This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft File: l4kxgrFnGJg7wAjI0If43co9hhQ.mft (raw, json) Hash identifier: Zv93WCPcdGNyoEe5TX91+ssPF0wpoJiCRDIkFSYannQ= Subject key identifier: 7C:C3:E5:7F:A4:6A:47:1D:5F:3F:4A:81:85:7D:E5:21:EA:17:66:04 Authority key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14 Certificate issuer: /CN=97893182b16718983bc008c8d087f8ddca3d8614 Certificate serial: 019BF2071A6456092FE6111F376764BB4AB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft Manifest number: 17E9 Signing time: Sat 24 Jan 2026 22:01:50 +0000 Manifest this update: Sat 24 Jan 2026 22:01:50 +0000 Manifest next update: Sun 25 Jan 2026 22:01:50 +0000 Files and hashes: 1: 1-AA_Ym6EX8oobe6NeXk7HWy7rN8.roa (hash: 5t3UXfHRI3FdEzMfG7EasqVmyGfPVOTBzPUk3KiG+pQ=) 2: 4I6IeKRFTHTfCk6P0VsgUhk8zic.roa (hash: 0XVLTIXxWYyeiCe3iIXGikBSA8t/yImgovN3r1Pbd5A=) 3: Br6fq_1p0sOiKlI1DRwR_EbfW2E.roa (hash: WR8ZmHp+6ZanBZA6Ty89Up4dRZVpCdfJ23KhCqCS8TI=) 4: PT_eHk2Dy_Wh2XHSZ-ZM2UoqOTc.roa (hash: /7aQ7+RwkclmuJNtVK87g/73oEQXo6yAkx6IMmNGLuU=) 5: hjLY93sTfKVGtH04a9-qkylCHmE.roa (hash: /mrPE+eKM9yKGu2TBD1xblJ2DuTRrBr+lNyxB56PAiE=) 6: l4kxgrFnGJg7wAjI0If43co9hhQ.crl (hash: 8+b//5KkGQmwaTQvYKmkz51T3A4uVDXAL8VwHLP5jH0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:07:1a:64:56:09:2f:e6:11:1f:37:67:64:bb:4a:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97893182b16718983bc008c8d087f8ddca3d8614 Validity Not Before: Jan 24 22:01:50 2026 GMT Not After : Jan 25 22:01:50 2026 GMT Subject: CN=7cc3e57fa46a471d5f3f4a81857de521ea176604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9d:52:3f:bd:cf:87:2a:ff:94:3c:1f:82:d5: c5:02:8e:62:8f:6c:15:46:7a:05:60:71:29:91:b5: b8:b9:b3:53:61:4c:1e:e8:3a:9a:0b:58:c4:7f:5c: 05:06:dc:31:97:d5:ff:ac:4d:f8:9d:67:9c:0a:ac: e4:cb:16:e3:33:a7:61:b1:8b:5a:be:8a:46:da:15: 34:7c:67:a2:88:db:39:da:90:95:9f:60:50:c6:a6: d0:d8:fe:f0:fe:2f:b5:90:74:92:2c:70:c7:58:17: ea:da:69:87:1b:e4:c6:f0:21:ba:48:6b:5a:86:31: 5e:af:48:66:97:8a:c5:38:92:9a:0d:a7:99:dc:d6: 82:97:95:38:ec:f1:4e:e9:58:a0:1a:bc:e0:c7:a7: 29:30:0f:7f:10:72:0c:7f:ac:b8:e5:ec:0d:8e:24: ab:b4:9b:5a:e0:82:bb:8d:01:83:b5:7b:e3:27:a7: 43:a9:2e:9c:a0:39:28:f9:60:a1:c3:44:52:17:26: e4:90:e2:a7:ed:e0:71:1d:82:32:f9:42:54:38:8a: 39:94:fe:05:a3:a0:3d:58:73:06:c1:e2:da:b2:78: fe:34:fd:3d:57:f3:0b:b4:de:f2:03:26:78:d4:1f: a3:3d:9a:f3:18:df:59:79:82:3c:8d:c6:40:d5:ae: 0f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C3:E5:7F:A4:6A:47:1D:5F:3F:4A:81:85:7D:E5:21:EA:17:66:04 X509v3 Authority Key