This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft File: kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft (raw, json) Hash identifier: vD+d+zD9yFz7R4nGS8gM2iVOIRnaQRsAjm7Cn1vKDd8= Subject key identifier: FD:93:36:41:DE:D6:CC:B3:6C:AC:16:1D:48:53:08:C0:42:3B:1F:FC Authority key identifier: 93:09:37:24:64:C5:9A:3D:D8:EC:D6:32:15:B0:18:19:70:65:58:A6 Certificate issuer: /CN=9309372464c59a3dd8ecd63215b01819706558a6 Certificate serial: 019BA1587217529405FD36529CD46D45FA5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft Manifest number: 07E6 Signing time: Fri 09 Jan 2026 06:01:26 +0000 Manifest this update: Fri 09 Jan 2026 06:01:26 +0000 Manifest next update: Sat 10 Jan 2026 06:01:26 +0000 Files and hashes: 1: kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl (hash: YLDreNH/l0Z6mrVdYFZO6wM9+mIodhCHSBM8tt/Q7bg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 06:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:58:72:17:52:94:05:fd:36:52:9c:d4:6d:45:fa:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9309372464c59a3dd8ecd63215b01819706558a6 Validity Not Before: Jan 9 06:01:26 2026 GMT Not After : Jan 10 06:01:26 2026 GMT Subject: CN=fd933641ded6ccb36cac161d485308c0423b1ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5d:b2:71:2d:7c:4f:e1:d4:47:65:4c:cf:ca: c3:0f:68:27:4a:c6:bc:fc:82:fa:5f:18:b0:34:37: b5:c1:d9:90:d0:56:f5:99:b3:a6:0d:26:fe:66:27: f6:05:1b:f0:38:79:c8:6b:c5:4a:2b:31:21:d0:b3: 53:81:8e:4f:10:ac:45:1c:89:3a:64:0b:fb:c8:00: 5d:ad:bb:be:7a:6f:83:c6:51:6c:ff:49:76:ab:17: 2a:72:30:c9:6e:de:e8:74:b1:bd:37:ae:1c:2a:73: 32:3e:dd:c2:a3:c6:aa:ad:ba:22:7b:8f:b1:f2:1d: 96:60:a6:eb:0f:68:dc:d9:9a:85:30:43:b9:0b:1a: e1:52:fe:0a:3a:b2:85:4a:f3:ed:18:9c:70:26:59: ee:e9:5f:5b:48:bf:e8:f4:4d:a9:3d:60:44:08:f7: 0f:c7:6c:41:8f:e1:cf:55:45:94:c6:d4:55:08:e5: 18:88:05:b5:14:19:4f:d3:0d:c0:76:1b:26:0c:9d: 0d:22:60:71:59:8f:3e:d6:1c:e3:b1:67:9f:45:58: 18:23:a0:74:f8:4a:c3:6c:01:73:38:f6:eb:14:27: 76:fd:43:94:65:2d:91:b5:21:c0:41:39:65:91:2e: dc:21:35:2c:dd:54:60:7a:39:d9:d0:84:f4:7c:be: d9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:93:36:41:DE:D6:CC:B3:6C:AC:16:1D:48:53:08:C0:42:3B:1F:FC X509v3 Authority Key Identifier: keyid:93:09:37:24:64:C5:9A:3D:D8:EC:D6:32:15:B0:18:19:70:65:58:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:98:ff:f6:2c:22:b8:d0:68:0a:ce:2b:2c:ce:15:5e:0d:d2: 