This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft File: KYNUhhlzcozivlBfcnCkNk2U5pE.mft (raw, json) Hash identifier: XWaGk+pLSu2usakgun/+kerif77YMYcvd9E5m3tNR3E= Subject key identifier: 25:0A:3C:80:70:40:41:B0:4D:86:B0:51:8E:F9:E4:03:E8:AF:2E:29 Authority key identifier: 29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91 Certificate issuer: /CN=298354861973728ce2be505f7270a4364d94e691 Certificate serial: 019B8DD0EAE77F5302B2634789FC73167A7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft Manifest number: 17B5 Signing time: Mon 05 Jan 2026 11:00:37 +0000 Manifest this update: Mon 05 Jan 2026 11:00:37 +0000 Manifest next update: Tue 06 Jan 2026 11:00:37 +0000 Files and hashes: 1: KYNUhhlzcozivlBfcnCkNk2U5pE.crl (hash: GBd9vlKom2tzZGpr0hA4WsPdLMgfgEU8ME0wegAtmlc=) 2: zzm4xYnMOB3jbc8NbBnWyWTRTvA.roa (hash: kFfMKwS5LxfccFDbx+zZKifQAt7o+0DnklToBwmr71Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:d0:ea:e7:7f:53:02:b2:63:47:89:fc:73:16:7a:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=298354861973728ce2be505f7270a4364d94e691 Validity Not Before: Jan 5 11:00:37 2026 GMT Not After : Jan 6 11:00:37 2026 GMT Subject: CN=250a3c80704041b04d86b0518ef9e403e8af2e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:47:7f:71:23:d1:d5:1c:0f:7e:76:96:b3:ff: 57:fd:63:a7:7c:c3:8a:4a:8d:78:ae:95:ec:2c:78: b8:b4:34:e6:a3:d1:65:62:8f:4e:af:52:01:e8:1d: 6a:1c:9c:51:82:0e:d6:56:1a:eb:33:a9:1e:bb:24: b5:a1:df:c7:54:9e:aa:66:a8:5d:11:13:2c:53:ab: 2d:8b:de:dc:e1:2d:da:68:5f:f8:fb:f6:1d:63:90: 24:f1:50:b1:9a:7c:0a:3c:20:ea:4f:6d:77:b9:8a: 77:a7:32:7e:e6:6e:44:b5:43:bb:1a:28:da:95:96: 33:04:7c:f2:59:35:05:36:95:aa:6f:4b:4a:eb:bd: ad:cf:a3:6c:94:93:91:6d:f4:e3:99:d6:a3:d9:fd: 06:da:2a:b1:07:4c:9b:d1:5a:6b:22:ee:2f:97:4b: e9:62:b5:8d:91:0d:76:9c:04:9b:2b:b8:a8:2f:e0: 94:28:80:f7:6d:46:16:b7:c7:fb:67:f8:04:31:a3: ad:0a:60:65:54:e1:33:a3:55:24:56:57:24:4b:3b: d3:d0:21:99:29:96:3a:91:f3:d4:c3:e3:5b:1c:c7: c6:b0:93:3a:e3:ab:b1:f8:1c:14:5f:6a:14:0e:12: 01:6f:78:65:64:58:6e:d5:44:ff:79:20:39:86:06: 71:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0A:3C:80:70:40:41:B0:4D:86:B0:51:8E:F9:E4:03:E8:AF:2E:29 X509v3 Authority Key Identifier: keyid:29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:e2:75:14:1d:9d:35:ed:b4:b9:76:ec:d7:50:a3:c4:f6:26: 69:8f:02:b6:a2:10:ca:91:70:6c:a0:be:17:6f:4f:75:2c:46: 