This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft File: l0kuzDe64rn4HaApOFgX1DPFBGc.mft (raw, json) Hash identifier: PfLCXhlQEdZaE2R41j9YaGVnZR+wM/tUCn/kppOKcgI= Subject key identifier: 05:31:3E:D1:71:CB:34:F2:1C:96:B5:19:CF:3B:D9:AF:2D:36:21:58 Authority key identifier: 97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67 Certificate issuer: /CN=97492ecc37bae2b9f81da029385817d433c50467 Certificate serial: 019BF83FA6A3E9DB324DACA64C03B152A528 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft Manifest number: 0CE5 Signing time: Mon 26 Jan 2026 03:01:19 +0000 Manifest this update: Mon 26 Jan 2026 03:01:19 +0000 Manifest next update: Tue 27 Jan 2026 03:01:19 +0000 Files and hashes: 1: Xw0tG7wkuJ53SwbNc0cLbPMmcp4.roa (hash: Q04fJI0pywOQvv0zS/yBZaHryv+3l7wVIcVq1qKuHZI=) 2: l0kuzDe64rn4HaApOFgX1DPFBGc.crl (hash: 0t2LAg9q+ncNUF1dkJb5jXUMMHfENdw2hxA9JZAvU7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:a6:a3:e9:db:32:4d:ac:a6:4c:03:b1:52:a5:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97492ecc37bae2b9f81da029385817d433c50467 Validity Not Before: Jan 26 03:01:19 2026 GMT Not After : Jan 27 03:01:19 2026 GMT Subject: CN=05313ed171cb34f21c96b519cf3bd9af2d362158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:09:16:3f:d1:52:69:d8:c7:6e:29:05:67:a7: 1b:9a:dd:47:28:3e:0d:60:4b:a4:e9:db:63:32:0e: 2d:9e:96:0c:56:50:46:0c:b1:76:ec:ad:18:5a:11: 37:e5:b1:63:00:c6:52:8d:7c:e5:b6:70:ef:c9:4e: 9c:01:e0:fc:e9:f9:a5:3a:7e:9e:d9:b6:82:5f:44: 6a:0e:cf:12:c5:9f:5e:3e:8f:2b:25:8e:1f:04:e3: d4:b7:03:6f:00:5c:9d:d2:e7:a1:97:1f:d1:08:16: f3:1a:76:a1:b6:56:bb:6a:90:6a:38:86:c3:e2:53: 78:97:1c:07:f6:42:a3:85:b8:7a:bf:fe:b1:90:51: f3:18:3c:98:7e:f3:22:22:c2:64:f2:d9:e4:d3:26: bc:a9:c9:92:3d:55:3c:85:49:04:03:4c:f5:fe:5d: c2:7d:9f:91:6a:d3:b1:6f:2d:f6:a6:9d:fa:67:4f: 76:cb:38:35:8b:b6:fe:47:eb:aa:31:16:48:40:81: 56:55:d7:49:07:99:a5:35:62:5f:fc:a3:e3:60:3a: d1:27:95:30:62:4d:f8:a9:83:4f:56:0e:34:f1:9b: 8c:00:7e:0e:f1:5b:2a:0d:06:66:3f:26:17:a0:5a: 62:12:10:02:45:0a:6d:23:5a:53:43:ac:e5:e5:5b: c3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:31:3E:D1:71:CB:34:F2:1C:96:B5:19:CF:3B:D9:AF:2D:36:21:58 X509v3 Authority Key Identifier: keyid:97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:f9:64:3c:3d:05:79:d7:33:2d:93:15:77:d3:76:01:01:3f: 78:81:35:34:3d:bf:21:b0:5a:2c:0c:9c:dc:cd:fa:c0:bf:12: 