This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft File: kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json) Hash identifier: xYXADvhd+Nf4wl4FtFc6GCyq/4AFbS6lQDkHNTcuXbM= Subject key identifier: 3E:1C:35:82:51:F1:B2:F9:7A:E1:81:51:1E:A5:4F:FC:F4:E2:63:BD Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB Certificate issuer: /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb Certificate serial: 019BFB775CFC28AB2301599BB4A87A2FA3B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 18:01:02 +0000 Manifest this update: Mon 26 Jan 2026 18:01:02 +0000 Manifest next update: Tue 27 Jan 2026 18:01:02 +0000 Files and hashes: 1: duZd3xX6ldZFnJAWeKOY3aU-YWA.roa (hash: zrGRAnADEy4+RjdotY9/kdUuG4P+5ZGMBez8xpARCts=) 2: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: UDPYX3eQ9uLr4M9M1u/17pDMoRMw1xBcwGV8jPn9l7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:5c:fc:28:ab:23:01:59:9b:b4:a8:7a:2f:a3:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb Validity Not Before: Jan 26 18:01:02 2026 GMT Not After : Jan 27 18:01:02 2026 GMT Subject: CN=3e1c358251f1b2f97ae181511ea54ffcf4e263bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:96:19:9c:dc:f2:9a:db:ec:1f:ab:cd:36:1f: 11:9b:41:24:11:e4:23:00:b5:08:bb:d2:24:68:3a: 89:56:1e:8f:8e:06:e2:d0:72:bb:7a:39:c3:77:c4: d6:94:40:99:a9:51:79:f3:eb:e9:43:51:f4:c1:26: d9:f1:3a:70:d9:0b:1e:79:1f:86:3e:e3:39:4e:a2: cd:25:7f:6a:a7:92:4d:a7:f7:f0:d2:d3:3d:73:b8: e7:e0:b6:b3:51:89:12:a5:ae:98:3e:06:33:68:93: e0:e8:48:f0:d5:6d:6b:a6:d5:f9:11:39:86:20:39: 2a:59:0f:6c:12:2f:ee:0e:a7:d2:8e:c5:14:3f:fe: 52:89:14:4d:e5:71:da:b5:17:81:89:70:bc:78:5a: dc:66:73:66:09:fa:bc:17:ef:b6:63:f9:ba:3b:97: f7:7c:15:18:93:3b:09:02:e8:b3:b2:49:fb:59:e8: c4:54:6e:66:94:fb:79:fc:85:c5:4a:30:8f:a8:22: f3:ec:49:b1:c9:2c:71:9d:84:25:c6:57:33:1e:b8: e4:14:2c:cd:1e:5c:83:25:ee:e0:cd:6c:6f:52:74: 65:b7:95:fc:b5:8f:84:28:c6:c3:b8:33:10:f9:d4: ab:0f:b1:08:09:d5:9c:6d:e4:c2:66:03:13:27:74: 8e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1C:35:82:51:F1:B2:F9:7A:E1:81:51:1E:A5:4F:FC:F4:E2:63:BD X509v3 Authority Key Identifier: keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:3b:f7:ef:7e:5e:4c:c3:e6:5a:fc:14:fd:a6:a5:09:bf:73: 0e:7c:6e:92:d5:a5:bb:39:34:2d:30:67:1b:0a:9c:bf:01:5b: bb:f6:87:d1:e7:46:12:18:1d:96:b4:80:6a:ce:75:4a:ab:5c: 09:a0:85:1e:3b:f7:37:ff:f6:1a:e8:2b:42:14:7c:ba:58:ce: 32:50:5f:b9:0d:2b:ed:05:33:f9:a0:88:22:7d:ec:a4:a2:48: a5:37:a3:d6:4a:f1:c5:14:21:27:09:52:b5:ef:42:32:2d:ab: 49:ab:dd:8f:40:11:20:80:e5:05:0c:64:f6:14:34:7a:cc:4e: 25:bd:ef:d1:1b:69:d5:9f:8e:d8:49:ce:9a:ed:d7:6c:da:c2: 1e:44:9e:61:1a:c2:06:f6:a3:f1:a4:e1:ee:50:26:3d:18:19: 58:06:43:b1:05:b1:74:20:21:c4:63:8d:b5:d0:05:52:e5:cf: 4c:06:b5:5a:8b:2a:42:bc:34:46:5e:14:9a:4e:a0:18:ad:4f: 1f:cc:cc:79:53:5b:83:87:81:ae:28:1e:23:c7:03:2f:05:dd: 9c:29:a9:35:9a:91:d6:d2:3d:75:57:ed:c0:11:50:32:5e:98: d5:2b:c8:88:c8:a5:3b:54:ab:85:09:fb:6f:06:76:89:4a:77: ba:4d:dd:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7d1z8KKsjAVmbtKh6L6O0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMDRlYmEyYTk3YTA5YzliM2IwOGNmZjgzZGZiNDc3MTQx YmMxY2IwHhcNMjYwMTI2MTgwMTAyWhcNMjYwMTI3MTgwMTAyWjAzMTEwLwYDVQQD EygzZTFjMzU4MjUxZjFiMmY5N2FlMTgxNTExZWE1NGZmY2Y0ZTI2M2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopYZnNzymtvsH6vNNh8Rm0EkEeQj ALUIu9IkaDqJVh6Pjgbi0HK7ejnDd8TWlECZqVF58+vpQ1H0wSbZ8Tpw2QseeR+G PuM5TqLNJX9qp5JNp/fw0tM9c7jn4LazUYkSpa6YPgYzaJPg6Ejw1W1rptX5ETmG IDkqWQ9sEi/uDqfSjsUUP/5SiRRN5XHatReBiXC8eFrcZnNmCfq8F++2Y/m6O5f3 fBUYkzsJAuizskn7WejEVG5mlPt5/IXFSjCPqCLz7EmxySxxnYQlxlczHrjkFCzN HlyDJe7gzWxvUnRlt5X8tY+EKMbDuDMQ+dSrD7EICdWcbeTCZgMTJ3SOSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4cNYJR8bL5euGBUR6lT/z04mO9MB8GA1UdIwQY MBaAFJME66KpegnJs7CM/4PftHcUG8HLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3dUcm9xbDZDY216c0l6X2c5LTBkeFFid2NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hYjIzZmYtZTUzYi00ZDA4LTgzOTIt OWFmOTkzYjAzNDNlLzEva3dUcm9xbDZDY216c0l6X2c5LTBkeFFid2NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9hYjIzZmYtZTUzYi00ZDA4LTgzOTItOWFmOTkzYjAzNDNl LzEva3dUcm9xbDZDY216c0l6X2c5LTBkeFFid2NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcTv3735e TMPmWvwU/aalCb9zDnxuktWluzk0LTBnGwqcvwFbu/aH0edGEhgdlrSAas51Sqtc CaCFHjv3N//2GugrQhR8uljOMlBfuQ0r7QUz+aCIIn3spKJIpTej1krxxRQhJwlS te9CMi2rSavdj0ARIIDlBQxk9hQ0esxOJb3v0Rtp1Z+O2EnOmu3XbNrCHkSeYRrC Bvaj8aTh7lAmPRgZWAZDsQWxdCAhxGONtdAFUuXPTAa1WosqQrw0Rl4Umk6gGK1P H8zMeVNbg4eBrigeI8cDLwXdnCmpNZqR1tI9dVftwBFQMl6Y1SvIiMilO1SrhQn7 bwZ2iUp3uk3dAg== -----END CERTIFICATE-----Generated at Tue Jan 27 01:19:19 2026 by rpki-client