This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft File: Kw51nA6mfY_3IqrIh8fszs3tPsc.mft (raw, json) Hash identifier: 4L+b5m4jQi0j6+4VsM6Zev1WdNd3ZTvEzfjwSuKeSlA= Subject key identifier: D5:B3:AF:D2:4F:0E:0B:81:8C:87:B6:BA:C5:D9:59:FC:00:01:7A:91 Authority key identifier: 2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7 Certificate issuer: /CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7 Certificate serial: 019B7FA799DAB289393BED68BD697C8FC6BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft Manifest number: 1359 Signing time: Fri 02 Jan 2026 17:00:48 +0000 Manifest this update: Fri 02 Jan 2026 17:00:48 +0000 Manifest next update: Sat 03 Jan 2026 17:00:48 +0000 Files and hashes: 1: 0jTzYvTvypbh1yQ9qTkBShn1rSM.roa (hash: QibTqze93VmbmNq8kPjpcqM+im2jq6u0y0JdEMbhwrI=) 2: Kw51nA6mfY_3IqrIh8fszs3tPsc.crl (hash: YDBnZ5ucfrcvSVy42P8JTeBCr39taUGcLahUqKCfHJU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 17:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:a7:99:da:b2:89:39:3b:ed:68:bd:69:7c:8f:c6:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7 Validity Not Before: Jan 2 17:00:48 2026 GMT Not After : Jan 3 17:00:48 2026 GMT Subject: CN=d5b3afd24f0e0b818c87b6bac5d959fc00017a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:be:b9:e8:92:88:fa:42:df:36:57:ce:fe:fb: ba:fe:59:3e:da:9b:77:8e:1d:46:ee:6d:f9:42:68: 05:15:fc:d1:8a:ac:55:43:ca:fe:89:c9:b8:72:bd: 08:98:c3:5c:50:bc:00:d4:8a:f2:b0:4b:8a:6c:d2: 87:28:84:29:60:96:a5:bd:8a:67:cc:36:94:6c:d4: 77:b1:a3:72:08:7d:f8:fa:08:c1:4c:25:6c:56:4d: 9f:b6:e1:05:a0:94:fe:57:54:8e:3e:a3:6a:b7:b4: 56:4a:f7:b2:5e:2e:b9:b4:e6:01:98:81:9c:92:5d: aa:36:c1:15:e3:63:70:12:12:d6:b0:dc:ab:96:02: 6b:ca:a0:a2:68:e9:4b:66:27:27:c3:56:8e:90:ad: f6:c0:3b:c1:67:40:ed:05:5f:52:37:51:0d:34:15: a2:2f:a2:81:c4:ee:f2:71:a2:d9:10:ba:c4:1d:64: c3:69:84:51:d5:65:90:79:65:f7:17:d7:83:4e:ec: 18:45:32:be:18:8b:58:ea:32:0c:98:4f:d0:4a:a8: 25:f6:01:34:0b:36:92:83:5e:8a:95:92:25:b2:bf: 04:8f:e8:37:10:57:97:f1:f1:b0:33:0f:76:b5:c0: 2d:08:80:5e:89:a4:22:54:e7:da:c6:4f:45:4b:d0: f9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B3:AF:D2:4F:0E:0B:81:8C:87:B6:BA:C5:D9:59:FC:00:01:7A:91 X509v3 Authority Key Identifier: keyid:2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:92:2c:7d:ef:ab:49:51:eb:4f:79:a1:f1:4c:83:c2:7b:8b: 31:64:3e:80:cc:5c:e1:83:63:76:35:7f:79:d0:0c:f1:95:d8: 