This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft File: L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft (raw, json) Hash identifier: thvxyBaguC19rQQ6RFXRQPi3SBMmmo4TK1EyN0p2tps= Subject key identifier: C3:A0:9A:E4:55:C9:B4:E0:AE:D6:A8:58:BD:9F:80:CF:F0:B5:CC:77 Authority key identifier: 2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4 Certificate issuer: /CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4 Certificate serial: 019BF50718ED3CC4690D7E73EFC29F9C7D7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft Manifest number: 0896 Signing time: Sun 25 Jan 2026 12:00:41 +0000 Manifest this update: Sun 25 Jan 2026 12:00:41 +0000 Manifest next update: Mon 26 Jan 2026 12:00:41 +0000 Files and hashes: 1: L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl (hash: 0LxFvag/VZhVyu423nMOJZoLiNgwpZ4eSXW2xdJG1ic=) 2: pIAhj8amHnd0fjLTUVpUmZpe45o.roa (hash: F6Vq2qEf6nCrdvdX7pWrP/aHN1l9RhEoh7QDzNTcEVU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:18:ed:3c:c4:69:0d:7e:73:ef:c2:9f:9c:7d:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4 Validity Not Before: Jan 25 12:00:41 2026 GMT Not After : Jan 26 12:00:41 2026 GMT Subject: CN=c3a09ae455c9b4e0aed6a858bd9f80cff0b5cc77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:76:40:a7:d6:46:28:a6:16:ed:ba:77:6a:02: 13:30:89:44:45:b3:4b:d4:a9:11:6f:57:7c:4e:7e: 80:1c:52:b0:78:3e:7d:23:06:6c:c0:7b:d1:49:e4: 56:b1:bb:f1:82:a4:7a:55:2a:f1:c3:cf:14:18:ce: b2:d4:8d:9b:88:aa:e0:6a:12:44:f2:07:8f:eb:c6: a1:15:17:97:b9:da:80:d3:a3:6a:f7:ed:39:86:cb: e3:2f:d0:69:08:99:4b:eb:fa:fd:d6:a3:da:d2:99: 9c:e1:99:4c:49:dc:e0:fb:ba:9d:58:56:d5:ea:2b: 4f:e9:e0:f8:f9:bc:b8:6c:52:af:6c:1b:b4:8e:de: 6c:d7:d7:d5:92:bf:7b:3f:98:fe:26:2d:68:c0:92: 43:b3:fd:b0:39:f4:43:b6:48:93:92:91:03:3c:f0: 80:da:b0:ad:d7:78:bd:d9:90:5a:19:95:59:82:3f: c3:63:d2:80:b3:fc:2c:2a:d6:f6:ef:88:93:02:f3: d3:2c:6b:63:7b:7e:3e:3d:b7:b1:1f:1d:87:12:1a: f3:f8:26:28:41:0f:4c:1d:23:2a:42:c8:98:45:a0: 63:c1:08:e9:0b:3f:32:14:ae:02:39:a8:bb:2a:22: d5:a7:05:79:47:e2:0b:fe:46:fa:45:51:da:3c:f7: 82:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A0:9A:E4:55:C9:B4:E0:AE:D6:A8:58:BD:9F:80:CF:F0:B5:CC:77 X509v3 Authority Key Identifier: keyid:2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ea:cb:02:c1:14:46:f6:28:1f:a0:c0:af:6e:67:bf:04:80: d8:33:13:7c:0e:b8:1f:ee:5c:63:11:c0:3a:6c:a2:3c:d5:4f: