This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft File: L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json) Hash identifier: HMeTzYPXSzop5p5svvUKvA1S2YwV04dBREMgnv97IRU= Subject key identifier: E3:73:04:93:7A:88:93:FB:3B:F5:8A:0F:1A:D3:DE:41:00:D1:24:66 Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e Certificate serial: 019BF5757B6936B42D7682E05D766F5000B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft Manifest number: 062F Signing time: Sun 25 Jan 2026 14:01:15 +0000 Manifest this update: Sun 25 Jan 2026 14:01:15 +0000 Manifest next update: Mon 26 Jan 2026 14:01:15 +0000 Files and hashes: 1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: Myo/otDyK+sxTvx+xo97ZcG+wKgP5lWSnh/0kl8Xj+8=) 2: TNzdy3BwDq7Ray6Z5SvDVSbtn6s.roa (hash: 8DAMy1BHBoqCmfTfrrToTqC0+T4MaMlEUb4i3KOyJik=) 3: qlmNQ-9zOW868sPccu5bMWQJyWY.roa (hash: Nfg2x28YmixXjEJKT+A2Qd2F+8mKojjMLL0tVjNR434=) 4: zAxyQBHOCPqeciZdGoRFMMg8ONA.roa (hash: Jz7C603l954pSk4Q5Rm3+v5AOQ/o1ceSCXmyNgeMw5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:7b:69:36:b4:2d:76:82:e0:5d:76:6f:50:00:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e Validity Not Before: Jan 25 14:01:15 2026 GMT Not After : Jan 26 14:01:15 2026 GMT Subject: CN=e37304937a8893fb3bf58a0f1ad3de4100d12466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:dc:cd:3b:a2:70:5c:5e:d1:59:a5:8f:d8:79: 95:55:ec:94:51:98:d8:8c:21:af:37:e3:ca:ef:3c: 98:87:cb:b9:40:cf:6c:db:4c:bd:8d:99:17:2a:3a: e2:89:25:3a:ff:24:28:a7:66:3d:c3:53:44:eb:b8: 8d:d4:4f:0f:fa:fa:86:8a:26:6a:ac:a7:4c:64:d1: 9a:cf:02:7c:2d:2d:71:30:39:dc:9c:d2:ac:5b:f6: 08:ad:84:bc:16:0e:a7:f6:35:0c:27:56:68:7f:a8: e8:79:cd:04:d7:a2:36:2f:d8:30:e6:88:dc:c6:3e: 8b:43:06:98:f0:90:d2:e1:03:18:04:91:da:f6:51: 04:e0:9a:60:80:34:94:d9:57:dd:b2:2e:75:8c:cc: 66:6c:99:00:0f:d8:4b:10:5b:5d:2d:71:33:71:86: 23:bf:ca:a0:10:73:dd:2a:0d:f2:d9:69:8a:3c:06: 23:78:e9:ca:cd:06:9a:5d:8a:7d:3f:cb:30:62:13: 09:4c:0a:e1:6e:2b:28:e6:21:6c:ed:06:5c:a0:ae: e4:5e:9a:fe:95:d8:dc:65:4a:ef:b3:c8:cc:8b:8c: 9c:24:57:38:86:25:95:15:4b:80:9e:4c:74:81:e5: f0:9c:a0:6e:1f:dc:58:ff:db:fa:9f:be:e1:fe:9c: 40:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:73:04:93:7A:88:93:FB:3B:F5:8A:0F:1A:D3:DE:41:00:D1:24:66 X509v3 Authority Key Identifier: keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:e5:6b:65:3f:ee:ad:31:17:1d:93:f2:42:3f:03:6f:82:18: 0e:f2:01:69:1c:a0:0c:ef:eb:b6:59:ea:a5:58:26:6d:7a:04: 5f:d9:43:f2:f1:1d:63:7f:4a:0c:b6:b0:d6:28:8a:32:02:d8: 19:23:cc:d8:ed:53:5c:67:eb:ff:7f:e8:8f:a4:7a:34:37:25: 79:86:a9:0a:57:a0:f6:01:a7:e1:13:cb:fa:c1:65:06:67:dc: 16:f4:12:2c:93:2d:b5:1d:2b:3a:81:cb:22:03:27:ea:8e:4b: e6:a3:84:f3:df:7f:50:e2:a2:ca:c7:a8:c3:69:aa:38:31:66: 65:ba:72:66:31:83:98:4a:11:db:dd:72:68:ec:1e:cf:83:7d: 62:e9:54:d6:83:b5:0a:8d:64:50:8e:31:b1:1f:4d:97:ee:75: 53:c5:51:a8:74:72:ba:25:73:60:32:4f:f7:a9:d3:5b:76:55: 00:91:c7:07:d5:d1:1c:bd:55:de:77:e0:bf:e5:ce:b5:9a:08: 9b:4a:ec:0f:4a:3b:0c:91:47:ba:5b:79:59:ce:d5:19:02:fc: 37:59:78:e7:3c:9f:57:d6:13:fe:84:a7:cd:8f:cf:bc:56:b7: ad:e9:7d:1d:71:29:1f:ac:4e:de:a6:c3:88:15:ae:55:9e:28: 17:3f:f2:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dXtpNrQtdoLgXXZvUAC1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmN2EzMmM3MzdhYzMwNzgwNzQ3NmE2OTdiMGJhZjZiOTAw NDU2OGUwHhcNMjYwMTI1MTQwMTE1WhcNMjYwMTI2MTQwMTE1WjAzMTEwLwYDVQQD EyhlMzczMDQ5MzdhODg5M2ZiM2JmNThhMGYxYWQzZGU0MTAwZDEyNDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNzNO6JwXF7RWaWP2HmVVeyUUZjY jCGvN+PK7zyYh8u5QM9s20y9jZkXKjriiSU6/yQop2Y9w1NE67iN1E8P+vqGiiZq rKdMZNGazwJ8LS1xMDncnNKsW/YIrYS8Fg6n9jUMJ1Zof6joec0E16I2L9gw5ojc xj6LQwaY8JDS4QMYBJHa9lEE4JpggDSU2Vfdsi51jMxmbJkAD9hLEFtdLXEzcYYj v8qgEHPdKg3y2WmKPAYjeOnKzQaaXYp9P8swYhMJTArhbiso5iFs7QZcoK7kXpr+ ldjcZUrvs8jMi4ycJFc4hiWVFUuAnkx0geXwnKBuH9xY/9v6n77h/pxAJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONzBJN6iJP7O/WKDxrT3kEA0SRmMB8GA1UdIwQY MBaAFC96Msc3rDB4B0dqaXsLr2uQBFaOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yNDAwMGMtYjVkMi00OGRjLWI5NTkt ZTk1YTI0OTYxNTdlLzEvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8yNDAwMGMtYjVkMi00OGRjLWI5NTktZTk1YTI0OTYxNTdl LzEvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUeVrZT/u rTEXHZPyQj8Db4IYDvIBaRygDO/rtlnqpVgmbXoEX9lD8vEdY39KDLaw1iiKMgLY GSPM2O1TXGfr/3/oj6R6NDcleYapCleg9gGn4RPL+sFlBmfcFvQSLJMttR0rOoHL IgMn6o5L5qOE899/UOKiyseow2mqODFmZbpyZjGDmEoR291yaOwez4N9YulU1oO1 Co1kUI4xsR9Nl+51U8VRqHRyuiVzYDJP96nTW3ZVAJHHB9XRHL1V3nfgv+XOtZoI m0rsD0o7DJFHult5Wc7VGQL8N1l45zyfV9YT/oSnzY/PvFa3rel9HXEpH6xO3qbD iBWuVZ4oFz/yNQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:19:33 2026 by rpki-client