2b:ef:1e:2f:f5:0b:ad:1a:1d:a6:de:b5:e0:f2:90:7d:21:bd: ae:d0:13:10:98:37:68:6e:96:5e:4c:79:08:a0:db:ca:05:fd: 27:86:ef:d4:d1:d7:8c:49:cb:5b:5b:24:11:b0:5f:74:a5:bc: e2:15:45:f2:74:2a:cb:a9:ce:21:01:e5:97:0d:8e:27:9e:d5: 01:1e:c7:80:a2:f6:69:5c:34:df:8c:21:56:b9:7c:c8:2d:74: b6:ad:58:ef:e1:e9:62:11:93:dc:5c:13:c4:f3:33:bb:a3:9e: 21:bc:d6:75:e0:ea:43:4f:7d:49:19:74:02:a6:0f:63:d6:28: 74:72:f5:40:22:5b:89:f2:ea:a5:98:60:11:0a:91:7a:0e:18: e6:15:78:75:a1:69:54:48:37:b8:9c:b4:d9:5b:f6:0e:6d:0b: 70:92:07:b7:77:ff:00:9d:0c:71:4a:97:cf:3e:e8:f0:e4:5a: 73:90:9b:2f:e9:41:09:d2:9c:87:1e:f4:ac:6d:c7:42:d0:64: 54:84:a7:61:1d:03:6b:06:9c:62:93:3c:4c:3a:d6:cd:b4:e8: e3:6b:8a:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuN0Ornf1MCsmNHifxzFnp8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ODM1NDg2MTk3MzcyOGNlMmJlNTA1ZjcyNzBhNDM2NGQ5 NGU2OTEwHhcNMjYwMTA1MTEwMDM3WhcNMjYwMTA2MTEwMDM3WjAzMTEwLwYDVQQD EygyNTBhM2M4MDcwNDA0MWIwNGQ4NmIwNTE4ZWY5ZTQwM2U4YWYyZTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00d/cSPR1RwPfnaWs/9X/WOnfMOK So14rpXsLHi4tDTmo9FlYo9Or1IB6B1qHJxRgg7WVhrrM6keuyS1od/HVJ6qZqhd ERMsU6sti97c4S3aaF/4+/YdY5Ak8VCxmnwKPCDqT213uYp3pzJ+5m5EtUO7Gija lZYzBHzyWTUFNpWqb0tK672tz6NslJORbfTjmdaj2f0G2iqxB0yb0VprIu4vl0vp YrWNkQ12nASbK7ioL+CUKID3bUYWt8f7Z/gEMaOtCmBlVOEzo1UkVlckSzvT0CGZ KZY6kfPUw+NbHMfGsJM646ux+BwUX2oUDhIBb3hlZFhu1UT/eSA5hgZx5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUKPIBwQEGwTYawUY755APory4pMB8GA1UdIwQY MBaAFCmDVIYZc3KM4r5QX3JwpDZNlOaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1lOVWhobHpjb3ppdmxCZmNuQ2tOazJVNXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9hNmRjZjEtOTdmNC00NWFmLWJiNDgt M2RiNmYwNTcwZDQ4LzEvS1lOVWhobHpjb3ppdmxCZmNuQ2tOazJVNXBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9hNmRjZjEtOTdmNC00NWFmLWJiNDgtM2RiNmYwNTcwZDQ4 LzEvS1lOVWhobHpjb3ppdmxCZmNuQ2tOazJVNXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAreJ1FB2d Ne20uXbs11CjxPYmaY8CtqIQypFwbKC+F29PdSxGK+8eL/ULrRodpt614PKQfSG9 rtATEJg3aG6WXkx5CKDbygX9J4bv1NHXjEnLW1skEbBfdKW84hVF8nQqy6nOIQHl lw2OJ57VAR7HgKL2aVw034whVrl8yC10tq1Y7+HpYhGT3FwTxPMzu6OeIbzWdeDq Q099SRl0AqYPY9YodHL1QCJbifLqpZhgEQqReg4Y5hV4daFpVEg3uJy02Vv2Dm0L cJIHt3f/AJ0McUqXzz7o8ORac5CbL+lBCdKchx70rG3HQtBkVISnYR0DawacYpM8 TDrWzbTo42uKbA== -----END CERTIFICATE-----Generated at Mon Jan 5 18:54:25 2026 by rpki-client