This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft File: kTkWd63vei6bCw5A6TssSvxNs14.mft (raw, json) Hash identifier: QjnENC2bhEyTW8MG+KWH5wPfnxyB4cd0jKpjwIoKISE= Subject key identifier: 29:16:7C:19:1A:76:F6:36:D3:3C:4E:67:8F:16:EA:0B:EA:26:39:C7 Authority key identifier: 91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E Certificate issuer: /CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e Certificate serial: 019BF2E2227B98AA150CFE113316CD0EB550 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft Manifest number: 1143 Signing time: Sun 25 Jan 2026 02:01:04 +0000 Manifest this update: Sun 25 Jan 2026 02:01:04 +0000 Manifest next update: Mon 26 Jan 2026 02:01:04 +0000 Files and hashes: 1: 1L8Aqg_kqc0jDD9ENoLfdgxQwl4.asa (hash: 1+NBbcWIg/X+t80cTnY58PEQO1jKIDWahJgetMPmIKo=) 2: kTkWd63vei6bCw5A6TssSvxNs14.crl (hash: mrtFt5t7nav/RDEAw5KOWOXUj22soIX6njz/wwALjTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e2:22:7b:98:aa:15:0c:fe:11:33:16:cd:0e:b5:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e Validity Not Before: Jan 25 02:01:04 2026 GMT Not After : Jan 26 02:01:04 2026 GMT Subject: CN=29167c191a76f636d33c4e678f16ea0bea2639c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:50:78:fe:54:0f:cc:2e:0e:2a:45:97:27:37: 48:25:26:ba:9b:12:5b:02:62:1d:ea:50:08:d1:73: 3e:0d:aa:4a:70:eb:b9:cb:62:d3:a7:22:ce:4d:d5: 4b:c3:26:de:39:0a:9d:fd:17:55:d3:2c:c5:71:d8: 0c:36:e6:b6:f5:7b:16:fa:3d:c8:0a:20:cb:ed:a8: e2:ab:4f:a7:6e:4b:f4:48:89:e0:c5:0e:13:be:6b: 1a:2c:a6:2b:7b:ac:3d:20:11:ad:69:92:89:d6:31: fa:df:0f:58:7a:bf:f8:d8:1a:25:e3:eb:08:10:de: 4f:37:95:d7:b8:f5:45:a1:9f:54:8e:c0:c3:f0:e0: c6:7c:3e:73:cd:66:d8:79:bb:1d:4f:2c:55:85:90: eb:26:16:f6:60:f5:d2:cb:7b:b9:b5:44:07:5c:95: 9e:90:64:42:6a:fb:a8:1f:af:ba:e1:98:7c:06:49: 0a:12:b6:45:f8:36:32:2b:e8:6f:f5:4f:62:e9:59: e4:e3:65:8e:30:9c:cd:02:77:53:ef:6f:be:12:de: 71:2a:52:b3:56:10:9d:5e:0d:7e:15:5c:d1:49:40: 44:d6:97:ed:cd:fe:be:08:68:78:de:d4:6c:1c:63: 9e:e8:c0:b5:8a:17:00:95:79:be:b3:c4:b1:9a:13: 99:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:16:7C:19:1A:76:F6:36:D3:3C:4E:67:8F:16:EA:0B:EA:26:39:C7 X509v3 Authority Key Identifier: keyid:91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:63:18:14:2a:86:52:9a:96:3d:dd:f3:d6:7a:86:5f:e7:07: b9:f5:c4:2a:a3:28:0b:90:b0:8c:e8:14:a6:4b:29:0a:37:2e: