This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft File: KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft (raw, json) Hash identifier: l6TmTxf24U4tMsuoTD8b+Vih50nInWq7fUiSxlScNUM= Subject key identifier: 02:1F:8B:14:D7:BC:8C:25:FC:74:83:1C:EC:C4:FA:0D:22:9D:10:D5 Authority key identifier: 2A:C3:78:B6:3B:CA:48:7C:32:E8:CE:81:2F:4F:85:D7:C6:EF:87:66 Certificate issuer: /CN=2ac378b63bca487c32e8ce812f4f85d7c6ef8766 Certificate serial: 019B796EAC8DD005618F60C7115D17F3EDE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsN4tjvKSHwy6M6BL0-F18bvh2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft Manifest number: 0938 Signing time: Thu 01 Jan 2026 12:00:54 +0000 Manifest this update: Thu 01 Jan 2026 12:00:54 +0000 Manifest next update: Fri 02 Jan 2026 12:00:54 +0000 Files and hashes: 1: KsN4tjvKSHwy6M6BL0-F18bvh2Y.crl (hash: 2KTum/yc5DJp0DXohyqcrt6u8YZ9w6p/RK3GcfoFiN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/KsN4tjvKSHwy6M6BL0-F18bvh2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:6e:ac:8d:d0:05:61:8f:60:c7:11:5d:17:f3:ed:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac378b63bca487c32e8ce812f4f85d7c6ef8766 Validity Not Before: Jan 1 12:00:54 2026 GMT Not After : Jan 2 12:00:54 2026 GMT Subject: CN=021f8b14d7bc8c25fc74831cecc4fa0d229d10d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c6:5c:f5:0f:44:f8:b8:b5:e3:2e:db:17:6e: d9:e7:60:cd:21:b0:bc:1d:3a:ec:94:98:d2:0f:3f: 4d:c5:9c:ee:b8:03:20:a7:08:c0:1a:fc:64:40:c3: b9:72:61:93:f6:83:65:eb:b2:49:04:cf:59:21:d3: fb:45:6c:ba:1d:3b:9d:91:28:df:8b:d6:51:55:b1: 33:46:e9:0f:e4:9b:82:4f:1a:3b:1c:de:00:78:22: 85:7a:ac:a8:4b:a2:92:25:29:cf:91:2b:be:62:4c: 68:b6:e0:38:b6:7d:99:a6:f5:9f:fb:21:be:27:4d: b2:20:7d:87:3d:87:59:71:e2:6f:5a:98:f0:35:b5: b8:d9:08:1f:80:74:be:91:e2:77:4e:59:10:85:ab: f9:0c:a9:29:e6:fe:42:24:2c:77:3e:aa:18:52:63: d5:5b:08:2f:b7:ef:16:54:d4:aa:05:a9:a6:be:1c: f7:e2:9b:57:ab:5d:d2:1c:28:68:1f:5d:ed:70:3d: a3:26:b2:57:90:3e:c1:04:8a:61:2e:c9:4f:79:73: 9f:90:6c:aa:84:d4:64:5f:a2:bf:3a:ab:07:c3:06: 95:38:3f:0e:dd:eb:cf:59:39:f7:44:5a:1f:21:72: a2:75:f0:70:fa:4e:c1:bb:30:d1:18:c1:d9:e3:d7: 0f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:1F:8B:14:D7:BC:8C:25:FC:74:83:1C:EC:C4:FA:0D:22:9D:10:D5 X509v3 Authority Key Identifier: keyid:2A:C3:78:B6:3B:CA:48:7C:32:E8:CE:81:2F:4F:85:D7:C6:EF:87:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsN4tjvKSHwy6M6BL0-F18bvh2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:cf:33:b3:06:46:b3:9d:a7:e2:6a:45:b0:b0:ec:e8:50:d1: