This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft File: Kt1DinzjyzefKM-gUc9j1a2P48o.mft (raw, json) Hash identifier: A4HyR6AFamCXeI3GSzm+xXQYzSrNTYRFGel+TKBHfo4= Subject key identifier: C6:37:BB:9B:4D:80:41:8F:C7:3C:13:81:EC:B7:86:9A:2E:9D:21:B9 Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA Certificate issuer: /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca Certificate serial: 019BF9C0A0EB4FDE197E39683992C153F17C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft Manifest number: 1039 Signing time: Mon 26 Jan 2026 10:01:49 +0000 Manifest this update: Mon 26 Jan 2026 10:01:49 +0000 Manifest next update: Tue 27 Jan 2026 10:01:49 +0000 Files and hashes: 1: Kt1DinzjyzefKM-gUc9j1a2P48o.crl (hash: CggzpLvDY1skgK6/n09o3o5hcWeF1v9/2rKFbM2U6wg=) 2: TjdLfOccjgqI2XXM8B2ZZw7tFJ8.roa (hash: +hak+f8WGw7BDjiRr9H4bCjNHnC7kv3i+d77lMHG2zg=) 3: Z0ZfSm5v6vjqJ1EOy4v6M7YzE4g.roa (hash: QBWUjOIO2WUCsQtNPmImcsDTQ9b4oh/Op2GsR5eOGtY=) 4: dWJoADnfK4B-d746vzmjtMcAOjU.roa (hash: so9FsTl0/OXPXGPpcUQXEB72QKiIb3Xkte1Mq+cb85o=) 5: qXz1wwKxqiN0TXCABlpmdej_AF4.roa (hash: 80kAjI8jd2lcruWJ4j/gPqkVYCIlUhbIwX0K9xxTqBU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:c0:a0:eb:4f:de:19:7e:39:68:39:92:c1:53:f1:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca Validity Not Before: Jan 26 10:01:49 2026 GMT Not After : Jan 27 10:01:49 2026 GMT Subject: CN=c637bb9b4d80418fc73c1381ecb7869a2e9d21b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2f:1b:6c:ab:fa:f7:62:11:2c:86:75:59:12: 49:fe:e6:d3:59:16:b4:10:31:10:48:31:c7:25:24: d5:75:fe:4a:db:fb:60:4b:ac:d5:27:b5:6d:bf:98: 1e:ce:b6:93:2e:2b:a2:81:3d:32:3e:43:af:68:a9: 37:10:a2:d1:bf:35:00:90:19:d3:e6:eb:9d:72:74: af:8c:73:f3:fc:dc:e8:a4:9b:55:17:0a:a1:7a:65: 4e:15:1b:5d:e6:80:3e:d2:70:c6:d7:9c:5c:3a:c1: bc:c9:72:6a:28:37:70:f0:e5:17:87:2d:3f:a7:8d: 41:82:85:d1:2c:18:6d:7f:35:97:fb:69:8b:64:3d: d8:da:d7:ca:dd:2d:1c:1f:97:b1:57:d0:29:9c:55: 3b:b9:b7:9c:61:25:6b:c9:e2:b1:66:8a:78:26:1e: 73:88:29:85:a8:98:e7:d7:37:d0:41:aa:62:d5:c5: 92:78:92:86:c2:fb:ae:9c:5b:f9:0d:b0:80:7b:fb: 4d:d6:4f:d2:13:7e:15:ea:27:b7:83:8e:f3:a4:64: a7:4f:f5:b9:83:f4:87:7a:4a:f6:04:e2:bc:83:13: fb:fb:a1:47:05:2e:ab:49:f2:6e:b5:c8:e4:ce:a1: f2:d7:db:94:2b:39:05:ba:90:5c:f8:59:70:51:09: 0a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:37:BB:9B:4D:80:41:8F:C7:3C:13:81:EC:B7:86:9A:2E:9D:21:B9 X509v3 