This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft File: Kfp91j8uLYe194UAk8dDu_vhTkQ.mft (raw, json) Hash identifier: nY1H5uhERyZeo0pGND8FUiE+09BZXcaB2Ua2Rhsf+48= Subject key identifier: A2:BB:6F:7F:C8:CD:9E:70:D3:04:49:5C:42:C4:24:66:77:65:5C:A6 Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 Certificate issuer: /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Certificate serial: 019BF12AE2A1C088CFE9758C16904FC2DDCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft Manifest number: 0697 Signing time: Sat 24 Jan 2026 18:01:18 +0000 Manifest this update: Sat 24 Jan 2026 18:01:18 +0000 Manifest next update: Sun 25 Jan 2026 18:01:18 +0000 Files and hashes: 1: 1FTeokhUADkYbgvOTwGp40m_BPE.roa (hash: PPoy3S4bKc1j/djL6NTv+eGLXSL7GZ17YwI5tAXRtDM=) 2: 59s8eNqYwVH5ydf7xyV2eJR3_TU.roa (hash: xFhHztukLroKSICySsgp6ifCMDIbrBfwaaKjTAvv1Gw=) 3: 9c4kttevmySnfkQUW_qfNzaHphg.roa (hash: /cAqDalO1CeZ8c8IzYLpRoSc0JDQhBthLLFNZ86hRlw=) 4: FZeGgU2IawBK8YA4BwTM_e6x5Mo.roa (hash: 4nQMnYqmNvBAGhwCS2lyqUc1bPr2XdXqGh923cUp0bQ=) 5: FhQiMY_Y2B9WuZvyCd_uaF0M5dI.roa (hash: fZfKiY8vxqzWF+WGF85vLsOO0yrQwq1azfxlL3m6ht4=) 6: GrgWTPWfiMj8FwdKYhn8zJ6Z7e8.roa (hash: IO94toPK6/Wits1irHXbrZl6wNHfS6p+U483COk6R2Y=) 7: KNWwGCklL3zKbMsgIOCdcNGo2tI.roa (hash: 5rF454gnBcOMqEez62ErUsCgENLRW0isAHz0go80+Fs=) 8: Kfp91j8uLYe194UAk8dDu_vhTkQ.crl (hash: F4scdQLXxPhcHwm25Qu1Kezi7OXJoOKlHvyhMyb6iBc=) 9: Pjq2usg2Ddr0jCim-rnljjUP2xg.roa (hash: 5RL0lX+XVqmkdynoA/ZI5Ffknvw/dGR/1FpAcrG1JiE=) 10: WrWpDNw0abEoNedClZIQXtxLaNM.roa (hash: gCZS2khmjJiGzLXjdqtdk6eKzbLBYpiu89Bi9tphMq4=) 11: aSoz0nTSHVKxl1w-_tXDaUBfI_U.roa (hash: 3H/725peI0ylJlXSnX6sTF3RBFyOHCBWf0zA//LWaS4=) 12: aqUiuM7FSwO0jQrVAdkkACyulNU.roa (hash: QJoSdYm5s8mfEJjbCj5VhQz2H0KAbaPDRRmLmgZWht0=) 13: hTJEftSpqDKpAn62ncVILyiUIA4.roa (hash: CgeSiN+wMYpnSUEh7oWmMa8OtknjA6ZGJ6sq3RGzTFw=) 14: nBxToIyQbLD03aHgRpkeeNieOPw.roa (hash: +npXv56cRJNf6jJA2m2/8FRk/EXL/cvT8hUJka5s2Lk=) 15: yBrC20joWzPYJC2p3ASrdCZ0wzk.roa (hash: xZei5bNpfbVHrnCyo7DX6ea+rnn9Va9LPl3q+efKuDg=) 16: yINiCi-fcEAzzbT8ry3F24_HnBw.roa (hash: DTnC3s+dTYZX9VNSoLxZjlybV3sMyllGW6D2HGEmUQ8=) 17: y_Cp0Ost5PqmlG4Hk_lC2iR2YZ8.roa (hash: x+U/bdDPmhe7n+Wg1yqeuhWGZvsQ5Fcm1ldpfk9dBgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 18:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f1:2a:e2:a1:c0:88:cf:e9:75:8c:16:90:4f:c2:dd:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Validity Not Before: Jan 24 18:01:18 2026 GMT Not After : Jan 25 18:01:18 2026 GMT Subject: CN=a2bb6f7fc8cd9e70d304495c42c4246677655ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e3:4b:db:55:f1:55:c5:c5:58:06:d2:2e:29: b6:fd:5d:e8:54:00:f2:72:61:56:50:4c:ec:0e:a8: 8e:d0:b9:55:db:d5:b1:83:cd:89:f5:61:10:7e:e4: 5d:7c:11:f3:ea:3c:c4:ed:d4:66:70:dc:66:fb:7f: a9:d5:97:ad:9c:2b:f7:9c:0b:0c:81:e8:cc:39:a9: 03:7c:90:b3:cb:04:dc:11:d2:5e:8a:e8:98:af:0b: 3f:c8:b7:ef:da:5e:09:06:ab:84:9d:4f:d5:0a:07: ab:ec:1a:ac:86:db:b1:01:96:5b:0e:df:9b:9a:f4: 16:0c:52:d9:52:cd:71:bc:15:00:11:41:c4:ea:76: f1:37:6e:3a:c1:05:67:09:27:4b:1c:36:16:c4:62: 26:fd:07:b2:bf:b3:f1:ae:95:09:82:00:bf:23:8b: b7:42:d1:ed:cd:0d:07:dc:77:ed:5f:d6:76:7a:7a: 4c:85:69:41:78:b3:6c:29:f3:94:a2:ec:02:43:e6: 25:f9:7f:37:29:e3:d3:57:2e:f2:d3:a7:e4:03:ec: e2:af:a0:96:d2:24:f7:3f:17:b0:1e:77:0e:3d:66: f4:ea:1a:03:b2:96:a6:24:e3:50:96:c6:81:de:1e: bc:9c:8e:0b:84:b4:88:82:10:ed:ae:45:63:1a:9d: 0b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:BB:6F:7F:C8:CD:9E:70:D3:04:49:5C:42:C4:24:66:77:65:5C:A6 X509v3 Authority Key Identifier: keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:01:ef:c1:cb:14:0b:35:b9:eb:1b:56:02:0f:cb:35:36:e7: 7c:50:84:24:93:54:ab:92:d8:1b:56:c4:77:2c:0f:c0:03:a7: 12:ce:fe:5a:52:c7:2b:c6:36:64:60:5e:d9:67:63:65:bf:27: 37:d0:82:62:42:65:40:9b:2d:d7:60:b6:6b:ee:a6:a5:40:44: 21:ee:c0:4b:a8:ee:a2:99:ef:8e:07:2c:35:8f:2a:bf:81:e0: 25:a6:5e:0e:3b:41:20:15:1f:fb:47:a8:2f:71:cd:d0:93:c7: de:40:e5:0d:0d:dd:5e:b9:25:4c:b5:fb:7c:1c:3b:53:32:bb: 91:1f:2b:87:34:7e:cb:3c:4c:34:94:ab:0b:13:98:ae:3a:41: 6d:19:89:dd:52:b2:cd:ca:31:57:3b:75:12:66:d3:a3:d6:1b: 8d:6b:42:69:09:aa:4d:a6:df:53:e3:a9:2e:56:1b:d3:11:c5: 61:9f:f3:34:90:4a:64:96:74:98:83:1f:ec:b1:1c:c9:bf:77: a6:79:37:9d:1d:2e:83:e5:0a:a9:6e:85:4e:08:56:fe:c2:66: 12:4a:61:e2:46:29:ed:87:cd:e7:c8:02:f4:db:ae:84:d0:2d: 60:32:b3:4e:0f:55:34:ec:e4:9b:c2:f0:9f:b1:ed:09:af:a9: 2d:db:9b:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvxKuKhwIjP6XWMFpBPwt3OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmE3ZGQ2M2YyZTJkODdiNWY3ODUwMDkzYzc0M2JiZmJl MTRlNDQwHhcNMjYwMTI0MTgwMTE4WhcNMjYwMTI1MTgwMTE4WjAzMTEwLwYDVQQD EyhhMmJiNmY3ZmM4Y2Q5ZTcwZDMwNDQ5NWM0MmM0MjQ2Njc3NjU1Y2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuNL21XxVcXFWAbSLim2/V3oVADy cmFWUEzsDqiO0LlV29Wxg82J9WEQfuRdfBHz6jzE7dRmcNxm+3+p1ZetnCv3nAsM gejMOakDfJCzywTcEdJeiuiYrws/yLfv2l4JBquEnU/VCger7BqshtuxAZZbDt+b mvQWDFLZUs1xvBUAEUHE6nbxN246wQVnCSdLHDYWxGIm/Qeyv7PxrpUJggC/I4u3 QtHtzQ0H3HftX9Z2enpMhWlBeLNsKfOUouwCQ+Yl+X83KePTVy7y06fkA+zir6CW 0iT3PxewHncOPWb06hoDspamJONQlsaB3h68nI4LhLSIghDtrkVjGp0L8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKK7b3/IzZ5w0wRJXELEJGZ3ZVymMB8GA1UdIwQY MBaAFCn6fdY/Li2HtfeFAJPHQ7v74U5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUt NzlmN2I2ZWE3YzE0LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUtNzlmN2I2ZWE3YzE0 LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAHvwcsU CzW56xtWAg/LNTbnfFCEJJNUq5LYG1bEdywPwAOnEs7+WlLHK8Y2ZGBe2WdjZb8n N9CCYkJlQJst12C2a+6mpUBEIe7AS6juopnvjgcsNY8qv4HgJaZeDjtBIBUf+0eo L3HN0JPH3kDlDQ3dXrklTLX7fBw7UzK7kR8rhzR+yzxMNJSrCxOYrjpBbRmJ3VKy zcoxVzt1EmbTo9YbjWtCaQmqTabfU+OpLlYb0xHFYZ/zNJBKZJZ0mIMf7LEcyb93 pnk3nR0ug+UKqW6FTghW/sJmEkph4kYp7YfN58gC9NuuhNAtYDKzTg9VNOzkm8Lw n7HtCa+pLdubHA== -----END CERTIFICATE-----Generated at Sun Jan 25 01:51:33 2026 by rpki-client