This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft File: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft (raw, json) Hash identifier: zBvD9DY+mKesxCWvpZqtDpwAcgj3Lwb+CQomyA0Dgq4= Subject key identifier: 18:5F:77:C9:A6:A6:6E:26:52:8C:57:7F:6C:85:A9:07:17:D0:8F:2D Authority key identifier: 97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6 Certificate issuer: /CN=977bfd99d35116f9c644194c36d9b646f73127c6 Certificate serial: 019BF6F5F8A5222563DD160FEACE3CC3A852 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft Manifest number: 15AA Signing time: Sun 25 Jan 2026 21:01:13 +0000 Manifest this update: Sun 25 Jan 2026 21:01:13 +0000 Manifest next update: Mon 26 Jan 2026 21:01:13 +0000 Files and hashes: 1: iTTifgK67L5ZMjUhnnWGGJHPaoc.roa (hash: dCrZAwxoBbmIZG/t8Yw3CUG+PJaqExvpsXDtPA11ABs=) 2: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl (hash: mFM46HuL2d325MAlb5IsnT9xZYctBztR47EbjOy0wHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:f8:a5:22:25:63:dd:16:0f:ea:ce:3c:c3:a8:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977bfd99d35116f9c644194c36d9b646f73127c6 Validity Not Before: Jan 25 21:01:13 2026 GMT Not After : Jan 26 21:01:13 2026 GMT Subject: CN=185f77c9a6a66e26528c577f6c85a90717d08f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:07:ce:a4:7d:82:13:8f:98:fb:0a:3e:f0:fb: c2:fe:44:58:0a:03:2c:5f:23:ee:c6:c7:ca:1b:12: 02:3a:9b:dc:98:8b:39:50:aa:aa:64:b5:23:56:9e: 9d:f4:d1:9b:6c:b5:02:b8:59:66:a4:b6:5f:35:1e: 5d:49:93:87:eb:74:f8:26:97:b2:a5:1a:e1:c2:51: 1d:a7:d7:11:c2:f6:ef:cd:12:13:21:d0:52:d8:7d: e3:36:07:ce:2c:b3:29:b6:f3:a3:7d:33:82:ad:d8: 48:cb:72:e5:43:be:6f:69:1f:f3:58:74:02:66:47: 54:87:d2:21:5d:26:2e:19:69:33:00:38:ce:53:60: 22:19:89:12:2a:bd:b9:76:b6:5e:b2:25:14:df:d2: 49:d2:4a:b1:fe:14:8c:d8:82:3a:7a:e0:cf:27:39: b2:f6:dc:7f:2e:41:1f:a9:38:d2:64:49:ae:fd:99: cf:e9:95:fe:73:8a:d6:72:9a:22:f8:48:35:12:db: 76:53:85:99:f7:61:4d:07:d0:9e:65:c0:31:d6:6f: 70:ee:1d:b7:c0:d2:4a:a6:95:6d:95:50:cf:3c:27: 47:71:39:51:04:f9:cc:f7:6f:44:0e:c7:8f:bb:5d: 22:53:6f:e3:bd:26:67:48:86:6e:5a:70:99:dc:ea: c3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:5F:77:C9:A6:A6:6E:26:52:8C:57:7F:6C:85:A9:07:17:D0:8F:2D X509v3 Authority Key Identifier: keyid:97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:ad:4f:40:c2:22:f4:ee:b1:00:b2:26:ba:f2:a2:04:0f:87: 