50:41:c5:4b:6d:2c:85:77:dd:76:24:fb:7b:5b:01:0e:2f:2d: dd:c2:07:60:6e:c6:eb:57:61:d0:66:6c:22:3a:05:d5:eb:31: 75:5e:e9:f7:92:50:9f:b0:5d:66:57:b4:e7:42:91:5d:d0:fe: 3e:47:35:58:ee:d5:2f:d5:de:ac:28:ed:a4:5b:9c:1f:ec:76: e4:f6:7c:d2:29:bd:25:f5:ec:1b:3f:93:ee:41:26:c8:33:fb: 1b:b6:05:66:f7:a3:70:1f:4c:34:10:5d:2b:f9:6b:65:b5:8d: 42:42:92:19:2c:6a:a0:fd:1b:46:e1:54:83:e4:7e:7b:09:89: 1c:b7:c3:77:a4:b1:2f:5c:4b:fd:bc:92:1f:16:af:31:35:fe: 73:e0:20:a0:ae:39:d8:be:22:5b:7a:5e:d2:92:9b:b0:c2:fb: ce:d6:75:a2:9f:0a:7b:f1:4a:e0:88:00:7a:cf:b4:96:62:a6: 27:57:ba:26:eb:01:d8:3a:e0:8f:bc:d9:bd:9b:bc:1b:08:88: 9a:6a:a1:62:d2:93:64:a7:4a:a2:31:4e:49:80:64:88:bf:15: ad:ce:6f:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/p5nasok5O+1ovWl8j8a9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMGU3NTljMGVhNjdkOGZmNzIyYWFjODg3YzdlY2NlY2Rl ZDNlYzcwHhcNMjYwMTAyMTcwMDQ4WhcNMjYwMTAzMTcwMDQ4WjAzMTEwLwYDVQQD EyhkNWIzYWZkMjRmMGUwYjgxOGM4N2I2YmFjNWQ5NTlmYzAwMDE3YTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr656JKI+kLfNlfO/vu6/lk+2pt3 jh1G7m35QmgFFfzRiqxVQ8r+icm4cr0ImMNcULwA1IrysEuKbNKHKIQpYJalvYpn zDaUbNR3saNyCH34+gjBTCVsVk2ftuEFoJT+V1SOPqNqt7RWSveyXi65tOYBmIGc kl2qNsEV42NwEhLWsNyrlgJryqCiaOlLZicnw1aOkK32wDvBZ0DtBV9SN1ENNBWi L6KBxO7ycaLZELrEHWTDaYRR1WWQeWX3F9eDTuwYRTK+GItY6jIMmE/QSqgl9gE0 CzaSg16KlZIlsr8Ej+g3EFeX8fGwMw92tcAtCIBeiaQiVOfaxk9FS9D5QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWzr9JPDguBjIe2usXZWfwAAXqRMB8GA1UdIwQY MBaAFCsOdZwOpn2P9yKqyIfH7M7N7T7HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3c1MW5BNm1mWV8zSXFySWg4ZnN6czN0UHNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kNGRiMDMtZThhZC00MDI3LTljZTgt NTVlMWZmN2YzMmY5LzEvS3c1MW5BNm1mWV8zSXFySWg4ZnN6czN0UHNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9kNGRiMDMtZThhZC00MDI3LTljZTgtNTVlMWZmN2YzMmY5 LzEvS3c1MW5BNm1mWV8zSXFySWg4ZnN6czN0UHNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5Isfe+r SVHrT3mh8UyDwnuLMWQ+gMxc4YNjdjV/edAM8ZXYUEHFS20shXfddiT7e1sBDi8t 3cIHYG7G61dh0GZsIjoF1esxdV7p95JQn7BdZle050KRXdD+Pkc1WO7VL9XerCjt pFucH+x25PZ80im9JfXsGz+T7kEmyDP7G7YFZvejcB9MNBBdK/lrZbWNQkKSGSxq oP0bRuFUg+R+ewmJHLfDd6SxL1xL/bySHxavMTX+c+AgoK452L4iW3pe0pKbsML7 ztZ1op8Ke/FK4IgAes+0lmKmJ1e6JusB2Drgj7zZvZu8GwiImmqhYtKTZKdKojFO SYBkiL8Vrc5vZQ== -----END CERTIFICATE-----Generated at Sat Jan 3 02:21:47 2026 by rpki-client