This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft File: Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft (raw, json) Hash identifier: BpHuc/wsxPNrz9e4Mm+LnlMTvPkd+ieiXYAYm4OYCL4= Subject key identifier: D9:0E:77:55:2F:43:42:A9:BA:DF:22:1C:96:28:08:8F:DC:DB:0B:9D Authority key identifier: 2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8 Certificate issuer: /CN=2a7df35d41b4062c10fc118189de47da27096db8 Certificate serial: 019B7DCC1F8A8BDAC41588F306C9627C0451 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft Manifest number: 088F Signing time: Fri 02 Jan 2026 08:21:27 +0000 Manifest this update: Fri 02 Jan 2026 08:21:27 +0000 Manifest next update: Sat 03 Jan 2026 08:21:27 +0000 Files and hashes: 1: JYQFKO-FunI32nUSHCVmHj-U72s.roa (hash: t8vcZJVMC1m+PZSUssB6U2g3nAq5K3T4+GIKxNDbOGE=) 2: Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl (hash: kChd4F5bg0r0mjGuidV6AnFZzQL3ZPhyElY8WdMfocc=) 3: _WfVRuscLnYYCEteyctZE_mRNGA.roa (hash: OwIxeyz2i/PN3Q/yKcsy594HSMnZiCVH224Ea6c2hAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 08:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cc:1f:8a:8b:da:c4:15:88:f3:06:c9:62:7c:04:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a7df35d41b4062c10fc118189de47da27096db8 Validity Not Before: Jan 2 08:21:27 2026 GMT Not After : Jan 3 08:21:27 2026 GMT Subject: CN=d90e77552f4342a9badf221c9628088fdcdb0b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5f:79:d3:e3:fe:5e:be:74:a8:fc:b2:eb:66: 6a:57:ae:e7:c0:20:ba:91:5e:fa:52:53:3c:51:d8: f2:fc:51:83:91:fb:22:ba:d9:f9:fa:0a:ef:2b:1b: 1d:81:72:79:05:56:e9:81:34:4f:25:f8:e9:ee:0d: 7f:c0:b2:66:8f:85:5b:d1:fe:c5:f9:a5:42:49:7e: de:a6:69:8a:62:83:7f:c7:df:2d:dc:68:37:90:bb: 12:ad:60:d4:52:00:80:fe:1e:9f:8f:5b:e3:06:e8: a1:3d:ff:68:02:dc:0e:8f:6e:43:98:31:3e:77:e8: a4:1c:67:55:f4:ef:84:43:2e:95:c1:7b:be:ec:c7: c8:3a:48:25:5d:de:77:fb:3e:5d:57:d7:39:17:20: a1:03:21:3e:a6:a8:76:3a:e5:05:e2:58:10:3d:33: d1:f7:33:6b:30:6f:88:61:f9:bd:eb:2b:7a:1e:f1: ab:08:71:9e:c1:ba:86:65:59:ce:57:a7:c4:18:f3: f8:eb:83:a3:5c:8c:a5:ab:09:a0:f4:a7:6f:b1:43: e6:b8:5e:24:f7:9c:d4:bc:17:41:a8:4e:24:e9:8e: 88:3c:96:2b:a3:9c:71:81:d4:f4:02:4b:3b:f7:8f: 67:41:10:08:fd:79:2d:80:bb:df:8c:17:46:1c:fe: cd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:0E:77:55:2F:43:42:A9:BA:DF:22:1C:96:28:08:8F:DC:DB:0B:9D X509v3 Authority Key Identifier: keyid:2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:4c:21:b6:fd:f8:97:c0:20:5b:6f:94:03:64:74:7f:c7:64: