4:0e:42:86:0b:87:f5:e5:29:1c:5d:4c:20: cc:fb:6e:dc:2d:20:cf:15:6d:81:55:5e:05:3a:cf:7f:28:e8: 6f:84:86:9c:39:ca:86:e2:fb:0d:46:6c:4d:6c:7b:90:46:de: 1c:ad:cd:54:22:b1:a5:36:4c:45:dd:05:0d:1a:f5:ff:de:cd: 87:4b:0b:a4:7a:b0:ab:04:f4:96:32:63:7c:fa:cd:01:42:6e: 7a:97:d7:4c:dd:6a:88:c8:f1:12:ab:35:46:ea:c7:4b:a6:9d: ac:be:97:79:15:4f:26:39:b5:93:bf:b2:5c:43:30:27:89:48: 81:88:ad:dc:5b:83:1c:c6:4e:af:b6:13:aa:0c:da:36:25:59: 96:85:df:a1:1f:28:65:e4:ba:85:31:9d:76:72:d1:7f:f7:bd: f6:b7:15:a4:a9:92:e4:54:c9:72:ae:a0:b2:43:d9:7b:e7:75: 2e:7c:02:e8:78:1e:06:a2:5d:24:04:c9:19:b4:0d:c2:64:26: 92:fb:72:7f:cf:55:7c:eb:6c:06:ae:fa:3a:70:e5:e3:a1:fb: 1a:46:8a:08:9b:4c:ae:e9:d1:92:66:a8:d6:a3:13:db:c7:b4: 5d:aa:cb:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rV1hKGDOQJ42pRbeufNNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMDc3YTk5N2M5NWJkMDFhNjRkNDA4YWZjZjU1NGQ4OGI0 ZGI1ZTUwHhcNMjYwMTI2MDUwMTA5WhcNMjYwMTI3MDUwMTA5WjAzMTEwLwYDVQQD Eyg2ODA3MmZlMWY4ZjJlN2IyN2JjMjdlZGU4ZTA1OWNkMDA1M2JkOTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEkcq1I1xyFKVto9JRR0yxZwGYrn YNiX+d1SQB47h+1ZCHogKOWKZOSpCZHPfgnyy/Taw5G32SPY6NSkENWdK1umD56h qFBiv/lR7GSc95VLYkbBfNfQ59Wsr9IONND4FbY5qWIot/FTt11KYnsXbdug1k2C ZIyf2AxqAfQm9VVWcrqbLwtFS9B8FC1Lim9BvC+fIJ5VxZWSEYMvsVsabuD3JgAc CGndZftr78X3cvp4pmr4oVQzDnJuSkQlfXm/89+2HmqsaisH67wmKL+GZHjvL+ZF uih4ERcV++0OpjMnyiQw2XijJaQjkwb/MpgIEx+6u7M4k7LCZ6At/RGBAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgHL+H48ueye8J+3o4FnNAFO9kGMB8GA1UdIwQY MBaAFJMHepl8lb0Bpk1Aivz1VNiLTbXlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3dkNm1YeVZ2UUdtVFVDS19QVlUySXROdGVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8xYmFjMDEtMjEyYy00ZjRjLThkM2Et NjUyNTdiMWZlYzZkLzEva3dkNm1YeVZ2UUdtVFVDS19QVlUySXROdGVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8xYmFjMDEtMjEyYy00ZjRjLThkM2EtNjUyNTdiMWZlYzZk LzEva3dkNm1YeVZ2UUdtVFVDS19QVlUySXROdGVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMH0iUCG3 kzsplrY4JRiRMGex1yB8hLPUDkKGC4f15SkcXUwgzPtu3C0gzxVtgVVeBTrPfyjo b4SGnDnKhuL7DUZsTWx7kEbeHK3NVCKxpTZMRd0FDRr1/97Nh0sLpHqwqwT0ljJj fPrNAUJuepfXTN1qiMjxEqs1RurHS6adrL6XeRVPJjm1k7+yXEMwJ4lIgYit3FuD HMZOr7YTqgzaNiVZloXfoR8oZeS6hTGddnLRf/e99rcVpKmS5FTJcq6gskPZe+d1 LnwC6HgeBqJdJATJGbQNwmQmkvtyf89VfOtsBq76OnDl46H7GkaKCJtMrunRkmao 1qMT28e0XarLKw== -----END CERTIFICATE-----Generated at Mon Jan 26 14:48:07 2026 by rpki-client