This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft File: KfajAL99QLf41hgcW4p9vHG30SM.mft (raw, json) Hash identifier: Gj3RHMJJ1gH+OIVazqfMRBWEQpQmoUjxryLz17WLoFA= Subject key identifier: 5A:2D:F1:D3:12:C5:45:76:C8:BE:A2:84:F9:32:1F:DB:82:08:F2:7B Authority key identifier: 29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23 Certificate issuer: /CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123 Certificate serial: 019C0E22BC0725383A4420A5A0E873F50563 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft Manifest number: 0BD8 Signing time: Fri 30 Jan 2026 09:01:22 +0000 Manifest this update: Fri 30 Jan 2026 09:01:22 +0000 Manifest next update: Sat 31 Jan 2026 09:01:22 +0000 Files and hashes: 1: KfajAL99QLf41hgcW4p9vHG30SM.crl (hash: bi02SQRyhXj0IaxkWHIEs622CMMihuwBWqum6gHDAvk=) 2: Kh4bW6-_s3_aiIv78ENw1EtU9qw.roa (hash: LByHcl5paKi4+lGJdAvzPijsfuoC7StCNhGpNyc/Ie4=) 3: UlilGon0YKDf0xdX5d2N-ep_o1o.roa (hash: kcQzP6cGo7ynAzpkGcfKXnwKfZQwJn7rzspiaXGt8Ao=) 4: dtQ0vYUQe2hHFQXjgaPmdf2Qluw.roa (hash: XpIwnHaIKagXIHTB+uSCxfd4HTE9KgbBojxCDTnpYN4=) 5: tg0TgMF_mOcJrDdgBYL-290G2-M.roa (hash: UjyXgWR1IlQdcA1RR5ThsgsI4c2xfE45PbnBDC6Sn6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 09:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0e:22:bc:07:25:38:3a:44:20:a5:a0:e8:73:f5:05:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123 Validity Not Before: Jan 30 09:01:22 2026 GMT Not After : Jan 31 09:01:22 2026 GMT Subject: CN=5a2df1d312c54576c8bea284f9321fdb8208f27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:39:71:e7:37:cd:ae:3e:a6:d4:f7:0d:f3:a2: d1:fc:fb:73:76:d5:4d:0e:6f:23:66:a2:7e:34:22: 8b:d2:e4:e6:b9:48:b9:ae:33:76:ef:78:65:4f:6d: 51:55:d4:69:5b:8f:cf:3b:81:6f:cd:4a:bc:5c:a3: c1:d2:6e:8e:ea:92:b6:e5:c4:cb:e1:3e:c7:f5:89: 0f:b8:00:fa:73:58:fc:14:c8:27:96:ab:68:39:d1: 18:5b:48:7d:c2:cb:e1:de:f9:0e:29:30:c6:26:4a: b7:87:06:7d:a9:b9:57:1b:6f:47:63:41:e8:3c:a2: e4:43:b3:3a:7b:fb:7c:d2:8f:f6:7e:3e:e9:ce:eb: 1d:4a:e6:c3:43:d0:c9:f4:9e:f9:49:0c:02:32:97: 48:8a:83:28:4b:be:b2:df:d2:58:46:5f:90:b6:b1: 40:d2:c5:52:ca:10:80:a4:db:d7:ea:42:41:13:08: 7e:ec:b8:fb:d1:97:8d:db:90:55:06:2b:b0:dc:48: 41:9d:9f:e6:db:8c:2d:5b:f7:16:90:ea:4e:ec:9e: 3d:25:fd:d9:63:ff:9b:59:69:34:ea:0d:52:a6:c0: 22:71:17:73:36:4d:08:9b:e7:b9:36:e5:a5:2e:f6: 53:7e:24:be:da:f5:53:04:34:0a:fa:4a:5a:52:c4: e6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:2D:F1:D3:12:C5:45:76:C8:BE:A2:84:F9:32:1F:DB:82:08:F2:7B X509v3 Authority Key Identifier: