This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft File: p_lKuTUFS4bctdatutLf21ZLUkg.mft (raw, json) Hash identifier: 2nE3XL5xyTv11lKYOOGVUXOmqnDL/lXKcgxIUis21Uo= Subject key identifier: 65:6A:91:77:33:AF:47:FB:BD:29:43:9A:1E:8C:63:F5:40:D9:FE:DD Authority key identifier: A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48 Certificate issuer: /CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248 Certificate serial: 019BF79A6B47DCCAD20EB7E42D51A9AE8FA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 00:00:50 +0000 Manifest this update: Mon 26 Jan 2026 00:00:50 +0000 Manifest next update: Tue 27 Jan 2026 00:00:50 +0000 Files and hashes: 1: 1-qbRbX71ZtqzATiAIr_2cHLpT2E.roa (hash: 80UD49+4eAKYXdHmbKKPrWk/eFWzqmC9nsf2Sb2JWAc=) 2: OHNfoBMAU3xGnwf5tzn2G_YDSFI.roa (hash: T2noCjQvATNrV0LGWxL0yXlHH9lINoswZ6xk9SUmTdM=) 3: _Cx6x6OYI0AEDhlscd8HyWPxJFQ.roa (hash: Dl+MVhNB+0e5OFzfhLng21/Lw1g8tjBPug9HjFBm/XQ=) 4: p_lKuTUFS4bctdatutLf21ZLUkg.crl (hash: fxdpRaMbzo8mJSL/DKBvX4u3LzBBjWhJu/NNexUTgKM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:6b:47:dc:ca:d2:0e:b7:e4:2d:51:a9:ae:8f:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248 Validity Not Before: Jan 26 00:00:50 2026 GMT Not After : Jan 27 00:00:50 2026 GMT Subject: CN=656a917733af47fbbd29439a1e8c63f540d9fedd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f6:3d:a2:b0:17:06:21:14:ae:8f:ef:02:52: 48:cc:11:c3:b5:c4:26:33:83:02:e5:59:e8:e8:23: bc:0c:13:c2:40:6b:2d:77:5c:34:a2:a3:94:28:c8: 30:e1:82:31:64:0f:01:77:67:db:64:7d:df:75:6f: a1:a8:37:bd:a0:c9:c7:ac:f3:c9:88:8c:34:ba:ea: db:c6:69:af:03:81:bd:a0:76:cc:44:74:a7:a2:f3: 09:06:b9:e3:41:42:0e:95:dd:d5:11:c4:84:a6:7e: 76:c1:0c:ae:1d:e7:0a:4f:15:27:c8:f6:b6:f7:d4: 44:6b:48:88:02:41:33:ac:db:6c:3d:fb:39:af:06: 5d:7b:94:6c:eb:27:01:9f:bf:b7:48:97:ce:c3:76: df:b5:db:82:47:56:d7:bc:7e:40:31:a2:17:2d:76: 5e:c7:34:47:ac:93:70:ce:7e:64:8b:46:ef:3f:8c: 95:a0:c1:a0:69:11:cf:6b:91:9a:6b:60:3a:86:4b: e5:af:83:ef:fa:92:2a:7c:2f:42:d4:0f:ba:7f:a0: 5f:43:3f:ae:b3:24:ce:26:01:30:87:2b:20:09:f0: 5d:8c:a6:69:06:b7:6e:6a:7a:ba:50:0a:41:6b:b2: 58:e4:f8:68:39:68:82:d6:73:19:b6:de:07:39:7f: 6c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6A:91:77:33:AF:47:FB:BD:29:43:9A:1E:8C:63:F5:40:D9:FE:DD X509v3 Authority Key Identifier: keyid:A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ea:f5:61:d2:c4:f4:bf:e0:03:49:be:ea:08:0a:63:25:63: 19:85:36:c4:f5:11:0d:f3:32:63:c8:07:2b:3c:4e:04:b3:64: 6c:37:23:b4:27:6b:cb:3d:cc:36:19:85:35:e6:5e:e9:c4:7d: ee:f0:a5:fc:5a:a7:0c:5a:4b:b2:ca:e6:73:23:f4:68:62:dd: e6:24:bd:9b:f3:76:e3:15:ee:6a:9c:5a:88:e1:09:e1:54:74: 72:27:b6:b8:44:b2:ed:f7:c2:43:c6:1d:c4:09:0b:0f:d5:e2: 7a:ca:9f:21:fa:62:da:f7:40:2c:da:27:ce:47:a5:a0:3e:ec: 70:07:58:64:a1:0d:52:fe:bb:49:0d:3e:1e:be:5b:cf:36:9a: 96:57:36:33:21:e6:00:ca:7b:0b:41:41:fe:a6:41:fa:ae:8e: f1:f1:c1:d1:cd:f5:35:6b:81:44:c0:30:7f:64:af:b2:01:99: bd:c0:45:7a:66:57:4a:02:bf:34:1d:d7:ac:26:ac:45:9c:ab: a2:ec:d1:fb:d8:b8:33:05:4b:eb:80:f0:23:f0:d5:bb:5e:d1: 7f:a9:3d:ff:d2:c3:0a:73:ec:f0:bf:2d:6f:5c:e0:06:a9:04: 8f:ef:97:ba:a5:ba:c3:63:f0:3a:bb:f8:99:15:27:c7:87:27: 06:fc:4f:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mmtH3MrSDrfkLVGpro+mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3Zjk0YWI5MzUwNTRiODZkY2I1ZDZhZGJhZDJkZmRiNTY0 YjUyNDgwHhcNMjYwMTI2MDAwMDUwWhcNMjYwMTI3MDAwMDUwWjAzMTEwLwYDVQQD Eyg2NTZhOTE3NzMzYWY0N2ZiYmQyOTQzOWExZThjNjNmNTQwZDlmZWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fY9orAXBiEUro/vAlJIzBHDtcQm M4MC5Vno6CO8DBPCQGstd1w0oqOUKMgw4YIxZA8Bd2fbZH3fdW+hqDe9oMnHrPPJ iIw0uurbxmmvA4G9oHbMRHSnovMJBrnjQUIOld3VEcSEpn52wQyuHecKTxUnyPa2 99REa0iIAkEzrNtsPfs5rwZde5Rs6ycBn7+3SJfOw3bftduCR1bXvH5AMaIXLXZe xzRHrJNwzn5ki0bvP4yVoMGgaRHPa5Gaa2A6hkvlr4Pv+pIqfC9C1A+6f6BfQz+u syTOJgEwhysgCfBdjKZpBrduanq6UApBa7JY5PhoOWiC1nMZtt4HOX9sjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVqkXczr0f7vSlDmh6MY/VA2f7dMB8GA1UdIwQY MBaAFKf5Srk1BUuG3LXWrbrS39tWS1JIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy83ZTM4YjItYmVjMS00NDY0LWEwY2Et N2QyNThiNjIwMTY5LzEvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy83ZTM4YjItYmVjMS00NDY0LWEwY2EtN2QyNThiNjIwMTY5 LzEvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXur1YdLE 9L/gA0m+6ggKYyVjGYU2xPURDfMyY8gHKzxOBLNkbDcjtCdryz3MNhmFNeZe6cR9 7vCl/FqnDFpLssrmcyP0aGLd5iS9m/N24xXuapxaiOEJ4VR0cie2uESy7ffCQ8Yd xAkLD9XiesqfIfpi2vdALNonzkeloD7scAdYZKENUv67SQ0+Hr5bzzaallc2MyHm AMp7C0FB/qZB+q6O8fHB0c31NWuBRMAwf2SvsgGZvcBFemZXSgK/NB3XrCasRZyr ouzR+9i4MwVL64DwI/DVu17Rf6k9/9LDCnPs8L8tb1zgBqkEj++XuqW6w2PwOrv4 mRUnx4cnBvxPFw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:36 2026 by rpki-client