This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft File: Kf8VWBu5BPG5BTh0IRiwH576pmI.mft (raw, json) Hash identifier: zy248nYXyJMXNf3HsX8ZyI8+afFukUz7icTmWV7AIWw= Subject key identifier: 43:7E:43:1D:4E:BE:77:1C:5D:10:AC:A8:59:BE:DC:69:BD:12:92:0C Authority key identifier: 29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62 Certificate issuer: /CN=29ff15581bb904f1b90538742118b01f9efaa662 Certificate serial: 019BAFB8F5FF1161DE12BCBFA7402B57057F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft Manifest number: 17C5 Signing time: Mon 12 Jan 2026 01:01:32 +0000 Manifest this update: Mon 12 Jan 2026 01:01:32 +0000 Manifest next update: Tue 13 Jan 2026 01:01:32 +0000 Files and hashes: 1: Kf8VWBu5BPG5BTh0IRiwH576pmI.crl (hash: gwy/WrQ+WjVPKx8SEQ8BqBm5GV3t5ekax3HbQ+QqqJk=) 2: Mg9CIEP-XkNK3HjRwB4U97AixZM.roa (hash: QNXNP032rfC9FKERXA++HNZyYYvFs9+9TJ5FNJnFvfQ=) 3: WFvPF_8VC-S0qgsTBdvqpE6pWug.roa (hash: hC9en9kRQ4ZgWYQeZCnrellhiIJNeme26ezCh3FsZRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 01:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:b8:f5:ff:11:61:de:12:bc:bf:a7:40:2b:57:05:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29ff15581bb904f1b90538742118b01f9efaa662 Validity Not Before: Jan 12 01:01:32 2026 GMT Not After : Jan 13 01:01:32 2026 GMT Subject: CN=437e431d4ebe771c5d10aca859bedc69bd12920c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3b:5c:16:8c:88:24:08:a9:73:0d:58:62:f0: e5:d3:3e:2f:cc:3f:72:80:c2:e2:d7:8b:93:43:a4: ab:1e:fb:f9:46:a0:dd:43:d6:a2:4d:86:97:81:3d: 69:9d:63:1f:7d:9c:a5:ea:00:14:04:35:f5:7b:61: ba:d0:98:f9:93:43:b2:dc:41:7c:e9:f0:3e:9f:8c: a0:fb:57:a2:8f:03:4d:c6:45:2c:dc:13:5d:70:8b: 7e:9a:fd:db:56:fe:47:f6:e7:0b:37:15:cd:cf:7b: 3e:ef:a3:ec:28:7d:a1:a5:0a:db:3c:de:5c:9c:88: 4e:80:83:e8:d4:3b:03:42:54:7c:c5:c2:57:45:26: 30:41:ec:a1:a7:51:6f:58:77:a5:79:2d:ef:b8:6c: d4:ae:fe:0d:97:b2:60:09:e2:59:28:1c:20:26:7d: ba:96:d7:f8:89:61:93:f0:68:a7:a9:c2:43:6b:b9: aa:f4:34:77:b4:4b:0d:29:99:54:30:b5:12:2a:2d: 19:c4:59:1f:5c:3e:8a:fa:2a:22:e4:e5:cc:89:ba: 9c:23:61:fe:18:b3:96:76:ac:cf:52:af:2f:2e:8c: 90:83:c5:f0:14:b5:32:e8:c7:ca:f6:4c:c6:84:31: 0f:a6:31:fc:38:38:26:ca:2d:e4:17:d7:30:37:52: 17:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:7E:43:1D:4E:BE:77:1C:5D:10:AC:A8:59:BE:DC:69:BD:12:92:0C X509v3 Authority Key Identifier: keyid:29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:41:ff:fb:21:94:58:85:9f:f8:cb:43:f7:ea:9e:fd:d2:44: 