This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft File: L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft (raw, json) Hash identifier: bQBUlYyO0Kad3n16ddG32akgB07dWqixRJubmbDDXZ0= Subject key identifier: 58:D9:3B:55:CE:B2:6A:5D:F6:C5:66:EA:13:41:6A:31:21:4E:40:F6 Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46 Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46 Certificate serial: 019BF42BDC1F6E5D19DC1EC5131297498CDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft Manifest number: 0DBA Signing time: Sun 25 Jan 2026 08:01:13 +0000 Manifest this update: Sun 25 Jan 2026 08:01:13 +0000 Manifest next update: Mon 26 Jan 2026 08:01:13 +0000 Files and hashes: 1: G9p0ZqoMQwRhL8Rw931Y7IDvL9I.roa (hash: felwcBy1trqJlfgkKZ8Njtq1KvtD2UmM0AyTZrNQ0nY=) 2: L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl (hash: k9L37xWeWplhiWB8FgIOsiTABO2rYB4RGZZ7pNuaa4M=) 3: NQm98rb_Ce1FD2kYuLzSyRfHS3k.roa (hash: 0FuRCkyL3oox4mVwcN4bero8WE9ytQ/qMwHkxt0D5lQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:dc:1f:6e:5d:19:dc:1e:c5:13:12:97:49:8c:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46 Validity Not Before: Jan 25 08:01:13 2026 GMT Not After : Jan 26 08:01:13 2026 GMT Subject: CN=58d93b55ceb26a5df6c566ea13416a31214e40f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:09:20:ba:a4:82:b6:f0:97:b5:fa:7a:92:43: 62:c7:ec:6c:c9:0c:a8:d8:ee:79:5a:e2:3d:7f:91: 3a:3f:05:bb:1f:cf:e2:ae:6e:5b:a6:43:a7:29:21: 50:af:54:1d:48:8f:fb:a5:b6:6a:3b:ef:43:5a:12: 98:2e:e9:32:a9:dd:71:99:6a:34:d0:e2:19:31:5e: aa:da:54:63:6c:64:60:cd:f2:e7:c8:8b:15:be:9c: 2e:43:2d:03:ff:40:e2:aa:f8:b7:20:4c:4f:8a:b7: 85:99:db:04:49:e6:84:74:99:35:07:e7:32:28:47: 42:f5:5b:a5:aa:9a:ed:d2:f8:30:d1:2d:04:77:00: 64:ac:94:5c:2a:e7:bc:96:26:2f:64:1f:05:a5:29: 5b:58:d9:78:98:20:f6:3f:30:fa:50:c1:12:54:48: da:9a:ca:ee:82:73:1c:58:c3:ed:44:5e:37:18:db: 21:62:1e:10:b7:d1:57:e5:ac:fc:7c:0f:5b:bb:27: 80:f0:28:c4:40:9c:b8:bd:bc:e3:eb:34:42:2d:74: d3:b6:7e:5c:d4:61:c3:4b:61:f9:d6:60:4e:dc:8f: fb:59:95:96:00:6f:23:31:97:40:9d:f7:9b:77:2c: 13:59:e8:27:e8:f1:31:74:09:30:f7:dc:3b:4e:16: a8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D9:3B:55:CE:B2:6A:5D:F6:C5:66:EA:13:41:6A:31:21:4E:40:F6 X509v3 Authority Key Identifier: keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:08:38:91:ab:0f:45:eb:02:08:a3:db:00:0b:02:58:03:9b: d5:86:b6:28:7d:6e:b8:5e:c3:f9:d4:40:19:72:c1:53:88:58: 62:f7:bc:34:45:34:68:45:cd:da:1e:61:5a:ec:69:ee:7f:c2: 70:ae:d4:fa:2a:85:5f:ba:c1:bc:d2:7e:ec:21:40:7b:8d:34: 5f:73:30:bb:5a:59:79:4a:e9:81:be:8c:40:d1:70:a4:4e:9e: bf:fa:13:c3:2a:63:6c:b9:a8:0a:5c:77:4b:99:a5:8e:44:8e: d5:e6:fb:ba:65:e5:3b:5d:1f:f3:6d:ff:76:b6:e0:3c:7c:a1: ed:bb:7e:37:f8:1a:6d:a6:1a:d5:2d:b9:76:09:25:bf:4e:ed: 33:c8:e7:60:da:60:36:47:f6:1e:2d:c6:f8:40:24:0d:29:f4: 1b:76:25:dd:0f:ad:4a:43:93:90:3d:b8:25:2f:5a:ac:48:8a: fb:02:4e:8a:57:ab:c3:b1:97:87:ba:16:f2:7a:9f:b6:f9:e2: 2d:f2:73:17:bc:2a:35:10:10:b4:35:b0:1d:92:2b:8f:d4:be: 87:7b:fc:ca:f7:33:10:61:bb:98:32:71:be:c4:e1:fe:3e:13: 50:2c:9b:ba:44:57:b0:74:5e:9f:22:4f:f8:4e:c1:1c:42:5c: 33:d4:5e:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K9wfbl0Z3B7FExKXSYzeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmN2E0NjRiODk0ODQxYjNiOTQwZTBiMzU3Yjg2NWUzOTNi MWRkNDYwHhcNMjYwMTI1MDgwMTEzWhcNMjYwMTI2MDgwMTEzWjAzMTEwLwYDVQQD Eyg1OGQ5M2I1NWNlYjI2YTVkZjZjNTY2ZWExMzQxNmEzMTIxNGU0MGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgkguqSCtvCXtfp6kkNix+xsyQyo 2O55WuI9f5E6PwW7H8/irm5bpkOnKSFQr1QdSI/7pbZqO+9DWhKYLukyqd1xmWo0 0OIZMV6q2lRjbGRgzfLnyIsVvpwuQy0D/0Diqvi3IExPireFmdsESeaEdJk1B+cy KEdC9Vulqprt0vgw0S0EdwBkrJRcKue8liYvZB8FpSlbWNl4mCD2PzD6UMESVEja msrugnMcWMPtRF43GNshYh4Qt9FX5az8fA9buyeA8CjEQJy4vbzj6zRCLXTTtn5c 1GHDS2H51mBO3I/7WZWWAG8jMZdAnfebdywTWegn6PExdAkw99w7ThaobQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjZO1XOsmpd9sVm6hNBajEhTkD2MB8GA1UdIwQY MBaAFC96RkuJSEGzuUDgs1e4ZeOTsd1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDNwR1M0bElRYk81UU9DelY3aGw0NU94M1VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iMmY3YTAtMDZjNC00YWI1LTg1YWEt MTAxNDRjMWJjYWZjLzEvTDNwR1M0bElRYk81UU9DelY3aGw0NU94M1VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9iMmY3YTAtMDZjNC00YWI1LTg1YWEtMTAxNDRjMWJjYWZj LzEvTDNwR1M0bElRYk81UU9DelY3aGw0NU94M1VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPAg4kasP ResCCKPbAAsCWAOb1Ya2KH1uuF7D+dRAGXLBU4hYYve8NEU0aEXN2h5hWuxp7n/C cK7U+iqFX7rBvNJ+7CFAe400X3Mwu1pZeUrpgb6MQNFwpE6ev/oTwypjbLmoClx3 S5mljkSO1eb7umXlO10f823/drbgPHyh7bt+N/gabaYa1S25dgklv07tM8jnYNpg Nkf2Hi3G+EAkDSn0G3Yl3Q+tSkOTkD24JS9arEiK+wJOilerw7GXh7oW8nqftvni LfJzF7wqNRAQtDWwHZIrj9S+h3v8yvczEGG7mDJxvsTh/j4TUCybukRXsHRenyJP +E7BHEJcM9RePw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:21:02 2026 by rpki-client