This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft File: kw4KO7COSsZzY-MLqDsHFjLQqkM.mft (raw, json) Hash identifier: w5Cdb/Sc+BtsVhHl3ovxe/FWVKnkDlf3T2QnVvdS4Vc= Subject key identifier: 39:09:5C:10:1F:E0:38:66:AE:45:79:D2:BF:5D:E8:2C:85:C7:D9:3D Authority key identifier: 93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43 Certificate issuer: /CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43 Certificate serial: 019BFC1C88B315A856ECEEF335B2723ADA9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft Manifest number: 04F4 Signing time: Mon 26 Jan 2026 21:01:26 +0000 Manifest this update: Mon 26 Jan 2026 21:01:26 +0000 Manifest next update: Tue 27 Jan 2026 21:01:26 +0000 Files and hashes: 1: i15V9-c2PXcAQ6Lawcpbt-GL_iw.roa (hash: GlpJvGhZVuGz4aIWr1fluB9fbXXAkmsasT3KRZg6g4Y=) 2: kw4KO7COSsZzY-MLqDsHFjLQqkM.crl (hash: uULjW7I1RA2e4tqdxi2fLsRReMtTM4148l9PyGhXuQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1c:88:b3:15:a8:56:ec:ee:f3:35:b2:72:3a:da:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43 Validity Not Before: Jan 26 21:01:26 2026 GMT Not After : Jan 27 21:01:26 2026 GMT Subject: CN=39095c101fe03866ae4579d2bf5de82c85c7d93d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:49:27:f4:a9:30:ca:f7:57:98:e1:fe:77:0a: 06:f5:2e:3f:40:c2:07:f7:30:e5:2e:d7:42:87:65: d4:d1:9f:06:86:42:f6:40:a6:b3:f2:ec:69:33:0a: 58:0d:28:a0:9a:b1:99:7f:1a:59:b2:6f:70:3e:9d: 56:7f:72:09:11:66:39:70:b6:74:6f:f4:0d:fa:ba: 73:74:15:bd:81:69:c9:73:06:92:65:3b:1a:5b:da: 51:67:7c:9e:b5:38:e6:e1:f8:c1:f2:c1:b8:4d:33: f5:e8:6a:f5:84:4d:2a:d1:8f:a1:56:37:ec:15:9d: 57:90:bd:eb:e9:88:e6:19:db:32:ae:e6:a5:2c:03: 5e:c6:4b:1f:a9:5e:75:c4:20:26:8c:77:4a:a9:6b: ce:e7:bc:10:0c:5f:08:56:6d:f6:e7:73:2c:68:03: ba:93:f3:5a:87:04:a4:a6:f9:da:a3:e6:5e:79:e9: 6c:d6:00:84:98:32:a0:db:d0:7f:96:3b:cd:ba:57: e2:35:91:0c:e9:67:78:3b:ea:06:34:e7:4f:32:c3: c4:ab:3c:8e:a7:c6:8e:8e:c9:75:49:ce:c7:fd:42: 01:32:0b:9e:27:e6:d4:ab:0b:10:b1:50:89:10:e6: 8b:30:bd:39:11:d8:a1:4c:bc:da:e3:99:fe:65:2c: 27:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:09:5C:10:1F:E0:38:66:AE:45:79:D2:BF:5D:E8:2C:85:C7:D9:3D X509v3 Authority Key Identifier: keyid:93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:a1:81:31:a1:78:4a:d4:93:68:b4:87:e2:9c:42:de:a6:df: 12:c0:02:32:b5:31:50:a5:4b:46:ca:c7:50:46:2e:67:c4:59: