This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft File: klbbNIe0xbrLMAF3BXzzF0z3dHc.mft (raw, json) Hash identifier: 8GHn1n1Ffhczyz9K/JFgskhagTHHztjF4f08TTThweA= Subject key identifier: 8B:70:AB:16:AE:E0:61:44:D6:DC:B6:55:EE:74:37:2D:82:D6:E9:0B Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77 Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477 Certificate serial: 019C1F164A334076617958E2357E4CCD986A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft Manifest number: 17FE Signing time: Mon 02 Feb 2026 16:01:20 +0000 Manifest this update: Mon 02 Feb 2026 16:01:20 +0000 Manifest next update: Tue 03 Feb 2026 16:01:20 +0000 Files and hashes: 1: 04BGo9FtObILQBaft1sQoeQgCYo.roa (hash: Fwkz3jqMyP5AwHPobSf3siex/Tu6ZYcC4zjVdfIOsac=) 2: klbbNIe0xbrLMAF3BXzzF0z3dHc.crl (hash: g/J/3JXFvm3nwDgk9Hpp1mijtvn6y2YBI6tahrvpvYU=) 3: rX01FOC9tDHIxRVaHAAeqyrP4Eo.roa (hash: FOCcBoXQG14i7Fi0nDAmmqDfc5/wMS3xKazNxC7cZRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1f:16:4a:33:40:76:61:79:58:e2:35:7e:4c:cd:98:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477 Validity Not Before: Feb 2 16:01:20 2026 GMT Not After : Feb 3 16:01:20 2026 GMT Subject: CN=8b70ab16aee06144d6dcb655ee74372d82d6e90b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b4:8f:f0:e7:28:18:9b:52:d6:43:96:70:dd: e2:6e:aa:79:51:83:1c:ab:86:d8:e1:f6:fb:6c:3c: db:af:32:79:8d:86:60:15:05:d7:50:3c:4a:5a:29: 36:25:ee:27:0e:fd:ec:cf:81:72:66:6f:bd:4c:5d: 4b:b3:49:7b:3d:38:1c:c3:a3:c8:b2:bb:01:a1:48: 7b:11:f3:c9:84:da:fc:30:1a:ce:db:66:0c:ff:ce: 42:7a:86:27:a5:a6:f4:2a:1c:68:3d:88:34:a5:19: c8:5f:3b:f6:de:d6:c4:f6:8b:37:ad:d2:1a:51:09: 1d:6d:1a:7e:31:1c:a6:2b:70:f5:6c:c5:a1:d0:19: 99:2f:fa:e7:42:ad:7b:16:c4:50:e9:16:ac:9f:03: 2b:76:06:b6:3c:51:c7:f6:50:1c:7b:83:55:4f:c2: 57:95:fd:d2:bd:b4:95:ed:c9:8b:e9:77:64:7a:97: 35:1f:64:71:12:67:b9:af:39:0a:29:e0:c2:a4:50: c8:73:3e:a4:d7:27:2e:70:c3:b0:56:9e:ba:a1:ad: 5c:49:30:49:96:5d:27:5e:60:0e:bb:ad:f9:a1:0d: 87:be:b6:a0:34:1b:f5:e3:d1:29:40:8c:51:32:bc: e1:2a:18:47:b8:a0:5c:9a:ad:a3:6e:af:44:49:fc: 0d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:70:AB:16:AE:E0:61:44:D6:DC:B6:55:EE:74:37:2D:82:D6:E9:0B X509v3 Authority Key Identifier: keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:33:16:6f:9f:aa:ee:10:68:82:a4:70:db:7e:fd:37:d0:b9: 