This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft File: kDstfw0D26MMK2Kn71bsuzg0j0Y.mft (raw, json) Hash identifier: DyN0M0DNl9HHX+yQrLNh6Ctb5Nkux5eb/WWu+myPc6c= Subject key identifier: 7C:1E:A3:58:1F:EC:FE:32:9D:3C:96:75:97:9D:14:3C:E4:7E:D1:8D Authority key identifier: 90:3B:2D:7F:0D:03:DB:A3:0C:2B:62:A7:EF:56:EC:BB:38:34:8F:46 Certificate issuer: /CN=903b2d7f0d03dba30c2b62a7ef56ecbb38348f46 Certificate serial: 019BF79AFE127227EB1ED1BF57A8327FF9CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kDstfw0D26MMK2Kn71bsuzg0j0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft Manifest number: 08 Signing time: Mon 26 Jan 2026 00:01:28 +0000 Manifest this update: Mon 26 Jan 2026 00:01:28 +0000 Manifest next update: Tue 27 Jan 2026 00:01:28 +0000 Files and hashes: 1: UbdL-NaNEP20waj3N_gDr5tJI8k.asa (hash: 9Y7I+qmxwpQRYcHd6Acr+sOvE9evJpPnh6mShkwnWIw=) 2: kDstfw0D26MMK2Kn71bsuzg0j0Y.crl (hash: 0lNc4EQU0IDnpDCVhLPqtv02/gtUDzz51p/9Yp242LE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/kDstfw0D26MMK2Kn71bsuzg0j0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:fe:12:72:27:eb:1e:d1:bf:57:a8:32:7f:f9:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=903b2d7f0d03dba30c2b62a7ef56ecbb38348f46 Validity Not Before: Jan 26 00:01:28 2026 GMT Not After : Jan 27 00:01:28 2026 GMT Subject: CN=7c1ea3581fecfe329d3c9675979d143ce47ed18d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:97:0d:6f:02:65:55:e2:cb:63:23:52:55:3c: c1:b5:60:98:85:78:b2:62:1a:0c:4e:28:de:ab:4a: 16:0f:2c:d9:67:f4:bd:a8:33:55:0a:00:07:e1:0b: 6d:7a:94:c1:66:3c:e1:ed:9e:4f:82:de:5f:c4:70: 6e:21:dc:09:7e:d7:a8:a6:a5:bf:67:b7:28:37:c5: 48:e9:87:8c:b8:60:8f:87:6b:84:23:bd:dd:0c:46: 3d:b6:bc:d6:a9:f4:72:07:20:04:17:95:e1:a2:d1: 09:42:27:93:fd:d4:8d:f3:5c:69:3b:87:e6:5c:8b: 57:09:63:11:7d:33:d4:db:b7:b7:49:dd:cb:42:b6: 1a:35:d9:d7:19:0b:8b:24:0b:e5:37:8a:5d:46:51: 36:ab:4c:f8:fa:a1:c6:93:e7:d1:1b:15:c4:a1:06: ad:88:2b:a7:ef:c6:e6:a4:04:16:bf:3d:18:a0:e2: 96:e9:8a:6c:56:c1:21:06:d8:21:f6:34:e2:fa:11: 5b:1f:0b:3e:f4:f7:92:95:21:cd:d1:e6:e1:ec:2f: 00:c6:5c:5f:cc:ba:7b:17:84:a3:e9:70:7c:5b:98: 99:52:fc:20:0a:44:d7:50:02:a6:0d:65:9e:7f:91: b9:a3:66:6f:5d:3d:da:a5:32:62:02:8f:2d:42:d4: d8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:1E:A3:58:1F:EC:FE:32:9D:3C:96:75:97:9D:14:3C:E4:7E:D1:8D X509v3 Authority Key Identifier: keyid:90:3B:2D:7F:0D:03:DB:A3:0C:2B:62:A7:EF:56:EC:BB:38:34:8F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kDstfw0D26MMK2Kn71bsuzg0j0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:5d:61:ac:00:f3:bf:9b:c2:28:ec:e4:48:52:d9:20:fb:36: 