This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft File: L28Hzq0GpPgRVHYAusAvrwzAhMk.mft (raw, json) Hash identifier: efMHd0bhDeQd2cQuRa8nJdcDxBMYgrzx5in9k3Jqkus= Subject key identifier: EE:B5:0A:A4:82:1A:9F:95:16:C1:F6:E9:30:28:F2:B9:A4:BA:34:BA Authority key identifier: 2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9 Certificate issuer: /CN=2f6f07cead06a4f811547600bac02faf0cc084c9 Certificate serial: 019BF42BE057840468B852BC555A885FA517 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 08:01:14 +0000 Manifest this update: Sun 25 Jan 2026 08:01:14 +0000 Manifest next update: Mon 26 Jan 2026 08:01:14 +0000 Files and hashes: 1: 7Z6ojelPseFZngCaUR_CY78Fb5I.roa (hash: HGlBrDAdLj79PeTsI9ZoARQIK801VBLKm1hbPGS+ChQ=) 2: L28Hzq0GpPgRVHYAusAvrwzAhMk.crl (hash: lga8wvevPdKsYpnAbcUImNFCf22xEzxQWZTz5tls+xo=) 3: hE7_1eUP4ATkoyOOP-i0vzG4-1w.roa (hash: zBuduVQjj/QP+i0lFDnpUqeCE6ciPhxfEuFUyQ8aeOA=) 4: p6uW3EYNECiG5usVLCBhTWb5vMQ.roa (hash: 5W9QlyV+qBGgAT1Js96qS86d17Mmw7XZHZsWojaKliM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:e0:57:84:04:68:b8:52:bc:55:5a:88:5f:a5:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6f07cead06a4f811547600bac02faf0cc084c9 Validity Not Before: Jan 25 08:01:14 2026 GMT Not After : Jan 26 08:01:14 2026 GMT Subject: CN=eeb50aa4821a9f9516c1f6e93028f2b9a4ba34ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:67:b2:30:26:f6:7c:b8:d9:92:d8:2d:f2:36: 55:eb:69:2f:2d:23:bb:e2:77:3c:4d:97:61:e3:ee: af:d9:ab:9b:5d:62:01:9c:55:77:74:e2:f6:e1:59: 8a:ab:94:ae:45:eb:c8:3d:12:99:3a:d2:6a:90:f3: 42:03:c8:7c:b4:e4:1a:91:e5:c3:ad:c2:70:94:01: 3f:f2:b5:e6:7b:08:8b:00:0e:2b:42:26:19:0d:71: 0c:3a:15:e6:c4:4f:c6:bb:be:2f:25:59:c3:61:42: 4d:96:26:6c:ca:0b:78:b5:8f:72:41:d2:46:9a:db: c2:68:b8:52:c2:2e:b3:7f:56:36:80:0e:0e:a4:90: 7f:42:4a:55:c2:5e:88:02:6b:e9:6c:fa:c6:08:d3: e2:cc:0f:3b:d1:7e:6b:59:cc:d8:a7:31:1d:e1:90: fd:0e:0c:52:44:b5:bd:fc:23:22:59:73:2c:43:25: 5a:6c:fd:5f:ab:fe:fa:90:7c:b2:d0:c3:1c:91:b0: d9:f1:99:0a:3b:df:67:f5:36:1a:b9:c6:55:8c:a0: f8:20:98:fb:f1:f4:d6:74:f7:88:52:51:eb:57:6a: a6:0d:d6:49:7a:14:25:ce:fe:67:20:1a:3f:f7:3d: 02:3d:48:81:ea:fa:a8:88:9b:8e:40:df:71:b9:42: 47:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B5:0A:A4:82:1A:9F:95:16:C1:F6:E9:30:28:F2:B9:A4:BA:34:BA X509v3 Authority Key Identifier: keyid:2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d4:40:c9:b1:ba:48:22:28:cc:ac:68:5c:93:5a:2a:42:01: 