This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft File: kTkWd63vei6bCw5A6TssSvxNs14.mft (raw, json) Hash identifier: FVOT3OZwvu4bBLO6374RfoOoLF1ZTKWFZI4zU/GWqDU= Subject key identifier: 25:A0:D8:39:B8:64:F7:FC:71:AD:13:9C:12:20:2D:DD:4C:80:28:5B Authority key identifier: 91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E Certificate issuer: /CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e Certificate serial: 019C1B700ECBFD155F42507DAD3961A02DAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft Manifest number: 1158 Signing time: Sun 01 Feb 2026 23:00:54 +0000 Manifest this update: Sun 01 Feb 2026 23:00:54 +0000 Manifest next update: Mon 02 Feb 2026 23:00:54 +0000 Files and hashes: 1: 1L8Aqg_kqc0jDD9ENoLfdgxQwl4.asa (hash: 1+NBbcWIg/X+t80cTnY58PEQO1jKIDWahJgetMPmIKo=) 2: kTkWd63vei6bCw5A6TssSvxNs14.crl (hash: 6/9Gc855N/uFGqEqbDYr+ZPWih0bzzQVFonkg6/hAx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:70:0e:cb:fd:15:5f:42:50:7d:ad:39:61:a0:2d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e Validity Not Before: Feb 1 23:00:54 2026 GMT Not After : Feb 2 23:00:54 2026 GMT Subject: CN=25a0d839b864f7fc71ad139c12202ddd4c80285b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cb:e6:a8:a7:e7:5d:3f:79:48:66:ac:b5:28: 07:c2:dc:b2:42:71:35:f3:55:ad:5f:ea:0a:ab:bf: a8:11:46:e1:50:5f:c0:bd:6d:8f:9e:62:1b:64:4e: 52:01:04:9c:c5:04:ae:0e:ba:d9:3d:e1:f5:74:df: c1:ba:1e:13:ff:03:07:76:79:77:14:49:ca:cc:91: fa:91:84:97:99:6a:b1:93:23:fb:96:40:79:2b:3b: 47:b4:9b:f9:15:92:59:89:21:89:78:2d:22:a8:fa: b3:1c:a5:b4:b8:b4:ad:2d:1e:a4:e2:ae:70:ce:bd: 00:76:39:95:d4:fc:23:3d:f7:7e:bd:d0:10:6c:43: 9e:74:9c:5e:f0:fe:46:62:e9:05:fb:4b:e2:02:0e: 45:26:92:25:0e:4d:dd:6f:d3:75:b6:ab:ed:e5:67: b2:a3:63:3e:aa:6b:8d:46:ce:56:e5:f4:dd:9b:48: e1:33:54:fe:c7:34:f1:ed:8d:bb:ea:e0:b6:2e:15: 6c:bc:c5:c2:ef:d4:d5:ab:24:21:c7:13:e4:f8:ca: 4b:08:2d:4c:79:77:ab:cc:a9:13:cd:5e:67:f3:3a: ec:f1:7d:42:2d:60:7a:a3:74:60:42:e3:d2:18:5f: e3:31:77:32:0d:06:9d:79:f1:bd:f9:ac:5f:fd:1b: 17:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A0:D8:39:B8:64:F7:FC:71:AD:13:9C:12:20:2D:DD:4C:80:28:5B X509v3 Authority Key Identifier: keyid:91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:67:68:f7:9e:95:0b:00:c5:18:dd:6d:c2:bc:b7:50:4a:f4: 1e:14:5b:14:7f:01:fb:0f:27:03:49:31:f7:df:6d:79:07:3e: