This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft File: l_RnToI2vdw9IyegKwq_unmlSDw.mft (raw, json) Hash identifier: /B4ArkIfLjhMPbA7VINb5bnRZHjuWyCAGMm429M16Pg= Subject key identifier: 83:73:ED:3D:43:4E:A0:F4:CE:59:FF:C8:C2:16:46:F3:94:95:5D:FA Authority key identifier: 97:F4:67:4E:82:36:BD:DC:3D:23:27:A0:2B:0A:BF:BA:79:A5:48:3C Certificate issuer: /CN=97f4674e8236bddc3d2327a02b0abfba79a5483c Certificate serial: 019BF79A1E04BBD0BF16DC9C6D119E6895DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft Manifest number: 17E8 Signing time: Mon 26 Jan 2026 00:00:31 +0000 Manifest this update: Mon 26 Jan 2026 00:00:31 +0000 Manifest next update: Tue 27 Jan 2026 00:00:31 +0000 Files and hashes: 1: jWXMDv13AWDAzHmG3AwphA0uU3I.roa (hash: gbSC++TyPC7wR0U95OM82la8DG8eXm7v1JK7SFOBZRE=) 2: l_RnToI2vdw9IyegKwq_unmlSDw.crl (hash: YHCSKpatTGSEBwYCej6Dfvww8SDp0H22vsvXyCFSXWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:1e:04:bb:d0:bf:16:dc:9c:6d:11:9e:68:95:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97f4674e8236bddc3d2327a02b0abfba79a5483c Validity Not Before: Jan 26 00:00:31 2026 GMT Not After : Jan 27 00:00:31 2026 GMT Subject: CN=8373ed3d434ea0f4ce59ffc8c21646f394955dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:16:12:12:29:36:4a:c1:33:4b:28:2c:0b:4b: 98:da:2a:d8:3a:34:29:5f:6b:33:26:0a:5b:36:c8: 7c:89:37:fe:9a:f5:3b:f8:32:d0:c9:ed:a6:94:8b: 6d:4a:ed:c1:cf:2d:b6:04:89:79:9a:9c:df:b3:76: cb:ba:f6:f4:19:d6:c1:89:19:7b:f9:19:09:5f:5c: 6d:be:c8:8d:88:30:13:8c:93:98:d0:e6:0f:81:ac: 8f:96:e5:e7:2f:c9:30:1e:25:9d:48:fc:cc:eb:50: df:10:64:1f:65:2c:71:e8:d9:c9:9c:60:15:a3:7c: d9:5c:52:ce:5d:a3:8f:b4:e8:a9:56:f7:b9:03:3d: fc:ad:3f:57:c8:61:ea:97:67:de:33:5d:ec:d9:76: ae:e5:e1:d1:af:60:cb:f6:27:15:72:e0:1b:0c:9f: 34:a4:2b:36:91:50:f3:c0:2b:76:8b:bb:49:41:bd: 4b:b1:ff:da:db:d2:e3:0b:ff:b8:9e:6d:e7:f5:41: 4d:e0:5f:91:c5:ff:c8:5c:3d:dd:5f:7d:69:f1:91: f0:dd:6e:7b:b0:c8:97:6c:93:b5:82:c8:60:8e:c5: 5e:27:a5:f2:ca:2a:71:75:0b:fa:b8:97:03:1d:78: 71:d2:0e:3a:24:02:5d:81:68:d3:aa:73:c1:ab:9a: 58:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:73:ED:3D:43:4E:A0:F4:CE:59:FF:C8:C2:16:46:F3:94:95:5D:FA X509v3 Authority Key Identifier: keyid:97:F4:67:4E:82:36:BD:DC:3D:23:27:A0:2B:0A:BF:BA:79:A5:48:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:15:43:80:57:9f:82:bf:a9:30:da:cd:1a:e5:0f:00:4f:59: 