This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft File: L65BLP-oy1z7k7sxq16YkDh4TX8.mft (raw, json) Hash identifier: Vi05sipmPM49e1AtGtbM5oB0YRuHGzrdH9CBDLuj5Ts= Subject key identifier: 12:D5:C4:60:B1:D6:A5:82:7C:B3:96:71:BA:E5:5C:55:1E:3A:CA:B3 Authority key identifier: 2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F Certificate issuer: /CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f Certificate serial: 019BF80804FC1DD46406E24B00F1516EDE63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft Manifest number: 0747 Signing time: Mon 26 Jan 2026 02:00:33 +0000 Manifest this update: Mon 26 Jan 2026 02:00:33 +0000 Manifest next update: Tue 27 Jan 2026 02:00:33 +0000 Files and hashes: 1: G76pXhUALnzYF9eO4XN4eeUAIBo.roa (hash: LQJkxCE+1RXg1nRjsBoSEUXVaKDQRcUp7pEVlIPQHNg=) 2: L65BLP-oy1z7k7sxq16YkDh4TX8.crl (hash: j0r4rIu1dCMUeZnsFNRYR8dIYRnC2of2gwtzZmgh4aU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:04:fc:1d:d4:64:06:e2:4b:00:f1:51:6e:de:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f Validity Not Before: Jan 26 02:00:33 2026 GMT Not After : Jan 27 02:00:33 2026 GMT Subject: CN=12d5c460b1d6a5827cb39671bae55c551e3acab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:50:95:ad:43:e4:11:22:6d:83:7b:9c:01:5b: ca:61:60:f1:5a:2d:e3:8f:df:2e:a4:de:e6:09:28: 41:a4:1f:58:91:ad:2e:00:ba:d5:b6:87:a1:06:02: 1f:e1:43:77:8d:b8:f8:1d:e2:76:c0:fd:4b:98:f9: b7:ce:1f:58:7b:80:5f:64:bf:9d:80:f0:c7:fc:55: 45:3b:1b:c2:3f:5b:7c:7a:71:5d:7d:a6:f2:11:4a: 3a:dd:f5:b9:16:a1:6d:43:52:92:41:d4:2b:fb:87: 84:e7:a3:0d:3d:a0:ee:11:b8:cc:65:84:66:a9:58: 2e:c6:f2:e0:4e:75:0f:f1:7a:38:e8:81:14:db:da: 8f:01:08:5f:97:c4:63:4c:49:37:5f:f9:a0:00:fa: 3e:87:09:d1:af:48:0d:8e:c7:60:fe:b5:31:5e:98: bc:35:8e:56:71:00:9c:06:00:d0:38:fe:d4:50:2c: b7:28:0c:d7:55:f9:c5:5b:e2:45:68:60:8d:70:41: db:c0:ff:26:89:3e:28:99:5a:08:a1:36:de:b0:13: 5b:81:78:51:d9:a3:68:11:f1:cd:31:4c:ee:26:ba: 28:b9:18:57:10:00:c3:71:dd:5e:cc:df:8e:15:7b: 83:44:f0:6c:77:28:f3:e2:ee:1f:6c:26:78:21:d9: d5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D5:C4:60:B1:D6:A5:82:7C:B3:96:71:BA:E5:5C:55:1E:3A:CA:B3 X509v3 Authority Key Identifier: keyid:2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:5b:e3:f2:31:a1:78:a0:46:73:cf:cb:a1:97:cb:b3:6d:d8: 04:09:21:6e:78:14:ee:96:df:de:26:17:f9:82:ef:87:a6:b2: e8:1f:b9:b4:f5:11:13:18:ee:82:3c:c5:c1:33:c0:6d:02:6b: 0a:9e:d8:85:7d:a0:28:bd:a9:14:e8:44:05:ba:27:1d:1a:0c: b7:fc:94:ef:43:8a:97:17:86:cc:61:2e:5a:5a:98:3c:a0:f8: 6a:22:15:3b:b2:cf:b5:e8:bb:db:93:e1:e0:ce:a4:18:f8:59: e3:b3:bb:c5:ec:b2:71:29:a4:04:02:3e:28:df:c8:37:27:8b: 62:fe:0b:eb:78:8d:f7:5d:d5:24:38:22:33:9b:06:1a:95:7b: c7:b6:94:62:1b:f1:d5:5a:3c:9e:d6:d5:4b:92:23:6b:8b:6c: 91:18:6f:77:48:cc:10:aa:d2:7d:16:eb:b5:9a:95:7d:91:a1: 74:51:c0:6c:98:2c:f8:62:d8:ef:b2:5f:be:5c:f7:d8:c0:26: 74:29:5a:ed:4f:82:c4:9b:4d:00:db:04:8b:f1:43:cb:93:a2: 9c:50:e6:82:2c:7d:b5:9a:da:a2:c4:0d:9b:a3:ab:cd:e0:00: f0:eb:10:c6:20:b7:fb:6d:af:9d:83:c0:ed:3c:bf:09:aa:24: a6:1b:f1:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CAT8HdRkBuJLAPFRbt5jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYWU0MTJjZmZhOGNiNWNmYjkzYmIzMWFiNWU5ODkwMzg3 ODRkN2YwHhcNMjYwMTI2MDIwMDMzWhcNMjYwMTI3MDIwMDMzWjAzMTEwLwYDVQQD EygxMmQ1YzQ2MGIxZDZhNTgyN2NiMzk2NzFiYWU1NWM1NTFlM2FjYWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1CVrUPkESJtg3ucAVvKYWDxWi3j j98upN7mCShBpB9Yka0uALrVtoehBgIf4UN3jbj4HeJ2wP1LmPm3zh9Ye4BfZL+d gPDH/FVFOxvCP1t8enFdfabyEUo63fW5FqFtQ1KSQdQr+4eE56MNPaDuEbjMZYRm qVguxvLgTnUP8Xo46IEU29qPAQhfl8RjTEk3X/mgAPo+hwnRr0gNjsdg/rUxXpi8 NY5WcQCcBgDQOP7UUCy3KAzXVfnFW+JFaGCNcEHbwP8miT4omVoIoTbesBNbgXhR 2aNoEfHNMUzuJroouRhXEADDcd1ezN+OFXuDRPBsdyjz4u4fbCZ4IdnVDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLVxGCx1qWCfLOWcbrlXFUeOsqzMB8GA1UdIwQY MBaAFC+uQSz/qMtc+5O7MatemJA4eE1/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDY1QkxQLW95MXo3azdzeHExNllrRGg0VFg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85NGQ1YTEtMWNjMy00OGZjLTk5Y2Mt ODMwYjIyZGQyZGVhLzEvTDY1QkxQLW95MXo3azdzeHExNllrRGg0VFg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi85NGQ1YTEtMWNjMy00OGZjLTk5Y2MtODMwYjIyZGQyZGVh LzEvTDY1QkxQLW95MXo3azdzeHExNllrRGg0VFg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAslvj8jGh eKBGc8/LoZfLs23YBAkhbngU7pbf3iYX+YLvh6ay6B+5tPURExjugjzFwTPAbQJr Cp7YhX2gKL2pFOhEBbonHRoMt/yU70OKlxeGzGEuWlqYPKD4aiIVO7LPtei725Ph 4M6kGPhZ47O7xeyycSmkBAI+KN/INyeLYv4L63iN913VJDgiM5sGGpV7x7aUYhvx 1Vo8ntbVS5Ija4tskRhvd0jMEKrSfRbrtZqVfZGhdFHAbJgs+GLY77Jfvlz32MAm dCla7U+CxJtNANsEi/FDy5OinFDmgix9tZraosQNm6OrzeAA8OsQxiC3+22vnYPA 7Ty/Caokphvx1g== -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:59 2026 by rpki-client