This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft File: kY9WbI_5USpXSMwUifCTXCXYxKs.mft (raw, json) Hash identifier: 3uZVoRkAZcXC4Ax86Q5VZ+J4Pk1AUzGU6ff51b9AjU8= Subject key identifier: 39:E0:64:0D:CB:AA:E8:F5:AA:F2:3E:2D:5F:10:2A:52:5C:88:3F:89 Authority key identifier: 91:8F:56:6C:8F:F9:51:2A:57:48:CC:14:89:F0:93:5C:25:D8:C4:AB Certificate issuer: /CN=918f566c8ff9512a5748cc1489f0935c25d8c4ab Certificate serial: 019BFB092D18BC4184F5EBCF83F1285DECE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft Manifest number: 027A Signing time: Mon 26 Jan 2026 16:00:41 +0000 Manifest this update: Mon 26 Jan 2026 16:00:41 +0000 Manifest next update: Tue 27 Jan 2026 16:00:41 +0000 Files and hashes: 1: 2gUkVkvBn7Q1vmsW6vZYesIru3E.roa (hash: 3mugJDdnEmraVaKho4WrwncKKVb68YhcTwc6RXDfj/k=) 2: kY9WbI_5USpXSMwUifCTXCXYxKs.crl (hash: TJoEC09Rhtp20yqPgNs0DkLdY5vLhkLiG5ZCQNxkdgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.crl rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:2d:18:bc:41:84:f5:eb:cf:83:f1:28:5d:ec:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=918f566c8ff9512a5748cc1489f0935c25d8c4ab Validity Not Before: Jan 26 16:00:41 2026 GMT Not After : Jan 27 16:00:41 2026 GMT Subject: CN=39e0640dcbaae8f5aaf23e2d5f102a525c883f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c4:b8:ef:96:32:d9:7b:08:00:1f:c7:15:6f: de:be:3c:2d:c8:27:e2:89:fd:4b:14:2a:f4:0b:4b: 59:ae:a6:47:6f:58:a1:5c:ea:3c:03:6c:d5:58:44: ca:8d:2f:02:c7:84:a6:20:d8:46:bb:10:ae:00:41: 48:1c:de:9f:d2:17:43:2c:2c:71:cd:e1:49:3b:46: da:ca:8d:30:3a:a5:c0:77:fb:47:bb:d1:4d:e5:ab: e9:b9:9f:53:16:f9:bd:d3:05:67:77:5e:bf:e2:f6: 3d:db:0b:16:3f:70:09:47:70:72:f8:a0:58:a1:fc: b4:85:3f:f2:3a:db:23:b3:fc:ab:47:40:33:33:b8: 24:bf:8d:cf:1d:7b:85:36:0a:f1:a5:45:91:b7:04: 51:3b:bc:98:ae:b6:7b:c9:76:4f:a6:af:0a:0f:2c: 32:11:57:22:d1:af:ae:50:51:cd:a0:c8:7f:6f:37: 54:ed:0d:31:c1:c9:f4:57:84:a3:cb:64:e3:31:52: 6e:cd:71:da:fb:23:d0:8f:42:f4:89:20:79:cd:52: 80:c4:10:8f:c2:0b:dc:f3:16:e0:3b:5a:74:c7:29: 76:c0:7a:2e:41:1a:54:8f:c5:b5:76:a4:07:ce:4f: 14:18:fc:9e:66:59:27:fb:56:b7:cd:43:b8:66:45: 7e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E0:64:0D:CB:AA:E8:F5:AA:F2:3E:2D:5F:10:2A:52:5C:88:3F:89 X509v3 Authority Key Identifier: keyid:91:8F:56:6C:8F:F9:51:2A:57:48:CC:14:89:F0:93:5C:25:D8:C4:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ad:36:b7:58:d2:9d:71:24:a9:20:46:9d:77:e0:a6:2d:f8: 