This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json) Hash identifier: Sv+sHzB7oi7KMlEUHJl9hbbAgt0Umt6A0cG9dTwU1Io= Subject key identifier: 1C:D1:72:1D:EB:A8:F3:17:55:1F:6E:0F:41:43:70:B1:F8:61:D0:D1 Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48 Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048 Certificate serial: 019B81CCDD03D9583E83F776E6BBD28BDBED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft Manifest number: 17AE Signing time: Sat 03 Jan 2026 03:00:45 +0000 Manifest this update: Sat 03 Jan 2026 03:00:45 +0000 Manifest next update: Sun 04 Jan 2026 03:00:45 +0000 Files and hashes: 1: 4C5txelxptdoicijUbZlUymO1KI.roa (hash: n5OUnYu6DQ52eh4gaqVWM1OYGrwmKHVhRB5oPVeomXo=) 2: 8ood-uHTXVuPr-Uhci0MBhQD_Ok.roa (hash: D9cQAbFXlUASgQDnCIvuvRErkHMl72I/fsdMBXIjpGU=) 3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: VZJY6UvoMVMw854nfy6UQeeO6fNHH7uy4bs9k8o/cdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 23:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:81:cc:dd:03:d9:58:3e:83:f7:76:e6:bb:d2:8b:db:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048 Validity Not Before: Jan 3 03:00:45 2026 GMT Not After : Jan 4 03:00:45 2026 GMT Subject: CN=1cd1721deba8f317551f6e0f414370b1f861d0d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f2:fc:fd:74:11:2b:a4:11:90:bb:63:fe:73: 0e:56:39:aa:23:85:8c:df:a1:e0:33:4b:e6:da:d6: 2c:04:14:bd:8a:ca:09:78:84:21:84:0b:41:05:ba: 23:46:44:bf:95:ce:61:a6:0a:e6:75:24:ee:2e:a0: a6:fb:11:65:d0:f0:2c:d1:08:61:ed:a2:07:07:fd: 58:23:01:6d:60:ca:86:41:a3:f1:53:27:b2:89:45: 7f:a8:fe:fc:c8:b2:f0:9e:09:33:2e:99:64:8a:7f: a5:33:4f:86:b1:65:c3:3b:cb:01:54:fb:d6:a1:8a: 72:b6:9a:bc:cc:eb:12:51:53:10:c7:dc:3d:a3:e9: 52:a8:e1:4d:39:5c:f0:1b:25:0b:9c:01:e6:1a:ad: f2:19:e6:7a:c3:7d:14:33:06:c0:d0:38:ba:b0:d9: b9:ce:55:c7:94:b2:5d:25:c3:b7:96:d6:16:78:7d: 32:86:c0:bb:fd:99:e8:b6:8c:f8:57:f6:56:43:95: 6e:74:c2:f7:b7:ab:7f:b8:86:dc:01:1b:57:84:ea: ec:19:22:b9:9f:43:da:37:bb:a3:86:ab:72:af:47: cb:bb:2a:8c:94:19:45:61:96:a1:2d:e5:34:17:50: 25:07:bc:3b:fd:e7:34:70:75:9d:cf:d0:7c:72:0b: 01:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D1:72:1D:EB:A8:F3:17:55:1F:6E:0F:41:43:70:B1:F8:61:D0:D1 X509v3 Authority Key Identifier: keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:f9:e0:e6:26:85:a6:d6:3a:d6:8e:01:a9:f9:da:14:74:fe: f1:e6:f3:38:69:c8:89:39:9c:a2:82:a8:6f:1f:f5:d5:ac:fa: ee:ad:43:cd:c6:e3:01:1c:31:b5:94:55:94:6e:1f:50:76:46: fb:ed:1b:9d:21:16:52:ad:82:6e:9c:ee:a8:13:2f:aa:5a:48: 2b:f8:8b:71:f8:d5:31:82:01:91:0b:78:ea:ed:5c:28:d9:78: 77:a2:51:f3:b8:00:5c:fb:bc:59:c2:f6:f2:79:3c:12:83:2b: 31:93:07:6e:e1:3f:6d:67:90:86:f6:28:a2:7a:76:24:75:5c: 4c:4b:30:f2:95:d2:f5:b9:fe:d3:e6:4d:7c:66:11:60:18:c5: 63:33:3d:4a:35:cc:8c:56:a2:9c:0e:fd:c2:e9:9a:0a:ea:ee: 24:60:d8:62:28:38:f6:44:61:48:f6:77:18:71:d5:68:5d:b1: c1:81:d8:27:1f:f6:8d:18:62:27:4e:0d:6d:84:29:b7:6a:43: 9e:11:f5:5e:5e:02:e1:56:c4:f0:84:92:7a:37:88:87:fd:0e: 3a:19:db:c3:11:e2:71:9b:ee:d3:74:7b:ea:22:11:f5:49:25: af:29:1c:2e:47:2c:5b:b8:aa:11:70:6b:c0:06:bb:fd:80:f9: 3c:d5:02:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuBzN0D2Vg+g/d25rvSi9vtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NTU3OWY1YjY3M2RiZTJlYmJhMzQ4Y2ZiMGY1NjEyNGNk ZTcwNDgwHhcNMjYwMTAzMDMwMDQ1WhcNMjYwMTA0MDMwMDQ1WjAzMTEwLwYDVQQD EygxY2QxNzIxZGViYThmMzE3NTUxZjZlMGY0MTQzNzBiMWY4NjFkMGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfL8/XQRK6QRkLtj/nMOVjmqI4WM 36HgM0vm2tYsBBS9isoJeIQhhAtBBbojRkS/lc5hpgrmdSTuLqCm+xFl0PAs0Qhh 7aIHB/1YIwFtYMqGQaPxUyeyiUV/qP78yLLwngkzLplkin+lM0+GsWXDO8sBVPvW oYpytpq8zOsSUVMQx9w9o+lSqOFNOVzwGyULnAHmGq3yGeZ6w30UMwbA0Di6sNm5 zlXHlLJdJcO3ltYWeH0yhsC7/Znotoz4V/ZWQ5VudML3t6t/uIbcARtXhOrsGSK5 n0PaN7ujhqtyr0fLuyqMlBlFYZahLeU0F1AlB7w7/ec0cHWdz9B8cgsBowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzRch3rqPMXVR9uD0FDcLH4YdDRMB8GA1UdIwQY MBaAFClVefW2c9vi67o0jPsPVhJM3nBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1ZWNTliWnoyLUxydWpTTS13OVdFa3plY0VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8xNTc0YzktMDFkNS00OGZkLTk4MGYt MzQzYzRkMjRjMjNiLzEvS1ZWNTliWnoyLUxydWpTTS13OVdFa3plY0VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS8xNTc0YzktMDFkNS00OGZkLTk4MGYtMzQzYzRkMjRjMjNi LzEvS1ZWNTliWnoyLUxydWpTTS13OVdFa3plY0VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/ng5iaF ptY61o4BqfnaFHT+8ebzOGnIiTmcooKobx/11az67q1DzcbjARwxtZRVlG4fUHZG ++0bnSEWUq2CbpzuqBMvqlpIK/iLcfjVMYIBkQt46u1cKNl4d6JR87gAXPu8WcL2 8nk8EoMrMZMHbuE/bWeQhvYoonp2JHVcTEsw8pXS9bn+0+ZNfGYRYBjFYzM9SjXM jFainA79wumaCuruJGDYYig49kRhSPZ3GHHVaF2xwYHYJx/2jRhiJ04NbYQpt2pD nhH1Xl4C4VbE8ISSejeIh/0OOhnbwxHicZvu03R76iIR9UklrykcLkcsW7iqEXBr wAa7/YD5PNUC0Q== -----END CERTIFICATE-----Generated at Sat Jan 3 08:21:14 2026 by rpki-client