13:79:49:eb:e9:d2:8d:3e:1a:ed:a4:85:d8:0c:5c:3d:08:d4: 4b:ea:df:46:49:eb:bc:23:39:13:b0:b1:ef:ae:db:de:34:5c: ae:5f:bb:3b:08:b0:da:77:02:45:fb:cf:88:19:01:e0:90:50: f8:b8:a5:e6:62:27:d7:c8:a2:72:85:5a:e6:3c:4e:26:55:0f: 89:2b:ad:e6:ec:34:b9:c8:45:aa:aa:21:ed:85:4b:66:85:0f: ba:4d:93:0c:65:38:10:5f:9a:c6:06:11:e6:dd:3f:72:24:1d: 7b:c7:33:d7:a0:66:c1:62:fc:2b:52:d5:43:c5:82:10:9c:2c: b5:18:a5:ab:fd:4a:b0:3e:77:1e:22:74:0e:45:e9:2a:29:dc: e7:07:b1:c3:e3:0a:ee:97:8f:6e:01:c0:ec:95:79:2c:6d:07: 58:cd:9f:ed:01:f1:73:ef:15:e8:8c:a2:e6:c3:a6:7c:ba:6c: 6b:11:0c:e6:0c:60:44:32:82:5f:29:c6:33:06:3e:27:8c:ed: 30:55:a3:0d:f4:1d:04:15:97:e9:a8:60:54:26:cf:fc:31:f9: a8:9a:25:ff:b1:16:67:de:3d:9c:49:11:e7:58:fa:7a:a1:83: fe:c3:97:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mh4Eu9C/FtycbRGeaJXdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ZjQ2NzRlODIzNmJkZGMzZDIzMjdhMDJiMGFiZmJhNzlh NTQ4M2MwHhcNMjYwMTI2MDAwMDMxWhcNMjYwMTI3MDAwMDMxWjAzMTEwLwYDVQQD Eyg4MzczZWQzZDQzNGVhMGY0Y2U1OWZmYzhjMjE2NDZmMzk0OTU1ZGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BYSEik2SsEzSygsC0uY2irYOjQp X2szJgpbNsh8iTf+mvU7+DLQye2mlIttSu3Bzy22BIl5mpzfs3bLuvb0GdbBiRl7 +RkJX1xtvsiNiDATjJOY0OYPgayPluXnL8kwHiWdSPzM61DfEGQfZSxx6NnJnGAV o3zZXFLOXaOPtOipVve5Az38rT9XyGHql2feM13s2Xau5eHRr2DL9icVcuAbDJ80 pCs2kVDzwCt2i7tJQb1Lsf/a29LjC/+4nm3n9UFN4F+Rxf/IXD3dX31p8ZHw3W57 sMiXbJO1gshgjsVeJ6XyyipxdQv6uJcDHXhx0g46JAJdgWjTqnPBq5pYpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINz7T1DTqD0zln/yMIWRvOUlV36MB8GA1UdIwQY MBaAFJf0Z06CNr3cPSMnoCsKv7p5pUg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbF9SblRvSTJ2ZHc5SXllZ0t3cV91bm1sU0R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS83NWE5MjAtMmEzYS00MTI5LTgwMGUt YWYyZWM1ZDhkYzNjLzEvbF9SblRvSTJ2ZHc5SXllZ0t3cV91bm1sU0R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS83NWE5MjAtMmEzYS00MTI5LTgwMGUtYWYyZWM1ZDhkYzNj LzEvbF9SblRvSTJ2ZHc5SXllZ0t3cV91bm1sU0R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhVDgFef gr+pMNrNGuUPAE9ZE3lJ6+nSjT4a7aSF2AxcPQjUS+rfRknrvCM5E7Cx767b3jRc rl+7Owiw2ncCRfvPiBkB4JBQ+Lil5mIn18iicoVa5jxOJlUPiSut5uw0uchFqqoh 7YVLZoUPuk2TDGU4EF+axgYR5t0/ciQde8cz16BmwWL8K1LVQ8WCEJwstRilq/1K sD53HiJ0DkXpKinc5wexw+MK7pePbgHA7JV5LG0HWM2f7QHxc+8V6Iyi5sOmfLps axEM5gxgRDKCXynGMwY+J4ztMFWjDfQdBBWX6ahgVCbP/DH5qJol/7EWZ949nEkR 51j6eqGD/sOXcA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:24 2026 by rpki-client