This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft File: k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft (raw, json) Hash identifier: s21cdNZOhOkfvrMUr3v4hPyecb7aeNVXUbFluBJmARE= Subject key identifier: ED:2C:BA:58:D0:C0:5E:D1:BC:9F:EE:01:42:02:21:3F:C4:3A:0D:38 Authority key identifier: 93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7 Certificate issuer: /CN=9382bdfc9b1b25002039123779ffaf2473f851b7 Certificate serial: 019BFC1CD6EA42759E4917CBEB17609D6696 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 21:01:46 +0000 Manifest this update: Mon 26 Jan 2026 21:01:46 +0000 Manifest next update: Tue 27 Jan 2026 21:01:46 +0000 Files and hashes: 1: k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl (hash: FdSbbseYQ2M8c79cp5l+5zdI+gG4pOSMljYkKGJIAkI=) 2: wgb1-iULWQz8zD4swlphbIF6xCw.roa (hash: 6+l6f6hi4vlzVRdz3OtcxpncvT0dUWv6vEKKsHWTOaU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1c:d6:ea:42:75:9e:49:17:cb:eb:17:60:9d:66:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9382bdfc9b1b25002039123779ffaf2473f851b7 Validity Not Before: Jan 26 21:01:46 2026 GMT Not After : Jan 27 21:01:46 2026 GMT Subject: CN=ed2cba58d0c05ed1bc9fee014202213fc43a0d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7e:1b:9c:9e:7c:f5:bb:0d:1b:bb:01:3a:2f: 66:6f:3a:eb:ef:54:9e:a6:68:96:b4:7f:6c:fb:ac: f8:ca:14:56:e0:9c:3f:18:29:fe:7a:08:13:03:3b: dc:8f:49:d5:3c:eb:21:38:5a:bb:a6:e2:7e:a3:80: 9e:d5:49:89:cd:2a:ad:22:f8:b8:26:f2:f5:33:54: 95:f9:93:8f:cb:05:86:2f:e8:4f:ac:21:29:89:e6: 51:cc:70:8c:9f:ca:f4:1b:ed:0a:47:fe:db:f9:ea: 92:e6:04:e5:dc:26:4b:5e:f7:c7:02:85:00:9d:76: 1c:39:a6:d2:07:51:bb:e8:e0:c7:0e:7f:00:8f:b1: ea:86:f4:ea:56:b9:2f:a3:dd:88:7e:0c:5a:56:88: cd:ef:74:9a:f8:bf:16:fb:93:45:35:4e:0d:32:df: d9:6e:6a:51:4d:99:a8:c3:ac:47:10:7b:3d:e6:b3: aa:04:25:ac:de:d5:76:c8:ea:7a:91:98:9c:5b:f1: 0a:bf:fd:64:03:c6:f3:c7:b8:29:05:74:28:e0:86: 7d:65:bf:42:ec:bd:a0:56:ea:05:87:9c:a5:91:c4: 00:31:21:7c:61:f4:f3:b6:83:17:2d:5b:8e:25:21: 6c:59:5c:fa:85:aa:1e:00:d3:58:33:f1:41:0d:b4: 3c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2C:BA:58:D0:C0:5E:D1:BC:9F:EE:01:42:02:21:3F:C4:3A:0D:38 X509v3 Authority Key Identifier: keyid:93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:6c:ff:c9:33:ff:9e:ee:b0:c6:ac:c5:d5:c1:3d:55:11:31: 82:d6:8f:ca:b1:8a:25:93:ab:81:f8:da:5b:86:f4:4a:d3:9e: 