This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft File: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft (raw, json) Hash identifier: aqpUt0m7On+HpSyaeyFtMqJ136emNlT3kWsvuQWBW7U= Subject key identifier: B2:8A:D0:70:D3:01:65:94:61:AD:58:FA:63:BF:1E:68:AC:35:D1:20 Authority key identifier: 29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9 Certificate issuer: /CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9 Certificate serial: 019BF91BABEF6BE9C4B705C617CDD669DEAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft Manifest number: 13E0 Signing time: Mon 26 Jan 2026 07:01:38 +0000 Manifest this update: Mon 26 Jan 2026 07:01:38 +0000 Manifest next update: Tue 27 Jan 2026 07:01:38 +0000 Files and hashes: 1: 0xBMzbimSDs_I2nvtM1Y5jK-78k.roa (hash: SgKHLhFkroj2Hq/iLApLxBA7Ln6Ya97UmYFoHMm8u7c=) 2: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl (hash: RDTqbrVKv9DdvEm61TKbAMz2zAnajiJu5lLWqmhKUeo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:ab:ef:6b:e9:c4:b7:05:c6:17:cd:d6:69:de:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9 Validity Not Before: Jan 26 07:01:38 2026 GMT Not After : Jan 27 07:01:38 2026 GMT Subject: CN=b28ad070d301659461ad58fa63bf1e68ac35d120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:48:a8:ad:29:61:b0:b7:b7:44:8f:1e:7a:47: d2:2e:a7:5c:1f:96:19:f9:e6:80:61:5e:d7:e9:b6: df:8a:55:b7:d0:fb:61:e2:63:50:21:49:20:78:14: f1:fc:2b:99:e4:b5:a3:cc:e7:30:5e:a2:89:b5:c6: f1:2c:43:d6:fa:5d:82:29:76:3e:2d:47:e7:74:70: 5b:39:b1:1e:a4:aa:65:82:f8:6a:89:7a:b2:ad:12: a9:59:04:76:19:a7:86:ba:90:7c:4b:3c:de:75:7c: 10:3c:06:83:57:34:41:81:11:5c:31:7f:ae:c2:09: eb:24:02:64:61:59:1a:e4:81:17:d5:df:2d:be:08: f6:4b:fd:0c:97:29:06:08:83:2e:d9:f3:0b:1a:16: 24:83:36:53:09:31:f9:6a:4f:a0:78:f2:ed:79:9a: a4:6f:86:0c:39:e5:30:7b:17:e1:c1:5d:66:f0:0c: 9c:1f:a2:33:77:93:36:91:80:4a:b2:29:f7:d3:76: 9f:d6:d7:62:7f:51:71:6f:1a:f8:e0:a9:fc:06:22: 8a:b4:18:b2:9c:cd:bc:cb:06:c1:29:bd:a3:a1:6f: 0b:2a:ed:36:e1:2e:87:bf:37:e6:59:40:ad:cf:d0: b5:36:95:a4:cb:ab:a6:39:f0:b2:12:5a:1d:e5:de: 5c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8A:D0:70:D3:01:65:94:61:AD:58:FA:63:BF:1E:68:AC:35:D1:20 X509v3 Authority Key Identifier: keyid:29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:eb:35:25:1d:b6:b8:02:9a:2e:3c:3d:73:e2:7a:17:47:75: 94:c1:ec:19:4d:b7:6a:78:13:bd:16:d8:f9:a9:76:8b:29:26: 