a2:b0:51:41:9b:b9:3b:0b:61:11:55:75:e2:e0:41:e5:c6:75: 83:1f:6c:c3:47:4c:5b:15:21:31:72:ff:09:ce:13:46:b3:30: 97:e0:05:19:f2:44:64:7a:78:70:47:6e:88:d9:ff:2e:74:c0: c0:86:ff:95:9b:de:01:2e:fb:7a:9e:92:5c:c3:58:b1:9a:d2: a5:a9:ab:02:25:cc:81:29:0c:14:d0:35:d3:7b:7d:c2:f9:8a: e9:25:c0:fd:31:65:54:77:f6:2e:ea:2e:8d:09:10:31:b5:c5: 08:b8:0d:3e:8f:04:b8:b8:55:6d:0c:aa:8c:cf:6b:c2:3e:37: bb:8c:1d:3c:17:cc:ac:af:65:a6:34:49:76:48:5d:9c:e9:8b: 52:f6:fc:7c:c9:c9:85:60:61:37:6c:c3:44:22:10:d1:1a:b7: 11:6a:e1:53:d2:d1:2f:ca:8e:e9:0a:c0:b8:ab:b8:dd:5d:81: be:21:ad:dc:db:9c:91:ef:72:94:67:40:03:e3:fd:31:1d:8a: a7:7d:85:11:18:2e:5d:59:90:d8:33:0e:1a:ad:4a:a5:46:f3: a0:ca:25:1d:d3:91:ac:0e:86:ed:f4:cb:a0:ae:a7:d4:d4:63: a8:8d:97:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5bqyN0AVhj2DHEV0X8+3nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzM3OGI2M2JjYTQ4N2MzMmU4Y2U4MTJmNGY4NWQ3YzZl Zjg3NjYwHhcNMjYwMTAxMTIwMDU0WhcNMjYwMTAyMTIwMDU0WjAzMTEwLwYDVQQD EygwMjFmOGIxNGQ3YmM4YzI1ZmM3NDgzMWNlY2M0ZmEwZDIyOWQxMGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMZc9Q9E+Li14y7bF27Z52DNIbC8 HTrslJjSDz9NxZzuuAMgpwjAGvxkQMO5cmGT9oNl67JJBM9ZIdP7RWy6HTudkSjf i9ZRVbEzRukP5JuCTxo7HN4AeCKFeqyoS6KSJSnPkSu+YkxotuA4tn2ZpvWf+yG+ J02yIH2HPYdZceJvWpjwNbW42QgfgHS+keJ3TlkQhav5DKkp5v5CJCx3PqoYUmPV Wwgvt+8WVNSqBammvhz34ptXq13SHChoH13tcD2jJrJXkD7BBIphLslPeXOfkGyq hNRkX6K/OqsHwwaVOD8O3evPWTn3RFofIXKidfBw+k7BuzDRGMHZ49cP9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIfixTXvIwl/HSDHOzE+g0inRDVMB8GA1UdIwQY MBaAFCrDeLY7ykh8MujOgS9PhdfG74dmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NONHRqdktTSHd5Nk02QkwwLUYxOGJ2aDJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9iOTU4NjYtNzA5Ni00YmFkLWI1MDkt MDc3ZDUyZWFiNzBkLzEvS3NONHRqdktTSHd5Nk02QkwwLUYxOGJ2aDJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9iOTU4NjYtNzA5Ni00YmFkLWI1MDktMDc3ZDUyZWFiNzBk LzEvS3NONHRqdktTSHd5Nk02QkwwLUYxOGJ2aDJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHs8zswZG s52n4mpFsLDs6FDRorBRQZu5OwthEVV14uBB5cZ1gx9sw0dMWxUhMXL/Cc4TRrMw l+AFGfJEZHp4cEduiNn/LnTAwIb/lZveAS77ep6SXMNYsZrSpamrAiXMgSkMFNA1 03t9wvmK6SXA/TFlVHf2LuoujQkQMbXFCLgNPo8EuLhVbQyqjM9rwj43u4wdPBfM rK9lpjRJdkhdnOmLUvb8fMnJhWBhN2zDRCIQ0Rq3EWrhU9LRL8qO6QrAuKu43V2B viGt3Nucke9ylGdAA+P9MR2Kp32FERguXVmQ2DMOGq1KpUbzoMolHdORrA6G7fTL oK6n1NRjqI2XDQ== -----END CERTIFICATE-----Generated at Thu Jan 1 14:26:19 2026 by rpki-client