6e:1e:a7:12:93:93:44:dd:31:50:91:df:34:00:98:85:5b:7b: 5b:ab:90:61:b4:28:90:4e:7f:99:dd:9a:de:6f:0d:9b:d0:0f: 50:6e:c7:2e:37:e4:e4:7f:5d:49:3e:c6:e8:c9:f0:18:b6:57: 14:81:ae:65:5d:de:8c:6d:b6:ce:5c:28:91:ed:29:98:f2:8a: 20:c6:83:fc:69:79:5c:4a:9a:77:5f:48:61:4d:6a:72:df:bd: a9:fa:aa:b8:20:ea:c1:7a:21:77:18:d4:a9:18:80:af:2b:be: aa:7b:43:16:5e:e2:a8:6b:36:5a:57:6f:1c:c7:9e:ba:f1:1d: 02:bf:75:ef:89:c1:39:c2:08:9c:b3:b0:cf:39:de:ec:0b:e9: 30:38:9a:f2:8d:43:38:54:c0:f6:2b:01:0d:38:08:23:ab:b6: ad:81:ae:21:dc:6b:b9:5a:6b:9c:a4:26:f4:7f:36:87:a6:a7: 26:d2:18:67:b7:2b:ae:b9:28:ee:ca:32:f2:a6:44:9c:d8:8c: e3:08:b8:c0:87:a3:7b:8c:6e:de:5b:a5:f1:26:e8:bb:41:41: 76:11:dd:1c:6a:4d:0a:7c:84:0c:88:a3:b9:99:4c:a6:76:1a: b0:1d:bd:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwfFkozQHZheVjiNX5MzZhqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNTZkYjM0ODdiNGM1YmFjYjMwMDE3NzA1N2NmMzE3NGNm Nzc0NzcwHhcNMjYwMjAyMTYwMTIwWhcNMjYwMjAzMTYwMTIwWjAzMTEwLwYDVQQD Eyg4YjcwYWIxNmFlZTA2MTQ0ZDZkY2I2NTVlZTc0MzcyZDgyZDZlOTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7SP8OcoGJtS1kOWcN3ibqp5UYMc q4bY4fb7bDzbrzJ5jYZgFQXXUDxKWik2Je4nDv3sz4FyZm+9TF1Ls0l7PTgcw6PI srsBoUh7EfPJhNr8MBrO22YM/85CeoYnpab0KhxoPYg0pRnIXzv23tbE9os3rdIa UQkdbRp+MRymK3D1bMWh0BmZL/rnQq17FsRQ6RasnwMrdga2PFHH9lAce4NVT8JX lf3SvbSV7cmL6Xdkepc1H2RxEme5rzkKKeDCpFDIcz6k1ycucMOwVp66oa1cSTBJ ll0nXmAOu635oQ2HvragNBv149EpQIxRMrzhKhhHuKBcmq2jbq9ESfwNZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItwqxau4GFE1ty2Ve50Ny2C1ukLMB8GA1UdIwQY MBaAFJJW2zSHtMW6yzABdwV88xdM93R3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83YjQ1YjktOTkwYi00NjE0LWE2NGUt MGY1MmVhNTIyOWZjLzEva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83YjQ1YjktOTkwYi00NjE0LWE2NGUtMGY1MmVhNTIyOWZj LzEva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjMWb5+q 7hBogqRw2379N9C5bh6nEpOTRN0xUJHfNACYhVt7W6uQYbQokE5/md2a3m8Nm9AP UG7HLjfk5H9dST7G6MnwGLZXFIGuZV3ejG22zlwoke0pmPKKIMaD/Gl5XEqad19I YU1qct+9qfqquCDqwXohdxjUqRiAryu+qntDFl7iqGs2WldvHMeeuvEdAr9174nB OcIInLOwzzne7AvpMDia8o1DOFTA9isBDTgII6u2rYGuIdxruVprnKQm9H82h6an JtIYZ7crrrko7soy8qZEnNiM4wi4wIeje4xu3lul8Sbou0FBdhHdHGpNCnyEDIij uZlMpnYasB29RQ== -----END CERTIFICATE-----Generated at Tue Feb 3 01:52:48 2026 by rpki-client