cf:f7:2b:d7:00:8a:15:75:75:96:62:2a:c3:3e:e8:0c:b6:4f: 06:b9:50:0b:b2:de:c1:48:b5:c3:44:8e:ee:5b:48:34:39:02: b6:c6:d7:e0:0f:62:13:85:7c:e4:1f:d7:0a:e3:fa:f0:d5:1d: 20:ad:ef:5b:b1:29:e3:ed:e7:63:4f:7a:eb:44:42:b5:d0:7e: ad:6e:21:a2:3d:74:38:da:51:ce:d4:72:1c:35:7c:23:8d:43: 3e:6f:54:71:9f:94:ca:de:f6:10:e5:53:f8:33:ef:19:6f:ac: 2a:d6:a5:55:31:14:f6:9d:97:0d:5d:b9:f7:a4:bd:a4:f2:2b: 17:f6:b2:9a:92:23:0a:48:47:46:00:2b:74:f6:52:7b:d8:ac: bd:c6:5b:b8:16:f5:70:bc:1e:72:67:67:b5:f6:b8:c5:29:7e: c0:00:ce:b6:76:c3:f1:f1:fa:34:06:09:09:9d:e1:19:a0:3e: 49:14:f7:78:a8:12:1f:18:07:6b:41:4f:e2:e1:5f:28:9a:9e: fb:f6:80:95:03:85:62:a5:8f:0f:2f:6a:ce:fe:2b:c8:1c:9e: 0a:9b:c9:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwbcA7L/RVfQlB9rTlhoC2qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMzkxNjc3YWRlZjdhMmU5YjBiMGU0MGU5M2IyYzRhZmM0 ZGIzNWUwHhcNMjYwMjAxMjMwMDU0WhcNMjYwMjAyMjMwMDU0WjAzMTEwLwYDVQQD EygyNWEwZDgzOWI4NjRmN2ZjNzFhZDEzOWMxMjIwMmRkZDRjODAyODViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsvmqKfnXT95SGastSgHwtyyQnE1 81WtX+oKq7+oEUbhUF/AvW2PnmIbZE5SAQScxQSuDrrZPeH1dN/Buh4T/wMHdnl3 FEnKzJH6kYSXmWqxkyP7lkB5KztHtJv5FZJZiSGJeC0iqPqzHKW0uLStLR6k4q5w zr0AdjmV1PwjPfd+vdAQbEOedJxe8P5GYukF+0viAg5FJpIlDk3db9N1tqvt5Wey o2M+qmuNRs5W5fTdm0jhM1T+xzTx7Y276uC2LhVsvMXC79TVqyQhxxPk+MpLCC1M eXerzKkTzV5n8zrs8X1CLWB6o3RgQuPSGF/jMXcyDQadefG9+axf/RsXcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWg2Dm4ZPf8ca0TnBIgLd1MgChbMB8GA1UdIwQY MBaAFJE5Fnet73oumwsOQOk7LEr8TbNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1RrV2Q2M3ZlaTZiQ3c1QTZUc3NTdnhOczE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9jZmRlZjQtMDMyOS00OGQxLWEzYzMt NDZiY2IzNmRmNGIzLzEva1RrV2Q2M3ZlaTZiQ3c1QTZUc3NTdnhOczE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9jZmRlZjQtMDMyOS00OGQxLWEzYzMtNDZiY2IzNmRmNGIz LzEva1RrV2Q2M3ZlaTZiQ3c1QTZUc3NTdnhOczE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsWdo956V CwDFGN1twry3UEr0HhRbFH8B+w8nA0kx999teQc+z/cr1wCKFXV1lmIqwz7oDLZP BrlQC7LewUi1w0SO7ltINDkCtsbX4A9iE4V85B/XCuP68NUdIK3vW7Ep4+3nY096 60RCtdB+rW4hoj10ONpRztRyHDV8I41DPm9UcZ+Uyt72EOVT+DPvGW+sKtalVTEU 9p2XDV2596S9pPIrF/aympIjCkhHRgArdPZSe9isvcZbuBb1cLwecmdntfa4xSl+ wADOtnbD8fH6NAYJCZ3hGaA+SRT3eKgSHxgHa0FP4uFfKJqe+/aAlQOFYqWPDy9q zv4ryByeCpvJ3A== -----END CERTIFICATE-----Generated at Mon Feb 2 09:42:20 2026 by rpki-client