41:96:08:69:7b:08:1d:02:7a:fb:18:c2:66:d2:97:f8:19:fb: 2d:b1:95:ad:9a:f1:64:04:7d:ba:ac:74:14:92:d4:a1:49:56: 19:d4:c7:56:59:d8:90:d1:9e:79:c2:c2:ef:f2:aa:0b:15:8c: d5:b3:f6:d8:aa:1f:ef:3d:f6:5c:03:ce:19:27:9d:70:24:0a: 7d:09:21:03:dc:f1:6c:75:f3:60:f7:0d:81:c0:83:43:e9:9b: 1b:fb:2f:7e:1b:78:20:10:2c:6a:35:e8:fd:84:20:95:1e:bd: 0a:41:62:87:ad:1e:d6:67:15:42:e1:2b:0a:2e:42:d8:95:70: 11:b1:8c:c2:d5:02:5b:84:88:3d:6b:f1:c9:a2:b2:30:14:af: a6:ec:f2:9e:41:e4:9a:3a:9a:d2:b6:22:91:4d:45:47:d2:23: ec:22:3f:cb:35:d5:b0:21:a7:8a:7b:6c:53:3b:1b:53:60:d6: 4d:c5:38:bc:be:ca:5a:ab:82:82:a4:f8:03:5b:03:9e:6d:20: cc:78:a3:cf:83:50:32:19:d9:7d:0f:03:fb:b2:9d:7b:6e:15: 4a:48:f7:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8HNbqQnWeSRfL6xdgnWaWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzODJiZGZjOWIxYjI1MDAyMDM5MTIzNzc5ZmZhZjI0NzNm ODUxYjcwHhcNMjYwMTI2MjEwMTQ2WhcNMjYwMTI3MjEwMTQ2WjAzMTEwLwYDVQQD EyhlZDJjYmE1OGQwYzA1ZWQxYmM5ZmVlMDE0MjAyMjEzZmM0M2EwZDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX4bnJ589bsNG7sBOi9mbzrr71Se pmiWtH9s+6z4yhRW4Jw/GCn+eggTAzvcj0nVPOshOFq7puJ+o4Ce1UmJzSqtIvi4 JvL1M1SV+ZOPywWGL+hPrCEpieZRzHCMn8r0G+0KR/7b+eqS5gTl3CZLXvfHAoUA nXYcOabSB1G76ODHDn8Aj7HqhvTqVrkvo92IfgxaVojN73Sa+L8W+5NFNU4NMt/Z bmpRTZmow6xHEHs95rOqBCWs3tV2yOp6kZicW/EKv/1kA8bzx7gpBXQo4IZ9Zb9C 7L2gVuoFh5ylkcQAMSF8YfTztoMXLVuOJSFsWVz6haoeANNYM/FBDbQ8MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0suljQwF7RvJ/uAUICIT/EOg04MB8GA1UdIwQY MBaAFJOCvfybGyUAIDkSN3n/ryRz+FG3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazRLOV9Kc2JKUUFnT1JJM2VmLXZKSFA0VWJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iZWYyMDAtMjJjNi00NDE3LWE4OTYt MjRiZjQwYzEzMDhmLzEvazRLOV9Kc2JKUUFnT1JJM2VmLXZKSFA0VWJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9iZWYyMDAtMjJjNi00NDE3LWE4OTYtMjRiZjQwYzEzMDhm LzEvazRLOV9Kc2JKUUFnT1JJM2VmLXZKSFA0VWJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARmz/yTP/ nu6wxqzF1cE9VRExgtaPyrGKJZOrgfjaW4b0StOeQZYIaXsIHQJ6+xjCZtKX+Bn7 LbGVrZrxZAR9uqx0FJLUoUlWGdTHVlnYkNGeecLC7/KqCxWM1bP22Kof7z32XAPO GSedcCQKfQkhA9zxbHXzYPcNgcCDQ+mbG/svfht4IBAsajXo/YQglR69CkFih60e 1mcVQuErCi5C2JVwEbGMwtUCW4SIPWvxyaKyMBSvpuzynkHkmjqa0rYikU1FR9Ij 7CI/yzXVsCGnintsUzsbU2DWTcU4vL7KWquCgqT4A1sDnm0gzHijz4NQMhnZfQ8D +7Kde24VSkj3kw== -----END CERTIFICATE-----Generated at Tue Jan 27 06:06:47 2026 by rpki-client