a8:41:bf:71:df:1a:29:bc:65:91:a4:f9:5a:a6:09:92:50:d1: fa:e5:37:8a:b0:39:e7:75:1b:25:a1:b0:07:78:b9:29:4b:7c: 3f:5b:fc:29:19:f6:56:e5:fe:07:4d:58:44:fd:5b:bd:84:7c: 35:8d:e1:be:a1:52:76:b2:43:da:a2:29:d2:45:c8:0f:1d:7a: a9:91:06:47:6e:52:55:75:33:91:2a:c8:91:b2:a9:ee:42:01: 8c:12:71:7e:e3:e7:c8:bf:ae:49:f8:02:f8:7b:52:c9:4f:f9: a4:2f:c8:0e:57:95:2d:02:46:91:ca:e4:67:e5:26:48:f0:8f: 53:b2:d7:3e:00:be:5b:21:f2:fe:8c:24:9f:ad:be:24:ec:5e: 9f:ff:7c:fb:b6:5c:72:98:8c:11:74:a7:57:5a:47:83:6d:1f: a3:1a:e0:b3:9d:cd:49:f7:85:b8:02:34:82:8e:7b:93:1e:10: 87:f1:6c:a1:04:2a:86:09:27:46:f3:1e:c2:ad:64:a7:42:8e: f6:81:05:5a:76:6b:8b:e2:02:43:b9:59:c1:52:fe:7c:ae:45: 01:3a:a1:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BxjtPMRpDX5z78KfnH16MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZmI2NDFkM2NhMmVjMTE1N2Y0NzczMjE3ODljZWMwY2M1 ZjI5YTQwHhcNMjYwMTI1MTIwMDQxWhcNMjYwMTI2MTIwMDQxWjAzMTEwLwYDVQQD EyhjM2EwOWFlNDU1YzliNGUwYWVkNmE4NThiZDlmODBjZmYwYjVjYzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nZAp9ZGKKYW7bp3agITMIlERbNL 1KkRb1d8Tn6AHFKweD59IwZswHvRSeRWsbvxgqR6VSrxw88UGM6y1I2biKrgahJE 8geP68ahFReXudqA06Nq9+05hsvjL9BpCJlL6/r91qPa0pmc4ZlMSdzg+7qdWFbV 6itP6eD4+by4bFKvbBu0jt5s19fVkr97P5j+Ji1owJJDs/2wOfRDtkiTkpEDPPCA 2rCt13i92ZBaGZVZgj/DY9KAs/wsKtb274iTAvPTLGtje34+PbexHx2HEhrz+CYo QQ9MHSMqQsiYRaBjwQjpCz8yFK4COai7KiLVpwV5R+IL/kb6RVHaPPeCewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOgmuRVybTgrtaoWL2fgM/wtcx3MB8GA1UdIwQY MBaAFC/7ZB08ouwRV/R3MheJzsDMXymkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTF90a0hUeWk3QkZYOUhjeUY0bk93TXhmS2FRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iMDZmZTAtMzY5MC00MzdkLTg5MjQt MDcxZGFhMDVkYWJmLzEvTF90a0hUeWk3QkZYOUhjeUY0bk93TXhmS2FRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9iMDZmZTAtMzY5MC00MzdkLTg5MjQtMDcxZGFhMDVkYWJm LzEvTF90a0hUeWk3QkZYOUhjeUY0bk93TXhmS2FRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOrLAsEU RvYoH6DAr25nvwSA2DMTfA64H+5cYxHAOmyiPNVPqEG/cd8aKbxlkaT5WqYJklDR +uU3irA553UbJaGwB3i5KUt8P1v8KRn2VuX+B01YRP1bvYR8NY3hvqFSdrJD2qIp 0kXIDx16qZEGR25SVXUzkSrIkbKp7kIBjBJxfuPnyL+uSfgC+HtSyU/5pC/IDleV LQJGkcrkZ+UmSPCPU7LXPgC+WyHy/owkn62+JOxen/98+7ZccpiMEXSnV1pHg20f oxrgs53NSfeFuAI0go57kx4Qh/FsoQQqhgknRvMewq1kp0KO9oEFWnZri+ICQ7lZ wVL+fK5FATqhuA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:24:07 2026 by rpki-client