This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft File: kt2u3zcPNa-LXut_hubPr6zojU4.mft (raw, json) Hash identifier: tXKiji9tzz/z3/+P6rpiKeEJKepmYPWW/BazS1X+pic= Subject key identifier: AA:7E:1E:FC:E6:03:90:D9:60:AB:2F:92:B2:84:FE:7D:18:48:B3:FD Authority key identifier: 92:DD:AE:DF:37:0F:35:AF:8B:5E:EB:7F:86:E6:CF:AF:AC:E8:8D:4E Certificate issuer: /CN=92ddaedf370f35af8b5eeb7f86e6cfaface88d4e Certificate serial: 019BB13914C462A0D8DA48CFE36B2C67A289 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft Manifest number: 0817 Signing time: Mon 12 Jan 2026 08:01:06 +0000 Manifest this update: Mon 12 Jan 2026 08:01:06 +0000 Manifest next update: Tue 13 Jan 2026 08:01:06 +0000 Files and hashes: 1: MOaflZrDMd7wGNURntzbZLdXUmA.roa (hash: jhSZsx+nbyUc0xlTzJSRe1x2K+X/3793enEacjp2ebc=) 2: kt2u3zcPNa-LXut_hubPr6zojU4.crl (hash: AJc6uoNSPGlpZKUKsbLH4YT48IxRau2/rKmYd37cYgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.crl rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:39:14:c4:62:a0:d8:da:48:cf:e3:6b:2c:67:a2:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92ddaedf370f35af8b5eeb7f86e6cfaface88d4e Validity Not Before: Jan 12 08:01:06 2026 GMT Not After : Jan 13 08:01:06 2026 GMT Subject: CN=aa7e1efce60390d960ab2f92b284fe7d1848b3fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d2:ef:6d:a5:4c:7e:3b:28:4d:4e:e5:d4:5f: 43:dd:55:bf:19:ef:5c:e5:91:da:53:96:9f:e4:b8: 9d:a6:de:6a:a8:64:d1:57:e1:34:b5:2a:d1:fc:78: 31:91:5f:f6:f9:34:64:4c:fa:d2:60:1e:a4:61:b7: 5c:d7:8f:eb:d2:51:d5:8a:dd:6f:bb:5c:67:4f:bb: bd:ce:03:ba:04:88:fa:20:c4:5e:5c:a5:62:e9:30: ae:1a:d3:16:35:1b:00:80:3c:34:94:89:b7:24:33: a0:ed:49:06:e8:f9:ef:d5:b8:a2:e9:fc:28:02:91: 52:73:6f:c4:eb:41:73:e0:79:7d:72:48:5b:0c:6d: 7a:87:91:f8:39:9f:6c:33:bb:ae:6d:f5:57:50:fa: 89:6c:7a:4f:3a:43:a1:5c:aa:70:c4:86:67:2f:db: 58:44:33:05:37:21:5c:68:4b:f5:af:33:49:ab:00: 80:b6:a5:35:d0:44:3f:bf:5a:9f:8c:39:21:1e:dc: 9f:60:63:58:19:31:73:39:42:ea:75:84:92:94:fa: a0:cb:91:98:e3:de:1a:b9:2a:b8:dd:dc:35:9f:12: 47:78:aa:d0:e6:03:01:64:e4:2d:f3:cf:38:28:15: 7f:c7:ac:c3:6d:64:8d:b0:30:08:7e:2e:b0:ed:d3: 48:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7E:1E:FC:E6:03:90:D9:60:AB:2F:92:B2:84:FE:7D:18:48:B3:FD X509v3 Authority Key Identifier: keyid:92:DD:AE:DF:37:0F:35:AF:8B:5E:EB:7F:86:E6:CF:AF:AC:E8:8D:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:be:45:ad:d0:52:0c:be:4e:4a:37:4a:dd:16:b1:8a:35:d0: