This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft File: KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json) Hash identifier: SxVcyt/+NKQL9WQQaFLTQeRauIm79jmBq3dxPowIppY= Subject key identifier: D1:90:C8:FD:30:6F:0C:DE:CB:3D:DD:78:73:D5:34:9E:99:CF:5E:8D Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce Certificate serial: 019BFB77E9AF03ECFA8A01368285C4E56400 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft Manifest number: 143C Signing time: Mon 26 Jan 2026 18:01:38 +0000 Manifest this update: Mon 26 Jan 2026 18:01:38 +0000 Manifest next update: Tue 27 Jan 2026 18:01:38 +0000 Files and hashes: 1: 0Id9ZYia89tn9rGbVp1WccKbdLs.roa (hash: H/d3G1LlSq5Lm4RmW5/Q0ROpxkgSnJpVhWwEfjRrmCE=) 2: 4i9ivIesCHsbnVrZP6Me_46hnOo.roa (hash: qu7/9ByyUg/pGlPFs771pDMBYsdYL5/jWLiIBXBq/us=) 3: 5NyfZtZq8I_a22w9fqIDYQ8J3zo.roa (hash: ZXAkN8Owpsubs84/gjn1dQB9OdgtJ+vDayAhe4jgKik=) 4: 9bdi8ZcArF7uIVM_PWOWOKzHAwM.roa (hash: ksm5o6Brqb84qifDdWrqQOIBVSbPQo+Iqz+ko5JrdDE=) 5: AJc1n1WlM_uViiz8P-Q_ZGlrmkI.roa (hash: 5BjqoTSt8ivKeTgUMxzWvODvEYATsy/sKY0BmzBKn2k=) 6: F2qeHQTP3YKUfyoMJ2I6cHyrIBk.roa (hash: FVx/e+sO+XB2wvTGriWONMagJGCQ6hVxISJ0xlebzr0=) 7: GQccrYsGeyc_jz14ZkRPvffaEMY.roa (hash: iZxmpGm8fTch7x8Mf4u1f0OmBwCOdgCfCEjgwepuDV8=) 8: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: 8kZ9W9IDqfJYnRy396jrQqcugSnkAPIThQftIqcnfOA=) 9: QtPx4ap949xN5arcMJRpZvFzTfM.roa (hash: KaudJcjJFvIdlbff02gWZxLZI4bRcA90hXhml9h/ITE=) 10: khYS0lYDwiX9lTkfE55JUXtp8-s.roa (hash: bmf6tC0bXLVB4qb1Vl64CHJZEDbU89NkLDTPf7Yci6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 18:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:e9:af:03:ec:fa:8a:01:36:82:85:c4:e5:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce Validity Not Before: Jan 26 18:01:38 2026 GMT Not After : Jan 27 18:01:38 2026 GMT Subject: CN=d190c8fd306f0cdecb3ddd7873d5349e99cf5e8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:be:8c:d4:f4:23:c6:22:58:55:56:bf:61:cd: e5:dd:b9:0f:5e:98:08:1c:6a:49:14:77:4c:e4:87: 97:41:70:14:fa:7a:5d:19:3d:ac:18:a4:47:ee:26: cb:47:2a:24:d9:30:d4:9b:14:8d:39:32:a8:28:2b: 14:bb:ec:ef:1a:10:63:51:fa:52:2f:cd:90:e7:01: f5:a4:c1:73:22:6c:21:5b:81:1f:1b:a0:1c:e0:63: 06:1b:ad:0c:8b:47:6b:f9:1a:1d:a6:99:dc:a3:a9: e6:75:05:4d:be:02:0b:d2:3d:34:c9:bd:48:aa:87: a7:87:3e:38:12:16:5f:47:c2:81:04:56:96:bc:05: 76:5c:bc:09:30:92:fa:4d:1d:60:26:6a:88:69:89: a6:eb:65:c3:84:ef:38:2d:9c:bd:97:e1:fa:d1:e5: c4:f3:41:e1:74:fb:f2:2d:83:9f:a3:52:56:de:b8: 