This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft File: KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft (raw, json) Hash identifier: UayH/1F7ZyLurUMp8XwHfKXOFpM5iR+OpduifQRPmOg= Subject key identifier: 81:C0:51:46:D1:CB:AC:4D:4A:CD:78:7E:1C:B0:8C:FB:71:63:77:C7 Authority key identifier: 28:11:81:8F:95:BE:66:90:E8:AA:BC:5B:EF:A2:17:34:6A:BC:D5:74 Certificate issuer: /CN=2811818f95be6690e8aabc5befa217346abcd574 Certificate serial: 019C2329E48FB9F6E9EF52A84BDA3A709ED8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft Manifest number: 01E5 Signing time: Tue 03 Feb 2026 11:01:13 +0000 Manifest this update: Tue 03 Feb 2026 11:01:13 +0000 Manifest next update: Wed 04 Feb 2026 11:01:13 +0000 Files and hashes: 1: KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl (hash: uNNiTLhChcQTFCIQgcPvCAai5Sy7HTH06eFpRfXyUFU=) 2: cjM0znzLJC2QR0PgnNVfAe1h_mI.roa (hash: niPdw0pZGGHLaXhD+OqWZAWoags/W4iskvjHWI94b6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:23:29:e4:8f:b9:f6:e9:ef:52:a8:4b:da:3a:70:9e:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2811818f95be6690e8aabc5befa217346abcd574 Validity Not Before: Feb 3 11:01:13 2026 GMT Not After : Feb 4 11:01:13 2026 GMT Subject: CN=81c05146d1cbac4d4acd787e1cb08cfb716377c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:57:19:cc:4c:d6:ec:04:c7:ad:db:1c:4a:61: 65:01:b9:2b:61:22:0b:c7:09:f3:f5:94:cf:e2:80: a5:34:cf:e0:b0:ca:aa:56:b6:83:17:2a:c7:14:d3: 7c:66:85:42:e6:4e:ba:ca:5c:0d:73:d9:fd:ee:58: 24:7d:14:06:dd:9b:1a:2b:dc:4e:25:42:ab:b4:83: 21:fa:48:ad:d6:4a:f0:cb:3c:e2:24:35:4b:15:77: 7a:a2:ee:67:4d:9a:b0:af:35:a0:33:fc:0a:7e:c7: b4:d8:a6:48:4e:8f:02:cd:ca:08:ab:70:7e:f0:6c: 03:0c:e0:84:d8:f9:f4:10:f0:4f:2e:fb:9b:52:61: 9c:65:3a:11:aa:8e:85:13:a1:58:cb:11:66:80:cf: e3:65:5b:aa:0c:0d:9b:61:d9:43:20:68:63:7a:bd: 1b:55:74:b5:dc:46:4a:67:44:0d:da:cd:da:9f:03: 1b:8f:41:a2:0b:e6:99:ea:ef:c0:7a:98:7f:77:88: 70:d3:3c:60:24:03:ce:7f:f5:be:c0:7d:e7:4e:33: a1:e5:4b:43:7c:78:6d:6e:c5:e6:46:df:b5:4b:0c: 10:58:b5:8a:ed:06:93:a5:a5:aa:c8:1f:e4:67:df: 54:cb:93:0d:6a:43:b5:63:5b:05:78:e7:e8:11:c4: 5a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C0:51:46:D1:CB:AC:4D:4A:CD:78:7E:1C:B0:8C:FB:71:63:77:C7 X509v3 Authority Key Identifier: keyid:28:11:81:8F:95:BE:66:90:E8:AA:BC:5B:EF:A2:17:34:6A:BC:D5:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:dd:de:d1:23:9e:1b:db:ba:fe:ba:26:4a:49:4f:6d:de:53: 