This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft File: K1wFUAyGXpJL3esa7nsuuMupJ8k.mft (raw, json) Hash identifier: LYacON/Ve9CnWa8TmMflL54S8/ZqsIG+Nqu6BtHjuTE= Subject key identifier: E8:23:5B:EC:1A:7A:2A:48:C7:39:3F:04:2B:6C:64:34:E6:B8:9F:C4 Authority key identifier: 2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9 Certificate issuer: /CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9 Certificate serial: 019BFBAEBD4D44832BE9947E0119882A531B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft Manifest number: 02F1 Signing time: Mon 26 Jan 2026 19:01:31 +0000 Manifest this update: Mon 26 Jan 2026 19:01:31 +0000 Manifest next update: Tue 27 Jan 2026 19:01:31 +0000 Files and hashes: 1: K1wFUAyGXpJL3esa7nsuuMupJ8k.crl (hash: CmVXoi4kaE+xmLcbaC1b98sYv7DkBrV/w4prw3n2Tmc=) 2: a4tcSb4rS0ZTyQ0HQWUrw9ZU1WI.roa (hash: 6y7B5mYALV8RuAK+rFKCQl3TCy8ZRF7yNkPXxeMdXfU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:ae:bd:4d:44:83:2b:e9:94:7e:01:19:88:2a:53:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9 Validity Not Before: Jan 26 19:01:31 2026 GMT Not After : Jan 27 19:01:31 2026 GMT Subject: CN=e8235bec1a7a2a48c7393f042b6c6434e6b89fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:68:7e:4e:c3:30:5c:31:9a:2f:05:28:a1:b4: 8a:7d:60:54:39:ca:09:9f:0d:55:d1:d1:a3:5b:5b: 94:ee:89:e4:b8:f8:60:87:44:1c:9e:7e:f4:fe:7d: d4:ed:c6:7d:e3:fe:df:86:96:5a:88:3d:b4:60:fe: f7:ce:16:90:ff:29:28:7f:f8:28:6b:d1:23:d9:38: b3:fc:2b:b2:97:64:7e:3e:59:99:80:46:52:3e:cc: a5:8c:21:a8:4a:d4:57:3b:3d:2e:57:7d:06:20:1b: 99:eb:e9:1f:bf:23:a0:4a:95:62:b8:0c:56:29:3e: 32:72:5b:19:ac:a5:2a:a0:11:68:fc:e6:23:c7:ab: 9e:66:51:65:3f:a7:9f:1f:e7:cc:08:dc:23:a7:63: ff:00:ed:8f:31:ef:4f:d9:5d:30:e3:d0:f9:9d:bd: 10:e3:00:f3:4e:b8:51:ec:29:5a:ac:2c:00:d7:6e: 80:45:52:c6:c0:48:83:9c:f4:70:e1:b7:95:48:10: 90:bc:f2:f5:eb:0d:76:1d:c6:63:9f:61:cc:8c:89: be:66:b0:85:5f:e4:1e:2a:a8:60:97:df:ef:8d:87: 27:f0:22:e9:4f:e1:6d:53:af:06:aa:b2:2e:2c:5e: f7:5e:b8:5c:3d:10:b4:b4:fd:58:31:b9:c2:48:d8: e3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:23:5B:EC:1A:7A:2A:48:C7:39:3F:04:2B:6C:64:34:E6:B8:9F:C4 X509v3 Authority Key Identifier: keyid:2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:93:ed:98:71:5d:60:cf:45:5b:7a:b2:df:dd:39:8b:b6:0a: af:07:ff:a7:3b:2e:b0:c8:2f:d5:e6:9f:5e:6f:29:2e:d4:79: 