This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft File: 0LhJubyQQqFVczGTfkrXFRivYc8.mft (raw, json) Hash identifier: uSkDYJP2wfsbWKTNUMUmP43Bv4jLHpiCdv+KLUvfMn0= Subject key identifier: 57:9C:D4:0D:EF:91:18:54:D2:74:0D:E5:89:29:EE:D8:47:4E:FE:85 Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf Certificate serial: 019BF65110898CB4C8A260236430621B4C20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft Manifest number: 17F3 Signing time: Sun 25 Jan 2026 18:01:06 +0000 Manifest this update: Sun 25 Jan 2026 18:01:06 +0000 Manifest next update: Mon 26 Jan 2026 18:01:06 +0000 Files and hashes: 1: 0LhJubyQQqFVczGTfkrXFRivYc8.crl (hash: /mOMlCsEdwdzp98B1wgYtufj9fDdGmmXLY+TW97pQss=) 2: AHwZLzMSIzjdiILFlHimNy1KVH0.roa (hash: y5lR675u3Up+2TOOlskI792uCxkPkEvihlTIWi4xd1I=) 3: ECoz_Sqbad8xhzrXYOPW_x5hkWs.roa (hash: fhkp1qGbHfnV+x8UJdhpoApY2XHyqofSBo+ygly5ePc=) 4: bCD_tq_1R_WkwnNptbSONR7egi0.roa (hash: kbtkGeS9624Gz1BHggPnBisTuD3laygElyKlMRfT7I8=) 5: g97yKKTw0qoO3z8jCDHeZy3h_sA.roa (hash: BG+WNmPh44Y/W0xYtmXHCAEYFDjw7vRLIThzcdS18hY=) 6: jil2Xf5CXEY6D5-mLBwdepFrP7k.roa (hash: HuI1ETEHE5rq3Q55IY7fwIV6AkP3lT5Eh7F+L+wNoCM=) 7: kxfj2nv76RgasA6SFw9h3YIvRV8.roa (hash: t6hEcQl764cybmk/fsQro0yyYfk+r+X51eI3dq/XPII=) 8: y_I-Rx6c6ZO5cg0hshn5JRXp8OQ.roa (hash: /H74JIaGZ/O6ji1TsDEo7znyzAE5IDXwnYg53gQ9tCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:10:89:8c:b4:c8:a2:60:23:64:30:62:1b:4c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf Validity Not Before: Jan 25 18:01:06 2026 GMT Not After : Jan 26 18:01:06 2026 GMT Subject: CN=579cd40def911854d2740de58929eed8474efe85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:30:60:ac:67:a3:c3:e7:ea:57:40:ab:0b:53: 6a:72:45:53:ec:07:8e:79:04:d8:fd:93:32:e4:39: fd:2d:e4:75:96:f8:d8:09:11:34:44:a8:ef:2f:ae: b1:27:ff:18:39:7e:6a:bd:cb:06:35:fb:21:90:ee: 3b:3c:d0:97:b0:65:63:2f:0d:7b:3f:93:b9:c9:41: 95:3f:bf:17:d9:30:f2:4f:90:22:b1:fc:e9:39:c0: 06:0e:a3:dd:97:aa:bc:35:05:2f:f1:0b:d5:b1:8f: e0:b4:83:cc:13:e0:7b:ed:7e:5b:71:97:f9:33:6e: c7:7e:f7:84:1a:9e:00:46:8a:fc:dc:7c:b9:2b:3e: 87:a7:e4:c8:70:ee:a7:89:ed:a0:0f:23:9e:22:a8: 1f:c1:ac:9c:cb:15:e3:49:70:3c:81:8c:57:98:e7: b0:cc:8d:77:a9:3b:2d:1c:34:32:9f:44:c1:28:0c: a2:9c:b2:f4:b3:ad:b7:86:23:34:95:c9:c2:a6:dd: 5a:ea:39:99:a8:ad:eb:f4:85:86:03:1d:23:c3:f3: 3f:9d:cb:dd:28:43:ca:17:65:72:a2:e9:18:45:2b: c0:dc:f6:8e:06:f6:50:dc:72:73:e9:d0:25:c7:fa: 2d:0c:d0:9c:aa:b0:9f:e3:08:23:93:98:43:3f:12: cc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:9C:D4:0D:EF:91:18:54:D2:74:0D:E5:89:29:EE:D8:47:4E:FE:85 