This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft File: KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft (raw, json) Hash identifier: 0vHfGw8RGoSQHR2tCEMWOoRZYXuz4zp7fDSN4JjBHwk= Subject key identifier: 3B:40:ED:F2:9C:D2:EC:AA:CE:AC:5A:DF:D1:F3:D4:28:42:D5:23:81 Authority key identifier: 2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC Certificate issuer: /CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc Certificate serial: 019BFF8B482292ADADC29643F995F7ACBF24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft Manifest number: 10F9 Signing time: Tue 27 Jan 2026 13:01:16 +0000 Manifest this update: Tue 27 Jan 2026 13:01:16 +0000 Manifest next update: Wed 28 Jan 2026 13:01:16 +0000 Files and hashes: 1: KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl (hash: ux8er5v4EHzMgNasunltMF3w5icsu6JS13Q6E1UIFLs=) 2: TjwUrt0QbOg_7Hv7hnE5gPoovGE.roa (hash: vCYAcdHdzTkyR5n/fzt3EtvDXfAERXz/dZUmibVHkag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 13:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:8b:48:22:92:ad:ad:c2:96:43:f9:95:f7:ac:bf:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc Validity Not Before: Jan 27 13:01:16 2026 GMT Not After : Jan 28 13:01:16 2026 GMT Subject: CN=3b40edf29cd2ecaaceac5adfd1f3d42842d52381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fc:c5:d9:11:88:48:1b:4f:c0:a6:ea:34:22: ac:e5:1e:9c:b3:88:72:6f:da:07:1d:d1:69:9a:8e: ba:02:10:ec:f7:00:67:36:f2:ac:42:9d:e6:ff:4c: c7:28:e3:26:5f:a5:90:a1:16:71:e3:ca:69:95:74: 96:ae:3f:fa:79:9a:81:47:c0:f3:e3:e1:f3:3e:07: ff:97:7b:30:87:26:d5:91:24:3b:48:5f:99:46:60: 54:b5:53:46:b0:80:4e:be:29:08:da:03:23:0e:2c: 11:3d:8b:1b:62:1c:e2:57:0e:c2:f9:5d:1d:70:f1: 1d:85:46:ba:72:95:18:38:6a:18:da:76:61:fd:cb: 55:c9:29:09:6b:ca:d2:ad:a5:37:6c:f6:22:fd:bc: 27:0a:3f:3e:44:4d:f5:66:89:83:fc:3e:7d:52:7b: a2:ba:0f:ba:19:9f:8d:88:28:4f:32:3e:c8:e0:da: fa:18:19:23:57:6a:88:22:11:e3:a7:dd:87:01:53: 07:b2:7f:ac:15:42:70:9f:d4:a4:3c:6f:f4:7c:20: cb:d6:2e:17:2f:8d:6c:35:42:ab:f6:fc:44:b4:e8: 71:cb:1e:99:47:1d:6c:2d:31:01:02:30:41:33:bb: 83:9c:90:b8:ab:57:96:e2:ed:85:20:ae:0a:9a:3b: ec:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:40:ED:F2:9C:D2:EC:AA:CE:AC:5A:DF:D1:F3:D4:28:42:D5:23:81 X509v3 Authority Key Identifier: keyid:2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:ad:8f:fa:97:ae:f1:f0:67:02:73:11:6a:34:f4:3e:29:62: 