9c:9f:ad:5a:80:1f:34:1c:7d:d9:05:6d:a1:74:5a:1e:8b:50: dd:d3:c4:6b:ac:3d:e4:f7:bf:88:e8:e7:3b:f8:a8:d0:0e:3b: 7b:37:6b:d4:43:26:f0:28:e2:fb:96:a9:6e:fe:bb:1b:ea:3c: d9:17:1b:6e:39:54:f3:f2:13:0c:ef:7b:0e:64:7f:2f:43:3c: 90:43:9f:38:b9:8e:e5:42:9a:25:43:c8:23:99:90:8b:c5:f4: e0:11:14:77:d9:92:6a:3c:8b:48:69:e5:7b:f2:74:9e:a9:5d: 26:a1:e3:f2:0c:2c:45:6c:60:3f:b4:bc:bf:61:13:a0:81:56: bd:45:7a:0b:ee:3c:ac:ee:74:09:c1:1f:f3:56:1a:b4:cd:30: ac:5d:e8:eb:f9:df:44:fa:4a:fe:3d:70:6a:9d:fd:a0:bd:78: 91:cc:e9:f1:4b:5b:c8:eb:6b:e8:27:27:c2:25:b6:74:3c:a5: 8b:20:d6:fa:02:46:2b:d8:77:fe:86:d9:d2:59:b5:65:60:21: ef:ed:08:6b:ab:9b:91:f0:d4:52:29:b6:6d:55:c9:fd:61:03: 6f:c8:50:a5:08:31:39:fb:b1:b2:49:08:7c:71:a9:82:81:67: a3:a0:96:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mv4ScifrHtG/V6gyf/nKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwM2IyZDdmMGQwM2RiYTMwYzJiNjJhN2VmNTZlY2JiMzgz NDhmNDYwHhcNMjYwMTI2MDAwMTI4WhcNMjYwMTI3MDAwMTI4WjAzMTEwLwYDVQQD Eyg3YzFlYTM1ODFmZWNmZTMyOWQzYzk2NzU5NzlkMTQzY2U0N2VkMThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZcNbwJlVeLLYyNSVTzBtWCYhXiy YhoMTijeq0oWDyzZZ/S9qDNVCgAH4QttepTBZjzh7Z5Pgt5fxHBuIdwJfteopqW/ Z7coN8VI6YeMuGCPh2uEI73dDEY9trzWqfRyByAEF5XhotEJQieT/dSN81xpO4fm XItXCWMRfTPU27e3Sd3LQrYaNdnXGQuLJAvlN4pdRlE2q0z4+qHGk+fRGxXEoQat iCun78bmpAQWvz0YoOKW6YpsVsEhBtgh9jTi+hFbHws+9PeSlSHN0ebh7C8Axlxf zLp7F4Sj6XB8W5iZUvwgCkTXUAKmDWWef5G5o2ZvXT3apTJiAo8tQtTYewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHweo1gf7P4ynTyWdZedFDzkftGNMB8GA1UdIwQY MBaAFJA7LX8NA9ujDCtip+9W7Ls4NI9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0RzdGZ3MEQyNk1NSzJLbjcxYnN1emcwajBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wMmJkN2MtZmUzOS00NmU5LWJmNzUt YzAzYzlmZDhlZGMxLzEva0RzdGZ3MEQyNk1NSzJLbjcxYnN1emcwajBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8wMmJkN2MtZmUzOS00NmU5LWJmNzUtYzAzYzlmZDhlZGMx LzEva0RzdGZ3MEQyNk1NSzJLbjcxYnN1emcwajBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm11hrADz v5vCKOzkSFLZIPs2nJ+tWoAfNBx92QVtoXRaHotQ3dPEa6w95Pe/iOjnO/io0A47 ezdr1EMm8Cji+5apbv67G+o82RcbbjlU8/ITDO97DmR/L0M8kEOfOLmO5UKaJUPI I5mQi8X04BEUd9mSajyLSGnle/J0nqldJqHj8gwsRWxgP7S8v2EToIFWvUV6C+48 rO50CcEf81YatM0wrF3o6/nfRPpK/j1wap39oL14kczp8UtbyOtr6CcnwiW2dDyl iyDW+gJGK9h3/obZ0lm1ZWAh7+0Ia6ubkfDUUim2bVXJ/WEDb8hQpQgxOfuxskkI fHGpgoFno6CWrw== -----END CERTIFICATE-----Generated at Mon Jan 26 06:17:35 2026 by rpki-client