9d:a0:37:61:d6:70:a2:18:80:c0:66:40:9b:86:84:aa:38:4b: 57:2b:21:ad:39:87:e4:99:62:68:3e:55:41:0b:eb:66:57:60: dd:49:13:da:95:21:3a:20:8d:42:69:39:8e:b3:eb:c6:0f:56: d3:8f:3d:69:f6:a7:41:b3:35:a5:77:1f:0e:4e:42:4a:d1:59: 49:6b:9a:6c:5a:0e:f9:86:d9:7b:bc:29:61:af:77:9f:bb:65: 2b:7d:79:be:34:41:c5:1b:6b:4c:e1:db:d3:9e:b8:9b:29:db: df:b4:54:fb:4c:39:e3:1a:a8:22:ca:d6:85:95:15:af:1f:c1: de:fa:a8:4d:04:43:14:92:4d:f4:d4:c7:7e:0a:13:65:8e:ca: 49:f8:0c:63:53:db:69:13:2e:1a:c2:a6:c0:1d:48:66:00:b5: e4:17:e8:fb:f4:fc:43:f9:2d:7e:63:51:5f:0b:c5:ad:44:83: d2:dc:03:70:77:80:5e:07:f8:7f:c8:1c:a0:fd:f3:5e:69:8c: 3f:43:d4:de:a4:62:a0:c1:a1:ee:32:66:9a:b6:a4:ca:d4:7e: c9:1c:c4:01:48:3c:c2:59:18:bd:af:ee:39:af:ad:47:bd:57: 4b:24:10:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuhWHIXUpQF/TZSnNRtRfpaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMDkzNzI0NjRjNTlhM2RkOGVjZDYzMjE1YjAxODE5NzA2 NTU4YTYwHhcNMjYwMTA5MDYwMTI2WhcNMjYwMTEwMDYwMTI2WjAzMTEwLwYDVQQD EyhmZDkzMzY0MWRlZDZjY2IzNmNhYzE2MWQ0ODUzMDhjMDQyM2IxZmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl2ycS18T+HUR2VMz8rDD2gnSsa8 /IL6XxiwNDe1wdmQ0Fb1mbOmDSb+Zif2BRvwOHnIa8VKKzEh0LNTgY5PEKxFHIk6 ZAv7yABdrbu+em+DxlFs/0l2qxcqcjDJbt7odLG9N64cKnMyPt3Co8aqrboie4+x 8h2WYKbrD2jc2ZqFMEO5CxrhUv4KOrKFSvPtGJxwJlnu6V9bSL/o9E2pPWBECPcP x2xBj+HPVUWUxtRVCOUYiAW1FBlP0w3AdhsmDJ0NImBxWY8+1hzjsWefRVgYI6B0 +ErDbAFzOPbrFCd2/UOUZS2RtSHAQTllkS7cITUs3VRgejnZ0IT0fL7ZnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2TNkHe1syzbKwWHUhTCMBCOx/8MB8GA1UdIwQY MBaAFJMJNyRkxZo92OzWMhWwGBlwZVimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3drM0pHVEZtajNZN05ZeUZiQVlHWEJsV0tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lY2ZhZmMtOTExNS00ZWMyLWFlMTEt MDdmMTI1OWZlYjEzLzEva3drM0pHVEZtajNZN05ZeUZiQVlHWEJsV0tZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9lY2ZhZmMtOTExNS00ZWMyLWFlMTEtMDdmMTI1OWZlYjEz LzEva3drM0pHVEZtajNZN05ZeUZiQVlHWEJsV0tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJj/9iwi uNBoCs4rLM4VXg3SnaA3YdZwohiAwGZAm4aEqjhLVyshrTmH5JliaD5VQQvrZldg 3UkT2pUhOiCNQmk5jrPrxg9W0489afanQbM1pXcfDk5CStFZSWuabFoO+YbZe7wp Ya93n7tlK315vjRBxRtrTOHb0564mynb37RU+0w54xqoIsrWhZUVrx/B3vqoTQRD FJJN9NTHfgoTZY7KSfgMY1PbaRMuGsKmwB1IZgC15Bfo+/T8Q/ktfmNRXwvFrUSD 0twDcHeAXgf4f8gcoP3zXmmMP0PU3qRioMGh7jJmmrakytR+yRzEAUg8wlkYva/u Oa+tR71XSyQQow== -----END CERTIFICATE-----Generated at Fri Jan 9 15:59:45 2026 by rpki-client