This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft File: k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft (raw, json) Hash identifier: 1fGgrNYBdZIwLKH6wRJ/4IBGZpHSsWHQ/6Hr+q+Z/50= Subject key identifier: 0B:38:81:D6:3A:A0:ED:6F:07:2C:D3:24:A9:2D:44:4E:4E:F2:DE:98 Authority key identifier: 93:E0:79:D7:34:98:91:D2:B4:02:48:95:FA:67:E4:1C:18:F5:6F:D4 Certificate issuer: /CN=93e079d7349891d2b4024895fa67e41c18f56fd4 Certificate serial: 019BB2158FB7E6A75DB5B80DA5D8B01C3060 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft Manifest number: 17C5 Signing time: Mon 12 Jan 2026 12:01:56 +0000 Manifest this update: Mon 12 Jan 2026 12:01:56 +0000 Manifest next update: Tue 13 Jan 2026 12:01:56 +0000 Files and hashes: 1: k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl (hash: yLbs/v17LAkbviaUCLxmT4TVeX3aY950AeSLTnsiuRQ=) 2: wdmEAU2UHexPl9Fd8jFjApSrnME.roa (hash: ytdBjY97O2O0azkD9/5YnzB54mNzzsWykxPR/Of2YIE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:15:8f:b7:e6:a7:5d:b5:b8:0d:a5:d8:b0:1c:30:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93e079d7349891d2b4024895fa67e41c18f56fd4 Validity Not Before: Jan 12 12:01:56 2026 GMT Not After : Jan 13 12:01:56 2026 GMT Subject: CN=0b3881d63aa0ed6f072cd324a92d444e4ef2de98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:98:63:e9:f1:45:b6:b4:56:c4:26:2c:5d:35: aa:73:1c:07:20:8f:45:39:e4:0c:62:84:9a:45:2b: 6d:bc:28:a1:a3:99:5b:2c:61:5a:ad:06:d8:e5:e0: 7f:7c:0d:56:14:a5:84:4d:78:58:ee:3b:58:21:1e: e7:c3:91:6e:01:ab:b9:e6:a4:43:02:0c:f3:a1:5e: fb:cf:69:aa:ac:50:c8:54:fb:82:40:c4:4e:66:a8: 34:e0:39:2c:ca:af:30:d8:6b:c7:45:5b:c7:34:15: 08:3e:8f:cf:9e:fc:5b:a0:e8:51:23:8d:92:ac:04: 05:e3:6e:04:ca:fc:22:8d:26:c9:63:e5:69:15:3b: 1f:e5:96:b8:f7:d5:a9:f7:1e:46:36:35:0f:78:e6: 8f:28:df:99:cf:c8:19:c2:12:c4:b5:4d:13:83:35: 8d:1e:10:f9:ea:22:5a:89:fe:4d:69:4a:c4:e1:23: a4:f1:25:75:59:2d:a2:1e:eb:eb:e6:e9:59:5e:a6: 3a:78:a9:e6:29:42:0c:ec:a7:66:b3:af:11:b6:a3: 71:e6:db:f2:b6:90:6a:80:52:a4:b2:47:85:8b:12: 97:f5:a0:39:89:33:1c:f9:03:4a:f4:26:95:1a:b5: 38:d5:ca:07:7e:a6:30:6e:fd:dc:4c:b2:b2:5d:7d: 3f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:38:81:D6:3A:A0:ED:6F:07:2C:D3:24:A9:2D:44:4E:4E:F2:DE:98 X509v3 Authority Key Identifier: keyid:93:E0:79:D7:34:98:91:D2:B4:02:48:95:FA:67:E4:1C:18:F5:6F:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:15:8a:df:4b:1c:be:4e:c3:da:e0:62:91:9d:6a:c8:a7:3d: