This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft File: l72bhlMeVEr6AwnYvip7ppFj-a0.mft (raw, json) Hash identifier: yOoXKF42hGhlgcOic5Fili1xhNvP4gjHW2BBIuqN1F8= Subject key identifier: 2F:8E:67:AB:40:50:B9:C7:93:95:E3:6A:B5:52:FB:92:C7:07:7B:34 Authority key identifier: 97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD Certificate issuer: /CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad Certificate serial: 019BF198966D88BF3CF739E56A3242C1C52C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft Manifest number: 159D Signing time: Sat 24 Jan 2026 20:01:07 +0000 Manifest this update: Sat 24 Jan 2026 20:01:07 +0000 Manifest next update: Sun 25 Jan 2026 20:01:07 +0000 Files and hashes: 1: 45c8W4bt_1KLKYDEv9p2767Wx50.roa (hash: IhN7WZe1v9kt10oPf7IAa8WZE4XRKPh4/Ei0leDttO0=) 2: TVDa4jH-KePexazfdp059jjKJOw.roa (hash: 89VuNse5oJN1x+WeKQMcg+E+3+6iaiSt9KMxgJnMFJ8=) 3: Y5YxvqFSIggg3EQfLZPKszOK6qM.roa (hash: UpM/vZPB1/oJgnqfUPo2gNRHRr3zvsamvafTQyHWibM=) 4: l72bhlMeVEr6AwnYvip7ppFj-a0.crl (hash: so0tkQMznOlJ//ecNjbaziSnjTnM678NOiP8UWHAm2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 20:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f1:98:96:6d:88:bf:3c:f7:39:e5:6a:32:42:c1:c5:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad Validity Not Before: Jan 24 20:01:07 2026 GMT Not After : Jan 25 20:01:07 2026 GMT Subject: CN=2f8e67ab4050b9c79395e36ab552fb92c7077b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:30:28:91:ed:61:fd:b3:59:de:39:c0:92:17: 85:e8:3b:0f:2e:17:50:f4:01:32:d3:77:59:8f:bc: 8e:71:ef:cf:de:a7:be:8c:6f:ff:a5:5c:bc:c7:0f: 21:b1:32:46:57:ef:a3:5c:36:fa:e8:58:0c:d4:f2: 45:83:c7:dd:7a:9e:e2:a7:96:73:bd:0d:09:1a:9d: 01:e7:59:7f:3f:9e:80:7d:2a:41:0d:36:29:9a:22: ce:50:73:b2:a6:c2:24:3a:f2:77:2d:3a:d7:03:64: ec:94:3a:5f:c9:1e:a4:2e:10:4e:fe:76:b7:5f:99: cb:65:d0:ef:f3:55:3a:65:f0:50:7d:e5:3f:a0:69: 0c:71:f5:2f:26:82:4d:2c:98:cb:e0:9c:fa:c4:ca: b0:d7:ca:db:c9:a6:e4:fc:f5:d2:60:5b:3f:c2:9a: 65:90:af:e2:c2:43:75:57:9c:44:6c:2e:7e:8e:5e: c3:6f:85:e3:3b:76:1c:a9:09:8c:1a:17:f1:97:cb: de:c2:f6:fe:eb:67:c2:ef:b6:1c:30:41:98:16:19: c0:e5:7a:df:37:80:b4:9d:81:7d:c4:3c:01:ee:71: 06:03:25:a4:80:d2:eb:79:c7:b6:fc:40:d4:9a:b8: d8:d1:cf:a5:e9:d8:75:d1:4c:84:e1:f0:f9:e7:6f: 9f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:8E:67:AB:40:50:B9:C7:93:95:E3:6A:B5:52:FB:92:C7:07:7B:34 X509v3 