This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft File: KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json) Hash identifier: Ye+/qdT+PODAm+k6LDa75toMgLNIYkTFHZ/B9s00fc0= Subject key identifier: BD:53:15:3D:6C:FA:A6:58:BF:93:C9:EA:FE:6C:27:4C:69:15:8C:06 Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d Certificate serial: 019BF9F710B4FAF0781BD92614005D4176BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft Manifest number: 17FC Signing time: Mon 26 Jan 2026 11:01:16 +0000 Manifest this update: Mon 26 Jan 2026 11:01:16 +0000 Manifest next update: Tue 27 Jan 2026 11:01:16 +0000 Files and hashes: 1: 7FZJTSyZd-nU__CcRlBlCG3_Pn0.roa (hash: noUOCFFTHGmwRjfnOiZSbY4dF3Bfkgx9GSd4XfEBnhk=) 2: EQEuBryRxEtPlweSUJeuZZ3EudM.roa (hash: t5gpiKl+cjOje+0MxgLYfbY+toiD/bOlBv49FVybdJ8=) 3: GdbR_idqMFPPvTnMDLo84FSRLLE.roa (hash: 9wA72fFqTL25Susq0KJt1IgIugCWrwoBtcIiJv1WM5U=) 4: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: nNTgMB++TJ+UF8p0lVkmBNHkwe/9BYggLJf4IZcV2rU=) 5: LDWe2SngnhCT8P4q-miYjt99pqY.roa (hash: aLbq8y9d6k1sRpBOiELvMKcrET2yuN4aNlw+zUtUThI=) 6: RkYKbdX8YWW1g1REm_cJUS7GYP8.roa (hash: XBhm8T8sayUo8xGJ7zpJupaK88M7yfhNyFTulthcP+s=) 7: SxCmwkP6Nm4OCkq0cafIGZz0UzE.roa (hash: xnBBhj7JCuhXFRvrPefaRqPCoJ+R9TXOqzjYihjmxgg=) 8: iw99MEfgWCk8jzXEVkDUVL7mRVE.roa (hash: sLeHG7bJoAQLwEnzTf++99j3zH2x5tEIEtEUj3mnDCE=) 9: tVeuYd91sHEJZuUDNMrqrKk6uME.roa (hash: hSzJOItctPBI6y6Se6D0Urxemw96jOFCv4Hf70uq1Qk=) 10: zSUHQIil1pv6NSEqyiy6QZUHKgI.roa (hash: sCV+NE2NUCcb5ZuDP7u98vtXx/1nUNBXjVpaW7PtLOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f7:10:b4:fa:f0:78:1b:d9:26:14:00:5d:41:76:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d Validity Not Before: Jan 26 11:01:16 2026 GMT Not After : Jan 27 11:01:16 2026 GMT Subject: CN=bd53153d6cfaa658bf93c9eafe6c274c69158c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:39:f7:ba:eb:48:82:ec:07:f6:86:24:8a:cf: 22:da:8d:d1:99:21:2d:53:f5:75:a2:63:74:1a:40: 80:45:77:50:fa:ba:b5:78:53:f3:e5:21:5b:10:e6: a4:d7:52:67:10:f8:2a:e7:35:83:9e:9c:f8:a0:0b: 31:43:9c:d9:08:fa:2c:78:56:56:e5:80:1d:ae:a5: 83:77:12:de:ea:6b:b1:88:0f:60:48:6d:ca:3b:17: af:0d:04:3f:24:d6:3c:7f:3f:19:d8:3a:e9:32:ae: 2d:29:c1:04:f6:7f:93:89:99:4b:ee:43:37:29:62: b2:98:ef:e0:4d:33:af:b7:a7:37:ed:62:a5:6e:ca: d1:9d:51:73:b6:04:4a:5f:17:2f:f0:14:50:f6:97: 08:7d:7d:37:ee:75:63:00:37:bb:7e:f1:f4:7f:0f: ed:60:d0:21:25:24:4e:32:e7:d5:61:e8:b0:6e:bf: 04:da:10:db:76:75:13:a0:ac:1e:41:60:92:e9:f1: e1:64:4d:82:5f:a3:ae:1f:8e:f0:6c:46:d9:08:a7: bd:f5:2a:99:cf:68:01:73:f9:ce:f2:33:e6:c5:ff: 