This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft File: KovcnBJ_txjiQN-ydW9SAgNv49U.mft (raw, json) Hash identifier: f60Nuh75yB9vDFZZlTz0DrbMUFYLvXTPKjPl0QS0iNI= Subject key identifier: 0F:98:02:AF:0A:79:38:72:C9:86:E7:B9:CB:54:EB:B9:FE:98:3A:54 Authority key identifier: 2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5 Certificate issuer: /CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5 Certificate serial: 019B7759EE5945F2C3655F135EE13818A3D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft Manifest number: 17A6 Signing time: Thu 01 Jan 2026 02:19:00 +0000 Manifest this update: Thu 01 Jan 2026 02:19:00 +0000 Manifest next update: Fri 02 Jan 2026 02:19:00 +0000 Files and hashes: 1: KovcnBJ_txjiQN-ydW9SAgNv49U.crl (hash: kYSAmPRtLUkXmTUdi8sR5EEDE5rEKi4iPMF6rv0YSvA=) 2: mc9vgt48FDSSjfdsSGOMMwU_Xnc.roa (hash: 7YStYGH0X3lXXsv/wC32bvyXMwAf6g2zLLXt60k5Dw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:ee:59:45:f2:c3:65:5f:13:5e:e1:38:18:a3:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5 Validity Not Before: Jan 1 02:19:00 2026 GMT Not After : Jan 2 02:19:00 2026 GMT Subject: CN=0f9802af0a793872c986e7b9cb54ebb9fe983a54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e6:19:0f:09:45:84:9a:6e:a7:31:92:17:f8: 07:46:fa:4b:da:1c:65:95:0b:73:8e:01:c8:1c:1d: 38:c7:e3:8b:66:7b:23:a3:e8:3b:32:a6:93:a1:e5: 0b:a8:03:a0:ac:5c:39:61:31:a1:59:72:b8:22:25: fc:3f:61:37:11:d3:e6:db:a8:0b:ab:5c:e4:67:6e: 84:6e:e3:a4:66:48:8f:92:36:96:62:28:96:2a:d5: c4:09:d0:98:e3:31:9e:33:ee:b0:13:76:65:2e:88: bf:a6:22:be:27:71:40:4e:a4:7e:9b:d9:1a:fa:34: 9e:ba:31:eb:e1:d4:51:ad:a9:97:87:7c:19:f8:24: f5:ac:ec:08:0a:ab:91:17:08:0f:d5:12:38:79:2a: 70:1e:8a:89:52:6e:25:34:bb:6e:60:50:00:71:39: 17:e9:01:d8:71:c6:d7:6b:69:3a:dd:69:02:14:d1: d0:b6:07:6c:0e:69:3e:a6:bb:ad:95:67:1f:eb:1a: ec:03:bd:7e:4b:df:b8:6a:e3:d7:98:6c:0f:f6:08: 81:75:5a:14:2b:9f:4d:31:b5:1d:d6:c0:16:03:ac: cc:89:75:da:7f:99:ac:57:07:e1:4f:51:d9:b8:c5: c8:86:da:eb:77:08:2b:00:bf:34:ef:74:17:07:d0: 41:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:98:02:AF:0A:79:38:72:C9:86:E7:B9:CB:54:EB:B9:FE:98:3A:54 X509v3 Authority Key Identifier: keyid:2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:55:97:69:7a:4c:4d:22:1c:e8:2a:7c:65:c6:d0:9c:6d:02: 1d:22:00:4b:08:b8:2b:b6:50:d4:80:e0:03:c1:ca:cd:dd:cd: e0:ea:73:59:7a:58:7e:1a:2b:19:bf:f6:0e:45:f2:62:83:9d: b8:be:a3:47:48:e0:71:31:4f:41:a2:d6:05:55:77:2c:f1:cb: c2:91:4b:39:04:e6:ce:37:ec:3a:c3:56:71:b2:21:32:32:20: 04:29:0c:bd:57:19:13:5f:0e:c5:b4:5f:56:ae:ed:04:f9:53: 4e:77:63:4f:9b:2e:8e:96:74:d4:4c:35:bd:0d:0e:ef:d0:b4: 10:5c:58:8e:d3:ef:28:61:79:bb:e4:5a:37:22:49:06:a0:60: 32:10:8b:a8:84:c1:ea:59:79:32:c3:e1:f0:7f:dd:2b:39:22: 79:1a:b1:31:d1:a3:2d:98:93:8e:72:6b:f8:15:c8:01:20:fc: 4d:53:93:73:22:0b:95:db:fc:4e:ad:ec:16:0b:3d:3d:3e:05: 17:18:a0:83:60:58:77:49:82:e2:57:54:c9:bb:ed:71:a4:3c: de:6b:01:95:78:be:15:e9:c7:3e:9a:df:85:c7:f4:8d:5e:3e: 45:c8:9d:fd:b5:d3:78:eb:f1:39:b5:83:7c:a3:b2:58:8e:ee: d9:cb:62:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3We5ZRfLDZV8TXuE4GKPVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOGJkYzljMTI3ZmI3MThlMjQwZGZiMjc1NmY1MjAyMDM2 ZmUzZDUwHhcNMjYwMTAxMDIxOTAwWhcNMjYwMTAyMDIxOTAwWjAzMTEwLwYDVQQD EygwZjk4MDJhZjBhNzkzODcyYzk4NmU3YjljYjU0ZWJiOWZlOTgzYTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuYZDwlFhJpupzGSF/gHRvpL2hxl lQtzjgHIHB04x+OLZnsjo+g7MqaToeULqAOgrFw5YTGhWXK4IiX8P2E3EdPm26gL q1zkZ26EbuOkZkiPkjaWYiiWKtXECdCY4zGeM+6wE3ZlLoi/piK+J3FATqR+m9ka +jSeujHr4dRRramXh3wZ+CT1rOwICquRFwgP1RI4eSpwHoqJUm4lNLtuYFAAcTkX 6QHYccbXa2k63WkCFNHQtgdsDmk+prutlWcf6xrsA71+S9+4auPXmGwP9giBdVoU K59NMbUd1sAWA6zMiXXaf5msVwfhT1HZuMXIhtrrdwgrAL8073QXB9BB2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+YAq8KeThyyYbnuctU67n+mDpUMB8GA1UdIwQY MBaAFCqL3JwSf7cY4kDfsnVvUgIDb+PVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS292Y25CSl90eGppUU4teWRXOVNBZ052NDlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMjJjZGUtNWQ3NS00ZjUwLWE5NDUt OGY1OWEzOTEwYmRkLzEvS292Y25CSl90eGppUU4teWRXOVNBZ052NDlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8zMjJjZGUtNWQ3NS00ZjUwLWE5NDUtOGY1OWEzOTEwYmRk LzEvS292Y25CSl90eGppUU4teWRXOVNBZ052NDlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdlWXaXpM TSIc6Cp8ZcbQnG0CHSIASwi4K7ZQ1IDgA8HKzd3N4OpzWXpYfhorGb/2DkXyYoOd uL6jR0jgcTFPQaLWBVV3LPHLwpFLOQTmzjfsOsNWcbIhMjIgBCkMvVcZE18OxbRf Vq7tBPlTTndjT5sujpZ01Ew1vQ0O79C0EFxYjtPvKGF5u+RaNyJJBqBgMhCLqITB 6ll5MsPh8H/dKzkieRqxMdGjLZiTjnJr+BXIASD8TVOTcyILldv8Tq3sFgs9PT4F Fxigg2BYd0mC4ldUybvtcaQ83msBlXi+FenHPprfhcf0jV4+Rcid/bXTeOvxObWD fKOyWI7u2cti4Q== -----END CERTIFICATE-----Generated at Thu Jan 1 03:57:39 2026 by rpki-client