6c:9c:50:54:26:d3:a5:70:64:f4:82:04:86:8e:96:9e:48:75: c3:77:42:0d:fe:1e:b6:d4:50:fb:3b:e2:7a:82:75:f7:9f:0e: 25:74:94:73:f8:33:29:9a:96:56:d5:d8:20:45:7e:38:64:2e: cf:b0:8c:34:9a:45:ed:12:c8:58:84:a6:97:2a:ee:f5:ca:0b: 7f:23:d3:9a:62:96:83:fe:ae:d2:55:b5:f9:62:f2:4e:15:b7: 17:b8:a0:df:9f:f4:e4:43:68:79:b6:f4:82:16:96:12:58:fd: 19:92:15:5d:4b:32:24:b6:a8:6b:d2:b6:2a:e6:f9:74:35:14: 72:d2:fc:ef:0e:d1:85:d1:94:d5:ea:cf:dd:55:6a:ec:70:d3: e0:39:d1:14:1c:35:2e:01:85:98:d3:2d:fd:0b:a9:8f:6c:d6: 56:27:22:43:ab:70:04:92:9a:d1:22:ed:00:f3:a5:17:0e:d2: a9:f6:83:0b:fc:ba:84:49:b9:08:bb:38:f4:e1:98:69:d2:8a: 0d:30:b4:71:37:53:d2:a6:54:58:06:63:a1:f9:15:01:e3:ad: fc:19:f7:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P6aj6dsyTaymTAOxUqUoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NDkyZWNjMzdiYWUyYjlmODFkYTAyOTM4NTgxN2Q0MzNj NTA0NjcwHhcNMjYwMTI2MDMwMTE5WhcNMjYwMTI3MDMwMTE5WjAzMTEwLwYDVQQD EygwNTMxM2VkMTcxY2IzNGYyMWM5NmI1MTljZjNiZDlhZjJkMzYyMTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAkWP9FSadjHbikFZ6cbmt1HKD4N YEuk6dtjMg4tnpYMVlBGDLF27K0YWhE35bFjAMZSjXzltnDvyU6cAeD86fmlOn6e 2baCX0RqDs8SxZ9ePo8rJY4fBOPUtwNvAFyd0uehlx/RCBbzGnahtla7apBqOIbD 4lN4lxwH9kKjhbh6v/6xkFHzGDyYfvMiIsJk8tnk0ya8qcmSPVU8hUkEA0z1/l3C fZ+RatOxby32pp36Z092yzg1i7b+R+uqMRZIQIFWVddJB5mlNWJf/KPjYDrRJ5Uw Yk34qYNPVg408ZuMAH4O8VsqDQZmPyYXoFpiEhACRQptI1pTQ6zl5VvD5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUxPtFxyzTyHJa1Gc872a8tNiFYMB8GA1UdIwQY MBaAFJdJLsw3uuK5+B2gKThYF9QzxQRnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDBrdXpEZTY0cm40SGFBcE9GZ1gxRFBGQkdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82NzA4YWEtZjZkZi00YzRkLTkyYmQt ZTlmMWM1OTFjZWRjLzEvbDBrdXpEZTY0cm40SGFBcE9GZ1gxRFBGQkdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS82NzA4YWEtZjZkZi00YzRkLTkyYmQtZTlmMWM1OTFjZWRj LzEvbDBrdXpEZTY0cm40SGFBcE9GZ1gxRFBGQkdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvlkPD0F edczLZMVd9N2AQE/eIE1ND2/IbBaLAyc3M36wL8SbJxQVCbTpXBk9IIEho6Wnkh1 w3dCDf4ettRQ+zvieoJ1958OJXSUc/gzKZqWVtXYIEV+OGQuz7CMNJpF7RLIWISm lyru9coLfyPTmmKWg/6u0lW1+WLyThW3F7ig35/05ENoebb0ghaWElj9GZIVXUsy JLaoa9K2Kub5dDUUctL87w7RhdGU1erP3VVq7HDT4DnRFBw1LgGFmNMt/Qupj2zW ViciQ6twBJKa0SLtAPOlFw7SqfaDC/y6hEm5CLs49OGYadKKDTC0cTdT0qZUWAZj ofkVAeOt/Bn3UA== -----END CERTIFICATE-----Generated at Mon Jan 26 11:46:08 2026 by rpki-client