5e:22:ef:ca:48:a7:df:a5:54:ac:6a:6a:ba:98:51: 9a:fc:da:d4:c3:11:79:12:6b:5e:e9:59:ab:8e:fe: 28:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:53:15:3D:6C:FA:A6:58:BF:93:C9:EA:FE:6C:27:4C:69:15:8C:06 X509v3 Authority Key Identifier: keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:61:0a:0a:11:36:16:dc:53:09:76:87:f9:1e:13:c5:96:0c: a6:1a:a1:7a:0e:33:d3:4e:e8:91:da:92:cd:98:f4:49:9e:f6: c0:6e:8e:01:c4:14:c6:0f:a7:eb:96:c4:32:9e:2b:28:68:22: 7d:a6:e2:f4:13:fd:15:8b:04:9b:79:35:2f:bc:73:78:25:60: 93:b1:41:d0:d0:eb:bf:f7:02:e9:5f:eb:35:e6:d1:e3:38:1a: 85:d4:77:2b:e2:a7:5c:71:df:b0:95:db:cf:4c:22:e6:ee:e0: 53:88:36:bb:5a:76:35:8d:ed:5a:c1:b6:29:08:ec:fe:55:10: 50:b8:a7:0a:96:8f:9d:de:57:3e:3c:ac:e3:ac:e5:f4:33:ac: dc:28:f0:9b:c0:44:29:64:68:84:f1:aa:94:4d:94:48:cc:d6: 1e:33:3e:85:f0:9b:a9:98:fa:b1:5a:92:ce:10:09:eb:6a:78: 74:1f:2f:e1:bf:22:e7:88:73:3f:fd:18:ea:f1:fc:3a:89:ac: e7:23:31:11:f4:8d:53:fe:02:ab:7c:88:fc:35:6b:33:6b:a5: 7b:6e:c9:48:19:99:9f:3a:a7:0f:74:65:f6:38:8e:cd:2d:f8: 0e:54:6f:e2:26:cf:32:68:3b:48:a4:aa:3c:d0:98:28:aa:01: f7:83:fd:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv59xC0+vB4G9kmFABdQXa/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2FlNzU5MmNhNTI0OTFkYzE2NmEzMGZlMTQ3N2Q3MTJi ZDQ2NWQwHhcNMjYwMTI2MTEwMTE2WhcNMjYwMTI3MTEwMTE2WjAzMTEwLwYDVQQD EyhiZDUzMTUzZDZjZmFhNjU4YmY5M2M5ZWFmZTZjMjc0YzY5MTU4YzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzn3uutIguwH9oYkis8i2o3RmSEt U/V1omN0GkCARXdQ+rq1eFPz5SFbEOak11JnEPgq5zWDnpz4oAsxQ5zZCPoseFZW 5YAdrqWDdxLe6muxiA9gSG3KOxevDQQ/JNY8fz8Z2DrpMq4tKcEE9n+TiZlL7kM3 KWKymO/gTTOvt6c37WKlbsrRnVFztgRKXxcv8BRQ9pcIfX037nVjADe7fvH0fw/t YNAhJSROMufVYeiwbr8E2hDbdnUToKweQWCS6fHhZE2CX6OuH47wbEbZCKe99SqZ z2gBc/nO8jPmxf9eIu/KSKffpVSsamq6mFGa/NrUwxF5Emte6Vmrjv4o4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1TFT1s+qZYv5PJ6v5sJ0xpFYwGMB8GA1UdIwQY MBaAFCl651kspSSR3BZqMP4Ud9cSvUZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgt MzkxMGE1OWExMTIxLzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgtMzkxMGE1OWExMTIx LzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0mEKChE2 FtxTCXaH+R4TxZYMphqheg4z007okdqSzZj0SZ72wG6OAcQUxg+n65bEMp4rKGgi fabi9BP9FYsEm3k1L7xzeCVgk7FB0NDrv/cC6V/rNebR4zgahdR3K+KnXHHfsJXb z0wi5u7gU4g2u1p2NY3tWsG2KQjs/lUQULinCpaPnd5XPjys46zl9DOs3Cjwm8BE KWRohPGqlE2USMzWHjM+hfCbqZj6sVqSzhAJ62p4dB8v4b8i54hzP/0Y6vH8Ooms 5yMxEfSNU/4Cq3yI/DVrM2ule27JSBmZnzqnD3Rl9jiOzS34DlRv4ibPMmg7SKSq PNCYKKoB94P9rQ== -----END CERTIFICATE-----Generated at Mon Jan 26 13:35:30 2026 by rpki-client