This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft File: kuwQUNOpMgq58M4rNloJfuQTSyQ.mft (raw, json) Hash identifier: RPlxLJavY6McJz71uj4GCbatNBq/RvoOT/I2+By4qzo= Subject key identifier: C6:3C:58:A5:84:34:08:BA:35:EE:3D:FD:BA:C8:2D:12:44:E3:33:FB Authority key identifier: 92:EC:10:50:D3:A9:32:0A:B9:F0:CE:2B:36:5A:09:7E:E4:13:4B:24 Certificate issuer: /CN=92ec1050d3a9320ab9f0ce2b365a097ee4134b24 Certificate serial: 019BACB7EE465CC6A6B90F9E5D7EFBA73470 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft Manifest number: 14F9 Signing time: Sun 11 Jan 2026 11:01:33 +0000 Manifest this update: Sun 11 Jan 2026 11:01:33 +0000 Manifest next update: Mon 12 Jan 2026 11:01:33 +0000 Files and hashes: 1: YJW2E58R8TGTMYcVtuV2rsRxaO8.roa (hash: YBA/qYhpHhNFXspw03XsXcvb6WMdqj9LTQkg1z/GYUk=) 2: kuwQUNOpMgq58M4rNloJfuQTSyQ.crl (hash: StVoLi9MdqEhfOqca5loMlrMV8A7cY3UAMHXmBhNhG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ac:b7:ee:46:5c:c6:a6:b9:0f:9e:5d:7e:fb:a7:34:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92ec1050d3a9320ab9f0ce2b365a097ee4134b24 Validity Not Before: Jan 11 11:01:33 2026 GMT Not After : Jan 12 11:01:33 2026 GMT Subject: CN=c63c58a5843408ba35ee3dfdbac82d1244e333fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:98:70:a7:7f:e0:4d:2b:b3:cc:3a:7d:b1:be: e8:07:17:f7:23:f3:6e:27:46:9a:a8:22:cd:5e:08: e2:0b:82:81:b6:ba:c8:01:36:8a:df:c2:83:57:05: 96:e5:fe:ce:82:28:b2:c0:9a:67:58:e5:17:3b:49: 68:9a:84:e6:22:f1:2e:94:c5:c7:ef:51:60:59:93: 85:ea:28:4e:d4:a5:a2:1c:f5:a2:91:4f:69:c8:5f: 13:51:ed:26:4e:1b:c8:6d:f8:a3:2f:ba:e0:a4:f4: 0a:3b:01:c7:c6:8d:ef:57:63:62:b0:20:54:6d:39: 71:8b:3c:93:af:91:0c:4a:c4:e2:af:dc:1f:1d:57: 07:a2:a7:f8:57:57:76:d7:e7:c0:74:08:bb:29:3f: 92:59:5f:d6:b2:18:93:aa:c7:ad:55:aa:66:19:2f: 00:ee:0f:a7:9b:f5:47:03:dd:7a:88:19:3c:9d:1b: 37:44:31:89:e6:13:af:a2:86:92:b6:6b:de:87:93: 8b:b1:1a:cc:0e:4f:74:a5:d1:c2:43:2e:99:dc:55: 9c:55:52:02:40:53:e0:9c:45:80:5a:39:a0:60:63: f7:ed:bf:00:1e:be:8d:45:59:ed:01:d2:3b:d4:0d: eb:d3:9c:56:b2:6e:4f:7c:2f:c8:fc:a8:2c:11:92: f0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3C:58:A5:84:34:08:BA:35:EE:3D:FD:BA:C8:2D:12:44:E3:33:FB X509v3 Authority Key Identifier: keyid:92:EC:10:50:D3:A9:32:0A:B9:F0:CE:2B:36:5A:09:7E:E4:13:4B:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:76:ef:0b:41:9e:76:e7:db:ce:78:b7:11:86:e0:f3:3a:cd: 