This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft File: KYNUhhlzcozivlBfcnCkNk2U5pE.mft (raw, json) Hash identifier: bLKUOBBTV8u7YJjid3zKlMlLWtb3912Vk0XlYNHLaLU= Subject key identifier: F6:C1:37:2C:79:08:12:82:58:95:CF:0B:A6:7E:79:B2:4A:AF:3C:27 Authority key identifier: 29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91 Certificate issuer: /CN=298354861973728ce2be505f7270a4364d94e691 Certificate serial: 019B9D445E4902CB72C1C67F7622371A296C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft Manifest number: 17BD Signing time: Thu 08 Jan 2026 11:01:01 +0000 Manifest this update: Thu 08 Jan 2026 11:01:01 +0000 Manifest next update: Fri 09 Jan 2026 11:01:01 +0000 Files and hashes: 1: KYNUhhlzcozivlBfcnCkNk2U5pE.crl (hash: IpMrFAtvsXVM7J6yPsAZGjSMVF/RJBbMAWtE9pa+1vo=) 2: zzm4xYnMOB3jbc8NbBnWyWTRTvA.roa (hash: kFfMKwS5LxfccFDbx+zZKifQAt7o+0DnklToBwmr71Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:44:5e:49:02:cb:72:c1:c6:7f:76:22:37:1a:29:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=298354861973728ce2be505f7270a4364d94e691 Validity Not Before: Jan 8 11:01:01 2026 GMT Not After : Jan 9 11:01:01 2026 GMT Subject: CN=f6c1372c790812825895cf0ba67e79b24aaf3c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:98:df:5e:91:8c:de:a9:2f:91:60:d0:43:3a: df:23:7d:78:f7:a6:2b:a5:85:f7:a5:60:8a:5f:68: 33:13:1a:55:3e:ef:df:9f:ee:26:7d:7a:07:d9:e1: 11:35:e4:db:94:e1:a0:47:ad:c6:e8:25:88:c1:d3: 9c:8a:e7:fb:de:a2:2b:c1:9f:b6:2e:bc:22:64:01: 4e:c5:a7:1a:4d:7b:9b:ec:d1:05:b8:58:55:60:39: ca:95:5a:f1:4e:29:81:6b:46:a6:57:64:62:d6:b9: 7d:3f:0f:c8:7e:8b:33:2c:07:a8:57:02:3b:8c:19: 04:85:b9:ed:eb:a2:a0:96:2e:7c:19:2d:a2:6f:76: 99:5d:4c:e2:0b:c0:f0:f4:90:2e:d3:c0:a7:4c:fe: 53:43:40:b3:ba:60:dd:bc:d2:9f:8c:27:3c:ce:9f: c3:45:81:1e:0d:5f:e0:bf:b0:9c:d6:2a:49:38:90: 78:40:8c:0b:e4:79:83:78:bf:38:9d:08:fa:9f:c7: 9f:fc:87:45:2c:e1:f8:c5:a7:f6:1b:d4:65:4d:78: fd:e6:fb:8e:6a:88:2a:1b:0c:70:9e:d0:02:c4:9b: b0:d6:91:45:8a:c8:83:9c:bb:63:1c:d6:b2:aa:35: 6d:30:0f:47:2d:7a:ba:81:6d:4b:bd:44:0d:c2:81: 1d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C1:37:2C:79:08:12:82:58:95:CF:0B:A6:7E:79:B2:4A:AF:3C:27 X509v3 Authority Key Identifier: keyid:29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:5c:44:bc:4c:59:29:0f:97:30:9a:e9:a2:5e:bf:56:be:a5: 7f:0e:3f:aa:35:a5:03:7c:a6:a6:6f:b7:ee:d8:ee:d7:03:dd: 