This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft File: KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft (raw, json) Hash identifier: I/RBsPqnLbOfOBoGHFRzMad8ejbcdpdkMWKFfAgKbWs= Subject key identifier: 0C:4B:A2:2D:77:98:B6:A7:8A:E6:AC:CB:9D:2D:5E:1E:92:65:E0:FD Authority key identifier: 28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F Certificate issuer: /CN=282b2cb977153baad1dd99eec14ce0ca46e2219f Certificate serial: 019BB327FFF3DCFC4C0C6E4B3E67911F0722 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft Manifest number: 099C Signing time: Mon 12 Jan 2026 17:01:41 +0000 Manifest this update: Mon 12 Jan 2026 17:01:41 +0000 Manifest next update: Tue 13 Jan 2026 17:01:41 +0000 Files and hashes: 1: KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl (hash: 0CZ2Xm8fVqpZA4nSTVaD7gUMWTfHfUue7NJq5Evfrug=) 2: kwICd-Vs81pcwvCcYZ6zEK19fBw.roa (hash: zy91annv+5k1uAmsY5PH/4r77C+x0cRwRxEdrlowj+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:27:ff:f3:dc:fc:4c:0c:6e:4b:3e:67:91:1f:07:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=282b2cb977153baad1dd99eec14ce0ca46e2219f Validity Not Before: Jan 12 17:01:41 2026 GMT Not After : Jan 13 17:01:41 2026 GMT Subject: CN=0c4ba22d7798b6a78ae6accb9d2d5e1e9265e0fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:33:26:7f:aa:08:82:1c:65:90:51:18:ff:08: 9b:8d:2b:dd:ea:42:eb:98:d2:c3:1f:2f:1a:7a:92: ce:31:55:ef:9f:f9:8c:a9:26:57:61:3e:96:73:02: 8e:89:05:bb:16:4e:7b:f4:bf:ec:6b:7d:07:1d:4c: f7:25:44:1a:f8:6a:b5:a6:13:77:85:57:5f:79:78: 7f:98:72:32:e6:a8:50:b9:96:b5:01:bf:ca:4f:d6: 6e:b9:af:ec:1e:b3:aa:fd:79:23:ab:e9:da:15:0b: 24:62:5c:96:0e:6b:82:b0:c7:27:2d:db:7e:53:be: 18:87:a4:54:25:c4:b1:99:b8:e0:04:b6:d8:6b:da: 2e:8b:6d:e0:b1:d7:7b:e5:74:f6:a9:04:ae:60:0c: 25:e9:78:bb:f2:b3:03:36:29:b1:75:64:f6:27:72: 6a:cd:78:46:11:3e:6d:4d:c4:27:ac:49:93:fb:31: 24:f1:e7:df:11:2c:a8:52:c2:88:11:83:3d:10:51: 6e:ba:f6:26:80:11:3f:7a:1a:7b:a7:e1:0e:6c:f2: c0:82:4b:62:f0:6b:10:28:fa:80:34:83:2a:a5:fa: 3d:2f:a6:1f:ca:ed:41:c0:35:e0:d6:ba:83:0e:29: 59:c7:48:84:31:f7:ea:44:58:99:d9:54:ee:92:76: 3d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:4B:A2:2D:77:98:B6:A7:8A:E6:AC:CB:9D:2D:5E:1E:92:65:E0:FD X509v3 Authority Key Identifier: keyid:28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:46:6b:88:92:62:4f:3d:7b:a7:7c:d5:30:d1:88:6c:94:4b: f9:5a:c6:05:a1:2a:c2:b2:da:9c:dd:18:41:0c:7f:d4:1e:1e: fd:18:80:7a:ab:f8:2e:9c:63:74:e0:d6:0a:fb:67:ee:dd:8c: 4a:a6:a2:47:fa:a5:e8:f6:0b:67:af:77:c9:07:81:14:cc:70: 61:af:8e:d5:8b:97:93:d6:1f:19:03:cb:5a:03:a1:7a:d3:04: 80:92:22:3f:a3:27:57:a0:40:f0:0e:c8:19:03:86:89:b0:2e: c6:c1:77:65:76:c3:2b:1c:24:ea:e7:a1:c0:5b:3b:36:b2:21: 3b:95:31:fe:08:68:62:e8:71:b6:aa:8b:40:b4:b3:76:a9:b5: 23:01:a7:72:2b:6f:b6:c0:18:a2:6c:2e:34:6c:c3:be:e8:aa: 09:14:c5:04:09:58:95:04:52:62:3b:2f:35:e3:67:3c:a0:65: 04:55:d1:88:ae:2b:5e:a6:a3:43:92:63:be:db:fe:9c:f3:a7: ee:25:d8:ec:de:99:60:8c:5f:fc:21:01:e6:ae:e4:a8:a2:50: e9:68:fc:0b:ab:eb:48:2c:a6:ac:8c:cb:9c:43:bc:04:d6:df: 38:4d:e6:43:40:df:1a:af:dc:5c:c9:02:94:58:c3:9e:c7:f0: f6:83:c2:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuzJ//z3PxMDG5LPmeRHwciMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MmIyY2I5NzcxNTNiYWFkMWRkOTllZWMxNGNlMGNhNDZl MjIxOWYwHhcNMjYwMTEyMTcwMTQxWhcNMjYwMTEzMTcwMTQxWjAzMTEwLwYDVQQD EygwYzRiYTIyZDc3OThiNmE3OGFlNmFjY2I5ZDJkNWUxZTkyNjVlMGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzMmf6oIghxlkFEY/wibjSvd6kLr mNLDHy8aepLOMVXvn/mMqSZXYT6WcwKOiQW7Fk579L/sa30HHUz3JUQa+Gq1phN3 hVdfeXh/mHIy5qhQuZa1Ab/KT9Zuua/sHrOq/Xkjq+naFQskYlyWDmuCsMcnLdt+ U74Yh6RUJcSxmbjgBLbYa9oui23gsdd75XT2qQSuYAwl6Xi78rMDNimxdWT2J3Jq zXhGET5tTcQnrEmT+zEk8effESyoUsKIEYM9EFFuuvYmgBE/ehp7p+EObPLAgkti 8GsQKPqANIMqpfo9L6Yfyu1BwDXg1rqDDilZx0iEMffqRFiZ2VTuknY9OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxLoi13mLaniuasy50tXh6SZeD9MB8GA1UdIwQY MBaAFCgrLLl3FTuq0d2Z7sFM4MpG4iGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wYjBiMzMtOThhMS00ODE4LWFkMTgt OTVmMjdkM2U4YWJiLzEvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8wYjBiMzMtOThhMS00ODE4LWFkMTgtOTVmMjdkM2U4YWJi LzEvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApkZriJJi Tz17p3zVMNGIbJRL+VrGBaEqwrLanN0YQQx/1B4e/RiAeqv4LpxjdODWCvtn7t2M SqaiR/ql6PYLZ693yQeBFMxwYa+O1YuXk9YfGQPLWgOhetMEgJIiP6MnV6BA8A7I GQOGibAuxsF3ZXbDKxwk6uehwFs7NrIhO5Ux/ghoYuhxtqqLQLSzdqm1IwGncitv tsAYomwuNGzDvuiqCRTFBAlYlQRSYjsvNeNnPKBlBFXRiK4rXqajQ5Jjvtv+nPOn 7iXY7N6ZYIxf/CEB5q7kqKJQ6Wj8C6vrSCymrIzLnEO8BNbfOE3mQ0DfGq/cXMkC lFjDnsfw9oPCaA== -----END CERTIFICATE-----Generated at Mon Jan 12 23:51:19 2026 by rpki-client