Identifier: keyid:97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:35:47:30:7a:7e:a2:e9:cd:41:27:c7:f4:f9:bd:13:ef:db: 4c:33:e2:5a:d0:42:ce:b9:f6:25:89:6e:52:ef:71:62:db:a5: 75:69:f4:94:9c:78:2b:59:b9:d8:9b:41:f7:35:70:d9:5e:68: 20:50:dd:01:f6:1e:30:fd:c7:fa:0f:03:81:50:11:65:56:ee: 04:3b:3d:db:8b:00:65:b3:17:f3:10:45:b2:e2:68:f9:7d:1b: aa:e9:6a:dc:2c:d1:9e:10:04:ca:98:b7:62:a9:7b:99:4a:aa: 37:03:1c:7e:74:b7:d0:34:0a:05:7d:db:46:10:ca:ca:93:14: 30:60:95:a1:4a:b8:17:7e:c6:3d:9e:29:88:8d:cb:ca:ef:1c: 2a:fc:f1:36:00:b5:91:a6:3e:82:95:28:8d:be:fd:c3:01:76: 09:b0:15:be:be:e7:45:97:63:3b:a0:5b:8c:b2:dc:da:5c:91: 45:b4:3a:a9:dd:a6:ef:f5:8f:0e:9d:62:ad:6a:ef:70:88:c3: 04:3f:1d:58:0e:63:7a:19:a4:28:eb:41:0d:13:a1:74:d5:1e: 93:e9:3a:d5:85:0d:de:18:7e:97:45:f3:10:48:df:ee:ce:56: ae:5b:e8:64:1f:21:e0:0c:64:68:ca:dc:db:40:72:f9:12:ff: ec:a4:ba:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyBxpkVgkv5hEfN2dku0q4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODkzMTgyYjE2NzE4OTgzYmMwMDhjOGQwODdmOGRkY2Ez ZDg2MTQwHhcNMjYwMTI0MjIwMTUwWhcNMjYwMTI1MjIwMTUwWjAzMTEwLwYDVQQD Eyg3Y2MzZTU3ZmE0NmE0NzFkNWYzZjRhODE4NTdkZTUyMWVhMTc2NjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJ1SP73Phyr/lDwfgtXFAo5ij2wV RnoFYHEpkbW4ubNTYUwe6DqaC1jEf1wFBtwxl9X/rE34nWecCqzkyxbjM6dhsYta vopG2hU0fGeiiNs52pCVn2BQxqbQ2P7w/i+1kHSSLHDHWBfq2mmHG+TG8CG6SGta hjFer0hml4rFOJKaDaeZ3NaCl5U47PFO6VigGrzgx6cpMA9/EHIMf6y45ewNjiSr tJta4IK7jQGDtXvjJ6dDqS6coDko+WChw0RSFybkkOKn7eBxHYIy+UJUOIo5lP4F o6A9WHMGweLasnj+NP09V/MLtN7yAyZ41B+jPZrzGN9ZeYI8jcZA1a4PcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzD5X+kakcdXz9KgYV95SHqF2YEMB8GA1UdIwQY MBaAFJeJMYKxZxiYO8AIyNCH+N3KPYYUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRreGdyRm5HSmc3d0FqSTBJZjQzY285aGhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8xMjAwNDMtMTczMy00YzcyLWFkNDct YmMwZTUxMWMyMGNlLzEvbDRreGdyRm5HSmc3d0FqSTBJZjQzY285aGhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8xMjAwNDMtMTczMy00YzcyLWFkNDctYmMwZTUxMWMyMGNl LzEvbDRreGdyRm5HSmc3d0FqSTBJZjQzY285aGhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKzVHMHp+ ounNQSfH9Pm9E+/bTDPiWtBCzrn2JYluUu9xYtuldWn0lJx4K1m52JtB9zVw2V5o IFDdAfYeMP3H+g8DgVARZVbuBDs924sAZbMX8xBFsuJo+X0bqulq3CzRnhAEypi3 Yql7mUqqNwMcfnS30DQKBX3bRhDKypMUMGCVoUq4F37GPZ4piI3Lyu8cKvzxNgC1 kaY+gpUojb79wwF2CbAVvr7nRZdjO6BbjLLc2lyRRbQ6qd2m7/WPDp1irWrvcIjD BD8dWA5jehmkKOtBDROhdNUek+k61YUN3hh+l0XzEEjf7s5WrlvoZB8h4AxkaMrc 20By+RL/7KS6YQ== -----END CERTIFICATE-----Generated at Sun Jan 25 05:41:57 2026 by rpki-client