This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft File: KhLvrumX6adjtGCrWS3dpnoN63A.mft (raw, json) Hash identifier: gBZ4w/iS9TSMgUQ7+A++iuqMHG/upnBzj2kaEssy3CI= Subject key identifier: 51:E2:06:B3:9E:1E:F8:B3:B3:4E:41:E9:C4:8D:37:D1:2A:70:91:9C Authority key identifier: 2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70 Certificate issuer: /CN=2a12efaee997e9a763b460ab592ddda67a0deb70 Certificate serial: 019BFBE52EC18970547E38A77781B39EA6C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft Manifest number: 03D0 Signing time: Mon 26 Jan 2026 20:00:59 +0000 Manifest this update: Mon 26 Jan 2026 20:00:59 +0000 Manifest next update: Tue 27 Jan 2026 20:00:59 +0000 Files and hashes: 1: KhLvrumX6adjtGCrWS3dpnoN63A.crl (hash: xLWf+RoTNvYWEpV9k5XohvGgc23HuBKq8DSuOPahNOo=) 2: PKYdzI7_btncrfJybcR9dUE0ZSE.roa (hash: y3/sm0eAAEkLjKvdsBgjXRt+wfnk4CjHq0q5eayWO8s=) 3: cjNP386iRKDTnC28czcFASn_pV4.roa (hash: k8OfexAF7HdlRTBIiy1T3t+Od61q1BgsK4zC2zyS4Pg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:e5:2e:c1:89:70:54:7e:38:a7:77:81:b3:9e:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a12efaee997e9a763b460ab592ddda67a0deb70 Validity Not Before: Jan 26 20:00:59 2026 GMT Not After : Jan 27 20:00:59 2026 GMT Subject: CN=51e206b39e1ef8b3b34e41e9c48d37d12a70919c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f6:30:ed:68:51:66:75:37:a4:4a:7d:32:cb: 9b:43:47:c3:1f:3a:57:18:d1:4a:f3:53:05:79:4d: 71:9e:42:d2:f4:80:18:94:a6:c7:ae:85:57:2b:90: 35:be:18:b6:7c:91:22:a6:0a:d4:4f:b1:74:bf:a0: eb:ef:0d:00:73:26:53:4d:4d:58:69:50:77:60:7f: 3f:0a:0b:46:d9:0e:5d:d3:e1:11:8f:bc:f5:8f:e8: 8f:d8:bb:cd:fb:b6:5b:22:59:ce:c3:cf:40:e8:6c: 4e:a6:88:65:f7:64:de:fe:d2:b0:45:12:e6:a0:af: 7a:18:5d:5e:c5:a0:b3:fb:20:c1:92:c2:cb:db:21: b9:92:52:a8:13:7f:c5:6a:14:ce:28:73:59:4c:32: 51:5f:8d:4a:71:98:17:cc:61:b1:4e:74:bd:ab:67: 13:f1:3d:26:f2:0a:28:03:6a:e6:90:ba:74:22:2d: 03:9b:7e:14:7e:a8:bf:4c:f4:2c:de:d7:e5:a4:2f: f7:7d:fa:ed:8f:f4:ae:10:ba:7a:71:66:a1:bd:d9: f8:a8:11:33:f7:7d:65:97:1a:21:4a:4c:63:d1:3e: a5:e9:7a:fe:f3:03:59:b1:4b:b4:17:dd:f7:71:e8: c0:8e:bf:66:70:e7:c9:0a:c0:66:fc:42:4a:82:a5: 6f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E2:06:B3:9E:1E:F8:B3:B3:4E:41:E9:C4:8D:37:D1:2A:70:91:9C X509v3 Authority Key Identifier: keyid:2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c4:f9:e9:15:dd:20:fe:85:e7:63:dc:9d:41:ec:ae:43:0e: 