Authority Key Identifier: keyid:97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:d6:55:9d:2f:a3:42:7d:03:72:39:30:49:a8:3b:aa:fb:1d: 4b:7f:e7:91:3e:51:40:23:b5:80:7b:2f:fd:c6:2b:0d:95:89: 98:98:65:8d:0c:18:41:bf:3a:54:c1:cf:71:67:12:f8:b1:4e: 19:42:c4:a2:ef:54:c8:e1:d7:df:f9:3c:f8:b0:4c:8d:f6:df: be:df:cd:f0:a4:b3:65:42:44:82:01:38:95:a6:58:a1:00:64: a9:00:47:e3:e7:1e:c5:20:e4:b7:3b:bf:2c:82:1e:40:be:90: 45:07:e7:71:26:e8:bb:c3:4c:1f:9d:34:3c:d4:86:46:91:9b: bf:87:d8:11:b6:7e:1a:63:dd:c9:e6:9d:bc:38:93:bd:a5:05: 9f:7d:41:c7:a1:86:08:65:42:8b:d0:f0:9e:be:af:0f:62:f8: 09:3a:fa:98:00:f3:19:5e:f5:4b:59:c1:d9:be:a1:98:64:72: 1b:70:b1:d2:9d:01:f1:01:3b:bf:90:26:0d:08:39:44:6a:30: 5f:9a:68:ab:a2:1a:b4:fb:fb:ad:f7:34:81:55:ba:4d:bc:02: 45:f4:80:a1:1f:dd:96:ad:f9:ea:00:d8:47:1c:67:07:55:9f: bc:c4:11:c7:a6:6c:7f:89:06:c5:dd:88:f6:a7:a4:7b:ab:be: a7:60:8b:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvxmJZtiL889znlajJCwcUsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3YmQ5Yjg2NTMxZTU0NGFmYTAzMDlkOGJlMmE3YmE2OTE2 M2Y5YWQwHhcNMjYwMTI0MjAwMTA3WhcNMjYwMTI1MjAwMTA3WjAzMTEwLwYDVQQD EygyZjhlNjdhYjQwNTBiOWM3OTM5NWUzNmFiNTUyZmI5MmM3MDc3YjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujAoke1h/bNZ3jnAkheF6DsPLhdQ 9AEy03dZj7yOce/P3qe+jG//pVy8xw8hsTJGV++jXDb66FgM1PJFg8fdep7ip5Zz vQ0JGp0B51l/P56AfSpBDTYpmiLOUHOypsIkOvJ3LTrXA2TslDpfyR6kLhBO/na3 X5nLZdDv81U6ZfBQfeU/oGkMcfUvJoJNLJjL4Jz6xMqw18rbyabk/PXSYFs/wppl kK/iwkN1V5xEbC5+jl7Db4XjO3YcqQmMGhfxl8vewvb+62fC77YcMEGYFhnA5Xrf N4C0nYF9xDwB7nEGAyWkgNLrece2/EDUmrjY0c+l6dh10UyE4fD552+fXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+OZ6tAULnHk5XjarVS+5LHB3s0MB8GA1UdIwQY MBaAFJe9m4ZTHlRK+gMJ2L4qe6aRY/mtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kNGJkOGItNTVmNC00NzY1LWFkMjIt MzQ2MGNjMjY0ODBiLzEvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9kNGJkOGItNTVmNC00NzY1LWFkMjItMzQ2MGNjMjY0ODBi LzEvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAktZVnS+j Qn0DcjkwSag7qvsdS3/nkT5RQCO1gHsv/cYrDZWJmJhljQwYQb86VMHPcWcS+LFO GULEou9UyOHX3/k8+LBMjfbfvt/N8KSzZUJEggE4laZYoQBkqQBH4+cexSDktzu/ LIIeQL6QRQfncSbou8NMH500PNSGRpGbv4fYEbZ+GmPdyeadvDiTvaUFn31Bx6GG CGVCi9Dwnr6vD2L4CTr6mADzGV71S1nB2b6hmGRyG3Cx0p0B8QE7v5AmDQg5RGow X5poq6IatPv7rfc0gVW6TbwCRfSAoR/dlq356gDYRxxnB1WfvMQRx6Zsf4kGxd2I 9qeke6u+p2CLsw== -----END CERTIFICATE-----Generated at Sun Jan 25 05:40:48 2026 by rpki-client