47:20:a5:93:58:b9:84:c0:9e:74:2a:33:15:de:11: 1c:60:13:93:c6:70:d6:48:8c:b7:3c:fb:15:01:57: 05:a3:2b:2c:de:1d:e5:8c:53:6a:6d:c9:9c:b1:09: 5b:c6:79:d2:aa:34:55:c6:0d:dc:ed:e4:3a:f0:f2: f3:a0:b0:60:69:32:25:57:b0:f7:d2:95:01:03:21: e2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:90:C8:FD:30:6F:0C:DE:CB:3D:DD:78:73:D5:34:9E:99:CF:5E:8D X509v3 Authority Key Identifier: keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:5e:fa:7d:9c:57:8d:fb:9d:7b:6d:ca:98:67:b1:d3:f8:eb: 8d:f9:70:40:1e:c7:81:26:dd:b6:42:38:fc:de:60:23:bc:6e: b0:e9:3c:11:2c:57:3f:2b:cb:24:a6:03:8c:57:d5:9f:18:91: 2a:f4:98:67:57:e6:42:bd:f2:4e:16:52:a1:3d:b9:94:0e:14: dd:eb:43:79:0a:02:64:ad:4d:d2:d4:47:41:c8:d8:ac:2e:b4: dd:be:e2:57:38:5f:f0:2a:d5:f0:98:d9:09:94:fe:a0:b4:0b: 7a:9b:59:aa:07:cd:27:a9:c3:df:e7:d5:be:80:b3:47:50:66: be:e0:50:24:dd:12:10:27:00:02:ff:3c:df:7f:dd:6f:e9:f3: 3c:1e:6a:0c:9e:75:41:05:a5:17:52:ca:49:14:85:80:42:6d: ef:0a:86:79:67:9a:d8:da:d3:c0:77:31:90:14:f5:88:fb:6c: 9a:d3:0c:3c:59:f1:76:42:25:df:25:c8:19:a0:8f:78:e5:c9: ee:92:6b:a1:64:10:02:4a:6c:38:6b:29:58:17:87:aa:6a:78: bf:aa:ed:4b:d7:1a:21:b9:56:59:45:84:25:0b:8a:b5:5f:e6: 1f:cb:05:67:63:5e:5b:a7:ac:4e:92:1e:68:3c:b8:ee:c9:28: ef:9b:1c:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7d+mvA+z6igE2goXE5WQAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi ZTU3Y2UwHhcNMjYwMTI2MTgwMTM4WhcNMjYwMTI3MTgwMTM4WjAzMTEwLwYDVQQD EyhkMTkwYzhmZDMwNmYwY2RlY2IzZGRkNzg3M2Q1MzQ5ZTk5Y2Y1ZThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq76M1PQjxiJYVVa/Yc3l3bkPXpgI HGpJFHdM5IeXQXAU+npdGT2sGKRH7ibLRyok2TDUmxSNOTKoKCsUu+zvGhBjUfpS L82Q5wH1pMFzImwhW4EfG6Ac4GMGG60Mi0dr+Rodppnco6nmdQVNvgIL0j00yb1I qoenhz44EhZfR8KBBFaWvAV2XLwJMJL6TR1gJmqIaYmm62XDhO84LZy9l+H60eXE 80HhdPvyLYOfo1JW3rhHIKWTWLmEwJ50KjMV3hEcYBOTxnDWSIy3PPsVAVcFoyss 3h3ljFNqbcmcsQlbxnnSqjRVxg3c7eQ68PLzoLBgaTIlV7D30pUBAyHibQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGQyP0wbwzeyz3deHPVNJ6Zz16NMB8GA1UdIwQY MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt MjdjMWEzNTk3NmRlLzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArl76fZxX jfude23KmGex0/jrjflwQB7HgSbdtkI4/N5gI7xusOk8ESxXPyvLJKYDjFfVnxiR KvSYZ1fmQr3yThZSoT25lA4U3etDeQoCZK1N0tRHQcjYrC603b7iVzhf8CrV8JjZ CZT+oLQLeptZqgfNJ6nD3+fVvoCzR1BmvuBQJN0SECcAAv8833/db+nzPB5qDJ51 QQWlF1LKSRSFgEJt7wqGeWea2NrTwHcxkBT1iPtsmtMMPFnxdkIl3yXIGaCPeOXJ 7pJroWQQAkpsOGspWBeHqmp4v6rtS9caIblWWUWEJQuKtV/mH8sFZ2NeW6esTpIe aDy47sko75scnA== -----END CERTIFICATE-----Generated at Tue Jan 27 02:12:17 2026 by rpki-client