This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft File: loH8jHM3xqHSC4SADfhion5f29c.mft (raw, json) Hash identifier: jE4X6sh96uQxKs5Fwc7cXJEU7ih7Ylg1jKrqs17+xhE= Subject key identifier: CF:F9:79:78:ED:C5:4A:F6:4B:8E:CC:72:C9:BD:D9:16:C1:33:69:8A Authority key identifier: 96:81:FC:8C:73:37:C6:A1:D2:0B:84:80:0D:F8:62:A2:7E:5F:DB:D7 Certificate issuer: /CN=9681fc8c7337c6a1d20b84800df862a27e5fdbd7 Certificate serial: 019BF6884CC4F8756347C3D82C1C4A3811D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft Manifest number: 028A Signing time: Sun 25 Jan 2026 19:01:26 +0000 Manifest this update: Sun 25 Jan 2026 19:01:26 +0000 Manifest next update: Mon 26 Jan 2026 19:01:26 +0000 Files and hashes: 1: 62xv2lQHxNM_l_YrJtcwOfnMuYw.roa (hash: gV7lklXQn/5hqUDHVsvJYf+Kfk/HDRP/U+DCEe4jlA0=) 2: PFGIVa0BOcrYn7LDn1lpTGcFlyg.roa (hash: KajiJYew3aM31pMlayFlO34jp69DaxrhYFWYOe/gl/8=) 3: i9dvXXtl86NkntskYAQaMtaTQus.roa (hash: jn3xesrUXS6xuu+2iCltP+AJecvksZHI4qYuAZ+46Rw=) 4: kH2vVEZ7NeBnNJ25Bfzxs-l-m2Y.roa (hash: lUmva7T7suBnjlbuPKGwGSN8q5aV/viwDRe/Z9TY9sA=) 5: loH8jHM3xqHSC4SADfhion5f29c.crl (hash: GojLvxweqfy0LuXa731HsmFG9cre0hpA1Go4o4XcWN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.crl rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:4c:c4:f8:75:63:47:c3:d8:2c:1c:4a:38:11:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9681fc8c7337c6a1d20b84800df862a27e5fdbd7 Validity Not Before: Jan 25 19:01:26 2026 GMT Not After : Jan 26 19:01:26 2026 GMT Subject: CN=cff97978edc54af64b8ecc72c9bdd916c133698a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a9:65:25:03:87:e2:29:f1:62:2a:0f:dd:bd: 44:a6:19:9d:56:d2:df:de:9e:b4:c5:83:f6:c2:dd: b2:f2:8d:81:56:f2:e3:81:01:b7:d2:19:b1:94:d3: 4b:f5:fc:e2:2a:78:7f:35:a8:f4:80:a8:77:68:47: 00:ed:9e:b6:11:03:5e:96:e3:86:96:d1:09:23:77: bc:1a:e8:64:22:ab:7a:f3:70:cb:05:cb:b3:b2:8a: 9c:6d:58:da:9a:ed:6f:3f:fb:2f:73:75:03:ac:f0: e8:dc:e3:b1:a4:45:61:c2:36:7f:6e:e9:bf:78:79: 43:a8:4a:59:fb:4d:4d:34:97:d3:9f:5e:3a:47:03: a8:81:99:f6:a5:66:f1:a1:ca:87:86:75:04:9b:c8: 2a:d6:2b:1e:76:a9:e3:64:aa:71:a6:42:7d:40:e7: fd:9a:d0:66:2f:44:a4:31:e4:89:4c:15:3b:18:97: 03:01:4a:bd:41:46:3c:8e:ab:4f:6d:06:09:fd:bd: df:43:e3:38:7d:f0:72:83:43:41:40:8b:87:77:1c: 6b:56:1e:19:b5:47:f3:84:c9:6a:2b:1c:a9:44:5a: d3:2a:87:70:e1:63:ca:aa:c7:45:3e:3f:fc:cc:0e: 86:ff:9f:2e:76:15:1a:07:83:69:76:43:c5:04:32: 22:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F9:79:78:ED:C5:4A:F6:4B:8E:CC:72:C9:BD:D9:16:C1:33:69:8A X509v3 Authority Key Identifier: keyid:96:81:FC:8C:73:37:C6:A1:D2:0B:84:80:0D:F8:62:A2:7E:5F:DB:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:d6:cb:7e:92:e0:9c:c8:ec:7f:a4:4b:14:dd:36:47:3d:eb: d1:38:d9:97:cb:a6:0b:f4:53:84:7f:5b:15:12:50:44:80:70: b6:a7:a1:b9:39:1a:6f:01:69:52:82:f9:7a:cc:eb:58:62:47: b7:fc:a0:68:83:3f:41:92:19:ae:bb:6e:92:89:74:84:34:e5: a4:43:25:c5:d3:25:47:9c:45:f2:7f:83:21:d3:95:52:58:e3: f0:6a:f0:60:38:ed:30:59:25:d5:1b:97:05:25:65:50:1f:4b: dc:16:c7:0a:db:19:c8:75:cd:68:3c:cc:7c:3c:14:fa:8e:a3: 00:eb:36:46:a0:af:69:98:6a:ac:e5:18:1b:3f:99:d8:39:93: 42:2a:be:ac:13:e3:5c:8b:5f:d2:37:80:fd:28:34:62:a1:8b: f6:f8:df:9f:51:36:ac:8e:56:7f:79:fc:af:3a:8d:b8:5c:0b: b2:47:ee:f2:9d:fd:a1:16:13:e0:0b:00:6d:30:cd:77:f0:a6: 13:08:67:03:b1:67:32:5b:12:c1:37:88:f7:8b:23:c9:1b:e6: cd:f4:e5:3f:c4:47:c9:65:8a:07:5d:0b:82:b8:eb:08:aa:a3: 0b:ce:2e:2e:29:17:7d:01:32:fe:96:99:5b:9e:42:17:4f:f5: eb:ee:1c:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iEzE+HVjR8PYLBxKOBHUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ODFmYzhjNzMzN2M2YTFkMjBiODQ4MDBkZjg2MmEyN2U1 ZmRiZDcwHhcNMjYwMTI1MTkwMTI2WhcNMjYwMTI2MTkwMTI2WjAzMTEwLwYDVQQD EyhjZmY5Nzk3OGVkYzU0YWY2NGI4ZWNjNzJjOWJkZDkxNmMxMzM2OThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6llJQOH4inxYioP3b1EphmdVtLf 3p60xYP2wt2y8o2BVvLjgQG30hmxlNNL9fziKnh/Naj0gKh3aEcA7Z62EQNeluOG ltEJI3e8GuhkIqt683DLBcuzsoqcbVjamu1vP/svc3UDrPDo3OOxpEVhwjZ/bum/ eHlDqEpZ+01NNJfTn146RwOogZn2pWbxocqHhnUEm8gq1isedqnjZKpxpkJ9QOf9 mtBmL0SkMeSJTBU7GJcDAUq9QUY8jqtPbQYJ/b3fQ+M4ffByg0NBQIuHdxxrVh4Z tUfzhMlqKxypRFrTKodw4WPKqsdFPj/8zA6G/58udhUaB4NpdkPFBDIiYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/5eXjtxUr2S47Mcsm92RbBM2mKMB8GA1UdIwQY MBaAFJaB/IxzN8ah0guEgA34YqJ+X9vXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG9IOGpITTN4cUhTQzRTQURmaGlvbjVmMjljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny80MGU1ZDUtZWQ0MS00ZGQzLTkzMzIt NTNkOTYwOTlkN2IxLzEvbG9IOGpITTN4cUhTQzRTQURmaGlvbjVmMjljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny80MGU1ZDUtZWQ0MS00ZGQzLTkzMzItNTNkOTYwOTlkN2Ix LzEvbG9IOGpITTN4cUhTQzRTQURmaGlvbjVmMjljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArNbLfpLg nMjsf6RLFN02Rz3r0TjZl8umC/RThH9bFRJQRIBwtqehuTkabwFpUoL5eszrWGJH t/ygaIM/QZIZrrtukol0hDTlpEMlxdMlR5xF8n+DIdOVUljj8GrwYDjtMFkl1RuX BSVlUB9L3BbHCtsZyHXNaDzMfDwU+o6jAOs2RqCvaZhqrOUYGz+Z2DmTQiq+rBPj XItf0jeA/Sg0YqGL9vjfn1E2rI5Wf3n8rzqNuFwLskfu8p39oRYT4AsAbTDNd/Cm EwhnA7FnMlsSwTeI94sjyRvmzfTlP8RHyWWKB10LgrjrCKqjC84uLikXfQEy/paZ W55CF0/16+4ckA== -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:54 2026 by rpki-client