This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft File: KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft (raw, json) Hash identifier: ykiipWAPxd7oU8dqXrjFSib5D0t7m+TaTLkHOmWER/w= Subject key identifier: 96:3A:7D:5D:E1:7C:80:4B:AB:49:B2:20:1C:57:63:D7:65:DA:16:2C Authority key identifier: 29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E Certificate issuer: /CN=292d6b805e11ec38034f07789dcd25d1c17fa01e Certificate serial: 019B9D0E6B8930ACBF9C25C37C98F3399813 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft Manifest number: 0866 Signing time: Thu 08 Jan 2026 10:02:06 +0000 Manifest this update: Thu 08 Jan 2026 10:02:06 +0000 Manifest next update: Fri 09 Jan 2026 10:02:06 +0000 Files and hashes: 1: KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl (hash: rim4HnJ5rKDLyY3s8NIdS0UoKCKDxoOJzY9BA5mLTiY=) 2: lfbAYKVXMdZ42U9_T9C8OZdlAFo.roa (hash: v7lM7R+6ILWW0k1iy98P/XQH6IMSFCizQ4V8D9n6X0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:0e:6b:89:30:ac:bf:9c:25:c3:7c:98:f3:39:98:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=292d6b805e11ec38034f07789dcd25d1c17fa01e Validity Not Before: Jan 8 10:02:06 2026 GMT Not After : Jan 9 10:02:06 2026 GMT Subject: CN=963a7d5de17c804bab49b2201c5763d765da162c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8d:d4:cf:75:e8:da:a9:e5:2c:0c:72:48:b4: 4a:e5:fd:a2:da:f2:2e:a0:24:8d:74:23:e9:85:45: 19:36:8c:5f:ae:be:53:64:d6:6b:91:f5:37:e8:8f: 48:24:57:ee:19:18:d0:e8:2d:7f:b9:a3:ab:30:00: fd:c1:10:ae:60:1a:97:60:0e:b3:ef:81:ff:83:28: 1c:35:51:e7:8e:47:7e:1a:4e:f8:db:78:ba:8e:14: d4:d4:71:a9:34:5c:89:a1:44:b3:24:0a:dc:7f:df: 75:51:26:84:99:5a:69:66:83:40:9d:85:85:0a:84: d0:b4:a5:89:ec:70:a0:a4:3b:7b:cd:da:81:3c:23: 0a:76:f1:d4:de:66:6d:73:59:7f:a8:ff:b9:7f:5b: 8c:4e:25:e7:41:5b:ba:67:9e:33:c9:1c:a5:ee:b3: 98:90:db:9d:ac:eb:7f:4c:92:b4:1d:86:19:e4:45: fc:8e:ea:2d:86:2a:7c:30:76:e1:d9:35:7d:88:b8: 9c:29:17:9c:01:1c:0b:3a:27:ed:cd:db:b7:c7:c0: ce:be:2d:0a:1e:3c:02:68:34:5e:f8:97:70:4f:58: a2:a6:31:44:8f:f1:6e:51:df:60:85:65:0b:c5:02: f9:0e:7c:e6:c8:c3:43:01:c6:fe:07:79:c0:df:ea: 40:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3A:7D:5D:E1:7C:80:4B:AB:49:B2:20:1C:57:63:D7:65:DA:16:2C X509v3 Authority Key Identifier: keyid:29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:3f:b8:ff:ab:27:c5:61:0f:97:c4:fe:26:b5:4f:82:94:2d: 