This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft File: kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft (raw, json) Hash identifier: 5xMvioWTcpQg9u8391ZxODNYnJy2oDMhBWC4/oN82Vw= Subject key identifier: 4A:6B:C5:F0:09:BF:2F:76:31:0C:D0:3A:74:33:40:E9:4C:7F:FC:D8 Authority key identifier: 91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5 Certificate issuer: /CN=9189e06c887d3fede88f717bffa43c8cc866c7a5 Certificate serial: 019BFC8A6588DB0733546A6E4CEBD190DF83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft Manifest number: 02D7 Signing time: Mon 26 Jan 2026 23:01:26 +0000 Manifest this update: Mon 26 Jan 2026 23:01:26 +0000 Manifest next update: Tue 27 Jan 2026 23:01:26 +0000 Files and hashes: 1: kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl (hash: oqykTtt6aY5tfLAycbxtAKP/FIMqC6i5+GfjaofOnak=) 2: p7RfayQGkYVg5d11LiJ1Q0zbyT4.roa (hash: I4DW3u8qF1DUqorT+zF5KoXC1GrV1uanCFydVzAjLr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 23:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:65:88:db:07:33:54:6a:6e:4c:eb:d1:90:df:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9189e06c887d3fede88f717bffa43c8cc866c7a5 Validity Not Before: Jan 26 23:01:26 2026 GMT Not After : Jan 27 23:01:26 2026 GMT Subject: CN=4a6bc5f009bf2f76310cd03a743340e94c7ffcd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:07:b9:6b:9b:d0:8f:f4:04:02:4e:24:bd:55: 92:f4:6c:6b:3c:eb:3e:39:c8:85:23:2a:22:70:ed: 12:3f:d3:b0:b2:b4:e4:40:4f:88:db:25:2c:ad:8b: 2d:14:f1:6e:51:8f:4f:f6:80:ca:c6:b0:7d:5b:42: 6a:5d:8d:84:f4:66:59:5b:b1:51:1a:4a:de:bc:bd: bf:77:97:70:d7:81:31:df:75:16:d4:28:54:24:2c: 29:36:a6:5b:10:c8:fb:9f:0c:ac:14:12:36:19:dd: d2:2f:91:ef:eb:c7:ca:49:ca:a1:80:aa:10:a1:8c: d7:20:dd:20:d5:67:10:76:ec:92:9d:07:4c:6e:59: f5:50:2b:ac:08:89:5d:53:a3:a6:ba:74:fd:eb:b6: d5:c1:d2:9a:5f:ad:04:ee:3b:48:51:31:93:8d:cc: 1d:2d:e2:86:75:e7:eb:c0:6c:8b:36:25:ae:47:b5: 6f:f2:e4:72:b6:15:1a:fe:ae:c6:08:6d:c9:c2:87: d7:11:94:2b:4f:1d:d9:4b:17:2b:db:ac:d0:dc:43: 99:77:14:cc:b5:45:6a:d7:65:e8:51:79:ba:f6:92: 69:86:97:0b:36:e0:ad:dc:74:8d:fb:b0:3e:82:df: ec:ef:88:05:7c:1d:b7:6b:d4:7a:06:8f:e6:ff:17: ec:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6B:C5:F0:09:BF:2F:76:31:0C:D0:3A:74:33:40:E9:4C:7F:FC:D8 X509v3 Authority Key Identifier: keyid:91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:98:5c:d6:4c:7e:30:3e:27:1a:ab:d8:65:e2:fe:30:7c:88: 