bf:8f:66:97:6b:7d:dc:f6:9d:6e:66:1c:ca:8f:fa:a5:90:12: 0d:13:58:90:5b:da:94:2d:5f:04:6f:7b:be:5d:d6:aa:8b:23: 9c:7e:92:fa:1f:d7:b5:42:b2:80:20:1f:dd:78:f9:46:37:b8: 30:82:ae:e0:2c:16:27:13:7c:6c:a7:bb:b9:24:ea:af:12:e7: 1e:3f:d2:c2:b7:9c:22:66:7f:f1:ba:f8:6d:fb:d8:4a:13:2e: d1:f9:c9:b2:60:69:48:43:fc:4d:6e:a3:16:33:56:17:67:22: 15:1b:ff:5c:39:93:ea:9f:c3:fa:c6:85:35:3b:57:da:fb:b0: 25:fb:76:fe:a6:3a:92:11:9f:7e:db:87:05:46:d9:7d:13:f0: c0:39:c6:13:93:dd:7f:bf:30:fa:4d:1e:54:f5:11:17:ee:11: 29:64:7c:ab:2a:a1:9e:b5:e3:fc:5f:0d:2e:54:dc:2b:72:63: d1:e0:7d:7c:ed:0a:aa:1a:df:23:22:b2:bb:a2:05:71:27:97: 0a:e3:fe:99:3b:5a:06:dc:1a:f9:0e:92:fb:3c:e2:73:8c:8f: 84:43:82:19:34:18:b4:60:6a:47:f8:77:c9:f1:d1:a4:dd:48: d0:5e:2d:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt9zB+Ki9rEFYjzBslifARRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhN2RmMzVkNDFiNDA2MmMxMGZjMTE4MTg5ZGU0N2RhMjcw OTZkYjgwHhcNMjYwMTAyMDgyMTI3WhcNMjYwMTAzMDgyMTI3WjAzMTEwLwYDVQQD EyhkOTBlNzc1NTJmNDM0MmE5YmFkZjIyMWM5NjI4MDg4ZmRjZGIwYjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV950+P+Xr50qPyy62ZqV67nwCC6 kV76UlM8Udjy/FGDkfsiutn5+grvKxsdgXJ5BVbpgTRPJfjp7g1/wLJmj4Vb0f7F +aVCSX7epmmKYoN/x98t3Gg3kLsSrWDUUgCA/h6fj1vjBuihPf9oAtwOj25DmDE+ d+ikHGdV9O+EQy6VwXu+7MfIOkglXd53+z5dV9c5FyChAyE+pqh2OuUF4lgQPTPR 9zNrMG+IYfm96yt6HvGrCHGewbqGZVnOV6fEGPP464OjXIylqwmg9KdvsUPmuF4k 95zUvBdBqE4k6Y6IPJYro5xxgdT0Aks7949nQRAI/XktgLvfjBdGHP7NfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkOd1UvQ0Kput8iHJYoCI/c2wudMB8GA1UdIwQY MBaAFCp9811BtAYsEPwRgYneR9onCW24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS24zelhVRzBCaXdRX0JHQmlkNUgyaWNKYmJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lZDMzNGMtZDc5Ny00MjVhLTkzYTEt YTljYzg5ZDQ0YjI1LzEvS24zelhVRzBCaXdRX0JHQmlkNUgyaWNKYmJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9lZDMzNGMtZDc5Ny00MjVhLTkzYTEtYTljYzg5ZDQ0YjI1 LzEvS24zelhVRzBCaXdRX0JHQmlkNUgyaWNKYmJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkEwhtv34 l8AgW2+UA2R0f8dkv49ml2t93PadbmYcyo/6pZASDRNYkFvalC1fBG97vl3Wqosj nH6S+h/XtUKygCAf3Xj5Rje4MIKu4CwWJxN8bKe7uSTqrxLnHj/SwrecImZ/8br4 bfvYShMu0fnJsmBpSEP8TW6jFjNWF2ciFRv/XDmT6p/D+saFNTtX2vuwJft2/qY6 khGfftuHBUbZfRPwwDnGE5Pdf78w+k0eVPURF+4RKWR8qyqhnrXj/F8NLlTcK3Jj 0eB9fO0KqhrfIyKyu6IFcSeXCuP+mTtaBtwa+Q6S+zzic4yPhEOCGTQYtGBqR/h3 yfHRpN1I0F4tAA== -----END CERTIFICATE-----Generated at Fri Jan 2 16:13:08 2026 by rpki-client