This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft File: L3W8c3nxFbBnFVLJuvK-2FvegYk.mft (raw, json) Hash identifier: U5STw5OwbSLUGT/ggfex1EJOhPnrf+fJgkHr2XejZkM= Subject key identifier: BB:D6:77:48:6C:C5:F0:C3:96:8D:14:88:7D:AD:76:EC:A8:FE:7C:A3 Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89 Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189 Certificate serial: 019BF4993AC3C97AC3BF57BCBFE7DA5374C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft Manifest number: 0F45 Signing time: Sun 25 Jan 2026 10:00:41 +0000 Manifest this update: Sun 25 Jan 2026 10:00:41 +0000 Manifest next update: Mon 26 Jan 2026 10:00:41 +0000 Files and hashes: 1: 367HB_kgLZzHvUmYczP-HqOYi0w.roa (hash: vI+rarZc7DlZdGO0Ct6YZUoPyF9jObWAgLLGWNUF1IM=) 2: L3W8c3nxFbBnFVLJuvK-2FvegYk.crl (hash: RNJ+aSkVMeSsRbygmc9cvexbi6et9JPdaukrQp4TvME=) 3: QicJb4tBJvgYwQclT6wKiWs8OUY.roa (hash: yjvitWfW4JWqjrdicd13TaiYp4fgxWdS63juZbv/qJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:3a:c3:c9:7a:c3:bf:57:bc:bf:e7:da:53:74:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189 Validity Not Before: Jan 25 10:00:41 2026 GMT Not After : Jan 26 10:00:41 2026 GMT Subject: CN=bbd677486cc5f0c3968d14887dad76eca8fe7ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:aa:42:5b:47:30:e5:c1:df:c1:2a:9c:7a:61: 70:d8:c0:56:bf:26:9d:b1:39:d5:30:62:91:54:5a: 7e:28:f4:e7:e3:32:de:e7:2b:6f:24:6e:94:aa:92: a3:fe:c3:6d:68:31:90:d4:de:5d:b3:00:e2:1b:cb: 75:89:4d:b6:51:3e:8b:b7:ba:9b:fa:fd:e3:f6:4b: 81:7a:03:60:18:e0:09:f5:a8:d0:bb:f1:ea:ff:54: 87:ea:e3:f9:11:0a:62:64:57:f4:bb:ac:3c:7f:83: d9:b8:f2:6e:ac:13:a4:51:41:94:c1:cd:9d:ee:70: 52:cf:a9:bd:86:d2:0f:3c:b0:b3:5f:8d:e5:6b:bf: 3d:e5:08:06:b6:16:6a:d7:c8:88:3c:83:36:d6:7a: 81:f6:99:52:d0:1a:9f:a5:46:27:f4:36:ba:c6:2f: ad:81:d6:20:1d:99:b2:3b:b2:ec:9a:62:6d:31:6b: 0b:19:1e:1c:c4:24:16:d2:ce:16:f8:89:c0:0b:ca: 81:1d:aa:c9:91:02:15:9d:5e:6d:8c:d0:fa:3e:8a: a3:12:2d:38:e6:c9:bd:cc:6b:d6:40:ca:c0:68:a9: b6:20:39:23:10:83:d9:b0:52:27:d1:28:b5:fb:e2: ca:80:0a:13:f8:f0:f8:54:aa:b4:39:b8:7a:54:99: 57:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D6:77:48:6C:C5:F0:C3:96:8D:14:88:7D:AD:76:EC:A8:FE:7C:A3 X509v3 Authority Key Identifier: keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:b5:72:68:59:57:12:86:0e:e6:07:42:60:56:70:87:5d:95: 97:b8:14:67:11:77:84:4f:b8:b7:c1:e1:15:72:9b:fd:23:67: c2:9f:55:83:42:3f:35:7f:3b:be:1b:13:42:26:59:a2:64:3d: 01:9e:44:4f:6e:a1:43:b5:8e:73:e1:0b:7f:47:56:40:d5:7b: e2:b9:cc:d9:71:9f:5b:e2:fb:8b:7f:1b:13:39:3c:3b:12:4f: ef:4d:0c:92:e7:5e:c4:39:ee:b8:7c:92:7e:80:e9:65:fd:cf: e1:db:15:11:54:b2:5a:33:80:d3:3c:eb:e5:ed:d0:85:af:be: 68:35:0e:17:1f:78:91:c5:d0:7d:3a:2e:1f:bf:4b:fd:6e:0d: d7:dd:d7:fc:49:02:f6:de:dd:76:5d:b5:e7:f0:78:ce:d9:d1: 4f:9e:8b:56:30:dc:4a:fb:d6:bd:4d:cf:f4:17:cc:d7:ed:db: 60:29:63:9a:6d:2e:b4:c1:67:03:ab:c1:d3:8c:89:7f:f1:fd: d2:89:83:b2:7f:95:90:1e:35:57:bd:ef:49:ef:71:94:b2:0b: 15:76:eb:bf:fa:3b:af:d3:96:7e:73:4d:35:bc:c7:3a:e6:06: be:5f:df:d5:9b:29:f3:f8:9c:0b:49:dd:7b:83:6b:f9:d3:c6: 3e:3c:37:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mTrDyXrDv1e8v+faU3TFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNzViYzczNzlmMTE1YjA2NzE1NTJjOWJhZjJiZWQ4NWJk ZTgxODkwHhcNMjYwMTI1MTAwMDQxWhcNMjYwMTI2MTAwMDQxWjAzMTEwLwYDVQQD EyhiYmQ2Nzc0ODZjYzVmMGMzOTY4ZDE0ODg3ZGFkNzZlY2E4ZmU3Y2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwapCW0cw5cHfwSqcemFw2MBWvyad sTnVMGKRVFp+KPTn4zLe5ytvJG6UqpKj/sNtaDGQ1N5dswDiG8t1iU22UT6Lt7qb +v3j9kuBegNgGOAJ9ajQu/Hq/1SH6uP5EQpiZFf0u6w8f4PZuPJurBOkUUGUwc2d 7nBSz6m9htIPPLCzX43la7895QgGthZq18iIPIM21nqB9plS0BqfpUYn9Da6xi+t gdYgHZmyO7LsmmJtMWsLGR4cxCQW0s4W+InAC8qBHarJkQIVnV5tjND6PoqjEi04 5sm9zGvWQMrAaKm2IDkjEIPZsFIn0Si1++LKgAoT+PD4VKq0Obh6VJlX7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvWd0hsxfDDlo0UiH2tduyo/nyjMB8GA1UdIwQY MBaAFC91vHN58RWwZxVSybryvthb3oGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDNXOGMzbnhGYkJuRlZMSnV2Sy0yRnZlZ1lrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84MTBkMjktMGM4NS00MDU3LWI2MjYt YWYwZTQxN2Q0YzNhLzEvTDNXOGMzbnhGYkJuRlZMSnV2Sy0yRnZlZ1lrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi84MTBkMjktMGM4NS00MDU3LWI2MjYtYWYwZTQxN2Q0YzNh LzEvTDNXOGMzbnhGYkJuRlZMSnV2Sy0yRnZlZ1lrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAabVyaFlX EoYO5gdCYFZwh12Vl7gUZxF3hE+4t8HhFXKb/SNnwp9Vg0I/NX87vhsTQiZZomQ9 AZ5ET26hQ7WOc+ELf0dWQNV74rnM2XGfW+L7i38bEzk8OxJP700MkudexDnuuHyS foDpZf3P4dsVEVSyWjOA0zzr5e3Qha++aDUOFx94kcXQfTouH79L/W4N193X/EkC 9t7ddl215/B4ztnRT56LVjDcSvvWvU3P9BfM1+3bYCljmm0utMFnA6vB04yJf/H9 0omDsn+VkB41V73vSe9xlLILFXbrv/o7r9OWfnNNNbzHOuYGvl/f1Zsp8/icC0nd e4Nr+dPGPjw3Fw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:24:48 2026 by rpki-client