This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft File: _Laxe9Ll8UvTdaDA5p38d9lwL0o.mft (raw, json) Hash identifier: cWMHdFseT2JR0dgunuBqKEKBjwkKvieMVJwMVSWAw9k= Subject key identifier: 97:F1:A3:35:95:6C:CE:D6:61:C7:EF:F5:1A:59:1B:72:B7:06:00:3A Authority key identifier: FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A Certificate issuer: /CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a Certificate serial: 019BF79A9C6B89EE767ACEA661C12B40E235 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 00:01:03 +0000 Manifest this update: Mon 26 Jan 2026 00:01:03 +0000 Manifest next update: Tue 27 Jan 2026 00:01:03 +0000 Files and hashes: 1: Ut1UIZXtvGvA8jqfjKx-zoSsSmk.roa (hash: 6WpPy4Xn98zqM430NxCO708hZN1RtW/qmGYYPyMXR+U=) 2: _Laxe9Ll8UvTdaDA5p38d9lwL0o.crl (hash: aagxWUgBpVV772J5Ulb9zVyQ9uUH25l3JftK6a/hKhI=) 3: mgP5YZ0JeZUMwTrpIOlo1p2fUnw.roa (hash: cQXWsVz483MH+u8vJNX4kMADAIEqmSIqmpJYaQ+Q26k=) 4: yfVS_2kk-uHktNjsFEZtdVuHL48.roa (hash: G0Cy8TBWtX3HCmdmOFr3FXRyCZ+xdfsoAZfGcB4o49c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:9c:6b:89:ee:76:7a:ce:a6:61:c1:2b:40:e2:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a Validity Not Before: Jan 26 00:01:03 2026 GMT Not After : Jan 27 00:01:03 2026 GMT Subject: CN=97f1a335956cced661c7eff51a591b72b706003a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ef:4c:92:51:5e:2d:55:48:94:69:b8:dd:ef: ec:bd:91:1e:5a:7b:e8:a2:02:39:19:2f:9a:ba:09: c4:b8:1a:48:9f:e1:32:46:f2:9c:5b:e3:e0:b3:3f: 50:79:69:c9:1f:55:c7:2f:59:2a:cd:61:b0:0f:6d: a1:a0:16:ba:9b:af:ee:7e:2e:d7:cf:7d:9b:cb:71: 40:64:fc:1c:29:3d:66:d8:3c:0f:79:80:a9:b8:7c: 1f:2e:14:5d:3e:ee:ea:30:b1:80:96:e5:d4:b5:64: 09:ba:74:8f:11:63:5e:84:14:a8:3f:5c:69:88:a9: 3b:a2:f3:80:e9:bf:31:e2:78:4e:d9:e2:3d:d6:d6: 83:d5:08:c3:83:51:1d:5a:79:c7:6a:31:e9:44:ed: 9f:d6:ee:92:c2:c3:7d:5b:20:66:d5:24:69:55:e9: c1:8c:17:59:ed:24:71:9f:7d:d3:f1:94:be:97:e3: f2:66:9f:2d:0e:bd:5c:19:8d:39:4c:91:4f:c2:39: af:64:d4:b9:7c:ed:25:b1:ce:e6:0d:db:25:bb:7b: 2a:8f:91:aa:9c:31:cb:c5:c5:5a:81:15:0f:4b:8b: b8:c5:04:d2:7d:ee:5d:0e:33:df:04:80:64:e8:bf: d8:58:1c:fe:f2:19:4f:9a:28:7b:2d:d6:9a:38:4b: 84:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F1:A3:35:95:6C:CE:D6:61:C7:EF:F5:1A:59:1B:72:B7:06:00:3A X509v3 Authority Key Identifier: keyid:FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:23:8e:f7:d0:f8:9a:53:57:e5:eb:ee:8a:38:25:94:27:e9: 