59:32:91:3e:ef:0d:be:0d:56:66:64:c1:85:16:ef:b6:51:e2: da:cf:47:81:f2:3e:59:75:c3:51:af:fa:5e:e0:26:91:25:6a: aa:27:81:b6:86:1d:43:f7:a2:99:5a:7d:19:55:48:bd:aa:92: 61:51:4b:d0:d6:8a:a5:a9:c9:d8:ed:9d:2b:ed:35:ab:08:4d: 4d:86:2e:f4:49:e4:ca:61:0d:c2:33:e2:09:4c:53:6f:99:d2: 5a:71:d8:76:36:4f:17:7a:99:14:7e:b9:ea:ef:d3:61:55:6d: d1:ce:71:0f:52:32:5a:3f:df:00:58:84:18:6b:ea:21:b4:a8: d9:26:48:e6:84:77:19:3f:06:83:9e:3b:ab:9a:d6:67:3a:1d: 29:34:88:a7:2d:dd:cd:64:af:cd:86:4a:f4:ab:b5:a3:98:6f: 9d:bd:6c:17:84:63:d9:41:d1:fd:30:09:be:39:48:9e:91:42: 8d:63:ec:09:d9:07:89:8e:85:ad:53:b1:57:d9:66:da:ca:d6: eb:f8:34:76:d7:06:5b:7d:c6:44:fb:7d:64:b9:ae:ba:f5:3b: cd:1a:ae:04:2a:07:78:dc:fd:72:00:80:08:cd:48:2b:e7:a3: c2:b7:51:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29filIiVj3RYP6s48w6hSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3N2JmZDk5ZDM1MTE2ZjljNjQ0MTk0YzM2ZDliNjQ2Zjcz MTI3YzYwHhcNMjYwMTI1MjEwMTEzWhcNMjYwMTI2MjEwMTEzWjAzMTEwLwYDVQQD EygxODVmNzdjOWE2YTY2ZTI2NTI4YzU3N2Y2Yzg1YTkwNzE3ZDA4ZjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgfOpH2CE4+Y+wo+8PvC/kRYCgMs XyPuxsfKGxICOpvcmIs5UKqqZLUjVp6d9NGbbLUCuFlmpLZfNR5dSZOH63T4Jpey pRrhwlEdp9cRwvbvzRITIdBS2H3jNgfOLLMptvOjfTOCrdhIy3LlQ75vaR/zWHQC ZkdUh9IhXSYuGWkzADjOU2AiGYkSKr25drZesiUU39JJ0kqx/hSM2II6euDPJzmy 9tx/LkEfqTjSZEmu/ZnP6ZX+c4rWcpoi+Eg1Ett2U4WZ92FNB9CeZcAx1m9w7h23 wNJKppVtlVDPPCdHcTlRBPnM929EDsePu10iU2/jvSZnSIZuWnCZ3OrDSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhfd8mmpm4mUoxXf2yFqQcX0I8tMB8GA1UdIwQY MBaAFJd7/ZnTURb5xkQZTDbZtkb3MSfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDN2OW1kTlJGdm5HUkJsTU50bTJSdmN4SjhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iNjc4ZjUtNTU3ZC00YjVkLWFhNTAt OWE0ZmYwMTM3MDEyLzEvbDN2OW1kTlJGdm5HUkJsTU50bTJSdmN4SjhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9iNjc4ZjUtNTU3ZC00YjVkLWFhNTAtOWE0ZmYwMTM3MDEy LzEvbDN2OW1kTlJGdm5HUkJsTU50bTJSdmN4SjhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAva1PQMIi 9O6xALImuvKiBA+HWTKRPu8Nvg1WZmTBhRbvtlHi2s9HgfI+WXXDUa/6XuAmkSVq qieBtoYdQ/eimVp9GVVIvaqSYVFL0NaKpanJ2O2dK+01qwhNTYYu9EnkymENwjPi CUxTb5nSWnHYdjZPF3qZFH656u/TYVVt0c5xD1IyWj/fAFiEGGvqIbSo2SZI5oR3 GT8Gg547q5rWZzodKTSIpy3dzWSvzYZK9Ku1o5hvnb1sF4Rj2UHR/TAJvjlInpFC jWPsCdkHiY6FrVOxV9lm2srW6/g0dtcGW33GRPt9ZLmuuvU7zRquBCoHeNz9cgCA CM1IK+ejwrdRBw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:54 2026 by rpki-client