This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft File: kJrEshegjDSPstyft0IuHekY9Rc.mft (raw, json) Hash identifier: 8zXc0eCrbtzkLgQl4rrSKE6PPC8sMWHacaezfVwy7cg= Subject key identifier: 61:B9:40:11:61:C6:7F:A9:CF:A5:16:9D:33:E4:4D:A8:7A:F2:84:64 Authority key identifier: 90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17 Certificate issuer: /CN=909ac4b217a08c348fb2dc9fb7422e1de918f517 Certificate serial: 019BF9BFD1AB2E196D6C534F0F921280E0C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft Manifest number: 0AE0 Signing time: Mon 26 Jan 2026 10:00:56 +0000 Manifest this update: Mon 26 Jan 2026 10:00:56 +0000 Manifest next update: Tue 27 Jan 2026 10:00:56 +0000 Files and hashes: 1: Ru4RlUs3xLqI4i2LlHQz9-A7VwY.roa (hash: DVQde1db5OGzpAw+ZFDgqxFZ7/Y4TU4NFBnhQeqaz0U=) 2: cU4TCCYXoajhZCXIIJ5tcUDsnnM.roa (hash: wT8Ut68PEmHJguLhza++gxsB8fpnhz3P88irlMghl78=) 3: kJrEshegjDSPstyft0IuHekY9Rc.crl (hash: c/4u8XnPgvoLdkyZG+E+5yXn27Clk4wuvNyxPIIe8NM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:bf:d1:ab:2e:19:6d:6c:53:4f:0f:92:12:80:e0:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909ac4b217a08c348fb2dc9fb7422e1de918f517 Validity Not Before: Jan 26 10:00:56 2026 GMT Not After : Jan 27 10:00:56 2026 GMT Subject: CN=61b9401161c67fa9cfa5169d33e44da87af28464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ef:3b:e3:b5:bd:24:20:00:50:f3:a9:28:9f: cf:3a:c2:6a:65:d8:dd:08:84:bd:a8:36:b4:ae:6c: ca:92:94:d9:75:c8:f4:58:47:7a:93:71:ef:26:30: 03:2c:c1:e2:79:92:db:df:08:59:c4:aa:87:f5:63: 5a:e6:af:04:f9:f4:ac:a5:2d:06:9b:38:21:be:f8: 8e:74:27:6d:89:97:40:3a:cd:37:92:ab:32:9f:97: 75:f4:5b:03:0f:20:31:ac:fc:04:cc:2f:7b:3c:f1: 3c:55:20:ba:4d:d8:61:22:f8:a3:05:e6:2c:be:06: 49:38:f6:0e:8c:ad:39:66:d3:19:85:02:07:04:21: b2:aa:75:61:a1:0b:7e:08:a3:8e:ad:f8:c5:c8:52: 76:42:a0:79:52:7e:3f:ad:b9:52:28:c8:3a:8a:47: 01:1d:8d:5c:7b:57:bc:f3:b1:ee:cd:0f:32:20:7c: 7a:78:4f:df:f8:ff:2f:3a:8a:63:c8:d8:65:2c:a8: 68:3b:b5:63:c5:cc:07:bb:c4:68:fd:ee:2f:8c:87: 9f:3c:c7:e3:1c:d9:c7:c2:2f:07:6c:64:8b:59:a1: 59:30:9e:61:67:0e:a6:96:c0:70:a3:2a:11:7e:e4: 0e:04:e8:77:60:a9:a4:a9:6a:18:6b:84:aa:1a:da: f0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B9:40:11:61:C6:7F:A9:CF:A5:16:9D:33:E4:4D:A8:7A:F2:84:64 X509v3 Authority Key Identifier: keyid:90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:dd:7d:42:8a:cc:79:29:e3:8c:12:84:45:31:ed:5d:87:b9: d8:4f:a8:ce:a0:9d:c5:98:c5:89:77:40:d4:bc:eb:46:24:19: 24:78:87:ea:ca:76:09:52:77:9d:bc:f3:83:12:d8:38:d4:a9: 64:76:8d:79:3e:e7:d3:b3:73:07:f6:6d:4c:d8:d6:35:e9:7c: 37:ac:e9:2e:02:05:f3:3f:50:33:23:34:9c:3b:9a:8b:ef:d7: ea:2a:db:d0:98:8f:8a:e1:1e:5c:5b:22:e1:7a:be:e0:87:2d: 12:06:e1:6c:26:c1:8f:31:b4:d9:3a:e2:67:78:f2:90:66:14: 98:a4:b8:1c:71:f0:4e:bc:2b:a1:1b:a5:07:01:16:a9:b0:8e: b9:53:66:df:b1:e1:55:fc:5d:d8:34:8e:0f:41:36:f0:4c:c9: 5a:96:c3:ee:69:78:6c:76:f7:86:4d:35:5c:e2:85:7e:84:1f: af:f5:ce:d8:29:77:76:0d:63:b3:3d:d1:fd:af:ee:c9:28:ef: 68:f6:53:c3:09:ad:dd:f7:26:24:a4:1a:29:f1:a6:c4:21:12: 2c:9b:06:90:9d:ec:25:8b:88:f1:9b:7c:68:80:a5:1a:ef:ef: 22:a8:8d:93:4c:5f:65:61:6f:50:0d:1e:d7:b1:80:69:52:05: a4:9a:4a:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5v9GrLhltbFNPD5ISgODGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwOWFjNGIyMTdhMDhjMzQ4ZmIyZGM5ZmI3NDIyZTFkZTkx OGY1MTcwHhcNMjYwMTI2MTAwMDU2WhcNMjYwMTI3MTAwMDU2WjAzMTEwLwYDVQQD Eyg2MWI5NDAxMTYxYzY3ZmE5Y2ZhNTE2OWQzM2U0NGRhODdhZjI4NDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu8747W9JCAAUPOpKJ/POsJqZdjd CIS9qDa0rmzKkpTZdcj0WEd6k3HvJjADLMHieZLb3whZxKqH9WNa5q8E+fSspS0G mzghvviOdCdtiZdAOs03kqsyn5d19FsDDyAxrPwEzC97PPE8VSC6TdhhIvijBeYs vgZJOPYOjK05ZtMZhQIHBCGyqnVhoQt+CKOOrfjFyFJ2QqB5Un4/rblSKMg6ikcB HY1ce1e887HuzQ8yIHx6eE/f+P8vOopjyNhlLKhoO7VjxcwHu8Ro/e4vjIefPMfj HNnHwi8HbGSLWaFZMJ5hZw6mlsBwoyoRfuQOBOh3YKmkqWoYa4SqGtrwhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGG5QBFhxn+pz6UWnTPkTah68oRkMB8GA1UdIwQY MBaAFJCaxLIXoIw0j7Lcn7dCLh3pGPUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0pyRXNoZWdqRFNQc3R5ZnQwSXVIZWtZOVJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xNzQzZGYtMDQ2Mi00Y2FjLTgyNTAt ZGVkYzUyYTJlZDhmLzEva0pyRXNoZWdqRFNQc3R5ZnQwSXVIZWtZOVJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8xNzQzZGYtMDQ2Mi00Y2FjLTgyNTAtZGVkYzUyYTJlZDhm LzEva0pyRXNoZWdqRFNQc3R5ZnQwSXVIZWtZOVJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnN19QorM eSnjjBKERTHtXYe52E+ozqCdxZjFiXdA1LzrRiQZJHiH6sp2CVJ3nbzzgxLYONSp ZHaNeT7n07NzB/ZtTNjWNel8N6zpLgIF8z9QMyM0nDuai+/X6irb0JiPiuEeXFsi 4Xq+4IctEgbhbCbBjzG02TriZ3jykGYUmKS4HHHwTrwroRulBwEWqbCOuVNm37Hh Vfxd2DSOD0E28EzJWpbD7ml4bHb3hk01XOKFfoQfr/XO2Cl3dg1jsz3R/a/uySjv aPZTwwmt3fcmJKQaKfGmxCESLJsGkJ3sJYuI8Zt8aIClGu/vIqiNk0xfZWFvUA0e 17GAaVIFpJpKEQ== -----END CERTIFICATE-----Generated at Mon Jan 26 20:12:38 2026 by rpki-client