This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft File: kuDCRw6wpptO-lhbnLLAZ2ErN54.mft (raw, json) Hash identifier: /9cYFRzF4M2sRkmIkYWljf+GJhLWgVPu1JQzu3jHY1Q= Subject key identifier: B6:A8:FA:22:EC:57:8C:4A:7D:8D:CC:CA:27:6D:CC:BD:B8:B3:63:BF Authority key identifier: 92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E Certificate issuer: /CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e Certificate serial: 019BAD5C5E274150C2E0251DF1707D81B797 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft Manifest number: 17C6 Signing time: Sun 11 Jan 2026 14:01:10 +0000 Manifest this update: Sun 11 Jan 2026 14:01:10 +0000 Manifest next update: Mon 12 Jan 2026 14:01:10 +0000 Files and hashes: 1: C2qg2Q6lbBzdlBnvS6yqtgeY3uk.roa (hash: ijJYNodWqQV5uQq7Q5J14Dvs1Q1uxMUsTbwAGiSXPAc=) 2: kuDCRw6wpptO-lhbnLLAZ2ErN54.crl (hash: wi9keqe+mKrbnvOjSst+E6njjYD0VrKMUcrfK2ogwzE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 14:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:5c:5e:27:41:50:c2:e0:25:1d:f1:70:7d:81:b7:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e Validity Not Before: Jan 11 14:01:10 2026 GMT Not After : Jan 12 14:01:10 2026 GMT Subject: CN=b6a8fa22ec578c4a7d8dccca276dccbdb8b363bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5c:af:e6:cb:82:ad:a6:8f:66:a3:92:dc:a6: 01:27:19:72:69:f7:e2:8f:8a:3a:86:ea:2b:79:96: db:58:cb:9e:ef:1e:05:d9:d1:73:19:3e:5c:5e:fb: f9:ff:01:22:9c:8d:df:64:5f:d4:a6:c5:16:9b:c1: ea:52:52:a4:2e:ae:d0:10:d7:c2:b5:a6:31:0a:2f: fd:17:df:51:05:a4:03:46:5d:34:98:72:bd:67:fd: 02:34:43:ff:4a:8b:c9:52:6f:da:09:d3:63:a1:fe: f8:a3:fa:df:08:40:73:e2:a9:ec:89:52:65:20:4b: 7b:c9:11:dc:29:e0:46:a3:59:68:9c:81:7b:bc:66: 9b:76:2c:e5:e2:09:05:2f:ad:6b:d1:89:16:71:c9: d0:ed:40:3e:2e:96:09:6d:a9:bc:16:0c:9e:f3:b3: 5c:66:e5:e7:48:b9:d8:2a:4b:da:9d:53:a4:cd:f3: 83:95:f1:97:c4:54:60:1e:aa:04:b1:a8:69:7c:50: 37:7e:e7:5a:2a:40:4e:86:c4:37:72:d3:81:e4:27: 17:20:f9:63:01:d4:08:11:7f:f4:fe:6f:04:dc:fb: c3:75:0b:d8:15:c7:80:90:ae:63:c6:9a:8d:06:66: a2:b4:19:b2:8b:33:a3:af:1f:1f:ec:e3:3d:58:68: 1b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A8:FA:22:EC:57:8C:4A:7D:8D:CC:CA:27:6D:CC:BD:B8:B3:63:BF X509v3 Authority Key Identifier: keyid:92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:c1:24:ca:ef:16:fd:33:e7:3f:00:60:df:bc:1a:7a:bc:a7: 01:be:8d:85:42:df:38:35:c1:f2:c1:48:4d:56:52:8d:e1:15: df:b3:5d:a2:78:41:4c:66:ce:0f:41:15:02:0f:0b:e7:6a:34: 85:e7:a9:0d:f1:99:3e:29:17:a2:a8:a4:ab:6e:82:0d:32:af: 4c:b3:47:18:51:f1:69:b3:63:8a:b4:77:b4:c9:02:50:df:5c: 76:9c:99:d2:f7:6a:16:e9:e2:da:7e:69:b2:b8:c1:d8:90:76: 02:06:c3:84:cf:57:10:47:bb:18:97:9e:62:68:0a:98:35:d3: 0e:5d:a4:22:48:27:17:53:11:10:5a:e5:09:58:12:cc:7f:9c: ce:08:43:66:88:5b:61:c8:6c:4c:a2:6c:07:fd:3f:b9:0d:4a: 27:fe:0b:0c:cd:fd:05:dc:0d:6f:b5:27:a1:0d:95:d9:fd:f1: c1:f7:9e:fe:d9:75:92:81:13:76:b3:fb:1c:28:e3:10:06:99: f7:0a:2a:3d:f6:0b:81:76:61:3d:21:04:2b:47:74:da:e8:6a: 66:1b:7b:97:5f:0c:de:95:51:32:09:db:64:f7:7c:52:69:36: 71:73:1e:10:58:53:93:48:70:af:bb:97:83:4f:6a:aa:c0:a4: ef:19:d4:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZutXF4nQVDC4CUd8XB9gbeXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZTBjMjQ3MGViMGE2OWI0ZWZhNTg1YjljYjJjMDY3NjEy YjM3OWUwHhcNMjYwMTExMTQwMTEwWhcNMjYwMTEyMTQwMTEwWjAzMTEwLwYDVQQD EyhiNmE4ZmEyMmVjNTc4YzRhN2Q4ZGNjY2EyNzZkY2NiZGI4YjM2M2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlyv5suCraaPZqOS3KYBJxlyaffi j4o6huoreZbbWMue7x4F2dFzGT5cXvv5/wEinI3fZF/UpsUWm8HqUlKkLq7QENfC taYxCi/9F99RBaQDRl00mHK9Z/0CNEP/SovJUm/aCdNjof74o/rfCEBz4qnsiVJl IEt7yRHcKeBGo1lonIF7vGabdizl4gkFL61r0YkWccnQ7UA+LpYJbam8Fgye87Nc ZuXnSLnYKkvanVOkzfODlfGXxFRgHqoEsahpfFA3fudaKkBOhsQ3ctOB5CcXIPlj AdQIEX/0/m8E3PvDdQvYFceAkK5jxpqNBmaitBmyizOjrx8f7OM9WGgb3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLao+iLsV4xKfY3MyidtzL24s2O/MB8GA1UdIwQY MBaAFJLgwkcOsKabTvpYW5yywGdhKzeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VEQ1J3NndwcHRPLWxoYm5MTEFaMkVyTjU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xM2IwY2QtNTk5Mi00NTYxLTk3Mjkt YjMwZmUwNThkMTYyLzEva3VEQ1J3NndwcHRPLWxoYm5MTEFaMkVyTjU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xM2IwY2QtNTk5Mi00NTYxLTk3MjktYjMwZmUwNThkMTYy LzEva3VEQ1J3NndwcHRPLWxoYm5MTEFaMkVyTjU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfcEkyu8W /TPnPwBg37waerynAb6NhULfODXB8sFITVZSjeEV37NdonhBTGbOD0EVAg8L52o0 heepDfGZPikXoqikq26CDTKvTLNHGFHxabNjirR3tMkCUN9cdpyZ0vdqFuni2n5p srjB2JB2AgbDhM9XEEe7GJeeYmgKmDXTDl2kIkgnF1MREFrlCVgSzH+czghDZohb YchsTKJsB/0/uQ1KJ/4LDM39BdwNb7UnoQ2V2f3xwfee/tl1koETdrP7HCjjEAaZ 9woqPfYLgXZhPSEEK0d02uhqZht7l18M3pVRMgnbZPd8Umk2cXMeEFhTk0hwr7uX g09qqsCk7xnUkQ== -----END CERTIFICATE-----Generated at Sun Jan 11 22:36:48 2026 by rpki-client