This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft File: ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft (raw, json) Hash identifier: rik9AnxnKOlK+hHk3fcwgRKmAtUV1moq4MHMNcmWkzg= Subject key identifier: 26:61:3C:A1:C7:43:74:91:AC:37:AD:40:0D:66:D3:3D:3D:CE:97:99 Authority key identifier: 92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52 Certificate issuer: /CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652 Certificate serial: 019BAC4A592D92064A8E1E205361C57990A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft Manifest number: 17C2 Signing time: Sun 11 Jan 2026 09:01:52 +0000 Manifest this update: Sun 11 Jan 2026 09:01:52 +0000 Manifest next update: Mon 12 Jan 2026 09:01:52 +0000 Files and hashes: 1: BK2ktyU34ofrpamQZgAZgS1SDAw.roa (hash: UFCcNLAPVlBtUduNktGFZUuUL/6s5iN6F5JFOmjmPCk=) 2: ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl (hash: 7rRW0cNzvXNPjk8azexsfL8WUoXnHIOsnz+MKFFJeyw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ac:4a:59:2d:92:06:4a:8e:1e:20:53:61:c5:79:90:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652 Validity Not Before: Jan 11 09:01:52 2026 GMT Not After : Jan 12 09:01:52 2026 GMT Subject: CN=26613ca1c7437491ac37ad400d66d33d3dce9799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c6:13:ce:7c:66:e3:46:ea:79:f7:34:04:f8: 6a:be:60:09:87:6d:71:33:6b:da:d8:b1:15:01:f6: 27:df:12:87:69:be:99:42:17:2d:87:09:c2:21:e2: 50:9a:35:c8:17:55:20:ef:7f:43:d5:6d:f2:f3:38: 7f:ab:a9:7f:d7:24:6a:45:b1:6f:64:9b:d7:40:d3: 91:cc:6e:db:80:a4:77:6a:8d:1f:25:f0:9c:a0:a4: d9:85:b1:a1:81:1e:e5:d2:24:4d:07:37:96:a8:33: 8c:e7:00:d9:58:50:59:81:ab:72:5c:de:c2:87:bc: 42:9d:96:52:ee:bb:22:9e:1f:2e:b5:ca:5b:76:c1: ce:d6:bf:16:64:38:79:66:2c:cf:4d:e5:cb:0c:52: 8d:32:7f:db:bd:a4:af:ce:6f:66:ce:69:c3:91:20: 3a:1b:65:cd:d9:cf:ea:11:08:87:cc:42:df:70:6e: c8:14:d9:f1:34:b1:9b:b3:05:18:48:36:fb:9e:d3: b6:26:ed:e8:57:fa:f1:31:34:79:d2:8c:ff:5a:37: 00:cf:ef:59:53:1b:87:7f:c0:d5:98:b9:4c:52:ae: 01:9b:35:09:c2:f4:ff:03:7f:f0:89:f3:24:2e:dd: 49:61:87:18:f0:61:2f:79:28:af:94:e3:be:45:8f: 94:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:61:3C:A1:C7:43:74:91:AC:37:AD:40:0D:66:D3:3D:3D:CE:97:99 X509v3 Authority Key Identifier: keyid:92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e6:6f:14:8d:8f:51:b1:c4:9b:58:f1:45:0f:ae:94:20:94: cd:11:ed:f2:6f:3e:37:68:d2:37:3d:76:25:ed:8d:22:a4:a9: 