This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft File: KtNUu6DgTX5arSd5J4n8Jt3W31E.mft (raw, json) Hash identifier: a8vf7JzpW+deU/BMKhTFeQHIi7SrpbI9eXoItgSg8m0= Subject key identifier: 51:E6:FC:EA:8E:AB:0E:25:8E:B0:EB:73:CD:53:98:9E:5E:2A:AE:8F Authority key identifier: 2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51 Certificate issuer: /CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51 Certificate serial: 019C1C14DD7A79E5B21BB49C3A5E227A3D02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft Manifest number: 121C Signing time: Mon 02 Feb 2026 02:00:55 +0000 Manifest this update: Mon 02 Feb 2026 02:00:55 +0000 Manifest next update: Tue 03 Feb 2026 02:00:55 +0000 Files and hashes: 1: KtNUu6DgTX5arSd5J4n8Jt3W31E.crl (hash: 7PAzgCo4CPvd5P+F7ZO7JjVW+AZEFeEKbLK8x+o3srA=) 2: S3_3KVAgp6YkFCWpI81L12B1tpo.roa (hash: wonEbSs5KIz67ymZjaYe88a1Z1LvjGATE4F1phDrzy0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 02:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:14:dd:7a:79:e5:b2:1b:b4:9c:3a:5e:22:7a:3d:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51 Validity Not Before: Feb 2 02:00:55 2026 GMT Not After : Feb 3 02:00:55 2026 GMT Subject: CN=51e6fcea8eab0e258eb0eb73cd53989e5e2aae8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:38:e8:fd:57:eb:f7:7f:44:15:57:e5:6e:0d: 0a:d3:96:9e:60:9d:00:94:79:70:d3:bf:d9:9f:f7: 3f:8c:0b:54:17:21:d4:73:a7:53:e6:67:46:b7:a5: 7f:75:8b:7a:9b:31:9e:9b:45:ea:87:6d:d7:8d:20: b8:f3:b5:f6:76:a2:8e:78:f7:98:d6:e6:a2:ab:89: 09:e0:43:12:b0:4e:e9:31:0a:4e:04:a1:93:5b:23: ae:7b:a5:dd:b7:93:88:f6:76:34:9e:31:e4:02:03: 1b:63:4c:12:b6:10:36:37:71:3e:b9:17:7e:84:24: dd:e1:10:ad:12:ba:06:2e:9b:f0:02:b0:67:c5:29: c1:4a:a5:8f:4e:06:1d:d6:24:6e:e1:f9:e6:bd:70: 6e:9b:15:55:53:c2:a5:2c:c4:9f:20:e6:d6:f6:74: ae:df:c8:05:93:12:f0:bc:33:b4:d6:3e:92:b4:9d: cf:9a:6a:d5:fd:9e:11:74:21:38:a1:f5:3d:3f:18: a1:6f:0c:69:b8:b9:0c:31:e3:43:a4:20:0c:9d:4c: 53:5b:ad:77:3e:ae:e6:1f:d2:f4:68:0f:57:84:c1: 39:b7:8a:8b:3c:28:99:fb:0e:7e:19:db:7a:18:6c: 5a:b2:4e:d7:b9:07:70:f1:5f:24:9e:8c:76:5b:61: a7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E6:FC:EA:8E:AB:0E:25:8E:B0:EB:73:CD:53:98:9E:5E:2A:AE:8F X509v3 Authority Key Identifier: keyid:2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:6a:a1:6d:7e:f4:2f:e7:8b:58:a3:35:ef:70:cd:d4:cf:36: 25:73:94:a1:45:cc:6e:51:e6:73:05:f5:b6:26:b9:44:e6:f8: 