This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft File: l7y-5E9M7wkZheVGpoVPnMsq2oo.mft (raw, json) Hash identifier: 7aRu68auhaG76jlNON2spHRDEXSQ/kDIC4ZQa837wUA= Subject key identifier: 2F:DB:34:60:38:18:6F:AE:96:56:27:1F:CB:B3:59:38:96:BF:C6:D9 Authority key identifier: 97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A Certificate issuer: /CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a Certificate serial: 019BF687B80B9704C103997F7E3C27158949 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 19:00:48 +0000 Manifest this update: Sun 25 Jan 2026 19:00:48 +0000 Manifest next update: Mon 26 Jan 2026 19:00:48 +0000 Files and hashes: 1: O_wCNsyDbT6MUYABz8-3j0us_9g.roa (hash: lcEmRT5pvsNkeswk2lk75S2Q+qGFNRLgl2uhLFsTeD4=) 2: bDIaKUq5ow0olhUpFCtBXBJMo6o.roa (hash: 9hfkjt3EwE+QLaV9BjMUSGSaxIGmTaaJQ1x9H7t99BU=) 3: l7y-5E9M7wkZheVGpoVPnMsq2oo.crl (hash: 1QLn07rLxa96pqyPN3FHOhkQye6wrPly3GoTwpg7Vs4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:b8:0b:97:04:c1:03:99:7f:7e:3c:27:15:89:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a Validity Not Before: Jan 25 19:00:48 2026 GMT Not After : Jan 26 19:00:48 2026 GMT Subject: CN=2fdb346038186fae9656271fcbb3593896bfc6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6d:ab:6c:71:03:b6:ed:64:1a:44:8a:30:f5: 28:b2:84:20:68:d1:75:70:8a:75:fc:56:ab:5d:cf: 8f:9e:fe:8a:c2:6c:81:0e:7b:ff:13:09:2d:94:58: 5d:36:be:f6:3d:b0:01:24:b9:c6:cd:a2:43:44:3e: 14:31:e0:13:e5:39:45:0f:6c:94:8a:7f:21:7a:b0: 95:b8:76:85:e9:27:fd:35:93:60:af:79:6c:f2:47: 77:33:bd:6a:0d:99:99:2e:16:81:da:0a:68:f9:26: 3e:50:99:77:74:4d:90:07:bd:6f:b5:3e:f2:65:3f: 3c:62:9d:ad:90:a1:b4:73:e5:61:b3:10:6c:3e:4e: 25:8a:85:94:50:2e:fd:15:fc:bf:b5:3a:d5:c8:27: 1c:8d:7a:c2:3b:69:f0:7b:71:65:cd:bd:4a:6f:e6: 24:0d:39:ff:6e:87:be:f3:41:ff:4c:9a:d8:ad:51: f6:07:d8:1f:65:2f:21:be:f6:1f:05:af:1d:5f:f5: e2:15:e4:55:00:1f:c5:f8:7d:9f:bf:ed:0e:ae:52: e1:e9:40:39:37:e1:d8:f3:6b:19:4e:7e:64:44:05: 18:9f:b2:57:44:06:86:1e:ee:3f:b8:a1:95:29:7b: c2:1a:2c:c5:65:05:a9:3f:d0:87:a8:45:45:a7:92: 13:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DB:34:60:38:18:6F:AE:96:56:27:1F:CB:B3:59:38:96:BF:C6:D9 X509v3 Authority Key Identifier: keyid:97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:93:89:e5:d5:84:6a:93:a7:97:61:84:3f:89:99:40:d3:a1: 08:48:3f:4f:b1:d9:6c:1a:e7:fb:40:f1:85:14:77:f9:6b:c2: 