47:4d:ea:88:f5:34:e2:62:20:19:ec:d5:42:b0:7b:0e:a1:ab: a4:00:fd:fb:7c:6f:49:40:a4:a6:b7:82:26:38:96:f8:d3:2b: 53:d1:f6:23:a7:84:58:85:1e:55:e7:c0:b5:ae:6a:6f:77:00: a0:a6:54:fc:4c:08:0f:f0:33:e6:2f:5d:4e:55:ca:98:2d:d9: de:1a:19:be:ae:2f:52:b1:8b:72:d2:8c:6b:6e:98:d6:e9:17: 04:7c:5d:78:c4:aa:f7:25:4c:98:93:2e:14:47:76:cc:63:31: 14:6d:3f:1a:fe:cd:3f:92:d7:05:b0:d4:20:db:c1:10:53:cb: df:c9:a3:9b:14:5a:e6:55:e0:9f:e8:c2:1f:ca:c3:6d:56:e1: 9f:2d:5c:51:19:12:2e:2a:e2:69:93:80:f8:49:fe:32:6a:b7: 9c:e5:23:30:7b:a6:a7:81:bf:bd:f4:2d:ab:2c:b1:08:6f:a4: 01:7d:a8:6f:78:a8:f7:bb:83:17:1a:4c:1e:55:37:ca:4b:7e: 04:e1:81:24:44:e0:02:14:ef:1e:6e:d3:af:7d:e0:e7:de:d4: ae:25:7a:15:81:0d:9c:73:2a:df:59:cc:50:bc:94:36:39:54: e2:37:83:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CS0YvEGE9evPg/EoXeziMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxOGY1NjZjOGZmOTUxMmE1NzQ4Y2MxNDg5ZjA5MzVjMjVk OGM0YWIwHhcNMjYwMTI2MTYwMDQxWhcNMjYwMTI3MTYwMDQxWjAzMTEwLwYDVQQD EygzOWUwNjQwZGNiYWFlOGY1YWFmMjNlMmQ1ZjEwMmE1MjVjODgzZjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsS475Yy2XsIAB/HFW/evjwtyCfi if1LFCr0C0tZrqZHb1ihXOo8A2zVWETKjS8Cx4SmINhGuxCuAEFIHN6f0hdDLCxx zeFJO0bayo0wOqXAd/tHu9FN5avpuZ9TFvm90wVnd16/4vY92wsWP3AJR3By+KBY ofy0hT/yOtsjs/yrR0AzM7gkv43PHXuFNgrxpUWRtwRRO7yYrrZ7yXZPpq8KDywy EVci0a+uUFHNoMh/bzdU7Q0xwcn0V4Sjy2TjMVJuzXHa+yPQj0L0iSB5zVKAxBCP wgvc8xbgO1p0xyl2wHouQRpUj8W1dqQHzk8UGPyeZlkn+1a3zUO4ZkV++QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDngZA3Lquj1qvI+LV8QKlJciD+JMB8GA1UdIwQY MBaAFJGPVmyP+VEqV0jMFInwk1wl2MSrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1k5V2JJXzVVU3BYU013VWlmQ1RYQ1hZeEtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81YTU4Y2MtZjlmZS00OWU2LWJiOGEt YTVmMTFiYzM1ZjMxLzEva1k5V2JJXzVVU3BYU013VWlmQ1RYQ1hZeEtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81YTU4Y2MtZjlmZS00OWU2LWJiOGEtYTVmMTFiYzM1ZjMx LzEva1k5V2JJXzVVU3BYU013VWlmQ1RYQ1hZeEtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAna02t1jS nXEkqSBGnXfgpi34R03qiPU04mIgGezVQrB7DqGrpAD9+3xvSUCkpreCJjiW+NMr U9H2I6eEWIUeVefAta5qb3cAoKZU/EwID/Az5i9dTlXKmC3Z3hoZvq4vUrGLctKM a26Y1ukXBHxdeMSq9yVMmJMuFEd2zGMxFG0/Gv7NP5LXBbDUINvBEFPL38mjmxRa 5lXgn+jCH8rDbVbhny1cURkSLiriaZOA+En+Mmq3nOUjMHump4G/vfQtqyyxCG+k AX2ob3io97uDFxpMHlU3ykt+BOGBJETgAhTvHm7Tr33g597UriV6FYENnHMq31nM ULyUNjlU4jeDmA== -----END CERTIFICATE-----Generated at Mon Jan 26 19:10:58 2026 by rpki-client