This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft File: KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft (raw, json) Hash identifier: ZGqPU96Is+86fvtUgXOQEhAt/1Eswwq1hABLpjjU0DI= Subject key identifier: 6F:86:33:F0:B6:4B:01:BE:B7:C1:F0:6A:2F:1D:50:76:40:70:4A:11 Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e Certificate serial: 019BFCC0CAC39CED4A103488B6701D9AA6C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft Manifest number: 17F3 Signing time: Tue 27 Jan 2026 00:00:51 +0000 Manifest this update: Tue 27 Jan 2026 00:00:51 +0000 Manifest next update: Wed 28 Jan 2026 00:00:51 +0000 Files and hashes: 1: FVFRIPh6vjxNZF9GmdKTzMvxW20.roa (hash: RxEPmyeQKw2S/n6YHyV1FFH2RRQ1FPtU6WCYyBI+QSs=) 2: KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl (hash: TPq3Ff6iPm5PROzj4FcZaoMOmgbbSSm/oRifiLgPpOE=) 3: Ll4El4EPvQjU1m3_NGW31BoMNbs.roa (hash: aAbsXcXAi1Px9rBqFebnRpJI/7J+UKhx99NtmpOY4GQ=) 4: MlnC-jaRpZnIrgB8_eQnTAbVGTA.roa (hash: LraAiuo62bJSCi7FsjMWIePU6+pRqpeuBTDorfg6wzo=) 5: WVi_ybIpobHkUBuINJ5UAOJnWNI.roa (hash: 3fbJIuP8QMGU6Mp39Y5b/MTPHVVyptacQbOnxd8jif8=) 6: YJQfMl-kDd-ZdRuRWL9F3JaDAtc.roa (hash: gnWGWFdrNvGan6Zj654ovvMYwlS3b9SdtQbQJSYqz8w=) 7: cKL1r39FOEn9-Io6QM2GHDGad7Y.roa (hash: IVOj6G/Kxw/gIVSF+sBn1ShNhJ2a3NRvKy7Xif0pwjk=) 8: clfdiMu1i07BMzYCaMwkqCSWESQ.roa (hash: nPTdJ+2EENVzerbY85J3Hj4LaW3YuLFq8ExfSo1tXKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c0:ca:c3:9c:ed:4a:10:34:88:b6:70:1d:9a:a6:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e Validity Not Before: Jan 27 00:00:51 2026 GMT Not After : Jan 28 00:00:51 2026 GMT Subject: CN=6f8633f0b64b01beb7c1f06a2f1d507640704a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e4:ce:ec:b2:d8:f3:3d:0b:f4:55:4c:69:ac: d2:2d:21:d1:ea:da:26:c8:da:83:19:c8:91:3a:8b: 77:5d:b2:76:87:67:15:f5:9a:20:23:8d:be:4c:87: 61:0d:10:17:f5:9d:f1:35:58:e1:3a:56:df:88:fb: f6:91:28:ee:9a:ee:d3:95:0f:76:e8:0e:aa:44:c6: 76:be:93:85:55:8b:ee:62:02:d8:32:b7:96:ab:d9: c5:25:8c:f0:ef:d2:bf:72:6f:ed:2b:f8:b9:5f:c1: 42:95:f3:9c:e5:40:7f:41:dd:ed:4e:54:77:02:2b: 55:4d:1f:b2:7e:e4:16:ae:4d:09:7a:62:4f:f5:9e: 9f:d6:9d:18:f7:e1:a9:33:ca:ea:3e:f7:19:07:2e: 81:a4:21:a9:e5:70:7b:23:ee:90:f5:fd:68:30:97: 68:e4:1e:5c:af:a0:9b:19:44:e9:9e:22:15:94:6f: 76:62:4c:b5:1c:16:83:28:49:d0:db:fd:ff:ea:d5: 7f:81:7f:01:a1:93:c9:fc:86:a9:76:a2:77:ba:13: dd:45:53:a3:71:7e:7c:95:0a:b7:83:f2:90:15:28: e3:dd:4d:0d:78:a7:ea:71:ab:d2:8f:82:75:f6:95: 18:64:3e:b4:ce:fe:d3:44:45:bf:17:68:fd:2f:6f: 15:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:86:33:F0:B6:4B:01:BE:B7:C1:F0:6A:2F:1D:50:76:40:70:4A:11 X509v3 Authority Key Identifier: keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:fd:a8:74:0a:06:20:f8:31:dc:ee:e5:ab:99:ab:49:9f:e1: e2:e2:8b:76:d4:15:8d:b2:f7:2e:1d:e6:5f:a6:f5:5f:33:da: a5:c7:a5:f5:1a:0b:8d:9e:28:e3:d3:e0:d1:24:c6:20:a7:a6: 6a:19:44:bf:01:d9:9e:8a:69:f0:7d:1b:90:fc:42:ba:e7:1c: 3d:af:d0:22:82:0d:0d:9e:f2:91:1d:3d:e0:d9:ff:6e:89:d6: 70:a5:20:1f:f0:a3:1e:4d:e2:0a:1f:b0:ca:7e:0f:83:b8:c0: cd:0e:06:02:67:c4:72:40:04:7f:d0:89:45:76:d9:a2:52:81: 5e:65:6a:91:b1:09:18:4e:61:b5:d7:6b:34:98:3c:e3:b1:26: d7:97:30:37:ea:33:a7:70:56:a7:a3:08:4f:b2:93:35:d8:c6: f1:18:6c:44:c9:2a:b8:97:45:d5:bc:b6:7c:4c:c4:83:13:b8: dd:ce:0c:ea:8e:b3:8e:09:7c:61:16:bf:6a:ec:9b:bd:77:3b: 15:33:65:e9:c5:3a:9a:9f:7b:65:a1:8e:64:fe:58:39:19:6e: 0c:10:55:11:6c:41:9c:4a:5e:4e:db:33:59:37:04:d5:b1:b2: 3a:4a:e7:51:3d:b1:0e:de:30:d6:bd:a2:3d:7a:72:16:c6:8e: 65:71:25:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wMrDnO1KEDSItnAdmqbFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzY0ZGMyMWNiNWZkNGQwYmNiMDJjYzJiNDNmZDc1MWZk OTFlMWUwHhcNMjYwMTI3MDAwMDUxWhcNMjYwMTI4MDAwMDUxWjAzMTEwLwYDVQQD Eyg2Zjg2MzNmMGI2NGIwMWJlYjdjMWYwNmEyZjFkNTA3NjQwNzA0YTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOTO7LLY8z0L9FVMaazSLSHR6tom yNqDGciROot3XbJ2h2cV9ZogI42+TIdhDRAX9Z3xNVjhOlbfiPv2kSjumu7TlQ92 6A6qRMZ2vpOFVYvuYgLYMreWq9nFJYzw79K/cm/tK/i5X8FClfOc5UB/Qd3tTlR3 AitVTR+yfuQWrk0JemJP9Z6f1p0Y9+GpM8rqPvcZBy6BpCGp5XB7I+6Q9f1oMJdo 5B5cr6CbGUTpniIVlG92Yky1HBaDKEnQ2/3/6tV/gX8BoZPJ/IapdqJ3uhPdRVOj cX58lQq3g/KQFSjj3U0NeKfqcavSj4J19pUYZD60zv7TREW/F2j9L28V0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+GM/C2SwG+t8Hwai8dUHZAcEoRMB8GA1UdIwQY MBaAFCrGTcIctf1NC8sCzCtD/XUf2R4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kZTFkYjQtZWM3OC00ZTQxLTk1NzAt MDk3YzNjMWMyNTQwLzEvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9kZTFkYjQtZWM3OC00ZTQxLTk1NzAtMDk3YzNjMWMyNTQw LzEvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdf2odAoG IPgx3O7lq5mrSZ/h4uKLdtQVjbL3Lh3mX6b1XzPapcel9RoLjZ4o49Pg0STGIKem ahlEvwHZnopp8H0bkPxCuuccPa/QIoINDZ7ykR094Nn/bonWcKUgH/CjHk3iCh+w yn4Pg7jAzQ4GAmfEckAEf9CJRXbZolKBXmVqkbEJGE5htddrNJg847Em15cwN+oz p3BWp6MIT7KTNdjG8RhsRMkquJdF1by2fEzEgxO43c4M6o6zjgl8YRa/auybvXc7 FTNl6cU6mp97ZaGOZP5YORluDBBVEWxBnEpeTtszWTcE1bGyOkrnUT2xDt4w1r2i PXpyFsaOZXElJA== -----END CERTIFICATE-----Generated at Tue Jan 27 07:16:55 2026 by rpki-client