22:cc:ba:75:24:b1:f9:9a:cb:33:99:b2:f9:40:14:e1:7c:d4: a5:67:29:1c:6c:6b:86:8b:c9:01:11:2a:63:d1:19:2b:4d:6b: 5c:ab:4f:9e:94:dd:14:33:df:3c:4d:de:9a:97:71:1c:ed:f4: 37:0b:67:9a:9d:32:53:b7:f5:04:3f:89:35:5b:d0:74:88:c6: 77:51:48:03:3c:9a:2a:5c:c5:b6:e2:f7:b8:26:24:fa:78:cc: 3d:7f:86:e7:b8:b3:bb:74:00:4d:01:50:69:54:45:97:ab:ef: 85:5b:df:c4:b0:43:dd:52:d0:bb:ad:02:a5:fd:27:eb:b2:8e: 23:76:f8:dc:b0:46:c8:2f:8f:57:dc:c9:cf:c4:5a:7e:3a:dc: 2f:dc:f0:24:c5:bd:7a:fc:db:c2:ea:b5:01:d5:b4:2e:53:63: d0:77:20:d3:4e:72:0c:98:8a:ed:30:38:e0:e0:ef:70:f6:d8: ee:a5:1c:8e:3b:4d:b5:05:1c:e6:a7:1e:a5:1b:4e:c6:b6:66: bd:7a:6f:3e:f1:d8:1d:e9:ef:85:45:6e:6f:69:09:fe:e1:03: 58:c2:b7:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZudRF5JAstywcZ/diI3GilsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ODM1NDg2MTk3MzcyOGNlMmJlNTA1ZjcyNzBhNDM2NGQ5 NGU2OTEwHhcNMjYwMTA4MTEwMTAxWhcNMjYwMTA5MTEwMTAxWjAzMTEwLwYDVQQD EyhmNmMxMzcyYzc5MDgxMjgyNTg5NWNmMGJhNjdlNzliMjRhYWYzYzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZjfXpGM3qkvkWDQQzrfI31496Yr pYX3pWCKX2gzExpVPu/fn+4mfXoH2eERNeTblOGgR63G6CWIwdOciuf73qIrwZ+2 LrwiZAFOxacaTXub7NEFuFhVYDnKlVrxTimBa0amV2Ri1rl9Pw/IfoszLAeoVwI7 jBkEhbnt66Kgli58GS2ib3aZXUziC8Dw9JAu08CnTP5TQ0CzumDdvNKfjCc8zp/D RYEeDV/gv7Cc1ipJOJB4QIwL5HmDeL84nQj6n8ef/IdFLOH4xaf2G9RlTXj95vuO aogqGwxwntACxJuw1pFFisiDnLtjHNayqjVtMA9HLXq6gW1LvUQNwoEdzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbBNyx5CBKCWJXPC6Z+ebJKrzwnMB8GA1UdIwQY MBaAFCmDVIYZc3KM4r5QX3JwpDZNlOaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1lOVWhobHpjb3ppdmxCZmNuQ2tOazJVNXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9hNmRjZjEtOTdmNC00NWFmLWJiNDgt M2RiNmYwNTcwZDQ4LzEvS1lOVWhobHpjb3ppdmxCZmNuQ2tOazJVNXBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9hNmRjZjEtOTdmNC00NWFmLWJiNDgtM2RiNmYwNTcwZDQ4 LzEvS1lOVWhobHpjb3ppdmxCZmNuQ2tOazJVNXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbFxEvExZ KQ+XMJrpol6/Vr6lfw4/qjWlA3ympm+37tju1wPdIsy6dSSx+ZrLM5my+UAU4XzU pWcpHGxrhovJAREqY9EZK01rXKtPnpTdFDPfPE3empdxHO30Nwtnmp0yU7f1BD+J NVvQdIjGd1FIAzyaKlzFtuL3uCYk+njMPX+G57izu3QATQFQaVRFl6vvhVvfxLBD 3VLQu60Cpf0n67KOI3b43LBGyC+PV9zJz8RafjrcL9zwJMW9evzbwuq1AdW0LlNj 0Hcg005yDJiK7TA44ODvcPbY7qUcjjtNtQUc5qcepRtOxrZmvXpvPvHYHenvhUVu b2kJ/uEDWMK3ow== -----END CERTIFICATE-----Generated at Thu Jan 8 17:07:36 2026 by rpki-client