c2:00:2a:07:c3:98:dd:a9:b8:4e:6c:c1:da:81:08:c1:90:b8: fa:e7:3e:02:dc:01:8a:22:5f:8c:30:7d:1e:a9:cb:2b:b7:1a: 9e:22:71:36:c6:1e:1a:53:ce:c3:c3:f6:66:96:c9:46:ee:cb: 71:3f:57:f4:50:0b:69:89:46:9b:97:6e:88:cb:63:4d:42:ef: b7:30:fd:c7:c3:be:52:57:8b:09:14:bd:52:a4:c4:9c:ff:8b: 92:4c:82:57:a8:97:27:83:23:f6:37:98:db:5f:75:aa:a7:5d: 73:e3:1a:60:0d:c8:9c:a4:9b:ee:cf:9f:8e:93:a8:28:7a:2f: 0b:d9:a8:c5:8c:eb:87:a1:0c:fa:e0:3e:1c:30:f5:57:40:fc: 55:b9:91:5b:1b:31:54:48:49:56:2c:38:06:49:2a:3a:79:04: f8:c8:75:27:1f:0a:5e:ac:fd:6f:1e:1f:f4:4a:92:94:6e:65: 61:59:53:07:5b:2f:13:00:c1:b1:e6:d2:7a:e0:c3:b9:39:12: dd:99:5f:2a:be:58:01:79:01:94:4c:e6:dd:c3:28:75:55:80: 3e:64:f0:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8HIizFahW7O7zNbJyOtqfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMGUwYTNiYjA4ZTRhYzY3MzYzZTMwYmE4M2IwNzE2MzJk MGFhNDMwHhcNMjYwMTI2MjEwMTI2WhcNMjYwMTI3MjEwMTI2WjAzMTEwLwYDVQQD EygzOTA5NWMxMDFmZTAzODY2YWU0NTc5ZDJiZjVkZTgyYzg1YzdkOTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ukn9KkwyvdXmOH+dwoG9S4/QMIH 9zDlLtdCh2XU0Z8GhkL2QKaz8uxpMwpYDSigmrGZfxpZsm9wPp1Wf3IJEWY5cLZ0 b/QN+rpzdBW9gWnJcwaSZTsaW9pRZ3yetTjm4fjB8sG4TTP16Gr1hE0q0Y+hVjfs FZ1XkL3r6YjmGdsyrualLANexksfqV51xCAmjHdKqWvO57wQDF8IVm3253MsaAO6 k/NahwSkpvnao+Zeeels1gCEmDKg29B/ljvNulfiNZEM6Wd4O+oGNOdPMsPEqzyO p8aOjsl1Sc7H/UIBMgueJ+bUqwsQsVCJEOaLML05EdihTLza45n+ZSwnzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkJXBAf4DhmrkV50r9d6CyFx9k9MB8GA1UdIwQY MBaAFJMOCjuwjkrGc2PjC6g7BxYy0KpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3c0S083Q09Tc1p6WS1NTHFEc0hGakxRcWtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81OTUwYzktOTdlYy00MGRjLTliMTEt MDI5NWExYzExZmViLzEva3c0S083Q09Tc1p6WS1NTHFEc0hGakxRcWtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy81OTUwYzktOTdlYy00MGRjLTliMTEtMDI5NWExYzExZmVi LzEva3c0S083Q09Tc1p6WS1NTHFEc0hGakxRcWtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFaGBMaF4 StSTaLSH4pxC3qbfEsACMrUxUKVLRsrHUEYuZ8RZwgAqB8OY3am4TmzB2oEIwZC4 +uc+AtwBiiJfjDB9HqnLK7caniJxNsYeGlPOw8P2ZpbJRu7LcT9X9FALaYlGm5du iMtjTULvtzD9x8O+UleLCRS9UqTEnP+LkkyCV6iXJ4Mj9jeY2191qqddc+MaYA3I nKSb7s+fjpOoKHovC9moxYzrh6EM+uA+HDD1V0D8VbmRWxsxVEhJViw4BkkqOnkE +Mh1Jx8KXqz9bx4f9EqSlG5lYVlTB1svEwDBsebSeuDDuTkS3ZlfKr5YAXkBlEzm 3cModVWAPmTwwA== -----END CERTIFICATE-----Generated at Tue Jan 27 00:36:53 2026 by rpki-client