1f:46:66:48:21:27:fa:af:2d:90:82:52:c6:b3:93:a6:1f:17: 04:fc:d2:1c:a5:67:20:06:5a:d8:28:6f:78:27:de:c6:9b:7b: b1:16:29:08:40:f6:f5:c4:64:71:b9:87:dc:ef:52:8d:aa:79: 0d:f5:30:b1:5b:01:33:eb:14:b5:2c:1c:d0:cb:80:a5:86:96: b0:76:a9:44:d5:db:0d:a0:21:b0:5c:6e:f5:2d:08:42:a0:bb: 76:00:2c:c5:78:49:9c:5f:d5:e8:cc:12:7c:01:4c:ed:b5:df: 56:31:a2:20:0c:32:f5:4f:17:94:3c:1a:62:8b:53:90:9a:c7: 41:f8:a4:6c:2c:5a:63:31:19:06:c9:5d:6e:9c:29:71:cc:3c: bd:1d:42:37:cb:cc:3d:68:68:0c:1f:5d:03:94:6c:6f:df:bb: 2e:a3:8e:d7:88:23:63:52:1e:23:c4:d8:e6:10:c7:05:6e:d4: f3:3b:a0:96:8d:2f:99:ee:d5:9c:06:5c:c6:b7:10:f7:87:64: 6c:cd:dd:95:e0:40:db:c5:2e:ee:b9:8a:80:5c:51:d1:18:7d: 2a:a9:0c:74:00:c1:0a:c4:37:8d:b2:f1:58:73:a8:a3:65:be: 99:e4:5e:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZust+5GXMamuQ+eXX77pzRwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZWMxMDUwZDNhOTMyMGFiOWYwY2UyYjM2NWEwOTdlZTQx MzRiMjQwHhcNMjYwMTExMTEwMTMzWhcNMjYwMTEyMTEwMTMzWjAzMTEwLwYDVQQD EyhjNjNjNThhNTg0MzQwOGJhMzVlZTNkZmRiYWM4MmQxMjQ0ZTMzM2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJhwp3/gTSuzzDp9sb7oBxf3I/Nu J0aaqCLNXgjiC4KBtrrIATaK38KDVwWW5f7OgiiywJpnWOUXO0lomoTmIvEulMXH 71FgWZOF6ihO1KWiHPWikU9pyF8TUe0mThvIbfijL7rgpPQKOwHHxo3vV2NisCBU bTlxizyTr5EMSsTir9wfHVcHoqf4V1d21+fAdAi7KT+SWV/WshiTqsetVapmGS8A 7g+nm/VHA916iBk8nRs3RDGJ5hOvooaStmveh5OLsRrMDk90pdHCQy6Z3FWcVVIC QFPgnEWAWjmgYGP37b8AHr6NRVntAdI71A3r05xWsm5PfC/I/KgsEZLw2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMY8WKWENAi6Ne49/brILRJE4zP7MB8GA1UdIwQY MBaAFJLsEFDTqTIKufDOKzZaCX7kE0skMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3V3UVVOT3BNZ3E1OE00ck5sb0pmdVFUU3lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mNTE2ZjYtZDVhMC00MDg2LTk0ZjIt YWJkNGM1YzliMzc0LzEva3V3UVVOT3BNZ3E1OE00ck5sb0pmdVFUU3lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9mNTE2ZjYtZDVhMC00MDg2LTk0ZjItYWJkNGM1YzliMzc0 LzEva3V3UVVOT3BNZ3E1OE00ck5sb0pmdVFUU3lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASHbvC0Ge dufbzni3EYbg8zrNH0ZmSCEn+q8tkIJSxrOTph8XBPzSHKVnIAZa2ChveCfexpt7 sRYpCED29cRkcbmH3O9Sjap5DfUwsVsBM+sUtSwc0MuApYaWsHapRNXbDaAhsFxu 9S0IQqC7dgAsxXhJnF/V6MwSfAFM7bXfVjGiIAwy9U8XlDwaYotTkJrHQfikbCxa YzEZBsldbpwpccw8vR1CN8vMPWhoDB9dA5Rsb9+7LqOO14gjY1IeI8TY5hDHBW7U 8zuglo0vme7VnAZcxrcQ94dkbM3dleBA28Uu7rmKgFxR0Rh9KqkMdADBCsQ3jbLx WHOoo2W+meReVA== -----END CERTIFICATE-----Generated at Sun Jan 11 14:41:55 2026 by rpki-client