This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft File: KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft (raw, json) Hash identifier: QmqTzqgOBgqEbURQoubjTAw02YTobHDa2Rt3woZga80= Subject key identifier: 8C:FB:23:37:52:E8:17:16:9E:57:CF:04:64:45:CD:2C:8F:4E:ED:B3 Authority key identifier: 29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4 Certificate issuer: /CN=296016ad64c22600acf3049f8758f53ebb1e57c4 Certificate serial: 019BDEB6D4CF27CADFF8FE654A6241B7A4F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft Manifest number: 0594 Signing time: Wed 21 Jan 2026 04:01:22 +0000 Manifest this update: Wed 21 Jan 2026 04:01:22 +0000 Manifest next update: Thu 22 Jan 2026 04:01:22 +0000 Files and hashes: 1: AoU_pxzG_o6ZdZCCDWMVfDhpvWo.roa (hash: BRGrCuSHF/KxuLb2FPfCsu+om1pAKryDQAGzbDeUu7s=) 2: KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl (hash: dNc7czLa35cCgzlW3mJkoMLnCJXN5MQcwwxQLGGVfwQ=) 3: ZT9LL1knJk98OWBBZzmpd3KjJfI.roa (hash: 4/mqEiUwgyohdOIIeiQwV1R7+uiHz+P83MCY26loH04=) 4: cJF5A_gDXcusMmTN_YOw0UaFwN4.roa (hash: ZjhEvCJMp06qZY9/OCI+NL1nzY2YgF1mcLrDQRDzTXk=) 5: gBcIgtm5Fh2dgbWxMKlYqLrgkZc.roa (hash: HLdh1cV+6Q5Z9NDCAYRcbYgcdSu4gYhwR9qj/+weu2c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:de:b6:d4:cf:27:ca:df:f8:fe:65:4a:62:41:b7:a4:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=296016ad64c22600acf3049f8758f53ebb1e57c4 Validity Not Before: Jan 21 04:01:22 2026 GMT Not After : Jan 22 04:01:22 2026 GMT Subject: CN=8cfb233752e817169e57cf046445cd2c8f4eedb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b9:69:d0:2d:0f:be:85:0b:d3:f3:4c:06:b3: 70:8c:07:2a:c1:79:71:19:59:d9:78:1d:f5:25:75: 8c:e3:6b:26:4a:7a:71:27:33:f3:35:c6:94:54:3d: fa:b2:e6:b6:06:ba:26:06:02:46:2a:c0:54:8e:fd: 2f:e0:58:41:5c:3a:0f:09:16:fb:30:13:ee:1a:30: 58:15:d0:3e:02:87:48:7e:ce:25:b3:4e:92:6f:ab: 5d:d2:c0:f0:2a:9c:43:b8:ef:38:9a:71:dd:3b:d7: 5a:3e:2a:17:7a:8a:36:d0:71:29:f6:6a:6b:bf:85: 2c:ed:7d:3a:87:43:bc:86:f9:11:cf:56:4b:1a:92: 5b:23:1d:e0:cf:f9:c8:fb:ad:8d:b3:c0:7d:1a:57: a2:08:36:ef:d2:c9:7f:8f:70:92:53:96:ba:0a:6c: f7:67:7b:39:30:38:bd:07:d3:b9:aa:93:fd:f8:d8: e3:50:10:1c:17:05:34:73:97:b0:cf:90:7c:a4:5f: 83:75:de:ea:73:b9:d5:38:c4:2e:73:42:25:e1:26: 96:c0:33:53:e8:77:1c:c7:e1:37:8b:58:1b:dd:0b: c2:ec:3d:3e:db:34:ef:5f:25:28:14:b8:a4:0a:38: e4:2a:48:2a:a5:52:a2:db:f3:5d:0c:29:fa:b5:97: c6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:FB:23:37:52:E8:17:16:9E:57:CF:04:64:45:CD:2C:8F:4E:ED:B3 X509v3 Authority Key Identifier: keyid:29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:23:79:8c:3f:b3:b3:f1:e9:b4:de:fd:f6:d7:6b:f7:4e:b1: d5:7b:81:a7:50:00:c3:95:fd:60:80:0e:52:69:5c:c5:dc:9d: 53:ce:d2:da:02:32:b0:c0:7b:67:5a:77:5e:71:fc:84:25:c8: 4d:94:ce:53:5e:39:65:e3:a6:e2:b5:15:79:3d:1e:ec:50:64: c8:4e:92:e8:5b:94:f5:be:67:1b:a4:3a:34:ef:49:12:b0:89: 41:7d:f5:79:95:a7:cb:0a:76:d2:5d:f6:3e:0a:d1:31:2a:69: a9:9c:94:a9:00:2c:4f:93:ee:d9:cf:55:ef:ef:c0:44:2c:de: f0:f6:54:4e:64:22:15:a5:ce:65:cd:de:2f:34:38:41:cc:ec: 76:26:b5:58:6c:21:1a:6b:15:f6:2f:82:8e:dc:98:cd:1b:aa: d9:c1:aa:e7:53:46:65:c1:26:6e:f0:60:5f:57:93:90:f7:06: ec:d5:6f:ed:be:a0:41:18:0f:ea:7d:c2:21:26:8e:27:f5:c2: 50:c2:7b:32:e1:31:09:4b:3d:94:e8:d3:fd:c4:dc:9d:55:3b: 53:c2:6e:c0:8f:ee:90:79:cf:5a:49:31:1d:d1:45:d6:44:84: dd:25:a8:d6:2f:4c:9b:2b:c5:3a:a2:d3:78:1b:4f:bc:07:0a: d5:be:95:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvettTPJ8rf+P5lSmJBt6TxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjAxNmFkNjRjMjI2MDBhY2YzMDQ5Zjg3NThmNTNlYmIx ZTU3YzQwHhcNMjYwMTIxMDQwMTIyWhcNMjYwMTIyMDQwMTIyWjAzMTEwLwYDVQQD Eyg4Y2ZiMjMzNzUyZTgxNzE2OWU1N2NmMDQ2NDQ1Y2QyYzhmNGVlZGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLlp0C0PvoUL0/NMBrNwjAcqwXlx GVnZeB31JXWM42smSnpxJzPzNcaUVD36sua2BromBgJGKsBUjv0v4FhBXDoPCRb7 MBPuGjBYFdA+AodIfs4ls06Sb6td0sDwKpxDuO84mnHdO9daPioXeoo20HEp9mpr v4Us7X06h0O8hvkRz1ZLGpJbIx3gz/nI+62Ns8B9GleiCDbv0sl/j3CSU5a6Cmz3 Z3s5MDi9B9O5qpP9+NjjUBAcFwU0c5ewz5B8pF+Ddd7qc7nVOMQuc0Il4SaWwDNT 6Hccx+E3i1gb3QvC7D0+2zTvXyUoFLikCjjkKkgqpVKi2/NdDCn6tZfGPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIz7IzdS6BcWnlfPBGRFzSyPTu2zMB8GA1UdIwQY MBaAFClgFq1kwiYArPMEn4dY9T67HlfEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dBV3JXVENKZ0NzOHdTZmgxajFQcnNlVjhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMzM0ODEtNjYzNC00ZDA5LWJmMTIt YWI3ZjE0ZGFhZTRmLzEvS1dBV3JXVENKZ0NzOHdTZmgxajFQcnNlVjhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMzM0ODEtNjYzNC00ZDA5LWJmMTItYWI3ZjE0ZGFhZTRm LzEvS1dBV3JXVENKZ0NzOHdTZmgxajFQcnNlVjhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyN5jD+z s/HptN799tdr906x1XuBp1AAw5X9YIAOUmlcxdydU87S2gIysMB7Z1p3XnH8hCXI TZTOU145ZeOm4rUVeT0e7FBkyE6S6FuU9b5nG6Q6NO9JErCJQX31eZWnywp20l32 PgrRMSppqZyUqQAsT5Pu2c9V7+/ARCze8PZUTmQiFaXOZc3eLzQ4Qczsdia1WGwh GmsV9i+CjtyYzRuq2cGq51NGZcEmbvBgX1eTkPcG7NVv7b6gQRgP6n3CISaOJ/XC UMJ7MuExCUs9lOjT/cTcnVU7U8JuwI/ukHnPWkkxHdFF1kSE3SWo1i9MmyvFOqLT eBtPvAcK1b6VJQ== -----END CERTIFICATE-----Generated at Wed Jan 21 11:27:18 2026 by rpki-client