This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft File: 1-lolmC97dHESsP81jz0kpWLPz-w.mft (raw, json) Hash identifier: k9ChFmEdIZkjTv1ODwQREUYz66kUHZYtWQ0Wq5+Nzsg= Subject key identifier: 82:29:00:05:C5:9E:2E:0A:99:A7:C1:42:89:7C:E7:DD:77:C7:76:9B Authority key identifier: FA:5A:25:98:2F:7B:74:71:12:B0:FF:35:8F:3D:24:A5:62:CF:CF:EC Certificate issuer: /CN=fa5a25982f7b747112b0ff358f3d24a562cfcfec Certificate serial: 019BF79AF8A8069880A2ADC661C2D92D47C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft Manifest number: 93 Signing time: Mon 26 Jan 2026 00:01:27 +0000 Manifest this update: Mon 26 Jan 2026 00:01:27 +0000 Manifest next update: Tue 27 Jan 2026 00:01:27 +0000 Files and hashes: 1: 1-lolmC97dHESsP81jz0kpWLPz-w.crl (hash: BWM9hahjS5CUrh0EU2zmta/qLRKjyXp4IOYZF4NLALw=) 2: iYN0utCjOjCIPINNJfjhuG0vjOg.roa (hash: 7Wnyb9CGOm4TN0ey7ufrrNiIF/X3LDz9AlFMHrkszjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:f8:a8:06:98:80:a2:ad:c6:61:c2:d9:2d:47:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa5a25982f7b747112b0ff358f3d24a562cfcfec Validity Not Before: Jan 26 00:01:27 2026 GMT Not After : Jan 27 00:01:27 2026 GMT Subject: CN=82290005c59e2e0a99a7c142897ce7dd77c7769b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:61:b2:46:bb:08:d6:2f:5e:45:a3:6b:98:d8: 31:4b:eb:5e:71:eb:ad:26:74:df:e0:5e:a3:7c:5d: 59:c4:13:d0:e7:ee:7f:62:b5:b4:67:40:b6:96:0c: bf:4d:43:b4:66:6d:6a:59:4b:23:b1:64:77:84:82: c6:34:d6:ca:0b:51:53:53:84:b4:af:02:54:a8:33: b9:2d:e5:bf:79:a6:82:de:2d:8a:86:1a:2f:3c:cf: 8e:1e:7a:ae:59:ba:52:75:94:45:ae:01:11:e5:af: b3:5c:42:ab:bd:12:3e:df:da:a4:65:eb:d9:a2:2f: b0:f6:7a:00:94:14:be:37:25:72:82:5b:44:b7:b5: b3:80:1d:2c:0f:a9:5b:4c:95:05:e6:5a:1d:c7:81: 7f:bc:31:71:69:87:88:7b:89:d7:98:7d:f1:5b:09: 33:f4:de:31:b8:6e:cc:f0:5f:e1:28:a0:de:1f:60: af:0f:af:1f:88:d1:60:eb:38:a5:d0:36:54:3a:cf: 38:41:33:72:40:a1:7c:03:b3:ac:b1:89:78:1b:7b: f3:bd:f6:78:f5:3a:bf:30:fa:df:7b:d9:bb:c2:b6: 51:4f:5e:c2:62:4a:23:45:c7:b2:1f:47:76:9c:5a: 86:f2:ab:0e:8f:92:09:af:9a:01:06:e0:24:7f:bb: 36:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:29:00:05:C5:9E:2E:0A:99:A7:C1:42:89:7C:E7:DD:77:C7:76:9B X509v3 Authority Key Identifier: keyid:FA:5A:25:98:2F:7B:74:71:12:B0:FF:35:8F:3D:24:A5:62:CF:CF:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:94:38:cf:0e:57:0d:60:05:57:85:ff:48:1f:76:86:05:00: 