d2:de:a7:88:88:e3:18:f2:f0:5a:19:a8:5a:a4:a6:ef:be:2f: b0:62:dd:1b:df:ee:bb:fb:2d:7e:34:ef:2d:68:2f:11:41:c6: fc:41:5b:85:f2:7a:65:5f:b7:ca:e4:48:2f:ad:65:40:f2:3d: bd:46:4c:b4:13:7c:3e:6e:88:50:f0:49:72:03:11:53:31:f2: 59:80:c8:d7:8f:bf:1d:b7:4d:49:6d:b5:95:10:f6:c1:10:31: a7:1e:f4:94:42:23:ed:e1:34:6f:91:fe:4a:c7:fd:8b:93:3e: 66:87:f6:5b:e3:e1:36:63:16:74:e2:7b:a0:46:0c:ea:26:b3: f8:e5:92:4f:a4:62:da:cc:59:8c:c3:6e:e9:fa:14:bc:ff:e8: f3:1a:b7:e7:6f:85:c6:28:5d:48:40:e7:1e:29:90:6e:a9:83: 7c:1c:27:84:31:ff:3d:96:44:ee:7b:c6:d3:32:28:f5:0c:2f: c1:75:bf:f9:5e:91:ca:cc:29:5f:4d:ed:f2:ed:60:26:5c:96: 73:5f:d0:e9:4f:eb:54:08:b2:42:62:6f:60:28:8f:c1:a1:3d: 96:4e:4c:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4iJ7mKoVDP4RMxbNDrVQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMzkxNjc3YWRlZjdhMmU5YjBiMGU0MGU5M2IyYzRhZmM0 ZGIzNWUwHhcNMjYwMTI1MDIwMTA0WhcNMjYwMTI2MDIwMTA0WjAzMTEwLwYDVQQD EygyOTE2N2MxOTFhNzZmNjM2ZDMzYzRlNjc4ZjE2ZWEwYmVhMjYzOWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolB4/lQPzC4OKkWXJzdIJSa6mxJb AmId6lAI0XM+DapKcOu5y2LTpyLOTdVLwybeOQqd/RdV0yzFcdgMNua29XsW+j3I CiDL7ajiq0+nbkv0SIngxQ4TvmsaLKYre6w9IBGtaZKJ1jH63w9Yer/42Bol4+sI EN5PN5XXuPVFoZ9UjsDD8ODGfD5zzWbYebsdTyxVhZDrJhb2YPXSy3u5tUQHXJWe kGRCavuoH6+64Zh8BkkKErZF+DYyK+hv9U9i6Vnk42WOMJzNAndT72++Et5xKlKz VhCdXg1+FVzRSUBE1pftzf6+CGh43tRsHGOe6MC1ihcAlXm+s8SxmhOZJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkWfBkadvY20zxOZ48W6gvqJjnHMB8GA1UdIwQY MBaAFJE5Fnet73oumwsOQOk7LEr8TbNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1RrV2Q2M3ZlaTZiQ3c1QTZUc3NTdnhOczE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9jZmRlZjQtMDMyOS00OGQxLWEzYzMt NDZiY2IzNmRmNGIzLzEva1RrV2Q2M3ZlaTZiQ3c1QTZUc3NTdnhOczE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9jZmRlZjQtMDMyOS00OGQxLWEzYzMtNDZiY2IzNmRmNGIz LzEva1RrV2Q2M3ZlaTZiQ3c1QTZUc3NTdnhOczE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGMYFCqG UpqWPd3z1nqGX+cHufXEKqMoC5CwjOgUpkspCjcu0t6niIjjGPLwWhmoWqSm774v sGLdG9/uu/stfjTvLWgvEUHG/EFbhfJ6ZV+3yuRIL61lQPI9vUZMtBN8Pm6IUPBJ cgMRUzHyWYDI14+/HbdNSW21lRD2wRAxpx70lEIj7eE0b5H+Ssf9i5M+Zof2W+Ph NmMWdOJ7oEYM6iaz+OWST6Ri2sxZjMNu6foUvP/o8xq352+FxihdSEDnHimQbqmD fBwnhDH/PZZE7nvG0zIo9QwvwXW/+V6RyswpX03t8u1gJlyWc1/Q6U/rVAiyQmJv YCiPwaE9lk5MRw== -----END CERTIFICATE-----Generated at Sun Jan 25 11:58:58 2026 by rpki-client