5f:8f:5f:d8:f5:b4:66:3d:6c:94:11:e7:51:01:02:82:42:13: 3e:dc:70:e1:44:0c:18:68:93:45:e6:c3:69:55:6e:4a:5c:78: 38:65:7b:77:a0:11:3b:50:38:ee:b9:0b:83:ca:ab:9f:6a:68: 9c:4e:b7:53:c9:3a:1b:76:63:94:25:e4:27:4b:22:97:d3:bf: 4a:46:31:cf:35:b9:61:6e:12:8b:7e:af:2d:72:8c:b4:c5:ec: 47:7c:7e:8e:9e:58:b5:92:bf:2d:3b:eb:52:e1:7e:c0:32:c0: fd:d5:c8:98:82:d0:1d:36:27:17:cd:48:b1:af:b0:bf:25:e0: 65:01:73:90:9b:f3:67:ad:eb:6f:c4:11:a8:48:ae:53:7d:5a: 84:d2:60:30:a4:82:5b:1c:91:83:7c:fc:52:f6:0c:57:1a:37: 3f:fb:dc:db:24:09:c8:a8:30:5b:d0:6a:b8:b7:32:24:89:9c: fe:5a:a8:d0:93:90:ad:d9:17:17:3b:c3:95:1a:e0:69:db:40: e1:e5:f5:e7:a3:5d:1b:af:44:79:91:59:b3:89:6d:1c:0b:71: 49:cc:d2:23:9f:2c:e5:96:6f:12:1f:47:88:33:3c:9b:c3:0d: 92:7b:05:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZudDmuJMKy/nCXDfJjzOZgTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MmQ2YjgwNWUxMWVjMzgwMzRmMDc3ODlkY2QyNWQxYzE3 ZmEwMWUwHhcNMjYwMTA4MTAwMjA2WhcNMjYwMTA5MTAwMjA2WjAzMTEwLwYDVQQD Eyg5NjNhN2Q1ZGUxN2M4MDRiYWI0OWIyMjAxYzU3NjNkNzY1ZGExNjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI3Uz3Xo2qnlLAxySLRK5f2i2vIu oCSNdCPphUUZNoxfrr5TZNZrkfU36I9IJFfuGRjQ6C1/uaOrMAD9wRCuYBqXYA6z 74H/gygcNVHnjkd+Gk7423i6jhTU1HGpNFyJoUSzJArcf991USaEmVppZoNAnYWF CoTQtKWJ7HCgpDt7zdqBPCMKdvHU3mZtc1l/qP+5f1uMTiXnQVu6Z54zyRyl7rOY kNudrOt/TJK0HYYZ5EX8juothip8MHbh2TV9iLicKRecARwLOiftzdu3x8DOvi0K HjwCaDRe+JdwT1iipjFEj/FuUd9ghWULxQL5DnzmyMNDAcb+B3nA3+pAhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJY6fV3hfIBLq0myIBxXY9dl2hYsMB8GA1UdIwQY MBaAFCkta4BeEew4A08HeJ3NJdHBf6AeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1MxcmdGNFI3RGdEVHdkNG5jMGwwY0Zfb0I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84YjMzNDEtZjg1Yi00YzE1LWE5ODkt NTEwY2YyNmJjYTY1LzEvS1MxcmdGNFI3RGdEVHdkNG5jMGwwY0Zfb0I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC84YjMzNDEtZjg1Yi00YzE1LWE5ODktNTEwY2YyNmJjYTY1 LzEvS1MxcmdGNFI3RGdEVHdkNG5jMGwwY0Zfb0I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJj+4/6sn xWEPl8T+JrVPgpQtX49f2PW0Zj1slBHnUQECgkITPtxw4UQMGGiTRebDaVVuSlx4 OGV7d6ARO1A47rkLg8qrn2ponE63U8k6G3ZjlCXkJ0sil9O/SkYxzzW5YW4Si36v LXKMtMXsR3x+jp5YtZK/LTvrUuF+wDLA/dXImILQHTYnF81Isa+wvyXgZQFzkJvz Z63rb8QRqEiuU31ahNJgMKSCWxyRg3z8UvYMVxo3P/vc2yQJyKgwW9BquLcyJImc /lqo0JOQrdkXFzvDlRrgadtA4eX156NdG69EeZFZs4ltHAtxSczSI58s5ZZvEh9H iDM8m8MNknsFTg== -----END CERTIFICATE-----Generated at Thu Jan 8 19:25:36 2026 by rpki-client