e6:a2:5e:eb:3f:60:fb:9e:dd:b8:b2:ef:c9:07:95:6a:cb:43: 4b:75:44:89:d0:57:93:65:56:52:65:81:b2:cc:d0:ac:b7:2b: 9f:ce:b4:e4:51:31:03:69:86:81:ae:08:01:2e:25:7c:c6:a7: 94:5a:9f:b6:0d:18:e5:3a:f5:63:43:40:e3:6f:ca:40:73:b7: 40:4d:f4:90:52:17:49:11:f3:f9:4c:1d:bf:8e:bc:d1:e7:9d: 02:06:5a:ca:67:ad:f4:71:56:d0:92:84:b9:ea:df:c0:b6:44: 54:3e:c8:c6:a5:68:b6:dd:53:7c:1b:98:73:75:8a:0e:bf:6f: b5:6d:16:ca:18:50:15:2f:49:6d:1b:ef:22:6c:d9:e8:52:2f: ac:c0:a2:01:9a:1b:c1:fc:a7:e1:ee:9c:1e:0f:33:84:f6:87: c6:53:25:57:ff:8a:53:f0:98:74:c6:cc:87:04:da:a4:da:68: 47:4f:12:08:27:a7:d5:62:a0:65:28:9b:6b:f9:2c:4a:fd:2a: 34:48:5b:cb:70:45:84:c1:d6:c9:c9:4f:c5:34:2b:18:58:a9: e6:c2:ae:19:ca:f1:af:6e:44:51:83:0f:49:22:19:6f:59:2b: 61:49:ae:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuyFY+35qddtbgNpdiwHDBgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZTA3OWQ3MzQ5ODkxZDJiNDAyNDg5NWZhNjdlNDFjMThm NTZmZDQwHhcNMjYwMTEyMTIwMTU2WhcNMjYwMTEzMTIwMTU2WjAzMTEwLwYDVQQD EygwYjM4ODFkNjNhYTBlZDZmMDcyY2QzMjRhOTJkNDQ0ZTRlZjJkZTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJhj6fFFtrRWxCYsXTWqcxwHII9F OeQMYoSaRSttvCiho5lbLGFarQbY5eB/fA1WFKWETXhY7jtYIR7nw5FuAau55qRD AgzzoV77z2mqrFDIVPuCQMROZqg04Dksyq8w2GvHRVvHNBUIPo/PnvxboOhRI42S rAQF424EyvwijSbJY+VpFTsf5Za499Wp9x5GNjUPeOaPKN+Zz8gZwhLEtU0TgzWN HhD56iJaif5NaUrE4SOk8SV1WS2iHuvr5ulZXqY6eKnmKUIM7Kdms68RtqNx5tvy tpBqgFKkskeFixKX9aA5iTMc+QNK9CaVGrU41coHfqYwbv3cTLKyXX0/SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAs4gdY6oO1vByzTJKktRE5O8t6YMB8GA1UdIwQY MBaAFJPgedc0mJHStAJIlfpn5BwY9W/UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay1CNTF6U1lrZEswQWtpVi1tZmtIQmoxYjlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84ZTM2YjYtZDVhZi00MTBhLTlmYjkt OGE5MmRmNzdhMDdmLzEvay1CNTF6U1lrZEswQWtpVi1tZmtIQmoxYjlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84ZTM2YjYtZDVhZi00MTBhLTlmYjktOGE5MmRmNzdhMDdm LzEvay1CNTF6U1lrZEswQWtpVi1tZmtIQmoxYjlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHBWK30sc vk7D2uBikZ1qyKc95qJe6z9g+57duLLvyQeVastDS3VEidBXk2VWUmWBsszQrLcr n8605FExA2mGga4IAS4lfManlFqftg0Y5Tr1Y0NA42/KQHO3QE30kFIXSRHz+Uwd v4680eedAgZaymet9HFW0JKEuerfwLZEVD7IxqVott1TfBuYc3WKDr9vtW0WyhhQ FS9JbRvvImzZ6FIvrMCiAZobwfyn4e6cHg8zhPaHxlMlV/+KU/CYdMbMhwTapNpo R08SCCen1WKgZSiba/ksSv0qNEhby3BFhMHWyclPxTQrGFip5sKuGcrxr25EUYMP SSIZb1krYUmu8Q== -----END CERTIFICATE-----Generated at Mon Jan 12 15:47:10 2026 by rpki-client