18:19:2f:e8:2b:9b:5b:83:d2:48:04:cb:cb:ce:df:6d:7d:4a: 64:e3:a1:02:d0:7a:5e:ca:f5:4d:d3:c1:bd:fc:2b:63:3b:9e: 30:1c:a5:9a:9f:f5:b5:30:fa:fa:63:48:a4:0e:a6:6a:83:17: 1d:ae:84:6b:0b:28:b4:e2:e1:fe:8c:75:43:91:81:b0:1b:61: af:69:57:4b:40:1f:d7:d8:c0:a2:b1:98:c1:43:fc:5b:24:97: a6:79:14:8f:e4:66:91:f0:7a:b4:a8:68:23:65:ea:78:dc:5a: 56:e5:81:22:4b:39:92:8a:3c:a6:e7:99:1f:a4:15:1f:26:6c: 4d:ba:31:78:62:f5:1c:4c:0f:a1:22:da:e5:f3:b4:a7:ef:a6: 89:14:a2:69:cf:f6:4a:e3:b7:66:92:1f:72:5c:1e:6d:af:f4: d4:ea:5c:7a:69:cd:e3:a0:fe:24:b3:bb:88:41:d6:43:a9:36: 91:c0:7b:80:73:ed:8f:40:ed:73:0e:ae:e9:28:08:67:3b:07: 06:32:39:bc:00:4d:f0:ef:9c:76:b9:c6:5f:be:a5:1c:69:67: 44:23:00:57:cb:14:1f:27:34:ad:40:89:ed:a4:8a:26:49:91: f5:bd:66:ba -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv3mvioBpiAoq3GYcLZLUfEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNWEyNTk4MmY3Yjc0NzExMmIwZmYzNThmM2QyNGE1NjJj ZmNmZWMwHhcNMjYwMTI2MDAwMTI3WhcNMjYwMTI3MDAwMTI3WjAzMTEwLwYDVQQD Eyg4MjI5MDAwNWM1OWUyZTBhOTlhN2MxNDI4OTdjZTdkZDc3Yzc3NjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWGyRrsI1i9eRaNrmNgxS+teceut JnTf4F6jfF1ZxBPQ5+5/YrW0Z0C2lgy/TUO0Zm1qWUsjsWR3hILGNNbKC1FTU4S0 rwJUqDO5LeW/eaaC3i2KhhovPM+OHnquWbpSdZRFrgER5a+zXEKrvRI+39qkZevZ oi+w9noAlBS+NyVygltEt7WzgB0sD6lbTJUF5lodx4F/vDFxaYeIe4nXmH3xWwkz 9N4xuG7M8F/hKKDeH2CvD68fiNFg6zil0DZUOs84QTNyQKF8A7OssYl4G3vzvfZ4 9Tq/MPrfe9m7wrZRT17CYkojRceyH0d2nFqG8qsOj5IJr5oBBuAkf7s2IwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFIIpAAXFni4KmafBQol85913x3abMB8GA1UdIwQY MBaAFPpaJZgve3RxErD/NY89JKViz8/sMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1sb2xtQzk3ZEhFU3NQODFqejBrcFdMUHotdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvNzZkN2FlLWRlNjctNGEwNS1hNzFi LWRlNzc0YjBlMzFkZi8xLzEtbG9sbUM5N2RIRVNzUDgxanowa3BXTFB6LXcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2E5Lzc2ZDdhZS1kZTY3LTRhMDUtYTcxYi1kZTc3NGIwZTMx ZGYvMS8xLWxvbG1DOTdkSEVTc1A4MWp6MGtwV0xQei13LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJQ4 zw5XDWAFV4X/SB92hgUAGBkv6CubW4PSSATLy87fbX1KZOOhAtB6Xsr1TdPBvfwr YzueMBylmp/1tTD6+mNIpA6maoMXHa6EawsotOLh/ox1Q5GBsBthr2lXS0Af19jA orGYwUP8WySXpnkUj+RmkfB6tKhoI2XqeNxaVuWBIks5koo8pueZH6QVHyZsTbox eGL1HEwPoSLa5fO0p++miRSiac/2SuO3ZpIfclweba/01OpcemnN46D+JLO7iEHW Q6k2kcB7gHPtj0Dtcw6u6SgIZzsHBjI5vABN8O+cdrnGX76lHGlnRCMAV8sUHyc0 rUCJ7aSKJkmR9b1mug== -----END CERTIFICATE-----Generated at Mon Jan 26 03:12:13 2026 by rpki-client