X509v3 Authority Key Identifier: keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:26:8a:2b:aa:a7:7c:32:21:51:77:ea:22:69:03:47:11:84: 55:7a:ed:cc:27:df:5e:4a:02:03:a2:c6:33:ed:e1:ca:70:5b: 1a:41:7a:80:05:77:3b:8c:b7:e9:d8:19:aa:1a:cf:62:14:c6: a7:e1:ce:b5:98:87:12:cc:2e:69:a3:97:d4:8b:0f:21:18:e1: 15:72:dc:63:ca:4b:20:f3:fa:99:1a:bd:55:e4:8d:a5:4b:e7: 90:72:ff:32:70:99:a4:36:ff:0f:46:10:63:24:96:5f:29:78: ff:43:fb:9a:67:33:ce:d9:98:7d:f7:1c:cd:14:cc:36:ea:57: 57:7a:64:c6:6c:80:13:76:10:cb:01:21:5c:a3:34:75:a8:44: 47:44:13:c7:f0:37:46:a9:f7:49:05:74:84:62:91:a6:35:d7: a4:34:70:94:9d:c9:ce:3a:1f:70:f3:79:79:5e:80:ca:d6:1f: 1a:c0:5d:46:2c:ee:0d:f6:46:d7:05:2b:79:21:43:f4:2e:14: 2d:94:cb:57:52:80:2a:f1:3b:52:5d:66:e0:0d:63:dd:c7:50: 9c:db:fa:50:89:f7:4f:7b:a4:44:c6:a5:e2:0f:00:c9:38:b3: bd:ea:d2:67:68:6e:c2:51:4a:f7:cb:e5:c9:85:12:2c:47:48: 76:f1:7a:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2URCJjLTIomAjZDBiG0wgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYjg0OWI5YmM5MDQyYTE1NTczMzE5MzdlNGFkNzE1MThh ZjYxY2YwHhcNMjYwMTI1MTgwMTA2WhcNMjYwMTI2MTgwMTA2WjAzMTEwLwYDVQQD Eyg1NzljZDQwZGVmOTExODU0ZDI3NDBkZTU4OTI5ZWVkODQ3NGVmZTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zBgrGejw+fqV0CrC1NqckVT7AeO eQTY/ZMy5Dn9LeR1lvjYCRE0RKjvL66xJ/8YOX5qvcsGNfshkO47PNCXsGVjLw17 P5O5yUGVP78X2TDyT5AisfzpOcAGDqPdl6q8NQUv8QvVsY/gtIPME+B77X5bcZf5 M27HfveEGp4ARor83Hy5Kz6Hp+TIcO6nie2gDyOeIqgfwaycyxXjSXA8gYxXmOew zI13qTstHDQyn0TBKAyinLL0s623hiM0lcnCpt1a6jmZqK3r9IWGAx0jw/M/ncvd KEPKF2VyoukYRSvA3PaOBvZQ3HJz6dAlx/otDNCcqrCf4wgjk5hDPxLMBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFec1A3vkRhU0nQN5Ykp7thHTv6FMB8GA1UdIwQY MBaAFNC4Sbm8kEKhVXMxk35K1xUYr2HPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMExoSnVieVFRcUZWY3pHVGZrclhGUml2WWM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9hM2ZiNjctZDUxNC00YWVlLWFkYjkt NzJiYWQ5ZDczYzgwLzEvMExoSnVieVFRcUZWY3pHVGZrclhGUml2WWM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9hM2ZiNjctZDUxNC00YWVlLWFkYjktNzJiYWQ5ZDczYzgw LzEvMExoSnVieVFRcUZWY3pHVGZrclhGUml2WWM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEiaKK6qn fDIhUXfqImkDRxGEVXrtzCffXkoCA6LGM+3hynBbGkF6gAV3O4y36dgZqhrPYhTG p+HOtZiHEswuaaOX1IsPIRjhFXLcY8pLIPP6mRq9VeSNpUvnkHL/MnCZpDb/D0YQ YySWXyl4/0P7mmczztmYffcczRTMNupXV3pkxmyAE3YQywEhXKM0dahER0QTx/A3 Rqn3SQV0hGKRpjXXpDRwlJ3JzjofcPN5eV6AytYfGsBdRizuDfZG1wUreSFD9C4U LZTLV1KAKvE7Ul1m4A1j3cdQnNv6UIn3T3ukRMal4g8AyTizverSZ2huwlFK98vl yYUSLEdIdvF64g== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:10 2026 by rpki-client