This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft File: L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json) Hash identifier: +ZNjfr6cK3JSQrkKT46Y5hklChdnGV0afMrxQJSNXDA= Subject key identifier: 30:D4:E1:D3:94:46:D8:AD:F4:46:2E:16:3A:13:B4:6A:A7:46:97:E1 Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e Certificate serial: 019BF7637C123E85B7DECE58028A52BFF5E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft Manifest number: 0630 Signing time: Sun 25 Jan 2026 23:00:50 +0000 Manifest this update: Sun 25 Jan 2026 23:00:50 +0000 Manifest next update: Mon 26 Jan 2026 23:00:50 +0000 Files and hashes: 1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: dwNwl1QZ7iQC5RldG/7eJXCoTyDefnjBKizO65iXphc=) 2: TNzdy3BwDq7Ray6Z5SvDVSbtn6s.roa (hash: 8DAMy1BHBoqCmfTfrrToTqC0+T4MaMlEUb4i3KOyJik=) 3: qlmNQ-9zOW868sPccu5bMWQJyWY.roa (hash: Nfg2x28YmixXjEJKT+A2Qd2F+8mKojjMLL0tVjNR434=) 4: zAxyQBHOCPqeciZdGoRFMMg8ONA.roa (hash: Jz7C603l954pSk4Q5Rm3+v5AOQ/o1ceSCXmyNgeMw5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:7c:12:3e:85:b7:de:ce:58:02:8a:52:bf:f5:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e Validity Not Before: Jan 25 23:00:50 2026 GMT Not After : Jan 26 23:00:50 2026 GMT Subject: CN=30d4e1d39446d8adf4462e163a13b46aa74697e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:85:38:5e:9e:5f:e5:a2:9d:a0:56:47:b4:68: 39:c0:f0:49:14:a0:bd:a4:35:00:f3:f4:73:45:63: f9:a0:a3:49:1d:a2:cc:09:bf:28:60:41:49:1e:84: ec:de:bd:b5:5e:f8:a2:c1:cc:e2:d3:f9:a1:a2:a3: 51:62:12:53:f0:13:5e:8b:07:d8:38:70:cc:07:68: 17:70:8b:04:c1:0b:98:70:54:f1:9b:be:97:67:b9: 12:2f:ac:dd:8a:2f:d6:b6:f0:b2:10:fd:89:64:f0: 8c:e7:5b:0a:19:5a:be:d8:c4:2a:c5:9e:08:e7:70: 94:ab:f0:59:fd:cd:c4:25:65:e7:33:fe:5a:9a:4c: 31:d1:1e:67:69:63:65:0a:95:90:ad:38:59:28:16: 52:6c:41:21:e8:c1:56:6d:01:be:a3:9d:b4:fd:e7: ce:8d:38:1f:08:83:b5:b6:31:d7:46:d4:7b:4b:ff: bc:da:75:c0:88:68:f6:ca:86:3c:42:0f:9f:bc:94: b5:9d:98:79:51:c2:4a:34:a4:2f:22:73:d0:9d:cb: 68:ec:ab:86:79:ea:51:08:11:75:71:2a:38:a7:14: ca:e3:b9:3a:35:7a:77:0c:63:65:84:17:c7:c5:6f: 36:34:e7:b0:63:33:0f:19:5d:d1:4b:76:1f:79:02: 8f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D4:E1:D3:94:46:D8:AD:F4:46:2E:16:3A:13:B4:6A:A7:46:97:E1 X509v3 Authority Key Identifier: keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:32:26:b7:98:b8:8b:1e:e4:69:52:7b:42:52:63:89:ff:72: 37:c1:54:3a:36:54:6a:db:96:45:8b:53:fb:16:87:c5:8e:cb: fe:35:a4:ad:18:b5:fd:ca:df:fd:0f:62:cf:dc:c1:2c:ba:2c: 0b:c4:8a:31:7b:c0:79:01:f3:d4:b0:90:4c:47:92:e3:c0:15: d7:4d:43:ef:9e:b4:aa:7d:5e:d8:db:4f:25:a9:29:c5:c2:f1: 70:9a:29:c2:e9:7c:12:a1:72:44:58:81:1e:20:f5:e3:29:67: 4c:ce:6a:d2:f3:c4:a7:8e:aa:d1:7f:b5:25:3e:b7:6e:50:4b: da:4d:57:69:30:0a:05:ab:7d:fc:c2:0b:2e:81:31:36:d1:34: 60:ef:ad:f6:0c:c8:48:5a:2e:c7:1d:b3:a8:10:5e:32:f4:46: 13:b2:d5:15:c4:a4:cd:28:79:90:7e:22:53:df:ea:2f:c3:7a: d5:09:b0:fa:69:e4:9b:06:dc:37:5a:da:79:90:b2:97:64:65: 27:55:09:68:cb:fc:d8:5a:13:0b:c5:b4:81:b9:91:36:c8:17: 04:c8:cf:e4:af:0f:85:ba:8f:d3:3e:3e:82:72:56:17:58:08: ef:5f:ae:43:41:23:cd:0f:2b:6a:42:7b:9b:17:a6:6f:aa:26: c4:c0:73:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y3wSPoW33s5YAopSv/XpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmN2EzMmM3MzdhYzMwNzgwNzQ3NmE2OTdiMGJhZjZiOTAw NDU2OGUwHhcNMjYwMTI1MjMwMDUwWhcNMjYwMTI2MjMwMDUwWjAzMTEwLwYDVQQD EygzMGQ0ZTFkMzk0NDZkOGFkZjQ0NjJlMTYzYTEzYjQ2YWE3NDY5N2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YU4Xp5f5aKdoFZHtGg5wPBJFKC9 pDUA8/RzRWP5oKNJHaLMCb8oYEFJHoTs3r21Xviiwczi0/mhoqNRYhJT8BNeiwfY OHDMB2gXcIsEwQuYcFTxm76XZ7kSL6zdii/WtvCyEP2JZPCM51sKGVq+2MQqxZ4I 53CUq/BZ/c3EJWXnM/5amkwx0R5naWNlCpWQrThZKBZSbEEh6MFWbQG+o520/efO jTgfCIO1tjHXRtR7S/+82nXAiGj2yoY8Qg+fvJS1nZh5UcJKNKQvInPQncto7KuG eepRCBF1cSo4pxTK47k6NXp3DGNlhBfHxW82NOewYzMPGV3RS3YfeQKPIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDU4dOURtit9EYuFjoTtGqnRpfhMB8GA1UdIwQY MBaAFC96Msc3rDB4B0dqaXsLr2uQBFaOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yNDAwMGMtYjVkMi00OGRjLWI5NTkt ZTk1YTI0OTYxNTdlLzEvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8yNDAwMGMtYjVkMi00OGRjLWI5NTktZTk1YTI0OTYxNTdl LzEvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDImt5i4 ix7kaVJ7QlJjif9yN8FUOjZUatuWRYtT+xaHxY7L/jWkrRi1/crf/Q9iz9zBLLos C8SKMXvAeQHz1LCQTEeS48AV101D7560qn1e2NtPJakpxcLxcJopwul8EqFyRFiB HiD14ylnTM5q0vPEp46q0X+1JT63blBL2k1XaTAKBat9/MILLoExNtE0YO+t9gzI SFouxx2zqBBeMvRGE7LVFcSkzSh5kH4iU9/qL8N61Qmw+mnkmwbcN1raeZCyl2Rl J1UJaMv82FoTC8W0gbmRNsgXBMjP5K8PhbqP0z4+gnJWF1gI71+uQ0EjzQ8rakJ7 mxemb6omxMBzHg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:52:33 2026 by rpki-client