This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft File: K_L644DF1MHigYEKNNuYg8nZ_y8.mft (raw, json) Hash identifier: lduJaQXrzWSMr0O+OTh93nd8ib/GhFUEIFuvcunn32s= Subject key identifier: EB:B4:76:C9:73:F6:5F:AD:C7:C1:EC:03:DC:51:B0:19:51:E3:45:5A Authority key identifier: 2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F Certificate issuer: /CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f Certificate serial: 019BFC1BB886E6110B413E633FF769126E80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft Manifest number: 0774 Signing time: Mon 26 Jan 2026 21:00:33 +0000 Manifest this update: Mon 26 Jan 2026 21:00:33 +0000 Manifest next update: Tue 27 Jan 2026 21:00:33 +0000 Files and hashes: 1: K_L644DF1MHigYEKNNuYg8nZ_y8.crl (hash: koSnt4iUBYwMIjDK3AvTskqol/Y+cgvBn1or6+2TQds=) 2: NrFG9a7lhgdagV21jW_Y5WHIDU4.roa (hash: VxqOc7Zmm8Sw61vVYrF1hQBCY2BqNer2KY9Km2/+dR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1b:b8:86:e6:11:0b:41:3e:63:3f:f7:69:12:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f Validity Not Before: Jan 26 21:00:33 2026 GMT Not After : Jan 27 21:00:33 2026 GMT Subject: CN=ebb476c973f65fadc7c1ec03dc51b01951e3455a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f0:53:49:cf:36:9b:36:85:4a:0d:5c:a3:52: 26:5e:2a:de:97:04:21:68:66:af:6d:4f:6b:0c:af: 2f:d1:09:7a:83:29:95:39:fb:3f:a5:7f:d9:9b:fd: 92:0e:e8:60:bd:72:df:94:f9:fc:3f:a7:cb:6e:a4: 85:7f:53:3b:9c:3e:ea:43:3f:21:44:ce:14:a3:5e: da:96:c6:4a:d9:75:b6:0b:e1:d0:cd:a2:cb:2e:d3: 59:32:9e:28:8c:22:90:b0:66:a9:d2:22:8a:42:6f: dd:55:55:4d:9c:7c:c9:1f:0d:16:13:ab:52:70:be: b7:ce:a3:f7:0f:b6:51:fe:a9:10:65:19:d2:14:a6: 58:ec:06:0a:38:0b:da:93:00:d2:40:b4:82:03:06: 17:36:bd:ec:1a:b3:96:91:a8:16:9d:9a:20:99:58: 5e:73:14:6f:f4:c2:ac:41:c9:b5:8d:22:b7:39:e6: 91:ae:4d:1f:8f:08:0f:79:80:20:95:59:04:b3:99: dc:9a:1e:2b:32:b1:c9:b5:a8:da:45:20:ad:f8:43: 75:3c:be:6e:92:7b:40:ab:18:2d:8a:13:a7:96:3d: 6e:f6:e5:ee:d5:c9:02:11:b9:eb:dd:27:6d:07:1b: 04:bf:90:d0:67:11:3b:47:77:71:d5:89:c7:c4:7d: 2e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B4:76:C9:73:F6:5F:AD:C7:C1:EC:03:DC:51:B0:19:51:E3:45:5A X509v3 Authority Key Identifier: keyid:2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:56:00:34:3f:6f:cd:b3:4e:3a:61:c5:ed:67:04:d0:cb:cf: de:fd:94:21:6b:92:6e:70:a1:9b:22:4f:27:1e:29:5f:a7:b9: 