This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft File: kJgVO94ONFhLrJH6GGjX7yTWi88.mft (raw, json) Hash identifier: 3ewoKBh1fYhahIyiYDxNULxqb8pfw4MNCvd7sI1xogQ= Subject key identifier: 26:B7:85:A3:FF:89:61:36:7F:79:60:84:39:A3:39:73:61:0D:77:1F Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf Certificate serial: 019BFCF82579BF0FCEC162EFD42B17442675 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft Manifest number: 14E4 Signing time: Tue 27 Jan 2026 01:01:19 +0000 Manifest this update: Tue 27 Jan 2026 01:01:19 +0000 Manifest next update: Wed 28 Jan 2026 01:01:19 +0000 Files and hashes: 1: Iria4wIw1fU8cA4sqt1elN464-4.roa (hash: ISbIWO425ImSYvAJvg4vsV9/XdUj9FmYfNuddwC0P7Y=) 2: kJgVO94ONFhLrJH6GGjX7yTWi88.crl (hash: T6Wt19yZbbhg6GpX6H4o/FmgDD50S/Zsm3ZKfmW6ZfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f8:25:79:bf:0f:ce:c1:62:ef:d4:2b:17:44:26:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf Validity Not Before: Jan 27 01:01:19 2026 GMT Not After : Jan 28 01:01:19 2026 GMT Subject: CN=26b785a3ff8961367f79608439a33973610d771f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fd:99:f9:28:46:97:8f:63:d6:1c:dd:06:73: 71:11:c3:77:c3:36:73:ac:ed:6a:e6:b1:41:25:cd: cd:17:0b:81:99:12:79:c4:44:72:ac:15:01:a9:65: 9c:7e:2b:2a:e0:95:f3:4b:6b:0c:6b:fb:cb:83:26: 04:81:ca:99:6f:6c:5c:12:86:46:3c:e5:48:0e:db: 92:d4:e3:ba:b1:2f:88:d4:95:99:c6:ab:a6:2c:72: 5a:a1:ae:2f:58:da:fb:3e:d7:65:25:a3:5e:80:52: 43:b7:39:73:1e:01:27:b2:f3:25:7e:3b:62:3c:a9: 9d:e6:13:a5:e6:c3:ae:1e:bb:74:3c:b9:9f:fc:31: dd:2b:8a:c2:2c:ff:55:98:db:b3:a6:2d:c7:03:39: 00:85:b8:70:c3:cc:cf:68:d2:9a:f5:28:a9:70:89: 90:76:7f:fd:a0:5d:cd:e6:4a:d9:17:d7:bb:e4:ff: 04:d8:9f:80:ec:33:9e:33:c6:52:b4:84:85:8a:2a: 8d:22:44:9f:4e:37:14:2e:d7:c8:61:7b:94:94:2a: f9:0d:9e:6c:26:27:d5:83:b5:73:f6:a6:c6:ae:1d: e5:21:69:7e:50:87:d0:56:7b:52:92:4a:cc:70:4a: ec:aa:0c:38:43:4c:7d:66:9e:aa:05:72:eb:cc:54: e7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B7:85:A3:FF:89:61:36:7F:79:60:84:39:A3:39:73:61:0D:77:1F X509v3 Authority Key Identifier: keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:b6:d1:33:b1:c9:38:c6:50:2f:4a:cf:15:38:cc:8d:14:30: 5d:e3:44:d7:41:5b:c4:18:3e:ab:d1:42:60:b6:50:08:e4:4e: 18:92:67:16:c1:d9:2a:8b:7e:e5:0e:9d:71:8c:8a:00:45:95: 