35:5f:60:c0:30:ad:3a:0a:76:32:2b:4f:94:ed:9b:6f:8e:a7: f8:9e:dc:0d:f9:e3:66:60:37:4b:9c:e6:85:cf:35:d5:6d:71: 6e:d7:73:fb:15:5f:3e:4e:58:ee:2e:89:9a:95:9e:d3:9f:a2: d7:50:87:6c:7a:1c:ba:ca:84:1b:fd:fd:00:b4:aa:27:da:f2: 00:b9:4c:ac:7e:71:f0:69:4a:fd:7b:77:d3:07:fe:f9:ac:8d: a1:a7:b2:96:fd:43:a0:05:8b:b9:07:27:2a:52:8b:8b:6e:96: 09:7c:3a:43:32:e8:f7:43:a0:a5:ef:0b:f6:61:87:d7:85:98: 59:30:b5:3c:9c:50:57:a3:40:83:2b:dc:1b:cb:b2:76:79:68: 8f:48:24:09:d3:6b:2f:7f:52:29:fd:32:7d:8e:a2:91:57:de: a6:a4:3a:5e:12:c1:de:92:97:d3:01:2b:c5:32:69:af:2f:d7: 52:6e:b7:5b:3b:48:de:89:5f:80:23:74:2a:23:43:95:09:0c: 21:f6:ed:7d:f3:12:b1:3c:62:ce:e8:d4:19:20:23:82:c4:21: 6f:a6:73:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h7gLlwTBA5l/fjwnFYlJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3YmNiZWU0NGY0Y2VmMDkxOTg1ZTU0NmE2ODU0ZjljY2Iy YWRhOGEwHhcNMjYwMTI1MTkwMDQ4WhcNMjYwMTI2MTkwMDQ4WjAzMTEwLwYDVQQD EygyZmRiMzQ2MDM4MTg2ZmFlOTY1NjI3MWZjYmIzNTkzODk2YmZjNmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp22rbHEDtu1kGkSKMPUosoQgaNF1 cIp1/FarXc+Pnv6KwmyBDnv/EwktlFhdNr72PbABJLnGzaJDRD4UMeAT5TlFD2yU in8herCVuHaF6Sf9NZNgr3ls8kd3M71qDZmZLhaB2gpo+SY+UJl3dE2QB71vtT7y ZT88Yp2tkKG0c+VhsxBsPk4lioWUUC79Ffy/tTrVyCccjXrCO2nwe3Flzb1Kb+Yk DTn/boe+80H/TJrYrVH2B9gfZS8hvvYfBa8dX/XiFeRVAB/F+H2fv+0OrlLh6UA5 N+HY82sZTn5kRAUYn7JXRAaGHu4/uKGVKXvCGizFZQWpP9CHqEVFp5ITPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/bNGA4GG+ullYnH8uzWTiWv8bZMB8GA1UdIwQY MBaAFJe8vuRPTO8JGYXlRqaFT5zLKtqKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDd5LTVFOU03d2taaGVWR3BvVlBuTXNxMm9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8wYjJlZWYtNzVlOS00M2IyLTkwODgt ODMwM2FkMTM3MWRkLzEvbDd5LTVFOU03d2taaGVWR3BvVlBuTXNxMm9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8wYjJlZWYtNzVlOS00M2IyLTkwODgtODMwM2FkMTM3MWRk LzEvbDd5LTVFOU03d2taaGVWR3BvVlBuTXNxMm9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjpOJ5dWE apOnl2GEP4mZQNOhCEg/T7HZbBrn+0DxhRR3+WvCNV9gwDCtOgp2MitPlO2bb46n +J7cDfnjZmA3S5zmhc811W1xbtdz+xVfPk5Y7i6JmpWe05+i11CHbHocusqEG/39 ALSqJ9ryALlMrH5x8GlK/Xt30wf++ayNoaeylv1DoAWLuQcnKlKLi26WCXw6QzLo 90Ogpe8L9mGH14WYWTC1PJxQV6NAgyvcG8uydnloj0gkCdNrL39SKf0yfY6ikVfe pqQ6XhLB3pKX0wErxTJpry/XUm63WztI3olfgCN0KiNDlQkMIfbtffMSsTxizujU GSAjgsQhb6ZzjA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:09:48 2026 by rpki-client