This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft File: le0bk9O85ravzekCC4AWe4XGj1s.mft (raw, json) Hash identifier: CuCjOR0f19zwVjjcdklFk8HcM0E6Nk2vh11jxfo1WiU= Subject key identifier: 3A:AA:33:33:BD:11:97:32:35:F9:5A:1A:3E:EC:1B:D4:BC:47:92:67 Authority key identifier: 95:ED:1B:93:D3:BC:E6:B6:AF:CD:E9:02:0B:80:16:7B:85:C6:8F:5B Certificate issuer: /CN=95ed1b93d3bce6b6afcde9020b80167b85c68f5b Certificate serial: 019BF8AD3AC40EC70508DA5279DAC64DC2B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft Manifest number: 10D5 Signing time: Mon 26 Jan 2026 05:01:00 +0000 Manifest this update: Mon 26 Jan 2026 05:01:00 +0000 Manifest next update: Tue 27 Jan 2026 05:01:00 +0000 Files and hashes: 1: LoExB3SySSOSvyA87CRCDE0Kt-g.roa (hash: qT5LlbFo1gEnOuh8HOShKNDJzx+51hr1jlt2Cq6Q304=) 2: le0bk9O85ravzekCC4AWe4XGj1s.crl (hash: AfCRciQWUFNT1+B5yW6qA5i+CZOPBHoEdezMCaBKOrk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:3a:c4:0e:c7:05:08:da:52:79:da:c6:4d:c2:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95ed1b93d3bce6b6afcde9020b80167b85c68f5b Validity Not Before: Jan 26 05:01:00 2026 GMT Not After : Jan 27 05:01:00 2026 GMT Subject: CN=3aaa3333bd11973235f95a1a3eec1bd4bc479267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:24:72:8f:f6:0c:43:e3:4c:62:68:60:c8:30: 7f:4b:66:c2:5e:ad:46:da:24:09:09:e0:2a:e3:3f: 93:4b:c8:54:f5:4a:f2:bf:77:6a:1d:39:a5:89:57: 1e:56:31:be:bd:de:fc:50:76:fa:09:18:3e:a8:f4: 2d:d9:36:0b:18:7a:43:bc:00:6c:0b:21:63:4e:3e: f5:b7:7c:8c:47:2f:18:1a:c8:8d:c0:df:e3:51:34: 76:ed:2c:ad:22:ae:57:7e:53:f6:23:07:e3:73:38: d2:de:39:f7:ee:dd:ab:e9:24:eb:97:00:85:5e:c7: c1:dc:14:f9:40:8f:ff:d7:1f:e3:be:36:b2:3c:17: ff:90:59:a9:88:74:6d:e2:9c:57:5d:71:45:33:bb: df:fd:95:5c:c4:6a:e0:61:d9:48:ea:27:29:31:14: 30:a4:55:50:1f:12:ee:a2:8b:5c:7e:14:b0:a8:20: 6d:9b:c9:90:b4:18:66:94:f9:3e:d8:2d:d2:7a:14: e4:99:dd:09:1f:06:17:4f:98:f2:03:9c:8a:b5:e7: 21:07:ab:61:dd:5e:74:d1:0d:81:29:10:af:4c:87: 54:9b:d5:61:65:74:5f:e2:e5:29:b1:77:18:12:67: ae:5e:af:71:7f:3b:82:33:fb:4d:00:64:b6:26:a6: 0a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AA:33:33:BD:11:97:32:35:F9:5A:1A:3E:EC:1B:D4:BC:47:92:67 X509v3 Authority Key Identifier: keyid:95:ED:1B:93:D3:BC:E6:B6:AF:CD:E9:02:0B:80:16:7B:85:C6:8F:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:7c:9d:74:d9:00:fa:5e:8b:d3:10:cc:3d:69:ae:99:d6:6d: 