84:96:5e:ec:e7:f1:31:78:6a:29:fa:5c:85:67:49:b4:20:1e: 11:a5:00:fa:a3:04:1d:91:ac:2d:1d:1e:aa:27:f8:a7:0c:4a: ce:ff:cc:bf:8b:c7:68:35:ef:b9:c0:50:12:33:a8:ee:a2:fe: 46:a9:0d:fa:0c:bb:3e:aa:2f:5b:53:a3:ad:12:c4:f7:e6:98: 3a:9e:d1:ed:36:0f:07:35:64:ea:3d:32:7c:68:4b:f7:77:bd: a6:55:b6:24:e0:c9:e3:35:00:48:db:3e:a6:b1:c4:8b:80:23: fa:9a:b5:2a:f3:28:6b:76:c3:16:90:e2:dd:98:88:6e:47:72: 0f:8c:22:97:ff:c5:0c:87:66:bf:e8:90:79:75:55:16:39:9c: 91:5d:f3:5f:90:81:3d:78:b2:86:07:3e:74:a2:f3:57:08:8c: a9:bb:9a:ad:8c:d7:cc:49:74:fc:bc:0c:50:14:e1:28:4c:7b: be:73:e2:7f:be:f5:76:43:42:1f:a2:09:6e:77:91:2f:1b:47: 29:5c:70:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8+CV5vw/OwWLv1CsXRCZ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwOTgxNTNiZGUwZTM0NTg0YmFjOTFmYTE4NjhkN2VmMjRk NjhiY2YwHhcNMjYwMTI3MDEwMTE5WhcNMjYwMTI4MDEwMTE5WjAzMTEwLwYDVQQD EygyNmI3ODVhM2ZmODk2MTM2N2Y3OTYwODQzOWEzMzk3MzYxMGQ3NzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/2Z+ShGl49j1hzdBnNxEcN3wzZz rO1q5rFBJc3NFwuBmRJ5xERyrBUBqWWcfisq4JXzS2sMa/vLgyYEgcqZb2xcEoZG POVIDtuS1OO6sS+I1JWZxqumLHJaoa4vWNr7PtdlJaNegFJDtzlzHgEnsvMlfjti PKmd5hOl5sOuHrt0PLmf/DHdK4rCLP9VmNuzpi3HAzkAhbhww8zPaNKa9SipcImQ dn/9oF3N5krZF9e75P8E2J+A7DOeM8ZStISFiiqNIkSfTjcULtfIYXuUlCr5DZ5s JifVg7Vz9qbGrh3lIWl+UIfQVntSkkrMcErsqgw4Q0x9Zp6qBXLrzFTn4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCa3haP/iWE2f3lghDmjOXNhDXcfMB8GA1UdIwQY MBaAFJCYFTveDjRYS6yR+hho1+8k1ovPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0pnVk85NE9ORmhMckpINkdHalg3eVRXaTg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9iYTkwMDMtZDQzMy00MDk1LTg0Yjct MmY5MzNkOTg5NmUwLzEva0pnVk85NE9ORmhMckpINkdHalg3eVRXaTg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9iYTkwMDMtZDQzMy00MDk1LTg0YjctMmY5MzNkOTg5NmUw LzEva0pnVk85NE9ORmhMckpINkdHalg3eVRXaTg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbbRM7HJ OMZQL0rPFTjMjRQwXeNE10FbxBg+q9FCYLZQCOROGJJnFsHZKot+5Q6dcYyKAEWV hJZe7OfxMXhqKfpchWdJtCAeEaUA+qMEHZGsLR0eqif4pwxKzv/Mv4vHaDXvucBQ EjOo7qL+RqkN+gy7PqovW1OjrRLE9+aYOp7R7TYPBzVk6j0yfGhL93e9plW2JODJ 4zUASNs+prHEi4Aj+pq1KvMoa3bDFpDi3ZiIbkdyD4wil//FDIdmv+iQeXVVFjmc kV3zX5CBPXiyhgc+dKLzVwiMqbuarYzXzEl0/LwMUBThKEx7vnPif771dkNCH6IJ bneRLxtHKVxweg== -----END CERTIFICATE-----Generated at Tue Jan 27 07:17:25 2026 by rpki-client