75:14:e6:e4:5e:06:ce:c9:c8:75:71:ab:30:30:da:3c:35:f5: c9:09:62:d9:50:be:f4:dc:77:8b:87:af:5f:7f:fa:2d:48:94: 3b:7d:96:f5:2f:6c:8c:d3:0f:a5:f4:e3:d6:52:4c:f2:9d:01: 0e:07:97:25:d3:3b:41:fc:6c:53:a6:dc:4f:1f:0d:8a:1c:f4: 0e:1d:ec:24:75:2e:61:e1:f8:32:e8:d1:ba:f9:6d:c2:0b:02: ed:1e:44:4e:84:e2:0a:72:58:87:17:f6:37:6f:b4:bf:ec:8f: 8e:60:65:a6:c9:d8:7a:65:e1:6b:cc:7b:db:12:12:c4:0a:ac: 01:dd:13:01:39:a1:63:ab:40:65:d1:ce:92:c8:64:6c:83:c5: f8:e4:44:15:b3:2b:46:b1:03:81:15:99:db:f4:d1:a3:69:98: be:3c:00:b1:90:46:74:d8:e4:79:25:00:f1:4d:dd:c1:15:40: 23:58:b2:4a:52:18:4e:32:66:d7:00:ae:be:fb:1e:5b:33:53: c0:2b:30:0c:c2:98:7a:a0:65:65:c2:7f:65:81:30:3c:c3:4d: 70:fb:9c:d9:21:ed:0a:6f:0d:a0:b5:76:69:1c:20:4c:1b:45: 7c:dd:df:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvuPX/EWHeEry/p0ArVwV/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmYxNTU4MWJiOTA0ZjFiOTA1Mzg3NDIxMThiMDFmOWVm YWE2NjIwHhcNMjYwMTEyMDEwMTMyWhcNMjYwMTEzMDEwMTMyWjAzMTEwLwYDVQQD Eyg0MzdlNDMxZDRlYmU3NzFjNWQxMGFjYTg1OWJlZGM2OWJkMTI5MjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDtcFoyIJAipcw1YYvDl0z4vzD9y gMLi14uTQ6SrHvv5RqDdQ9aiTYaXgT1pnWMffZyl6gAUBDX1e2G60Jj5k0Oy3EF8 6fA+n4yg+1eijwNNxkUs3BNdcIt+mv3bVv5H9ucLNxXNz3s+76PsKH2hpQrbPN5c nIhOgIPo1DsDQlR8xcJXRSYwQeyhp1FvWHeleS3vuGzUrv4Nl7JgCeJZKBwgJn26 ltf4iWGT8GinqcJDa7mq9DR3tEsNKZlUMLUSKi0ZxFkfXD6K+ioi5OXMibqcI2H+ GLOWdqzPUq8vLoyQg8XwFLUy6MfK9kzGhDEPpjH8ODgmyi3kF9cwN1IX7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEN+Qx1OvnccXRCsqFm+3Gm9EpIMMB8GA1UdIwQY MBaAFCn/FVgbuQTxuQU4dCEYsB+e+qZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2Y4VldCdTVCUEc1QlRoMElSaXdINTc2cG1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9kYjYyMzEtM2E3YS00ODRkLThiZWUt M2I4ZDhiNzZiN2Y2LzEvS2Y4VldCdTVCUEc1QlRoMElSaXdINTc2cG1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9kYjYyMzEtM2E3YS00ODRkLThiZWUtM2I4ZDhiNzZiN2Y2 LzEvS2Y4VldCdTVCUEc1QlRoMElSaXdINTc2cG1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALUH/+yGU WIWf+MtD9+qe/dJEdRTm5F4GzsnIdXGrMDDaPDX1yQli2VC+9Nx3i4evX3/6LUiU O32W9S9sjNMPpfTj1lJM8p0BDgeXJdM7QfxsU6bcTx8Nihz0Dh3sJHUuYeH4MujR uvltwgsC7R5EToTiCnJYhxf2N2+0v+yPjmBlpsnYemXha8x72xISxAqsAd0TATmh Y6tAZdHOkshkbIPF+OREFbMrRrEDgRWZ2/TRo2mYvjwAsZBGdNjkeSUA8U3dwRVA I1iySlIYTjJm1wCuvvseWzNTwCswDMKYeqBlZcJ/ZYEwPMNNcPuc2SHtCm8NoLV2 aRwgTBtFfN3fKw== -----END CERTIFICATE-----Generated at Mon Jan 12 09:22:18 2026 by rpki-client