03:75:3a:78:54:d8:1f:a8:a5:7b:e4:e5:21:bd:84:9f:6e:21: 31:03:86:fd:5a:a0:5c:ad:e4:5f:32:6f:0b:4c:f3:4c:72:09: 0e:97:d1:ea:6f:c2:d6:d6:99:33:81:0e:5e:6b:42:e0:de:e5: 20:62:41:e6:84:03:fe:6c:c0:e2:1b:dc:87:ad:fe:6e:ea:41: 97:74:46:62:f2:ac:10:f1:e8:d1:cf:36:4c:10:89:d0:c5:e2: cc:7b:ba:bd:7b:f8:ca:01:19:2b:b8:af:59:14:b4:2c:a4:46: 0b:23:4a:23:85:7e:cc:6f:8a:ee:6f:cf:11:44:97:04:ba:86: 88:8c:55:d5:dc:f3:6f:55:15:c4:36:24:69:78:79:2b:65:92: e6:24:eb:34:17:1e:c6:37:85:96:32:79:22:7e:60:fa:09:7f: c2:78:40:f3:f9:43:11:cc:17:a3:f7:fc:a9:d2:b6:c3:df:31: 66:c7:bb:a0:e0:1c:f9:38:e0:bd:1f:72:76:c4:47:b9:37:f5: 8e:13:e7:bd:ae:53:52:a5:b4:bc:01:e6:f8:35:ab:5d:14:fa: 14:14:9b:77:27:d3:85:b6:5e:ae:f3:0a:d1:63:0d:81:cb:8a: c9:73:3c:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rTrEDscFCNpSedrGTcK5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZWQxYjkzZDNiY2U2YjZhZmNkZTkwMjBiODAxNjdiODVj NjhmNWIwHhcNMjYwMTI2MDUwMTAwWhcNMjYwMTI3MDUwMTAwWjAzMTEwLwYDVQQD EygzYWFhMzMzM2JkMTE5NzMyMzVmOTVhMWEzZWVjMWJkNGJjNDc5MjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiRyj/YMQ+NMYmhgyDB/S2bCXq1G 2iQJCeAq4z+TS8hU9Uryv3dqHTmliVceVjG+vd78UHb6CRg+qPQt2TYLGHpDvABs CyFjTj71t3yMRy8YGsiNwN/jUTR27SytIq5XflP2IwfjczjS3jn37t2r6STrlwCF XsfB3BT5QI//1x/jvjayPBf/kFmpiHRt4pxXXXFFM7vf/ZVcxGrgYdlI6icpMRQw pFVQHxLuootcfhSwqCBtm8mQtBhmlPk+2C3SehTkmd0JHwYXT5jyA5yKtechB6th 3V500Q2BKRCvTIdUm9VhZXRf4uUpsXcYEmeuXq9xfzuCM/tNAGS2JqYKrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqqMzO9EZcyNflaGj7sG9S8R5JnMB8GA1UdIwQY MBaAFJXtG5PTvOa2r83pAguAFnuFxo9bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGUwYms5Tzg1cmF2emVrQ0M0QVdlNFhHajFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9jZjJmODctODE5Ny00NjAwLWEzYWIt NTc2Y2U0MTAxNDgzLzEvbGUwYms5Tzg1cmF2emVrQ0M0QVdlNFhHajFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9jZjJmODctODE5Ny00NjAwLWEzYWItNTc2Y2U0MTAxNDgz LzEvbGUwYms5Tzg1cmF2emVrQ0M0QVdlNFhHajFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnyddNkA +l6L0xDMPWmumdZtA3U6eFTYH6ile+TlIb2En24hMQOG/VqgXK3kXzJvC0zzTHIJ DpfR6m/C1taZM4EOXmtC4N7lIGJB5oQD/mzA4hvch63+bupBl3RGYvKsEPHo0c82 TBCJ0MXizHu6vXv4ygEZK7ivWRS0LKRGCyNKI4V+zG+K7m/PEUSXBLqGiIxV1dzz b1UVxDYkaXh5K2WS5iTrNBcexjeFljJ5In5g+gl/wnhA8/lDEcwXo/f8qdK2w98x Zse7oOAc+TjgvR9ydsRHuTf1jhPnva5TUqW0vAHm+DWrXRT6FBSbdyfThbZervMK 0WMNgcuKyXM8bg== -----END CERTIFICATE-----Generated at Mon Jan 26 14:04:22 2026 by rpki-client