7d:92:a7:45:8f:98:fd:ea:4f:1d:35:1a:16:6b:4c:4a:ae:6d: 31:81:e8:8f:55:85:b4:9a:b4:31:c7:ea:d9:2a:e4:09:69:0b: da:22:b6:e1:8b:25:9e:7b:1d:f6:69:49:96:a7:ca:7e:eb:67: 28:35:f7:a6:2e:72:1e:e2:e2:d2:70:a2:68:de:83:44:57:2a: 25:ed:ba:30:92:a6:6e:49:2d:e1:e2:52:64:b3:cc:7e:99:be: 91:ac:1d:9e:57:75:22:c3:c7:2a:5f:0e:48:50:cb:61:8e:23: 3f:d2:98:53:7b:01:ef:2e:2d:74:29:15:dc:aa:07:69:86:71: 19:35:a0:35:54:e5:89:bb:76:74:89:15:84:43:e8:7b:98:a3: 97:98:72:f6:1d:c6:08:87:cf:02:05:b1:93:2d:1c:d4:52:68: 0c:52:d6:66:d9:21:d7:b9:b5:6c:9f:ca:89:e8:03:f8:4f:56: 24:79:6f:33:50:3d:15:cd:d3:fa:6a:36:f6:b7:28:3a:2a:68: af:f7:0a:02:50:c4:66:7c:40:63:b1:47:0f:37:fe:fe:d0:ca: 9a:2b:4c:a7:8f:7b:50:68:8c:9d:f6:09:9d:68:4b:43:30:d1: c8:64:f8:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mpxrie52es6mYcErQOI1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYjZiMTdiZDJlNWYxNGJkMzc1YTBjMGU2OWRmYzc3ZDk3 MDJmNGEwHhcNMjYwMTI2MDAwMTAzWhcNMjYwMTI3MDAwMTAzWjAzMTEwLwYDVQQD Eyg5N2YxYTMzNTk1NmNjZWQ2NjFjN2VmZjUxYTU5MWI3MmI3MDYwMDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0e9MklFeLVVIlGm43e/svZEeWnvo ogI5GS+augnEuBpIn+EyRvKcW+Pgsz9QeWnJH1XHL1kqzWGwD22hoBa6m6/ufi7X z32by3FAZPwcKT1m2DwPeYCpuHwfLhRdPu7qMLGAluXUtWQJunSPEWNehBSoP1xp iKk7ovOA6b8x4nhO2eI91taD1QjDg1EdWnnHajHpRO2f1u6SwsN9WyBm1SRpVenB jBdZ7SRxn33T8ZS+l+PyZp8tDr1cGY05TJFPwjmvZNS5fO0lsc7mDdslu3sqj5Gq nDHLxcVagRUPS4u4xQTSfe5dDjPfBIBk6L/YWBz+8hlPmih7LdaaOEuEewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfxozWVbM7WYcfv9RpZG3K3BgA6MB8GA1UdIwQY MBaAFPy2sXvS5fFL03WgwOad/HfZcC9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0xheGU5TGw4VXZUZGFEQTVwMzhkOWx3TDBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wMWE0MjEtYmRiZi00M2UwLThhZWIt MmM0OGNiMjk4NjQ2LzEvX0xheGU5TGw4VXZUZGFEQTVwMzhkOWx3TDBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8wMWE0MjEtYmRiZi00M2UwLThhZWItMmM0OGNiMjk4NjQ2 LzEvX0xheGU5TGw4VXZUZGFEQTVwMzhkOWx3TDBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbiOO99D4 mlNX5evuijgllCfpfZKnRY+Y/epPHTUaFmtMSq5tMYHoj1WFtJq0Mcfq2SrkCWkL 2iK24Yslnnsd9mlJlqfKfutnKDX3pi5yHuLi0nCiaN6DRFcqJe26MJKmbkkt4eJS ZLPMfpm+kawdnld1IsPHKl8OSFDLYY4jP9KYU3sB7y4tdCkV3KoHaYZxGTWgNVTl ibt2dIkVhEPoe5ijl5hy9h3GCIfPAgWxky0c1FJoDFLWZtkh17m1bJ/KiegD+E9W JHlvM1A9Fc3T+mo29rcoOipor/cKAlDEZnxAY7FHDzf+/tDKmitMp497UGiMnfYJ nWhLQzDRyGT4ng== -----END CERTIFICATE-----Generated at Mon Jan 26 07:44:56 2026 by rpki-client