94:7b:d7:77:a2:72:d6:da:34:0f:cd:a6:9c:50:04:ec:21:76: b1:f2:c6:76:d7:37:fb:3a:f5:83:6c:2f:94:39:d2:56:30:02: 04:13:69:dd:53:a7:62:8c:b6:ef:0a:00:49:6a:4c:59:27:be: a7:36:e9:e4:27:4e:37:bb:a1:84:b9:8e:14:b7:f4:c9:24:49: a0:3f:16:61:1e:96:59:89:d1:85:e9:b9:c8:ce:30:1b:c5:9b: f1:73:47:f7:df:3e:ae:59:37:3b:6a:88:3f:3e:f8:a9:23:cb: 94:c5:7b:9a:0f:2c:a2:14:98:6f:43:e3:c7:26:06:da:58:52: c6:da:df:80:16:a5:88:ee:51:f2:ac:5e:96:a9:01:41:3b:f1: 5b:33:12:ac:0d:a9:04:e5:c6:fa:b4:e9:a2:d2:d0:4f:e4:ed: 41:55:48:6a:57:6a:01:93:56:93:b3:11:e8:2f:c7:2c:26:2a: 58:fa:7b:76:90:11:a2:73:40:53:e3:fc:32:a5:f2:70:d4:ab: eb:2e:7f:61:cb:79:e7:81:ce:73:ee:69:fd:72:ba:c5:af:ac: e6:5e:a2:d8:3a:e8:56:73:a9:d7:21:3f:99:4b:49:38:b2:d9: 33:16:3b:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv75S7BiXBUfjind4GznqbAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMTJlZmFlZTk5N2U5YTc2M2I0NjBhYjU5MmRkZGE2N2Ew ZGViNzAwHhcNMjYwMTI2MjAwMDU5WhcNMjYwMTI3MjAwMDU5WjAzMTEwLwYDVQQD Eyg1MWUyMDZiMzllMWVmOGIzYjM0ZTQxZTljNDhkMzdkMTJhNzA5MTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvYw7WhRZnU3pEp9MsubQ0fDHzpX GNFK81MFeU1xnkLS9IAYlKbHroVXK5A1vhi2fJEipgrUT7F0v6Dr7w0AcyZTTU1Y aVB3YH8/CgtG2Q5d0+ERj7z1j+iP2LvN+7ZbIlnOw89A6GxOpohl92Te/tKwRRLm oK96GF1exaCz+yDBksLL2yG5klKoE3/FahTOKHNZTDJRX41KcZgXzGGxTnS9q2cT 8T0m8gooA2rmkLp0Ii0Dm34Ufqi/TPQs3tflpC/3ffrtj/SuELp6cWahvdn4qBEz 931llxohSkxj0T6l6Xr+8wNZsUu0F933cejAjr9mcOfJCsBm/EJKgqVvSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHiBrOeHvizs05B6cSNN9EqcJGcMB8GA1UdIwQY MBaAFCoS767pl+mnY7Rgq1kt3aZ6DetwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2hMdnJ1bVg2YWRqdEdDcldTM2Rwbm9ONjNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny82ZmY0M2ItMjdhYi00MDY0LWFmMWQt MDllZDc4MDBmZGZiLzEvS2hMdnJ1bVg2YWRqdEdDcldTM2Rwbm9ONjNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny82ZmY0M2ItMjdhYi00MDY0LWFmMWQtMDllZDc4MDBmZGZi LzEvS2hMdnJ1bVg2YWRqdEdDcldTM2Rwbm9ONjNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATcT56RXd IP6F52PcnUHsrkMOlHvXd6Jy1to0D82mnFAE7CF2sfLGdtc3+zr1g2wvlDnSVjAC BBNp3VOnYoy27woASWpMWSe+pzbp5CdON7uhhLmOFLf0ySRJoD8WYR6WWYnRhem5 yM4wG8Wb8XNH998+rlk3O2qIPz74qSPLlMV7mg8sohSYb0PjxyYG2lhSxtrfgBal iO5R8qxelqkBQTvxWzMSrA2pBOXG+rTpotLQT+TtQVVIaldqAZNWk7MR6C/HLCYq WPp7dpARonNAU+P8MqXycNSr6y5/Yct554HOc+5p/XK6xa+s5l6i2DroVnOp1yE/ mUtJOLLZMxY7XA== -----END CERTIFICATE-----Generated at Tue Jan 27 00:10:02 2026 by rpki-client