18:fb:32:71:2a:ac:fc:17:91:02:4b:79:0a:b5:86:81:f4:59: f4:2a:bf:73:3a:f9:e0:8f:64:12:74:fd:f2:24:a9:cc:ff:dc: 33:fb:6b:64:1e:3b:f9:32:aa:7f:a8:47:e1:be:9a:55:fc:5f: ec:71:ed:6b:b1:8c:ef:51:e3:73:c2:59:0b:38:34:f5:ef:d5: 7d:41:f9:83:9a:ec:98:2c:40:57:63:77:bb:80:a2:dc:2b:b4: 70:f9:e5:47:0d:88:49:53:80:cd:14:aa:2e:e4:c7:5c:9c:75: a9:d8:ae:23:97:ff:6c:34:9a:16:2b:9f:42:68:74:90:d1:6d: aa:85:d9:f1:76:5f:71:eb:48:7c:f5:ed:f1:5a:55:e9:bc:80: 5b:b6:44:1d:fd:ca:bb:89:c9:a0:a5:93:8c:4e:2d:38:c5:4c: 25:f7:b9:8a:73:32:34:92:6c:8a:ea:49:31:6d:4d:25:9f:84: 49:68:0f:2a:cc:d5:03:61:12:47:db:fe:b7:43:23:eb:47:a2: 9d:01:27:0e:8d:a1:36:75:5c:46:08:dc:35:10:bb:ab:3e:28: ee:43:09:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7rr1NRIMr6ZR+ARmIKlMbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNWMwNTUwMGM4NjVlOTI0YmRkZWIxYWVlN2IyZWI4Y2Jh OTI3YzkwHhcNMjYwMTI2MTkwMTMxWhcNMjYwMTI3MTkwMTMxWjAzMTEwLwYDVQQD EyhlODIzNWJlYzFhN2EyYTQ4YzczOTNmMDQyYjZjNjQzNGU2Yjg5ZmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWh+TsMwXDGaLwUoobSKfWBUOcoJ nw1V0dGjW1uU7onkuPhgh0Qcnn70/n3U7cZ94/7fhpZaiD20YP73zhaQ/ykof/go a9Ej2Tiz/Cuyl2R+PlmZgEZSPsyljCGoStRXOz0uV30GIBuZ6+kfvyOgSpViuAxW KT4yclsZrKUqoBFo/OYjx6ueZlFlP6efH+fMCNwjp2P/AO2PMe9P2V0w49D5nb0Q 4wDzTrhR7ClarCwA126ARVLGwEiDnPRw4beVSBCQvPL16w12HcZjn2HMjIm+ZrCF X+QeKqhgl9/vjYcn8CLpT+FtU68GqrIuLF73XrhcPRC0tP1YMbnCSNjjGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOgjW+waeipIxzk/BCtsZDTmuJ/EMB8GA1UdIwQY MBaAFCtcBVAMhl6SS93rGu57LrjLqSfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzF3RlVBeUdYcEpMM2VzYTduc3V1TXVwSjhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8yN2ZkNWUtN2Q1ZS00ODk4LTg2ODkt NTk1ZDQyZDVjMjU0LzEvSzF3RlVBeUdYcEpMM2VzYTduc3V1TXVwSjhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8yN2ZkNWUtN2Q1ZS00ODk4LTg2ODktNTk1ZDQyZDVjMjU0 LzEvSzF3RlVBeUdYcEpMM2VzYTduc3V1TXVwSjhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvJPtmHFd YM9FW3qy3905i7YKrwf/pzsusMgv1eafXm8pLtR5GPsycSqs/BeRAkt5CrWGgfRZ 9Cq/czr54I9kEnT98iSpzP/cM/trZB47+TKqf6hH4b6aVfxf7HHta7GM71Hjc8JZ Czg09e/VfUH5g5rsmCxAV2N3u4Ci3Cu0cPnlRw2ISVOAzRSqLuTHXJx1qdiuI5f/ bDSaFiufQmh0kNFtqoXZ8XZfcetIfPXt8VpV6byAW7ZEHf3Ku4nJoKWTjE4tOMVM Jfe5inMyNJJsiupJMW1NJZ+ESWgPKszVA2ESR9v+t0Mj60einQEnDo2hNnVcRgjc NRC7qz4o7kMJKw== -----END CERTIFICATE-----Generated at Tue Jan 27 04:46:23 2026 by rpki-client