1e:da:c1:af:a6:0b:20:c3:4c:e9:99:e4:a2:7c:9a:ce:d0:aa: 46:33:8e:69:41:31:8c:5a:86:d8:05:e2:8b:78:2e:aa:89:58: a3:06:75:4a:19:c1:e0:9e:98:42:25:72:47:18:12:65:75:36: e5:ca:f0:bf:7f:7f:38:46:dc:07:38:62:b7:31:6c:ae:1b:2b: d2:7c:98:5a:f2:81:4d:46:f8:51:58:93:4d:6b:f9:55:63:20: 1b:2f:52:b5:5b:a0:56:f1:68:d4:d3:2a:3c:fa:9d:27:b9:8c: 93:a1:94:60:2a:4e:97:4a:82:f6:08:7c:c5:b0:41:12:2b:99: 55:92:59:70:b7:4b:dd:5f:eb:d2:60:d3:f8:24:cd:c0:30:5a: 56:3b:73:9e:e0:37:dc:e6:67:60:40:19:a5:27:82:ab:99:3e: 31:3f:a3:47:df:9f:76:b2:ba:ab:e0:d2:95:84:19:29:6a:ae: e4:62:f9:cc:50:57:cf:f3:34:aa:f4:15:e4:7a:66:cb:2b:6f: 36:0c:64:37:1f:09:b8:43:57:d1:3f:da:a2:9f:be:51:5e:67: fc:c4:87:e4:4d:86:f6:9c:d5:21:6f:b5:ba:cd:2d:1a:52:29: 38:47:b4:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv/i0gikq2twpZD+ZX3rL8kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYTNjOTlmZjU4YjhmNzMzZWYyYzYyYTc3NzJjMGMxZjI5 ZTU3ZmMwHhcNMjYwMTI3MTMwMTE2WhcNMjYwMTI4MTMwMTE2WjAzMTEwLwYDVQQD EygzYjQwZWRmMjljZDJlY2FhY2VhYzVhZGZkMWYzZDQyODQyZDUyMzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvzF2RGISBtPwKbqNCKs5R6cs4hy b9oHHdFpmo66AhDs9wBnNvKsQp3m/0zHKOMmX6WQoRZx48pplXSWrj/6eZqBR8Dz 4+HzPgf/l3swhybVkSQ7SF+ZRmBUtVNGsIBOvikI2gMjDiwRPYsbYhziVw7C+V0d cPEdhUa6cpUYOGoY2nZh/ctVySkJa8rSraU3bPYi/bwnCj8+RE31ZomD/D59Unui ug+6GZ+NiChPMj7I4Nr6GBkjV2qIIhHjp92HAVMHsn+sFUJwn9SkPG/0fCDL1i4X L41sNUKr9vxEtOhxyx6ZRx1sLTEBAjBBM7uDnJC4q1eW4u2FIK4KmjvsswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtA7fKc0uyqzqxa39Hz1ChC1SOBMB8GA1UdIwQY MBaAFCqjyZ/1i49zPvLGKndywMHynlf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3FQSm5fV0xqM00tOHNZcWQzTEF3ZktlVl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hMGI2M2UtMTE2Ni00NmI1LTllM2Ut MzhiNWQxNzg4MDA3LzEvS3FQSm5fV0xqM00tOHNZcWQzTEF3ZktlVl93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hMGI2M2UtMTE2Ni00NmI1LTllM2UtMzhiNWQxNzg4MDA3 LzEvS3FQSm5fV0xqM00tOHNZcWQzTEF3ZktlVl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA62P+peu 8fBnAnMRajT0PiliHtrBr6YLIMNM6ZnkonyaztCqRjOOaUExjFqG2AXii3guqolY owZ1ShnB4J6YQiVyRxgSZXU25crwv39/OEbcBzhitzFsrhsr0nyYWvKBTUb4UViT TWv5VWMgGy9StVugVvFo1NMqPPqdJ7mMk6GUYCpOl0qC9gh8xbBBEiuZVZJZcLdL 3V/r0mDT+CTNwDBaVjtznuA33OZnYEAZpSeCq5k+MT+jR9+fdrK6q+DSlYQZKWqu 5GL5zFBXz/M0qvQV5HpmyytvNgxkNx8JuENX0T/aop++UV5n/MSH5E2G9pzVIW+1 us0tGlIpOEe0pw== -----END CERTIFICATE-----Generated at Tue Jan 27 20:17:19 2026 by rpki-client