16:31:70:44:26:8c:0d:d9:65:49:48:c5:23:41:56:10:45:8b: e3:e4:d5:c0:85:a6:e2:7f:e4:96:03:a5:65:49:63:9d:db:1f: 2c:b6:7a:29:a2:2e:a4:19:88:2f:0b:c1:16:62:8f:2e:3e:9f: ab:51:03:b6:9c:66:cf:76:21:82:dd:35:a9:ab:65:2f:6a:7c: 3b:bf:9a:95:bd:a5:45:fa:49:89:3e:c8:e8:62:6a:10:15:9e: 38:3e:2d:05:95:0a:4c:bb:d4:06:be:6f:80:55:e6:33:e8:f5: d9:40:ba:9e:b9:f2:68:1c:00:5f:07:11:a9:5d:1e:9d:be:39: 5c:08:4d:e7:a7:a1:8d:fd:00:36:24:a4:d5:21:e7:5f:7d:93: e0:2f:83:55:15:ab:af:d0:98:3c:13:3c:9b:c6:1a:bf:7c:54: 41:16:2c:df:94:e1:67:c1:55:cd:9d:93:4f:8c:40:68:c8:65: ec:6a:bb:2d:61:e5:05:03:35:10:ed:51:f6:02:db:52:2c:b8: 6c:6a:53:ab:d0:e3:05:1c:ba:73:25:38:d8:c0:ba:72:57:b2: d9:01:58:5b:27:26:94:cc:6d:cb:0b:3c:23:85:8a:8a:ca:5d: ee:5a:e9:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K+BXhARouFK8VVqIX6UXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmYwN2NlYWQwNmE0ZjgxMTU0NzYwMGJhYzAyZmFmMGNj MDg0YzkwHhcNMjYwMTI1MDgwMTE0WhcNMjYwMTI2MDgwMTE0WjAzMTEwLwYDVQQD EyhlZWI1MGFhNDgyMWE5Zjk1MTZjMWY2ZTkzMDI4ZjJiOWE0YmEzNGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GeyMCb2fLjZktgt8jZV62kvLSO7 4nc8TZdh4+6v2aubXWIBnFV3dOL24VmKq5SuRevIPRKZOtJqkPNCA8h8tOQakeXD rcJwlAE/8rXmewiLAA4rQiYZDXEMOhXmxE/Gu74vJVnDYUJNliZsygt4tY9yQdJG mtvCaLhSwi6zf1Y2gA4OpJB/QkpVwl6IAmvpbPrGCNPizA870X5rWczYpzEd4ZD9 DgxSRLW9/CMiWXMsQyVabP1fq/76kHyy0MMckbDZ8ZkKO99n9TYaucZVjKD4IJj7 8fTWdPeIUlHrV2qmDdZJehQlzv5nIBo/9z0CPUiB6vqoiJuOQN9xuUJHBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO61CqSCGp+VFsH26TAo8rmkujS6MB8GA1UdIwQY MBaAFC9vB86tBqT4EVR2ALrAL68MwITJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDI4SHpxMEdwUGdSVkhZQXVzQXZyd3pBaE1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9lYWQ2YzQtOWZlMS00ZmVlLTk3NjAt MDQ3Y2JjMzEwY2NiLzEvTDI4SHpxMEdwUGdSVkhZQXVzQXZyd3pBaE1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9lYWQ2YzQtOWZlMS00ZmVlLTk3NjAtMDQ3Y2JjMzEwY2Ni LzEvTDI4SHpxMEdwUGdSVkhZQXVzQXZyd3pBaE1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9RAybG6 SCIozKxoXJNaKkIBFjFwRCaMDdllSUjFI0FWEEWL4+TVwIWm4n/klgOlZUljndsf LLZ6KaIupBmILwvBFmKPLj6fq1EDtpxmz3Yhgt01qatlL2p8O7+alb2lRfpJiT7I 6GJqEBWeOD4tBZUKTLvUBr5vgFXmM+j12UC6nrnyaBwAXwcRqV0enb45XAhN56eh jf0ANiSk1SHnX32T4C+DVRWrr9CYPBM8m8Yav3xUQRYs35ThZ8FVzZ2TT4xAaMhl 7Gq7LWHlBQM1EO1R9gLbUiy4bGpTq9DjBRy6cyU42MC6cley2QFYWycmlMxtyws8 I4WKispd7lrpxA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:45:56 2026 by rpki-client