8d:df:4e:bb:6c:b4:d9:a5:cf:19:11:a2:d0:4c:34:db:7c:c4: 48:3e:9b:79:6a:4a:7e:90:bc:6b:28:73:e3:89:02:46:3d:b5: 54:ad:68:12:b7:7e:c5:6d:e1:2c:46:47:02:46:15:1f:a3:00: e0:96:d1:46:a4:f7:fd:96:7e:42:f8:d9:71:ca:c7:4b:21:1b: 61:2f:40:f0:11:72:45:d4:84:f7:59:27:9a:78:fc:bb:c8:1e: 28:02:fa:ee:a8:6f:42:cc:cf:92:ed:42:36:45:86:e2:e8:ca: 54:cf:c6:5f:e9:5e:e4:33:73:14:90:70:68:5f:60:cf:78:cc: c3:4f:cc:35:07:66:5a:02:6a:26:d5:0f:1c:63:0b:3f:04:f2: ac:84:4f:02:08:95:c5:64:ae:a5:cf:d2:1f:61:3c:8d:77:28: ba:ea:fa:ce:a7:ef:b8:92:19:6e:44:b5:5d:9e:92:f0:54:48: 3c:ff:aa:60:33:c5:a5:1a:2a:7c:15:c2:a8:fa:a5:c6:85:90: 52:8f:35:ef:db:e1:db:ad:fc:5a:33:26:82:b7:51:6d:17:27: 45:bf:19:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G6vva+nEtwXGF83Wad6qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmI3ZGEzYjQ0ZTQxYjMyMzY5ZTRhNWM3OTBkMzA4MWZj NjlhYTkwHhcNMjYwMTI2MDcwMTM4WhcNMjYwMTI3MDcwMTM4WjAzMTEwLwYDVQQD EyhiMjhhZDA3MGQzMDE2NTk0NjFhZDU4ZmE2M2JmMWU2OGFjMzVkMTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskiorSlhsLe3RI8eekfSLqdcH5YZ +eaAYV7X6bbfilW30Pth4mNQIUkgeBTx/CuZ5LWjzOcwXqKJtcbxLEPW+l2CKXY+ LUfndHBbObEepKplgvhqiXqyrRKpWQR2GaeGupB8SzzedXwQPAaDVzRBgRFcMX+u wgnrJAJkYVka5IEX1d8tvgj2S/0MlykGCIMu2fMLGhYkgzZTCTH5ak+gePLteZqk b4YMOeUwexfhwV1m8AycH6Izd5M2kYBKsin303af1tdif1Fxbxr44Kn8BiKKtBiy nM28ywbBKb2joW8LKu024S6HvzfmWUCtz9C1NpWky6umOfCyElod5d5cvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKK0HDTAWWUYa1Y+mO/HmisNdEgMB8GA1UdIwQY MBaAFCn7faO0TkGzI2nkpceQ0wgfxpqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2Z0OW83Uk9RYk1qYWVTbHg1RFRDQl9HbXFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xN2EwMTYtMjZjNy00MjRjLTg2MmYt YmNhYzhiNTUyYTlhLzEvS2Z0OW83Uk9RYk1qYWVTbHg1RFRDQl9HbXFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8xN2EwMTYtMjZjNy00MjRjLTg2MmYtYmNhYzhiNTUyYTlh LzEvS2Z0OW83Uk9RYk1qYWVTbHg1RFRDQl9HbXFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+s1JR22 uAKaLjw9c+J6F0d1lMHsGU23angTvRbY+al2iykmjd9Ou2y02aXPGRGi0Ew023zE SD6beWpKfpC8ayhz44kCRj21VK1oErd+xW3hLEZHAkYVH6MA4JbRRqT3/ZZ+QvjZ ccrHSyEbYS9A8BFyRdSE91knmnj8u8geKAL67qhvQszPku1CNkWG4ujKVM/GX+le 5DNzFJBwaF9gz3jMw0/MNQdmWgJqJtUPHGMLPwTyrIRPAgiVxWSupc/SH2E8jXco uur6zqfvuJIZbkS1XZ6S8FRIPP+qYDPFpRoqfBXCqPqlxoWQUo8179vh2638WjMm grdRbRcnRb8ZEQ== -----END CERTIFICATE-----Generated at Mon Jan 26 15:04:45 2026 by rpki-client