49:a3:f0:f1:0c:a1:28:02:63:a8:a9:30:d8:1d:04:78:d5:d0: 7d:99:d3:a7:d2:72:bd:92:b2:78:75:15:c9:64:64:55:d7:35: e0:00:21:5a:b4:6e:15:86:31:94:79:4a:b4:74:6a:6f:0c:26: d7:8f:04:7b:c5:46:8e:d6:93:ca:1c:c6:b8:0d:18:3a:a4:4f: 2a:02:24:35:98:4d:98:60:0a:26:87:17:21:8b:3a:d9:5c:bc: be:41:6d:9e:84:f4:b9:4b:02:d8:95:a9:cb:c7:72:f7:ca:49: c4:95:0c:c4:23:4f:57:be:f2:97:96:ec:e3:23:b3:30:6a:f5: 62:b4:23:58:73:8a:d2:fd:a3:09:66:3c:26:97:40:d2:f6:1f: 44:04:6f:ed:bd:c8:30:ea:01:e7:11:34:0b:60:4d:e8:47:7d: ee:28:ca:02:dc:de:63:56:97:03:0f:cc:45:d6:eb:ee:fd:05: fd:f6:90:65:07:d7:25:c0:e5:49:22:56:1b:2a:27:19:34:c0: 69:83:20:df:cd:37:8e:9c:78:7b:63:71:34:f7:0c:b3:c4:97: 5c:36:b4:3d:d2:5d:39:07:b1:ec:5c:c0:79:34:58:88:dc:b0: ae:02:8b:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8imWI2wczVGpuTOvRkN+DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxODllMDZjODg3ZDNmZWRlODhmNzE3YmZmYTQzYzhjYzg2 NmM3YTUwHhcNMjYwMTI2MjMwMTI2WhcNMjYwMTI3MjMwMTI2WjAzMTEwLwYDVQQD Eyg0YTZiYzVmMDA5YmYyZjc2MzEwY2QwM2E3NDMzNDBlOTRjN2ZmY2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0we5a5vQj/QEAk4kvVWS9GxrPOs+ OciFIyoicO0SP9OwsrTkQE+I2yUsrYstFPFuUY9P9oDKxrB9W0JqXY2E9GZZW7FR GkrevL2/d5dw14Ex33UW1ChUJCwpNqZbEMj7nwysFBI2Gd3SL5Hv68fKScqhgKoQ oYzXIN0g1WcQduySnQdMbln1UCusCIldU6OmunT967bVwdKaX60E7jtIUTGTjcwd LeKGdefrwGyLNiWuR7Vv8uRythUa/q7GCG3JwofXEZQrTx3ZSxcr26zQ3EOZdxTM tUVq12XoUXm69pJphpcLNuCt3HSN+7A+gt/s74gFfB23a9R6Bo/m/xfsJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEprxfAJvy92MQzQOnQzQOlMf/zYMB8GA1UdIwQY MBaAFJGJ4GyIfT/t6I9xe/+kPIzIZselMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1luZ2JJaDlQLTNvajNGN182UThqTWhteDZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zZDNhMzMtNjFkOS00OTk2LTgxOWMt ZDk3YTU0Y2IzOWUxLzEva1luZ2JJaDlQLTNvajNGN182UThqTWhteDZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8zZDNhMzMtNjFkOS00OTk2LTgxOWMtZDk3YTU0Y2IzOWUx LzEva1luZ2JJaDlQLTNvajNGN182UThqTWhteDZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5hc1kx+ MD4nGqvYZeL+MHyISaPw8QyhKAJjqKkw2B0EeNXQfZnTp9JyvZKyeHUVyWRkVdc1 4AAhWrRuFYYxlHlKtHRqbwwm148Ee8VGjtaTyhzGuA0YOqRPKgIkNZhNmGAKJocX IYs62Vy8vkFtnoT0uUsC2JWpy8dy98pJxJUMxCNPV77yl5bs4yOzMGr1YrQjWHOK 0v2jCWY8JpdA0vYfRARv7b3IMOoB5xE0C2BN6Ed97ijKAtzeY1aXAw/MRdbr7v0F /faQZQfXJcDlSSJWGyonGTTAaYMg3803jpx4e2NxNPcMs8SXXDa0PdJdOQex7FzA eTRYiNywrgKL8w== -----END CERTIFICATE-----Generated at Tue Jan 27 09:13:50 2026 by rpki-client