08:29:a3:d8:ad:27:9e:1f:a9:57:a1:d4:f2:7d:39:fe:86:b9: 03:67:24:57:82:7c:cd:62:05:77:94:64:0e:7a:2d:0b:89:e1: 41:36:8f:fb:89:de:5a:5b:37:5f:90:39:36:ac:e8:46:a6:3d: 2c:ba:cb:71:9d:cc:0b:6f:74:8b:20:4e:cc:f6:12:43:3b:8c: 13:54:9b:0c:ea:4e:12:3f:e7:6d:05:29:77:00:54:b9:1f:71: 97:c2:38:99:4a:b8:b2:16:35:dd:88:52:fb:b8:a6:33:13:1a: de:81:d4:d0:2c:fe:ad:d6:64:15:3e:ed:ee:ca:2a:20:58:0e: f8:a2:e2:e9:eb:52:7b:e4:e1:6d:23:7a:16:dd:68:52:a4:5b: 60:8e:b1:35:0d:6d:9e:3a:5b:7b:63:76:fc:de:a1:b7:e8:47: 0b:dd:01:a4:46:ad:e5:46:dd:a2:94:df:c2:e4:b8:83:44:9e: 1d:51:76:09:75:93:11:c1:5f:57:3b:d8:80:11:38:85:a7:10: e3:d1:f0:3a:65:f6:28:0e:0b:36:c0:5f:34:3f:cd:6e:ec:14: 51:f3:ab:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8G7iG5hELQT5jP/dpEm6AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZjJmYWUzODBjNWQ0YzFlMjgxODEwYTM0ZGI5ODgzYzlk OWZmMmYwHhcNMjYwMTI2MjEwMDMzWhcNMjYwMTI3MjEwMDMzWjAzMTEwLwYDVQQD EyhlYmI0NzZjOTczZjY1ZmFkYzdjMWVjMDNkYzUxYjAxOTUxZTM0NTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvBTSc82mzaFSg1co1ImXirelwQh aGavbU9rDK8v0Ql6gymVOfs/pX/Zm/2SDuhgvXLflPn8P6fLbqSFf1M7nD7qQz8h RM4Uo17alsZK2XW2C+HQzaLLLtNZMp4ojCKQsGap0iKKQm/dVVVNnHzJHw0WE6tS cL63zqP3D7ZR/qkQZRnSFKZY7AYKOAvakwDSQLSCAwYXNr3sGrOWkagWnZogmVhe cxRv9MKsQcm1jSK3OeaRrk0fjwgPeYAglVkEs5ncmh4rMrHJtajaRSCt+EN1PL5u kntAqxgtihOnlj1u9uXu1ckCEbnr3SdtBxsEv5DQZxE7R3dx1YnHxH0uLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOu0dslz9l+tx8HsA9xRsBlR40VaMB8GA1UdIwQY MBaAFCvy+uOAxdTB4oGBCjTbmIPJ2f8vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS19MNjQ0REYxTUhpZ1lFS05OdVlnOG5aX3k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xM2UxZmYtYTVkMy00NGNkLWIxYmUt ZmJmMGVkM2Y5MTU3LzEvS19MNjQ0REYxTUhpZ1lFS05OdVlnOG5aX3k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xM2UxZmYtYTVkMy00NGNkLWIxYmUtZmJmMGVkM2Y5MTU3 LzEvS19MNjQ0REYxTUhpZ1lFS05OdVlnOG5aX3k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUFYAND9v zbNOOmHF7WcE0MvP3v2UIWuSbnChmyJPJx4pX6e5CCmj2K0nnh+pV6HU8n05/oa5 A2ckV4J8zWIFd5RkDnotC4nhQTaP+4neWls3X5A5NqzoRqY9LLrLcZ3MC290iyBO zPYSQzuME1SbDOpOEj/nbQUpdwBUuR9xl8I4mUq4shY13YhS+7imMxMa3oHU0Cz+ rdZkFT7t7soqIFgO+KLi6etSe+ThbSN6Ft1oUqRbYI6xNQ1tnjpbe2N2/N6ht+hH C90BpEat5UbdopTfwuS4g0SeHVF2CXWTEcFfVzvYgBE4hacQ49HwOmX2KA4LNsBf ND/NbuwUUfOrBw== -----END CERTIFICATE-----Generated at Tue Jan 27 06:08:10 2026 by rpki-client