This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft File: kwNiKzxU5F9BZvMBeY-G27pHGAw.mft (raw, json) Hash identifier: d9AUZRFHpmCU9xWd5u5vWjl+k7bviDhQc87LnFJR36s= Subject key identifier: B5:3D:C5:19:B8:51:5A:97:C4:D9:EE:9F:A5:82:CB:9C:3E:B2:5A:5A Authority key identifier: 93:03:62:2B:3C:54:E4:5F:41:66:F3:01:79:8F:86:DB:BA:47:18:0C Certificate issuer: /CN=9303622b3c54e45f4166f301798f86dbba47180c Certificate serial: 019BABDC5EF5E911F103E6AEE80BE8FCE275 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft Manifest number: 095C Signing time: Sun 11 Jan 2026 07:01:44 +0000 Manifest this update: Sun 11 Jan 2026 07:01:44 +0000 Manifest next update: Mon 12 Jan 2026 07:01:44 +0000 Files and hashes: 1: kwNiKzxU5F9BZvMBeY-G27pHGAw.crl (hash: M4duo4j1IGOUTky+TeHfD6j7gAM7HcnvMgrSIM0/XJ0=) 2: oEI10F1yOzZXTlBBBvzIeX5OXog.roa (hash: QNwI0l8coi9XbWot/ryVzcBU4wEtxZkGadr7asLldw8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ab:dc:5e:f5:e9:11:f1:03:e6:ae:e8:0b:e8:fc:e2:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9303622b3c54e45f4166f301798f86dbba47180c Validity Not Before: Jan 11 07:01:44 2026 GMT Not After : Jan 12 07:01:44 2026 GMT Subject: CN=b53dc519b8515a97c4d9ee9fa582cb9c3eb25a5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3e:4a:8a:f4:f2:81:e2:7f:72:92:31:2d:b2: d5:53:93:65:06:18:cb:ce:9f:99:44:47:b0:fa:5e: 02:f3:90:2a:42:4f:d3:e4:a3:45:b9:70:02:7b:2f: 27:41:3b:71:f7:66:72:94:a6:2d:9e:22:02:ea:9d: 38:0d:25:3d:c6:02:32:f9:37:0a:20:96:1f:85:c8: aa:c8:21:1f:ea:f9:d7:47:a0:f3:dc:17:19:1c:6f: 66:f6:4f:22:3a:1d:73:ea:ed:6f:dc:ec:a3:5e:04: f0:8b:97:ad:f5:7b:ea:51:57:31:6d:9a:2d:aa:d8: be:2e:51:f2:7a:c1:31:d9:80:79:f2:30:82:ab:08: a4:fb:1e:01:53:38:38:e5:02:01:54:38:4b:3e:f6: 6b:69:7d:f4:2c:1e:7f:53:e4:e2:16:a7:40:11:28: 32:f4:23:38:ed:3f:16:a3:ac:6d:50:2a:6c:81:06: 63:4b:ca:ab:ff:f6:94:53:c4:dc:03:84:8e:54:df: 61:53:60:4c:b0:4b:6b:34:f4:4c:eb:2c:e3:e7:a5: 45:25:9d:a6:82:8a:df:e1:88:cf:df:12:68:72:bd: 9a:0e:ef:01:04:05:48:5a:d1:96:67:cd:68:27:f6: 87:ac:1a:c0:da:62:ed:eb:e0:eb:85:e1:f3:29:48: d6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:3D:C5:19:B8:51:5A:97:C4:D9:EE:9F:A5:82:CB:9C:3E:B2:5A:5A X509v3 Authority Key Identifier: keyid:93:03:62:2B:3C:54:E4:5F:41:66:F3:01:79:8F:86:DB:BA:47:18:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:9a:9b:01:97:28:28:59:0d:f1:10:0e:e8:c1:c2:e8:27:e7: ab:bf:94:e7:9a:7a:7a:92:93:a8:64:6a:a6:b4:e1:38:49:a0: bf:cd:cc:fe:0a:78:9c:13:79:a1:a9:f8:c4:60:e9:5d:13:68: d0:b3:8a:d5:23:cd:5d:91:8c:50:0d:40:f0:26:3b:58:85:e3: e9:01:9f:a2:30:01:e2:48:01:88:6f:17:ac:09:bf:80:18:21: 9d:a8:4e:d8:31:39:2d:14:07:33:8f:79:92:a3:1d:62:75:1b: e1:3a:cf:54:b7:d6:fe:f4:ad:ea:3d:42:54:81:13:89:35:e7: ad:f8:75:49:94:16:b4:f6:da:86:75:e5:fd:13:ca:9c:cc:69: 29:40:0f:a4:d0:bf:a1:10:2c:70:8e:2b:43:a2:ee:a5:26:2e: 72:96:ed:59:76:d1:b4:3a:50:f3:6a:fc:c2:b8:47:55:f4:04: 20:85:9a:00:de:23:83:fa:c0:24:12:ab:ff:1f:39:64:a7:05: ef:ea:b9:a9:c7:7b:51:8c:2d:ed:e6:f6:34:9f:ea:63:8a:9f: 3a:e5:63:f8:42:36:63:40:77:1f:e4:68:f9:43:67:99:8d:72: d4:e8:b5:ed:f7:41:a8:58:e7:26:b5:d7:ab:62:fa:63:95:12: cf:a9:37:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZur3F716RHxA+au6Avo/OJ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMDM2MjJiM2M1NGU0NWY0MTY2ZjMwMTc5OGY4NmRiYmE0 NzE4MGMwHhcNMjYwMTExMDcwMTQ0WhcNMjYwMTEyMDcwMTQ0WjAzMTEwLwYDVQQD EyhiNTNkYzUxOWI4NTE1YTk3YzRkOWVlOWZhNTgyY2I5YzNlYjI1YTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT5KivTygeJ/cpIxLbLVU5NlBhjL zp+ZREew+l4C85AqQk/T5KNFuXACey8nQTtx92ZylKYtniIC6p04DSU9xgIy+TcK IJYfhciqyCEf6vnXR6Dz3BcZHG9m9k8iOh1z6u1v3OyjXgTwi5et9XvqUVcxbZot qti+LlHyesEx2YB58jCCqwik+x4BUzg45QIBVDhLPvZraX30LB5/U+TiFqdAESgy 9CM47T8Wo6xtUCpsgQZjS8qr//aUU8TcA4SOVN9hU2BMsEtrNPRM6yzj56VFJZ2m gorf4YjP3xJocr2aDu8BBAVIWtGWZ81oJ/aHrBrA2mLt6+DrheHzKUjWiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLU9xRm4UVqXxNnun6WCy5w+slpaMB8GA1UdIwQY MBaAFJMDYis8VORfQWbzAXmPhtu6RxgMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3dOaUt6eFU1RjlCWnZNQmVZLUcyN3BIR0F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wNzdhNTAtNDViNi00YTM4LTlkYjkt OTUwYzdlNzMyNDVjLzEva3dOaUt6eFU1RjlCWnZNQmVZLUcyN3BIR0F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8wNzdhNTAtNDViNi00YTM4LTlkYjktOTUwYzdlNzMyNDVj LzEva3dOaUt6eFU1RjlCWnZNQmVZLUcyN3BIR0F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN5qbAZco KFkN8RAO6MHC6Cfnq7+U55p6epKTqGRqprThOEmgv83M/gp4nBN5oan4xGDpXRNo 0LOK1SPNXZGMUA1A8CY7WIXj6QGfojAB4kgBiG8XrAm/gBghnahO2DE5LRQHM495 kqMdYnUb4TrPVLfW/vSt6j1CVIETiTXnrfh1SZQWtPbahnXl/RPKnMxpKUAPpNC/ oRAscI4rQ6LupSYucpbtWXbRtDpQ82r8wrhHVfQEIIWaAN4jg/rAJBKr/x85ZKcF 7+q5qcd7UYwt7eb2NJ/qY4qfOuVj+EI2Y0B3H+Ro+UNnmY1y1Oi17fdBqFjnJrXX q2L6Y5USz6k38g== -----END CERTIFICATE-----Generated at Sun Jan 11 11:27:13 2026 by rpki-client