26:72:b5:06:9c:eb:ec:8c:a8:4a:d9:ad:36:49:9e:89:52:bc: b0:da:dd:ae:78:92:a5:96:c0:94:9e:63:ba:30:0d:19:15:ee: d2:84:42:ee:8f:11:5e:df:e4:fc:07:34:61:6d:2e:f9:2f:9f: 1e:b2:3e:7f:72:cd:51:e7:30:d8:4e:55:f4:b2:44:9a:b0:43: 05:a4:2d:cc:67:c0:67:2c:75:3f:3a:82:bd:94:c0:42:f6:3d: 52:e7:4f:c8:4b:ec:39:a7:97:2d:ba:b2:66:29:c2:c4:f6:c0: 15:9a:68:49:bc:21:e8:a6:d1:0f:91:da:f0:82:cd:ea:a0:61: 0f:76:3b:db:95:1b:4f:dc:14:40:20:f9:90:92:62:8e:f2:b9: 83:6c:a9:ba:5b:2e:8c:fc:cc:80:2b:4e:85:50:df:33:de:53: a7:ba:d0:53:8a:8e:0b:da:76:0e:ca:a3:92:dd:0d:9e:c1:53: 5a:eb:31:2b:11:94:5a:9f:33:c2:5d:90:60:ae:82:cf:0c:79: 0a:2f:6d:a8:4d:01:f5:f1:55:a2:f1:e7:1d:30:10:e2:f3:81: 72:fa:a9:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZusSlktkgZKjh4gU2HFeZCkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZWZmNjE2MjUwMmVhM2I1MmZkOGNhM2FlMTA4ZDEzZDZi ZmY2NTIwHhcNMjYwMTExMDkwMTUyWhcNMjYwMTEyMDkwMTUyWjAzMTEwLwYDVQQD EygyNjYxM2NhMWM3NDM3NDkxYWMzN2FkNDAwZDY2ZDMzZDNkY2U5Nzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcYTznxm40bqefc0BPhqvmAJh21x M2va2LEVAfYn3xKHab6ZQhcthwnCIeJQmjXIF1Ug739D1W3y8zh/q6l/1yRqRbFv ZJvXQNORzG7bgKR3ao0fJfCcoKTZhbGhgR7l0iRNBzeWqDOM5wDZWFBZgatyXN7C h7xCnZZS7rsinh8utcpbdsHO1r8WZDh5ZizPTeXLDFKNMn/bvaSvzm9mzmnDkSA6 G2XN2c/qEQiHzELfcG7IFNnxNLGbswUYSDb7ntO2Ju3oV/rxMTR50oz/WjcAz+9Z UxuHf8DVmLlMUq4BmzUJwvT/A3/wifMkLt1JYYcY8GEveSivlOO+RY+UfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZhPKHHQ3SRrDetQA1m0z09zpeZMB8GA1UdIwQY MBaAFJLv9hYlAuo7Uv2Mo64QjRPWv/ZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VfMkZpVUM2anRTX1l5anJoQ05FOWFfOWxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83OTQzYTAtY2NhYi00MjYwLWJkNTEt YWZlODlhYWNjNDkyLzEva3VfMkZpVUM2anRTX1l5anJoQ05FOWFfOWxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS83OTQzYTAtY2NhYi00MjYwLWJkNTEtYWZlODlhYWNjNDky LzEva3VfMkZpVUM2anRTX1l5anJoQ05FOWFfOWxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASuZvFI2P UbHEm1jxRQ+ulCCUzRHt8m8+N2jSNz12Je2NIqSpJnK1Bpzr7IyoStmtNkmeiVK8 sNrdrniSpZbAlJ5jujANGRXu0oRC7o8RXt/k/Ac0YW0u+S+fHrI+f3LNUecw2E5V 9LJEmrBDBaQtzGfAZyx1PzqCvZTAQvY9UudPyEvsOaeXLbqyZinCxPbAFZpoSbwh 6KbRD5Ha8ILN6qBhD3Y725UbT9wUQCD5kJJijvK5g2ypulsujPzMgCtOhVDfM95T p7rQU4qOC9p2Dsqjkt0NnsFTWusxKxGUWp8zwl2QYK6Czwx5Ci9tqE0B9fFVovHn HTAQ4vOBcvqpSA== -----END CERTIFICATE-----Generated at Sun Jan 11 19:21:15 2026 by rpki-client