This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft File: Ka2L_getXSzLQ7DR26axkstR2-o.mft (raw, json) Hash identifier: fyBCJctjeJCSQLt3Lc1RGperI6/OI09lukz0yLslJ3M= Subject key identifier: AA:FC:70:4B:EA:3C:68:61:0C:CF:2B:BA:41:CA:24:40:7A:28:83:61 Authority key identifier: 29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA Certificate issuer: /CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea Certificate serial: 019BA56C2FA1A4A6A9BD53B896B8E8C06579 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft Manifest number: 17C5 Signing time: Sat 10 Jan 2026 01:01:29 +0000 Manifest this update: Sat 10 Jan 2026 01:01:29 +0000 Manifest next update: Sun 11 Jan 2026 01:01:29 +0000 Files and hashes: 1: EeZP-5SHSEawYdE6cDHYPsGpsC4.roa (hash: AP7Fyhfq5/WIxTZ9Gig6bft8IGMBLH4JkZ4O2XoWirA=) 2: FiH_Dv9KRA9mEtdQJUxihReFF1c.roa (hash: LloMKXL1qJtQXFFrKg1pWHguOKrDmgj1zA46ZODHmzI=) 3: Ka2L_getXSzLQ7DR26axkstR2-o.crl (hash: ocL8GSh9rhtlecCvs3GK1bzm/vzcr9lP+yTlWMsJX9E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a5:6c:2f:a1:a4:a6:a9:bd:53:b8:96:b8:e8:c0:65:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea Validity Not Before: Jan 10 01:01:29 2026 GMT Not After : Jan 11 01:01:29 2026 GMT Subject: CN=aafc704bea3c68610ccf2bba41ca24407a288361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:70:09:80:64:2d:f2:10:d6:5e:9b:95:f8:7e: ab:f0:3c:86:d9:bd:8a:68:71:e5:65:0f:7c:43:a3: e8:c6:45:9a:ea:d1:5f:3b:09:fe:90:ee:37:9a:77: 62:d3:b7:a2:a0:bd:4c:b8:2b:fb:7a:52:7f:2f:47: 15:4f:b2:0a:a9:f4:d0:2c:fb:04:57:b9:2d:e8:fa: ad:7d:27:5d:ff:5e:ce:c2:2a:a9:61:5e:3d:ac:ec: 45:c3:68:e3:15:56:63:5a:df:53:95:64:df:47:12: 39:22:a8:bb:e9:85:74:ba:28:25:14:fc:40:e9:51: 25:68:96:12:2d:50:44:fd:d8:f5:d5:65:d4:54:3e: 0b:59:45:fd:08:33:be:13:4f:51:d1:f6:35:21:92: 00:4f:3e:85:e8:f2:c8:40:b2:6e:9b:9d:c0:d2:9c: b2:df:37:64:f5:c7:77:86:6d:be:2d:45:f9:d5:e3: 9a:d3:fd:d4:26:8d:73:0b:e1:04:43:b1:43:76:54: a6:ee:4c:db:80:d7:9b:21:ee:56:ad:e1:97:e1:d1: 88:8e:ee:b6:68:c7:22:de:9c:7f:6b:73:b6:df:e3: 2e:89:e6:ad:9f:8b:c4:02:29:aa:db:1d:a7:cb:94: c8:a9:aa:1b:3d:1a:99:2e:fd:fb:fc:60:e6:6b:7b: aa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:FC:70:4B:EA:3C:68:61:0C:CF:2B:BA:41:CA:24:40:7A:28:83:61 X509v3 Authority Key Identifier: keyid:29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d4:04:c0:7e:d4:ce:94:75:34:ce:29:9b:f4:52:3e:4a:4d: fb:35:be:3f:f0:7b:b2:31:d1:a0:24:86:54:f3:eb:bd:36:96: 68:b5:77:83:43:be:60:92:3b:ca:1a:11:ec:9d:a1:64:98:27: fa:0b:48:1f:3f:0f:f3:51:fc:73:3e:c8:1f:e9:cb:6e:1e:c4: 59:13:d1:fa:f1:20:a3:84:3a:0c:0c:b2:82:64:86:9c:fe:c4: 5f:c3:5f:2f:c4:43:f8:65:0c:7c:30:e5:90:57:e2:f4:51:c9: aa:79:37:24:91:52:77:94:8b:78:15:ec:11:4d:eb:7a:cd:6f: 01:e6:56:d7:db:de:ca:60:75:28:85:60:32:5f:dc:94:da:52: 7c:30:1d:80:0f:17:01:af:52:6a:ff:01:26:11:3c:f8:f9:17: 31:54:0f:63:0f:19:1b:46:9e:05:bf:4a:05:d5:3f:be:68:36: 90:5e:fb:97:f8:df:7b:a0:03:d3:85:19:a1:a7:4f:dd:03:03: 79:be:42:0e:d1:45:68:d5:a4:9b:8a:c2:7d:9a:43:95:c3:20: ee:18:87:ac:01:96:e2:94:64:83:79:8b:f4:02:70:8a:bb:c7: 06:b0:97:8b:ad:d5:00:60:76:9a:d9:03:36:14:2f:28:08:92: 86:fc:34:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZulbC+hpKapvVO4lrjowGV5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YWQ4YmZlMDdhZDVkMmNjYjQzYjBkMWRiYTZiMTkyY2I1 MWRiZWEwHhcNMjYwMTEwMDEwMTI5WhcNMjYwMTExMDEwMTI5WjAzMTEwLwYDVQQD EyhhYWZjNzA0YmVhM2M2ODYxMGNjZjJiYmE0MWNhMjQ0MDdhMjg4MzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XAJgGQt8hDWXpuV+H6r8DyG2b2K aHHlZQ98Q6PoxkWa6tFfOwn+kO43mndi07eioL1MuCv7elJ/L0cVT7IKqfTQLPsE V7kt6PqtfSdd/17OwiqpYV49rOxFw2jjFVZjWt9TlWTfRxI5Iqi76YV0uiglFPxA 6VElaJYSLVBE/dj11WXUVD4LWUX9CDO+E09R0fY1IZIATz6F6PLIQLJum53A0pyy 3zdk9cd3hm2+LUX51eOa0/3UJo1zC+EEQ7FDdlSm7kzbgNebIe5WreGX4dGIju62 aMci3px/a3O23+Muieatn4vEAimq2x2ny5TIqaobPRqZLv37/GDma3uqzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKr8cEvqPGhhDM8rukHKJEB6KINhMB8GA1UdIwQY MBaAFCmti/4HrV0sy0Ow0dumsZLLUdvqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8yMzVkMjYtNzA5NC00ZmViLTljYTkt Mzc4NDk5Mzk4ZjE4LzEvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8yMzVkMjYtNzA5NC00ZmViLTljYTktMzc4NDk5Mzk4ZjE4 LzEvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOtQEwH7U zpR1NM4pm/RSPkpN+zW+P/B7sjHRoCSGVPPrvTaWaLV3g0O+YJI7yhoR7J2hZJgn +gtIHz8P81H8cz7IH+nLbh7EWRPR+vEgo4Q6DAyygmSGnP7EX8NfL8RD+GUMfDDl kFfi9FHJqnk3JJFSd5SLeBXsEU3res1vAeZW19veymB1KIVgMl/clNpSfDAdgA8X Aa9Sav8BJhE8+PkXMVQPYw8ZG0aeBb9KBdU/vmg2kF77l/jfe6AD04UZoadP3QMD eb5CDtFFaNWkm4rCfZpDlcMg7hiHrAGW4pRkg3mL9AJwirvHBrCXi63VAGB2mtkD NhQvKAiShvw0iQ== -----END CERTIFICATE-----Generated at Sat Jan 10 06:51:14 2026 by rpki-client