This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft File: kyAhKZaVds41f64mycfPmKglDqY.mft (raw, json) Hash identifier: KBFD/w6cs1uxeV2CzavluRgX8qAd0i+J3wuBF6RWSnU= Subject key identifier: 58:82:60:9A:AC:EC:26:5E:28:CE:30:E2:1B:91:8D:44:5F:08:3E:3F Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6 Certificate issuer: /CN=93202129969576ce357fae26c9c7cf98a8250ea6 Certificate serial: 019BDEED44A29CE3CCCF0FC22C79A31458DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft Manifest number: 0AF6 Signing time: Wed 21 Jan 2026 05:00:50 +0000 Manifest this update: Wed 21 Jan 2026 05:00:50 +0000 Manifest next update: Thu 22 Jan 2026 05:00:50 +0000 Files and hashes: 1: 1Kvv6sx0rZVONCzJAQ9yJJI0fuY.roa (hash: 7/TdPMTJa+xAQgIxwuTawOuvVxvCTpJMqykow3dXsmk=) 2: 46w3PoQLQ6mKd5nBzIN9e_n7Gf4.roa (hash: TEWQBxn6HUz85rJ+5632FC4cCm6zZFAnkvJsy3J7nrU=) 3: kyAhKZaVds41f64mycfPmKglDqY.crl (hash: yKKa23q41/si0YhkAVfYpcd8kZ4nrHDx7n795HdAHEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:de:ed:44:a2:9c:e3:cc:cf:0f:c2:2c:79:a3:14:58:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6 Validity Not Before: Jan 21 05:00:50 2026 GMT Not After : Jan 22 05:00:50 2026 GMT Subject: CN=5882609aacec265e28ce30e21b918d445f083e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0f:43:74:99:be:eb:58:6c:cd:01:68:03:21: dd:e7:0a:88:c8:53:53:49:8b:d5:b7:cb:fa:48:63: fe:1d:ba:68:2f:19:7e:5b:26:3b:70:60:37:b7:2d: f1:35:2c:97:1b:7b:61:65:cb:a1:d5:65:26:45:53: a8:bd:fc:bb:eb:e1:45:1f:3b:e9:5f:81:ef:c2:72: 1c:ee:e8:e7:0f:cd:d5:db:72:05:8b:77:77:e5:42: 21:bd:63:98:a7:b4:c3:2d:17:e2:04:42:df:cb:1b: b9:d4:86:3e:9f:16:45:ad:97:18:64:ce:22:0a:48: 1d:cd:b0:31:af:18:88:12:99:0b:8c:5b:20:a6:3b: a1:c0:5d:0f:e5:11:2b:a5:7e:d7:41:c7:56:ac:34: 71:2e:ee:e3:90:6e:9b:18:16:17:4f:e0:35:b0:eb: dc:d1:ba:28:d4:64:dd:5f:75:c5:9c:34:f7:95:44: 0d:79:4a:18:b9:3e:67:0b:04:b2:69:6f:ad:53:79: 9c:b3:d9:71:bc:70:8a:0b:74:6d:9a:bb:ca:10:12: 31:93:44:37:49:2f:60:ff:97:1b:86:b3:4a:09:48: 64:e6:a9:8d:d2:85:2d:3c:93:cf:17:83:6a:9e:98: e9:a2:b7:dc:ea:6b:b5:93:6e:bb:10:0c:44:ea:36: f2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:82:60:9A:AC:EC:26:5E:28:CE:30:E2:1B:91:8D:44:5F:08:3E:3F X509v3 Authority Key Identifier: keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:3e:04:de:a8:a2:d8:1c:3e:48:15:ed:f6:9d:98:33:cd:03: b2:8f:f9:91:75:8b:aa:d0:c3:0f:00:d6:f9:70:7e:49:89:8e: 61:cb:9a:cb:c2:4c:f1:f5:12:a7:bc:2d:f0:3b:12:ff:bb:62: 1e:13:32:56:08:fa:25:45:bf:bf:0e:d7:d9:68:34:7a:5e:13: d9:62:f7:28:a0:a6:27:3b:54:6b:bd:9a:db:55:dc:f6:24:df: bd:86:d8:2e:39:84:74:e3:10:b0:53:70:a9:14:da:96:5a:34: d9:ab:38:63:74:67:51:14:e2:05:8d:98:a9:d9:35:5f:f8:f5: 19:4d:02:e9:2f:0a:83:1c:4e:c2:6d:b7:fd:0d:5e:0c:24:ed: 07:82:1d:62:34:ce:ab:28:be:44:8f:e9:5e:8b:26:0e:5d:38: 4b:ff:bd:08:c7:8f:f0:eb:8b:fd:90:95:1e:2e:84:f7:3d:dd: 4a:85:a5:30:a4:9f:1b:bf:d5:e1:ec:73:1a:2e:c4:7c:18:53: 78:61:41:8b:bd:f7:05:c4:88:0a:14:95:9f:6c:76:2e:2d:a1: e7:ad:98:db:07:a4:19:bf:a1:30:b8:87:be:77:f4:55:a8:47: 82:b1:db:5f:35:1c:0f:dc:41:2f:49:e6:be:57:c4:51:6f:d8: a0:d8:ce:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZve7USinOPMzw/CLHmjFFjdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMjAyMTI5OTY5NTc2Y2UzNTdmYWUyNmM5YzdjZjk4YTgy NTBlYTYwHhcNMjYwMTIxMDUwMDUwWhcNMjYwMTIyMDUwMDUwWjAzMTEwLwYDVQQD Eyg1ODgyNjA5YWFjZWMyNjVlMjhjZTMwZTIxYjkxOGQ0NDVmMDgzZTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA9DdJm+61hszQFoAyHd5wqIyFNT SYvVt8v6SGP+HbpoLxl+WyY7cGA3ty3xNSyXG3thZcuh1WUmRVOovfy76+FFHzvp X4HvwnIc7ujnD83V23IFi3d35UIhvWOYp7TDLRfiBELfyxu51IY+nxZFrZcYZM4i CkgdzbAxrxiIEpkLjFsgpjuhwF0P5RErpX7XQcdWrDRxLu7jkG6bGBYXT+A1sOvc 0boo1GTdX3XFnDT3lUQNeUoYuT5nCwSyaW+tU3mcs9lxvHCKC3RtmrvKEBIxk0Q3 SS9g/5cbhrNKCUhk5qmN0oUtPJPPF4Nqnpjporfc6mu1k267EAxE6jbybQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFiCYJqs7CZeKM4w4huRjURfCD4/MB8GA1UdIwQY MBaAFJMgISmWlXbONX+uJsnHz5ioJQ6mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9kNmU3OTYtMGUxNC00NWIxLTljZjMt NWFkNThhYmZiYjFmLzEva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9kNmU3OTYtMGUxNC00NWIxLTljZjMtNWFkNThhYmZiYjFm LzEva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATz4E3qii 2Bw+SBXt9p2YM80Dso/5kXWLqtDDDwDW+XB+SYmOYcuay8JM8fUSp7wt8DsS/7ti HhMyVgj6JUW/vw7X2Wg0el4T2WL3KKCmJztUa72a21Xc9iTfvYbYLjmEdOMQsFNw qRTallo02as4Y3RnURTiBY2Yqdk1X/j1GU0C6S8KgxxOwm23/Q1eDCTtB4IdYjTO qyi+RI/pXosmDl04S/+9CMeP8OuL/ZCVHi6E9z3dSoWlMKSfG7/V4exzGi7EfBhT eGFBi733BcSIChSVn2x2Li2h562Y2wekGb+hMLiHvnf0VahHgrHbXzUcD9xBL0nm vlfEUW/YoNjOlA== -----END CERTIFICATE-----Generated at Wed Jan 21 08:58:25 2026 by rpki-client