7d:23:2a:6b:6d:c0:4d:39:49:d9:e6:80:9c:b2:9b:18:07:ad: 05:a5:65:9a:b7:7b:c2:4c:8f:c8:65:5e:0f:f7:43:27:24:2b: 03:10:be:04:f8:bd:2b:96:04:3f:8a:af:84:e5:a6:f6:b8:47: 6d:e2:2d:bd:b0:2d:82:a0:17:c2:89:dc:9d:7a:46:9e:9e:5f: 0c:ea:8e:32:2e:2e:2e:29:1e:c8:1a:65:be:8a:85:19:d5:56: 29:f7:bf:26:f7:8d:94:d2:85:b8:5c:d6:09:e2:a2:71:c7:0b: 0e:8d:bb:2e:ff:45:2e:33:37:4e:dc:be:50:5b:72:b8:0b:20: 8c:8a:74:10:73:fb:00:20:88:8b:f0:02:7a:cc:c3:9f:11:ac: 0a:19:b8:2f:47:d6:7a:55:66:ff:3a:e1:1d:cd:59:7b:98:d4: 42:97:3d:a9:3c:4a:1d:37:e5:c3:18:2b:1d:73:55:24:55:0e: c9:18:e8:00:26:9d:ed:a6:c5:74:17:d6:71:06:3e:42:2b:57: be:6a:01:5f:89:e4:04:84:36:28:de:da:7a:4a:75:25:2a:05: b2:44:a6:74:a4:92:14:dc:a1:13:dd:65:b9:8d:ca:cc:37:2f: 7a:17:0e:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwjKeSPufbp71KoS9o6cJ7YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MTE4MThmOTViZTY2OTBlOGFhYmM1YmVmYTIxNzM0NmFi Y2Q1NzQwHhcNMjYwMjAzMTEwMTEzWhcNMjYwMjA0MTEwMTEzWjAzMTEwLwYDVQQD Eyg4MWMwNTE0NmQxY2JhYzRkNGFjZDc4N2UxY2IwOGNmYjcxNjM3N2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71cZzEzW7ATHrdscSmFlAbkrYSIL xwnz9ZTP4oClNM/gsMqqVraDFyrHFNN8ZoVC5k66ylwNc9n97lgkfRQG3ZsaK9xO JUKrtIMh+kit1krwyzziJDVLFXd6ou5nTZqwrzWgM/wKfse02KZITo8CzcoIq3B+ 8GwDDOCE2Pn0EPBPLvubUmGcZToRqo6FE6FYyxFmgM/jZVuqDA2bYdlDIGhjer0b VXS13EZKZ0QN2s3anwMbj0GiC+aZ6u/Aeph/d4hw0zxgJAPOf/W+wH3nTjOh5UtD fHhtbsXmRt+1SwwQWLWK7QaTpaWqyB/kZ99Uy5MNakO1Y1sFeOfoEcRa4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHAUUbRy6xNSs14fhywjPtxY3fHMB8GA1UdIwQY MBaAFCgRgY+VvmaQ6Kq8W++iFzRqvNV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0JHQmo1Vy1acERvcXJ4Yjc2SVhOR3E4MVhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84OWU2NTUtYmQ3OS00OTg0LWI2NDkt NDJlNTdlZjYwMDBhLzEvS0JHQmo1Vy1acERvcXJ4Yjc2SVhOR3E4MVhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS84OWU2NTUtYmQ3OS00OTg0LWI2NDktNDJlNTdlZjYwMDBh LzEvS0JHQmo1Vy1acERvcXJ4Yjc2SVhOR3E4MVhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWd3e0SOe G9u6/romSklPbd5TfSMqa23ATTlJ2eaAnLKbGAetBaVlmrd7wkyPyGVeD/dDJyQr AxC+BPi9K5YEP4qvhOWm9rhHbeItvbAtgqAXwoncnXpGnp5fDOqOMi4uLikeyBpl voqFGdVWKfe/JveNlNKFuFzWCeKicccLDo27Lv9FLjM3Tty+UFtyuAsgjIp0EHP7 ACCIi/ACeszDnxGsChm4L0fWelVm/zrhHc1Ze5jUQpc9qTxKHTflwxgrHXNVJFUO yRjoACad7abFdBfWcQY+QitXvmoBX4nkBIQ2KN7aekp1JSoFskSmdKSSFNyhE91l uY3KzDcvehcOzA== -----END CERTIFICATE-----Generated at Tue Feb 3 14:43:29 2026 by rpki-client