This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft File: kjK4h0AR2AOQr4EijrUHsW0CXdI.mft (raw, json) Hash identifier: ULRzLAyoj/GTI7A86e3Z0TWIhiVFscSOPmLEMgT7l+I= Subject key identifier: 55:FD:46:39:80:D9:12:C3:69:58:17:69:6F:19:9E:24:AA:F5:C3:A8 Authority key identifier: 92:32:B8:87:40:11:D8:03:90:AF:81:22:8E:B5:07:B1:6D:02:5D:D2 Certificate issuer: /CN=9232b8874011d80390af81228eb507b16d025dd2 Certificate serial: 019B78CA3F8D24AAB638E4F55E39DC18EFCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft Manifest number: 17A5 Signing time: Thu 01 Jan 2026 09:01:18 +0000 Manifest this update: Thu 01 Jan 2026 09:01:18 +0000 Manifest next update: Fri 02 Jan 2026 09:01:18 +0000 Files and hashes: 1: kjK4h0AR2AOQr4EijrUHsW0CXdI.crl (hash: 66cRE2sgOcrL0qqgnkv/Sby20i+IEcH80MGz2zw7piM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:ca:3f:8d:24:aa:b6:38:e4:f5:5e:39:dc:18:ef:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9232b8874011d80390af81228eb507b16d025dd2 Validity Not Before: Jan 1 09:01:18 2026 GMT Not After : Jan 2 09:01:18 2026 GMT Subject: CN=55fd463980d912c3695817696f199e24aaf5c3a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b5:43:90:56:c7:07:84:ad:ec:5f:20:bd:37: 44:50:26:95:c2:20:9c:de:b3:e5:5d:00:4c:f7:a7: 12:13:b6:e1:61:8b:c7:a8:12:b8:6b:51:2d:4d:ce: c0:19:79:2c:92:d1:4b:a9:c2:c0:be:71:20:44:25: c6:18:12:97:13:ad:64:5f:3b:d1:8b:8e:02:39:6b: 5b:a1:e5:6f:6e:cd:0a:ce:c0:c3:f9:5e:48:4b:7a: 34:d7:71:f8:3f:c3:9f:70:19:c9:64:42:74:e5:ba: bd:c4:af:58:64:ab:60:c1:28:bd:8b:ab:3f:33:cb: 58:16:2b:81:f6:56:84:67:22:9b:13:72:99:55:6a: 99:70:d3:b1:69:1c:b4:b6:02:64:96:f0:f3:03:39: 53:b0:92:bb:5e:37:fc:91:e2:75:7d:45:ca:fe:9b: 45:4b:9b:3e:4c:b7:00:a8:64:52:c4:04:0f:7e:7c: aa:b6:f3:b7:f4:52:30:79:a8:78:1e:b6:83:e5:93: a6:b8:7f:ed:5f:d4:81:d9:5d:cf:a1:21:4a:0f:32: 22:a6:83:38:df:dc:af:d2:55:56:cf:61:23:8f:0a: 05:bc:f1:b3:11:57:a4:01:cc:36:71:79:e5:82:b5: 1a:76:cf:d0:f5:d8:b0:d9:85:ef:99:71:9d:85:9d: c9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:FD:46:39:80:D9:12:C3:69:58:17:69:6F:19:9E:24:AA:F5:C3:A8 X509v3 Authority Key Identifier: keyid:92:32:B8:87:40:11:D8:03:90:AF:81:22:8E:B5:07:B1:6D:02:5D:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:1c:ed:a3:11:31:1f:96:69:12:ab:71:7f:bb:a6:64:72:2e: a7:3f:89:8f:68:f6:6a:23:22:76:0f:2d:c7:3e:c3:91:65:14: c4:14:63:e0:ad:ca:90:c2:3d:bd:dd:a8:53:ba:73:d8:ba:91: 7f:03:82:fc:d4:72:64:ce:47:2e:4a:3a:66:b4:42:c6:00:97: 34:01:d7:fe:0b:ca:ba:88:52:d5:03:05:d0:b2:76:5e:d9:ec: 1f:f1:34:2c:de:ca:22:80:6f:42:2a:94:1e:bd:3d:59:39:a7: f1:22:b8:de:e9:d2:d1:b7:47:82:08:f9:7b:43:55:11:01:7a: b5:4f:8f:0e:85:6f:8d:53:72:2e:f0:64:cb:91:f3:c2:ad:6f: 59:f6:2a:c4:3a:1d:02:4c:b6:5d:8e:e0:c4:c2:05:bc:58:a5: 04:c1:62:aa:32:ab:6f:1f:66:8d:8a:5d:11:3f:53:43:c7:f1: 8e:55:bc:fe:bf:c6:f5:f2:c3:39:8d:57:ce:17:66:c6:51:76: 4f:ea:ca:20:26:7f:8b:00:d1:53:bf:5b:fe:ed:2b:79:f3:c8: 3e:08:cf:dc:fe:d1:9b:46:3b:22:b8:ca:94:e8:4c:b5:a9:5c: 89:aa:2f:95:80:c0:c5:00:d5:aa:8e:e5:e4:dc:f6:22:13:dc: b2:30:d0:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4yj+NJKq2OOT1XjncGO/LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMzJiODg3NDAxMWQ4MDM5MGFmODEyMjhlYjUwN2IxNmQw MjVkZDIwHhcNMjYwMTAxMDkwMTE4WhcNMjYwMTAyMDkwMTE4WjAzMTEwLwYDVQQD Eyg1NWZkNDYzOTgwZDkxMmMzNjk1ODE3Njk2ZjE5OWUyNGFhZjVjM2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7VDkFbHB4St7F8gvTdEUCaVwiCc 3rPlXQBM96cSE7bhYYvHqBK4a1EtTc7AGXksktFLqcLAvnEgRCXGGBKXE61kXzvR i44COWtboeVvbs0KzsDD+V5IS3o013H4P8OfcBnJZEJ05bq9xK9YZKtgwSi9i6s/ M8tYFiuB9laEZyKbE3KZVWqZcNOxaRy0tgJklvDzAzlTsJK7Xjf8keJ1fUXK/ptF S5s+TLcAqGRSxAQPfnyqtvO39FIweah4HraD5ZOmuH/tX9SB2V3PoSFKDzIipoM4 39yv0lVWz2EjjwoFvPGzEVekAcw2cXnlgrUads/Q9diw2YXvmXGdhZ3JaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFX9RjmA2RLDaVgXaW8ZniSq9cOoMB8GA1UdIwQY MBaAFJIyuIdAEdgDkK+BIo61B7FtAl3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2pLNGgwQVIyQU9RcjRFaWpyVUhzVzBDWGRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9jNDk3ZjItNDA5ZS00NmVjLWEwMzkt ZDA0ODEyNjU1ZDgzLzEva2pLNGgwQVIyQU9RcjRFaWpyVUhzVzBDWGRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9jNDk3ZjItNDA5ZS00NmVjLWEwMzktZDA0ODEyNjU1ZDgz LzEva2pLNGgwQVIyQU9RcjRFaWpyVUhzVzBDWGRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIRztoxEx H5ZpEqtxf7umZHIupz+Jj2j2aiMidg8txz7DkWUUxBRj4K3KkMI9vd2oU7pz2LqR fwOC/NRyZM5HLko6ZrRCxgCXNAHX/gvKuohS1QMF0LJ2XtnsH/E0LN7KIoBvQiqU Hr09WTmn8SK43unS0bdHggj5e0NVEQF6tU+PDoVvjVNyLvBky5Hzwq1vWfYqxDod Aky2XY7gxMIFvFilBMFiqjKrbx9mjYpdET9TQ8fxjlW8/r/G9fLDOY1XzhdmxlF2 T+rKICZ/iwDRU79b/u0refPIPgjP3P7Rm0Y7IrjKlOhMtalciaovlYDAxQDVqo7l 5Nz2IhPcsjDQRQ== -----END CERTIFICATE-----Generated at Thu Jan 1 11:04:45 2026 by rpki-client