keyid:29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:37:41:50:00:6d:cf:18:0a:67:72:b1:e3:46:92:74:0c:38: 8e:7b:6a:2c:f6:71:1d:a2:a8:b3:ab:e9:da:2b:9c:01:1f:12: da:84:ea:00:2d:b7:36:23:69:42:78:c0:15:d5:f4:55:99:05: c2:0f:5b:0b:6e:ec:b9:fe:e2:78:74:07:e8:66:fa:a8:ae:a2: 75:d9:7c:33:5c:01:aa:66:9d:9d:53:1b:4e:1d:2c:e3:26:93: 1c:2f:6f:58:fc:36:c0:e9:fa:fb:29:fe:57:39:38:b9:71:c9: 85:3e:2a:57:4f:e9:58:05:18:2f:e8:43:fb:81:28:8d:db:f7: f9:ee:ba:07:04:02:43:07:41:65:89:dc:86:48:0d:26:ea:9c: 1e:93:30:01:b9:f3:27:ee:1c:7e:fe:b0:b4:ba:69:bf:9c:77: 09:7f:da:10:bd:30:40:1d:e3:58:6b:b4:70:1b:fa:a1:97:e6: 68:e0:64:e1:52:6e:97:e8:7e:f6:9d:cd:41:45:5d:41:4d:6d: b0:49:50:45:c6:2e:e3:7b:ab:02:e6:5c:ae:9b:77:44:8e:a3: 30:98:0f:f4:5e:29:f9:08:2c:31:1f:c0:af:2c:fc:a0:eb:19: b9:01:30:82:07:fb:32:70:d2:7e:a1:32:be:34:fd:fd:52:70: a8:68:32:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwOIrwHJTg6RCCloOhz9QVjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZjZhMzAwYmY3ZDQwYjdmOGQ2MTgxYzViOGE3ZGJjNzFi N2QxMjMwHhcNMjYwMTMwMDkwMTIyWhcNMjYwMTMxMDkwMTIyWjAzMTEwLwYDVQQD Eyg1YTJkZjFkMzEyYzU0NTc2YzhiZWEyODRmOTMyMWZkYjgyMDhmMjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTlx5zfNrj6m1PcN86LR/PtzdtVN Dm8jZqJ+NCKL0uTmuUi5rjN273hlT21RVdRpW4/PO4FvzUq8XKPB0m6O6pK25cTL 4T7H9YkPuAD6c1j8FMgnlqtoOdEYW0h9wsvh3vkOKTDGJkq3hwZ9qblXG29HY0Ho PKLkQ7M6e/t80o/2fj7pzusdSubDQ9DJ9J75SQwCMpdIioMoS76y39JYRl+QtrFA 0sVSyhCApNvX6kJBEwh+7Lj70ZeN25BVBiuw3EhBnZ/m24wtW/cWkOpO7J49Jf3Z Y/+bWWk06g1SpsAicRdzNk0Im+e5NuWlLvZTfiS+2vVTBDQK+kpaUsTm6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFot8dMSxUV2yL6ihPkyH9uCCPJ7MB8GA1UdIwQY MBaAFCn2owC/fUC3+NYYHFuKfbxxt9EjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZhakFMOTlRTGY0MWhnY1c0cDl2SEczMFNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hYWY0OWMtODNkZC00NmFhLThjZTct Yjg0YzQxM2RmYWE0LzEvS2ZhakFMOTlRTGY0MWhnY1c0cDl2SEczMFNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hYWY0OWMtODNkZC00NmFhLThjZTctYjg0YzQxM2RmYWE0 LzEvS2ZhakFMOTlRTGY0MWhnY1c0cDl2SEczMFNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDdBUABt zxgKZ3Kx40aSdAw4jntqLPZxHaKos6vp2iucAR8S2oTqAC23NiNpQnjAFdX0VZkF wg9bC27suf7ieHQH6Gb6qK6iddl8M1wBqmadnVMbTh0s4yaTHC9vWPw2wOn6+yn+ Vzk4uXHJhT4qV0/pWAUYL+hD+4Eojdv3+e66BwQCQwdBZYnchkgNJuqcHpMwAbnz J+4cfv6wtLppv5x3CX/aEL0wQB3jWGu0cBv6oZfmaOBk4VJul+h+9p3NQUVdQU1t sElQRcYu43urAuZcrpt3RI6jMJgP9F4p+QgsMR/Aryz8oOsZuQEwggf7MnDSfqEy vjT9/VJwqGgyug== -----END CERTIFICATE-----Generated at Fri Jan 30 20:11:16 2026 by rpki-client