2b:7c:42:99:4b:35:4a:ee:e7:a0:1f:81:af:9e:a5:69:ac:58: 6a:89:f9:a5:6f:d7:7b:0d:77:3c:df:95:4e:0f:21:76:fb:b1: 3b:b4:59:81:79:e5:07:a1:c9:a8:d7:2d:e9:9d:f2:1f:b8:ca: 62:d6:58:e7:c7:f4:bd:ed:23:26:99:50:fd:db:f5:38:d4:8d: f3:1f:47:66:00:04:6e:4a:43:28:13:14:36:c7:3d:3e:06:5d: 52:bb:73:c5:ae:83:b1:cc:90:4b:8f:cd:a5:fc:2b:2c:7d:93: f7:ed:d4:2d:1d:32:4f:4c:06:9a:bb:fa:65:9b:41:48:18:ad: 5e:36:58:cd:03:24:9e:7b:35:27:67:d0:a3:2e:5d:d0:5b:03: 18:56:61:09:6f:e4:af:7e:84:29:c2:2b:2e:9a:a4:63:93:7c: 84:96:ec:4a:84:57:19:2d:9e:08:62:09:86:b7:07:86:ef:97: 18:fe:82:6b:50:b4:6b:cb:d1:d2:d3:ac:31:f8:cb:05:19:f7: db:8f:72:20:3e:e1:ad:9b:a7:d1:50:e5:57:9d:f6:6e:7b:93: ca:e4:a5:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcFN16eeWyG7ScOl4iej0CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZDM1NGJiYTBlMDRkN2U1YWFkMjc3OTI3ODlmYzI2ZGRk NmRmNTEwHhcNMjYwMjAyMDIwMDU1WhcNMjYwMjAzMDIwMDU1WjAzMTEwLwYDVQQD Eyg1MWU2ZmNlYThlYWIwZTI1OGViMGViNzNjZDUzOTg5ZTVlMmFhZThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jjo/Vfr939EFVflbg0K05aeYJ0A lHlw07/Zn/c/jAtUFyHUc6dT5mdGt6V/dYt6mzGem0Xqh23XjSC487X2dqKOePeY 1uaiq4kJ4EMSsE7pMQpOBKGTWyOue6Xdt5OI9nY0njHkAgMbY0wSthA2N3E+uRd+ hCTd4RCtEroGLpvwArBnxSnBSqWPTgYd1iRu4fnmvXBumxVVU8KlLMSfIObW9nSu 38gFkxLwvDO01j6StJ3PmmrV/Z4RdCE4ofU9PxihbwxpuLkMMeNDpCAMnUxTW613 Pq7mH9L0aA9XhME5t4qLPCiZ+w5+Gdt6GGxask7XuQdw8V8knox2W2GnAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHm/OqOqw4ljrDrc81TmJ5eKq6PMB8GA1UdIwQY MBaAFCrTVLug4E1+Wq0neSeJ/Cbd1t9RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3ROVXU2RGdUWDVhclNkNUo0bjhKdDNXMzFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS83OTlmMGQtYTRmMS00YTViLThjYzAt M2E3MDM3ODliMDNiLzEvS3ROVXU2RGdUWDVhclNkNUo0bjhKdDNXMzFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS83OTlmMGQtYTRmMS00YTViLThjYzAtM2E3MDM3ODliMDNi LzEvS3ROVXU2RGdUWDVhclNkNUo0bjhKdDNXMzFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWqhbX70 L+eLWKM173DN1M82JXOUoUXMblHmcwX1tia5ROb4K3xCmUs1Su7noB+Br56laaxY aon5pW/Xew13PN+VTg8hdvuxO7RZgXnlB6HJqNct6Z3yH7jKYtZY58f0ve0jJplQ /dv1ONSN8x9HZgAEbkpDKBMUNsc9PgZdUrtzxa6DscyQS4/NpfwrLH2T9+3ULR0y T0wGmrv6ZZtBSBitXjZYzQMknns1J2fQoy5d0FsDGFZhCW/kr36EKcIrLpqkY5N8 hJbsSoRXGS2eCGIJhrcHhu+XGP6Ca1C0a8vR0tOsMfjLBRn3249yID7hrZun0VDl V532bnuTyuSl7A== -----END CERTIFICATE-----Generated at Mon Feb 2 09:44:08 2026 by rpki-client