This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft File: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft (raw, json) Hash identifier: yJH7hoUmz/dNbtIgu4Ez/+ieGvt38P6Qq+65pVpcnPA= Subject key identifier: 3A:A7:AD:7D:2A:47:AF:C9:F4:4B:05:63:1E:35:4F:17:23:47:F4:72 Authority key identifier: 95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C Certificate issuer: /CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c Certificate serial: 019BF72CC07E04E9E728788F9C67FC8BB0F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft Manifest number: 06E0 Signing time: Sun 25 Jan 2026 22:01:03 +0000 Manifest this update: Sun 25 Jan 2026 22:01:03 +0000 Manifest next update: Mon 26 Jan 2026 22:01:03 +0000 Files and hashes: 1: XCAs1bdvDVK0mf6fnpHwHSrCy_s.roa (hash: vPe5QDgsOEWj+wwao+43Qg6PstZ+Q+ujB68nk8LOfvM=) 2: lMbrVRARiCtxbw4rV7uiKYJABbQ.roa (hash: ArJG5NTDy7CYItxIRIVnQaO1q2a53EHq1s7L+RB3qkw=) 3: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl (hash: prKWpEs34+EdZX2EOsRJY4hxCYPuJTuLArf9e3wkj9c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:c0:7e:04:e9:e7:28:78:8f:9c:67:fc:8b:b0:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c Validity Not Before: Jan 25 22:01:03 2026 GMT Not After : Jan 26 22:01:03 2026 GMT Subject: CN=3aa7ad7d2a47afc9f44b05631e354f172347f472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a4:08:ef:54:a1:22:40:19:35:8d:72:d3:f7: 55:49:1b:29:86:3c:0c:21:08:85:45:ab:aa:ef:d6: fd:88:0d:7f:c5:31:da:10:eb:07:26:21:cd:a0:d1: 2f:3a:20:47:c6:32:4b:c3:a3:1a:ae:5d:a2:12:c1: 18:af:7d:45:c5:46:84:57:41:8d:fb:c1:70:39:a9: 56:3f:33:6f:03:ab:85:68:53:25:0b:1b:6c:8e:db: fe:bd:49:2f:4e:ab:d4:91:0e:5d:d0:60:29:b6:9a: 98:3f:f2:20:d5:2f:6f:50:04:8e:45:5e:29:0f:c8: 70:c2:4f:c1:0d:13:e8:f1:88:41:8f:58:d3:ce:69: 14:c7:b3:21:cb:05:82:63:0b:58:69:3a:b4:95:fb: d3:e7:b2:de:f4:ac:76:71:86:dc:20:5c:24:da:64: 71:bf:8a:ee:57:b1:22:f2:c4:b1:a7:b4:96:da:66: 33:72:f7:08:fb:77:eb:d2:1d:b5:da:51:5d:fa:65: cc:9c:1e:99:33:6e:b4:b1:59:b3:cf:05:0a:75:3c: 50:8c:94:c9:13:85:2f:f6:12:d1:99:cc:26:4d:a2: 74:7d:33:c5:a5:5a:8a:a7:f7:d2:56:10:20:17:4c: a7:f3:9e:6a:5a:72:1d:f6:df:8c:f8:7b:46:fd:e0: 87:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A7:AD:7D:2A:47:AF:C9:F4:4B:05:63:1E:35:4F:17:23:47:F4:72 X509v3 Authority Key Identifier: keyid:95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:33:b3:24:22:fe:c8:77:99:51:44:a8:25:83:25:3f:3b:c8: 6d:9e:59:55:20:f6:6c:4c:c5:68:c1:d1:ae:51:2b:53:9c:8b: 5e:83:6b:0f:06:3b:ac:93:62:6b:42:9b:d0:32:bf:c3:05:15: 85:2f:f4:ed:9c:61:ce:18:20:cf:4d:28:58:1a:10:d8:ae:66: 56:42:f7:87:1a:99:04:8f:7e:12:2a:8d:01:3c:88:0a:93:bf: 79:82:fe:eb:fc:9b:30:c0:8a:64:1f:5b:8b:3d:38:09:d6:96: 92:c1:7e:42:5e:1c:37:22:31:21:5e:77:4b:95:16:08:b9:e2: 48:9f:49:07:b6:3d:7d:47:94:18:c4:07:3e:46:c9:75:71:c6: 11:c7:c4:d8:a0:3f:1d:79:e8:12:9e:d1:8e:fc:e3:88:78:00: 42:1d:f1:dc:81:3a:1a:4e:36:72:b3:a0:1a:39:97:a0:ff:80: b7:ef:d0:f8:9a:0e:19:3e:1b:b7:60:48:17:68:8f:a0:38:8b: 93:dc:6d:8e:d6:d4:8f:e9:d2:5a:ed:b3:c0:aa:08:69:21:af: e3:ef:7e:8f:ce:78:93:7d:ef:61:28:dc:01:3b:bb:b8:84:7b: 26:75:5f:e3:d4:ee:26:83:51:4e:ac:0f:a4:2c:c6:0e:82:97: a5:f1:35:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LMB+BOnnKHiPnGf8i7D4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NjhjNjAwNWIyODQwYWI3YmY4YTNhZDcyYTE3NTFkMGRi MjliOWMwHhcNMjYwMTI1MjIwMTAzWhcNMjYwMTI2MjIwMTAzWjAzMTEwLwYDVQQD EygzYWE3YWQ3ZDJhNDdhZmM5ZjQ0YjA1NjMxZTM1NGYxNzIzNDdmNDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqQI71ShIkAZNY1y0/dVSRsphjwM IQiFRauq79b9iA1/xTHaEOsHJiHNoNEvOiBHxjJLw6Marl2iEsEYr31FxUaEV0GN +8FwOalWPzNvA6uFaFMlCxtsjtv+vUkvTqvUkQ5d0GAptpqYP/Ig1S9vUASORV4p D8hwwk/BDRPo8YhBj1jTzmkUx7MhywWCYwtYaTq0lfvT57Le9Kx2cYbcIFwk2mRx v4ruV7Ei8sSxp7SW2mYzcvcI+3fr0h212lFd+mXMnB6ZM260sVmzzwUKdTxQjJTJ E4Uv9hLRmcwmTaJ0fTPFpVqKp/fSVhAgF0yn855qWnId9t+M+HtG/eCHWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqnrX0qR6/J9EsFYx41TxcjR/RyMB8GA1UdIwQY MBaAFJVoxgBbKECre/ijrXKhdR0NspucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjk4MGEtMWViNi00ODA4LThhZmEt M2E1ZTE4ZDAwZGRjLzEvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yYjk4MGEtMWViNi00ODA4LThhZmEtM2E1ZTE4ZDAwZGRj LzEvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTOzJCL+ yHeZUUSoJYMlPzvIbZ5ZVSD2bEzFaMHRrlErU5yLXoNrDwY7rJNia0Kb0DK/wwUV hS/07Zxhzhggz00oWBoQ2K5mVkL3hxqZBI9+EiqNATyICpO/eYL+6/ybMMCKZB9b iz04CdaWksF+Ql4cNyIxIV53S5UWCLniSJ9JB7Y9fUeUGMQHPkbJdXHGEcfE2KA/ HXnoEp7RjvzjiHgAQh3x3IE6Gk42crOgGjmXoP+At+/Q+JoOGT4bt2BIF2iPoDiL k9xtjtbUj+nSWu2zwKoIaSGv4+9+j854k33vYSjcATu7uIR7JnVf49TuJoNRTqwP pCzGDoKXpfE1mw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:47 2026 by rpki-client