d6:68:11:16:a6:80:c6:47:3c:84:5b:16:b3:6c:6d:4d:f9:ca: ef:5d:93:1c:68:cf:6d:91:6e:67:59:45:8c:67:a5:ce:e6:1d: 04:20:21:7e:aa:07:0a:03:07:a2:da:ab:6c:11:4a:37:89:76: 5e:48:d5:a5:b4:d1:86:1a:aa:4a:16:40:f0:76:cc:dc:8a:b0: 5c:4d:97:58:80:70:6d:58:b3:c8:cb:00:44:54:72:8c:3a:0c: e3:22:97:89:50:e7:a0:bd:c3:23:2f:fc:3c:8d:74:27:e4:10: c9:a7:9f:00:7e:5c:20:68:64:aa:a3:be:53:e4:e9:14:1a:8f: 4f:17:cb:fe:60:e1:3e:94:60:2f:20:5b:b6:fc:d9:c2:e5:97: d3:83:e3:38:a5:43:5b:34:3d:8e:84:5f:89:e9:df:5e:71:b2: 09:bb:bb:b0:f6:11:63:1c:c0:de:8f:bf:f6:9a:59:8d:3e:37: e0:99:7f:61:2b:f6:24:6f:d3:ca:a8:70:af:f4:da:92:5e:82: f7:0f:b7:ae:9a:3f:50:6f:7f:c2:c3:16:56:95:31:0e:f7:1d: 4e:dd:b5:9c:8b:d0:c0:dc:86:da:7d:b8:ff:ad:32:60:d1:76: f1:90:97:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuxORTEYqDY2kjP42ssZ6KJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZGRhZWRmMzcwZjM1YWY4YjVlZWI3Zjg2ZTZjZmFmYWNl ODhkNGUwHhcNMjYwMTEyMDgwMTA2WhcNMjYwMTEzMDgwMTA2WjAzMTEwLwYDVQQD EyhhYTdlMWVmY2U2MDM5MGQ5NjBhYjJmOTJiMjg0ZmU3ZDE4NDhiM2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9LvbaVMfjsoTU7l1F9D3VW/Ge9c 5ZHaU5af5Lidpt5qqGTRV+E0tSrR/HgxkV/2+TRkTPrSYB6kYbdc14/r0lHVit1v u1xnT7u9zgO6BIj6IMReXKVi6TCuGtMWNRsAgDw0lIm3JDOg7UkG6Pnv1bii6fwo ApFSc2/E60Fz4Hl9ckhbDG16h5H4OZ9sM7uubfVXUPqJbHpPOkOhXKpwxIZnL9tY RDMFNyFcaEv1rzNJqwCAtqU10EQ/v1qfjDkhHtyfYGNYGTFzOULqdYSSlPqgy5GY 494auSq43dw1nxJHeKrQ5gMBZOQt8884KBV/x6zDbWSNsDAIfi6w7dNIvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKp+HvzmA5DZYKsvkrKE/n0YSLP9MB8GA1UdIwQY MBaAFJLdrt83DzWvi17rf4bmz6+s6I1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3QydTN6Y1BOYS1MWHV0X2h1YlByNnpvalU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84NGMzZDUtOGFiMi00NGFjLTk0MmIt YzRiOWM1Mzk0MDdiLzEva3QydTN6Y1BOYS1MWHV0X2h1YlByNnpvalU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My84NGMzZDUtOGFiMi00NGFjLTk0MmItYzRiOWM1Mzk0MDdi LzEva3QydTN6Y1BOYS1MWHV0X2h1YlByNnpvalU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARr5FrdBS DL5OSjdK3RaxijXQ1mgRFqaAxkc8hFsWs2xtTfnK712THGjPbZFuZ1lFjGelzuYd BCAhfqoHCgMHotqrbBFKN4l2XkjVpbTRhhqqShZA8HbM3IqwXE2XWIBwbVizyMsA RFRyjDoM4yKXiVDnoL3DIy/8PI10J+QQyaefAH5cIGhkqqO+U+TpFBqPTxfL/mDh PpRgLyBbtvzZwuWX04PjOKVDWzQ9joRfienfXnGyCbu7sPYRYxzA3o+/9ppZjT43 4Jl/YSv2JG/Tyqhwr/Takl6C9w+3rpo/UG9/wsMWVpUxDvcdTt21nIvQwNyG2n24 /60yYNF28ZCXfA== -----END CERTIFICATE-----Generated at Mon Jan 12 13:35:31 2026 by rpki-client