Authority Key Identifier: keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:53:d0:b2:32:bc:31:c3:02:48:76:9c:89:35:2a:19:cb:ee: fa:e9:52:b1:bb:81:b0:d2:a8:ce:4e:e1:a0:20:54:5c:55:c3: 66:48:d7:2b:e6:cb:ad:78:58:ef:e0:a8:29:da:5f:bf:eb:03: df:d6:4e:92:bb:3c:a5:58:6a:1a:1f:ab:5d:36:c2:da:07:b2: 5f:4c:cd:a7:30:70:84:22:4e:99:7f:5e:42:ce:1d:39:6c:11: ac:98:63:2a:26:1f:bc:8e:e1:23:3b:c1:5c:09:15:fe:d0:79: a3:cf:98:a2:7a:52:72:dd:c8:66:f6:70:ac:a2:fb:08:e2:54: 63:e1:40:c9:ae:95:61:9c:30:b6:39:d9:e4:d9:58:66:df:18: a9:39:f9:75:04:f4:e3:62:31:fd:ce:13:78:f2:5a:51:9c:78: fb:70:83:f6:aa:f1:f9:4c:41:7c:dd:10:82:d7:64:b1:7b:d9: 53:5a:e5:08:1b:0d:a8:37:94:97:f4:ad:c3:de:f2:84:13:45: 0f:84:56:10:e2:34:17:1c:49:dc:8c:c1:a8:b5:75:a2:d3:d6: c5:a9:a0:9e:88:b8:84:1d:28:8a:63:e4:0d:a6:20:85:ea:a1: ba:a6:20:76:1a:31:17:0b:9e:05:b8:13:30:32:71:9e:8a:d7: 87:24:da:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5wKDrT94ZfjloOZLBU/F8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZGQ0MzhhN2NlM2NiMzc5ZjI4Y2ZhMDUxY2Y2M2Q1YWQ4 ZmUzY2EwHhcNMjYwMTI2MTAwMTQ5WhcNMjYwMTI3MTAwMTQ5WjAzMTEwLwYDVQQD EyhjNjM3YmI5YjRkODA0MThmYzczYzEzODFlY2I3ODY5YTJlOWQyMWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS8bbKv692IRLIZ1WRJJ/ubTWRa0 EDEQSDHHJSTVdf5K2/tgS6zVJ7Vtv5gezraTLiuigT0yPkOvaKk3EKLRvzUAkBnT 5uudcnSvjHPz/NzopJtVFwqhemVOFRtd5oA+0nDG15xcOsG8yXJqKDdw8OUXhy0/ p41BgoXRLBhtfzWX+2mLZD3Y2tfK3S0cH5exV9ApnFU7ubecYSVryeKxZop4Jh5z iCmFqJjn1zfQQapi1cWSeJKGwvuunFv5DbCAe/tN1k/SE34V6ie3g47zpGSnT/W5 g/SHekr2BOK8gxP7+6FHBS6rSfJutcjkzqHy19uUKzkFupBc+FlwUQkK4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMY3u5tNgEGPxzwTgey3hpounSG5MB8GA1UdIwQY MBaAFCrdQ4p848s3nyjPoFHPY9Wtj+PKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wYjYxY2YtODBiYS00ZThlLWEyZTUt MjBhMGQxMzBjNDU2LzEvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8wYjYxY2YtODBiYS00ZThlLWEyZTUtMjBhMGQxMzBjNDU2 LzEvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAalPQsjK8 McMCSHaciTUqGcvu+ulSsbuBsNKozk7hoCBUXFXDZkjXK+bLrXhY7+CoKdpfv+sD 39ZOkrs8pVhqGh+rXTbC2geyX0zNpzBwhCJOmX9eQs4dOWwRrJhjKiYfvI7hIzvB XAkV/tB5o8+YonpSct3IZvZwrKL7COJUY+FAya6VYZwwtjnZ5NlYZt8YqTn5dQT0 42Ix/c4TePJaUZx4+3CD9qrx+UxBfN0QgtdksXvZU1rlCBsNqDeUl/Stw97yhBNF D4RWEOI0FxxJ3IzBqLV1otPWxamgnoi4hB0oimPkDaYgheqhuqYgdhoxFwueBbgT MDJxnorXhyTahg== -----END CERTIFICATE-----Generated at Mon Jan 26 15:05:09 2026 by rpki-client