This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft File: p-LOMQlICu57P9KEbsj4ZGiFzbo.mft (raw, json) Hash identifier: b9qeym1a4zQawQWHuyvEHv/+D3Zyj3GuWo5wDTI4i2g= Subject key identifier: DD:87:CD:EA:29:21:76:26:17:0D:FA:F6:35:57:C2:BC:37:44:86:A1 Authority key identifier: A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA Certificate issuer: /CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba Certificate serial: 019BF763CF1829AD87FBC2EB4BF06494D281 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft Manifest number: 17FC Signing time: Sun 25 Jan 2026 23:01:11 +0000 Manifest this update: Sun 25 Jan 2026 23:01:11 +0000 Manifest next update: Mon 26 Jan 2026 23:01:11 +0000 Files and hashes: 1: 1FmJS162fQbGwB70KRRIxqQYTPA.roa (hash: wZ0mqVcfmtfFGvqCihWmXQC/JMhhCh9+TH6XvIsulCo=) 2: 6oZ5EjqZisGcBSFRGAY0I58w2z8.roa (hash: L22Ki4i/bHR4nsGJUs2wsOygUoNgPdGybFfVf2yeFJ4=) 3: Jcrma76ylAdAlGHz2It6HjItjVY.roa (hash: gxRmdXqrCHXXDsq6yXCM2hWnNFd/SuqVgvjo3oxIpIo=) 4: MBnHYmvHgfFqe99fU0s4rn0KXV4.roa (hash: Wq2dVDQ3LLdiDt+3Q/nPxFVfP5iqbuOdoj4/h9WIEZA=) 5: OkvrHqovIuCvA9DKylZPzJjsiLw.roa (hash: zDYM6sW/jEHSN9/osUFU8Hrx77FyqMIJs5+jayqems0=) 6: Z-Bltd0Hd8Wiwq9a-uJVdfU9kmY.roa (hash: 9o3h5OJ6yuOmpiGRC8WyL9keSG9Y6pKzn5PzuEfOyaY=) 7: huYXzYbwmRIlzSXqCG_XMzLFfLI.roa (hash: KMWYZ0oGUPWGO8v+CPLewWBemgNzQ4Q4bJS+rkHUyUY=) 8: p-LOMQlICu57P9KEbsj4ZGiFzbo.crl (hash: jNZa42Hu0iidhXT99E2V7ux1PFw/alj0aUSsXE71Jzo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:cf:18:29:ad:87:fb:c2:eb:4b:f0:64:94:d2:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba Validity Not Before: Jan 25 23:01:11 2026 GMT Not After : Jan 26 23:01:11 2026 GMT Subject: CN=dd87cdea29217626170dfaf63557c2bc374486a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0e:8d:f2:b4:ec:70:10:7a:a6:b4:d5:75:05: bf:ec:f6:d5:95:6d:16:92:9c:0b:de:7e:3a:a5:de: 5d:8d:b7:a8:a8:22:99:ef:70:85:94:8e:ed:6d:e3: e0:47:3b:9d:71:3a:67:3c:7b:c3:7e:cf:68:69:5d: 76:af:a2:41:2a:f2:ff:42:76:3f:64:19:2c:cb:6e: 48:1b:6d:65:fb:ca:dc:a0:94:0f:24:08:f7:d2:0c: 29:5d:fd:42:9a:56:b1:ba:67:3e:2f:fa:81:44:c8: df:7c:c0:36:97:23:f6:70:e5:7c:27:15:e2:00:a4: ac:9f:49:39:66:56:5f:4d:96:48:ea:94:11:a6:d2: ce:8e:e9:3f:27:9c:82:36:61:8c:a6:9c:88:1d:9b: ce:fa:17:0d:af:b6:26:e5:92:8d:40:30:20:cb:85: 74:c9:f2:ed:46:61:95:6d:12:44:33:a8:d1:01:62: 2c:c5:b8:d1:53:c1:0a:73:ab:05:35:d6:bd:3d:48: 14:5e:11:ad:32:3a:76:2d:17:5a:8f:d5:5f:2b:71: 78:d3:9a:c5:87:62:70:e6:fa:76:51:2d:d2:fa:6b: f6:4b:33:af:3a:1d:5d:e8:d7:be:a7:83:00:13:10: 66:0b:5f:2c:73:e8:6b:5a:f2:11:e9:ca:4f:c4:5d: 39:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:87:CD:EA:29:21:76:26:17:0D:FA:F6:35:57:C2:BC:37:44:86:A1 X509v3 Authority Key Identifier: keyid:A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ed:af:38:e7:46:21:19:91:08:8a:0b:59:97:02:1c:ce:68: 96:58:c8:e0:7d:b1:f1:1a:7e:4d:a1:e3:8e:04:87:a1:74:29: f1:4b:e8:d4:ce:f3:be:3c:33:cd:25:e4:76:21:65:8d:77:37: d2:08:6c:ca:32:6d:08:72:d1:e4:5d:6d:c1:30:a2:6a:13:80: 2c:db:cc:eb:23:f0:4e:49:6f:7d:25:9a:55:90:37:b8:5c:82: 6a:08:15:53:1b:a0:43:8c:71:1d:ee:56:83:f3:3c:de:1a:12: b7:57:46:9c:b1:3f:a7:ba:34:fd:b8:02:52:c3:38:c8:d8:12: cf:fe:03:05:0d:8e:75:d9:b6:16:a6:98:40:c4:82:7d:bc:15: 49:14:f0:b5:99:5d:ab:01:bd:e2:7e:4d:f9:41:63:b8:0a:a0: a8:40:93:09:21:60:e1:d4:dd:15:e5:91:22:8b:b9:f9:e1:65: 56:0a:cd:87:9b:9c:ea:be:18:1c:f4:72:46:4c:9e:c8:4e:f2: 77:fb:ef:a0:5a:50:d5:63:02:53:62:28:22:f0:0b:99:cf:ee: 75:5a:6b:17:fd:5e:df:bd:3b:90:77:97:e9:5f:ce:c2:7b:26: a6:df:d1:b7:fc:e3:95:ad:0e:90:a0:b0:b8:70:7c:25:d5:ae: e0:57:ef:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y88YKa2H+8LrS/BklNKBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZTJjZTMxMDk0ODBhZWU3YjNmZDI4NDZlYzhmODY0Njg4 NWNkYmEwHhcNMjYwMTI1MjMwMTExWhcNMjYwMTI2MjMwMTExWjAzMTEwLwYDVQQD EyhkZDg3Y2RlYTI5MjE3NjI2MTcwZGZhZjYzNTU3YzJiYzM3NDQ4NmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA6N8rTscBB6prTVdQW/7PbVlW0W kpwL3n46pd5djbeoqCKZ73CFlI7tbePgRzudcTpnPHvDfs9oaV12r6JBKvL/QnY/ ZBksy25IG21l+8rcoJQPJAj30gwpXf1Cmlaxumc+L/qBRMjffMA2lyP2cOV8JxXi AKSsn0k5ZlZfTZZI6pQRptLOjuk/J5yCNmGMppyIHZvO+hcNr7Ym5ZKNQDAgy4V0 yfLtRmGVbRJEM6jRAWIsxbjRU8EKc6sFNda9PUgUXhGtMjp2LRdaj9VfK3F405rF h2Jw5vp2US3S+mv2SzOvOh1d6Ne+p4MAExBmC18sc+hrWvIR6cpPxF05IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2HzeopIXYmFw369jVXwrw3RIahMB8GA1UdIwQY MBaAFKfizjEJSAruez/ShG7I+GRohc26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC1MT01RbElDdTU3UDlLRWJzajRaR2lGemJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9iNjFhZGQtMzJmMC00MmY0LWEzMDEt NzgxOGE4OTQ1NmNiLzEvcC1MT01RbElDdTU3UDlLRWJzajRaR2lGemJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9iNjFhZGQtMzJmMC00MmY0LWEzMDEtNzgxOGE4OTQ1NmNi LzEvcC1MT01RbElDdTU3UDlLRWJzajRaR2lGemJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADe2vOOdG IRmRCIoLWZcCHM5olljI4H2x8Rp+TaHjjgSHoXQp8Uvo1M7zvjwzzSXkdiFljXc3 0ghsyjJtCHLR5F1twTCiahOALNvM6yPwTklvfSWaVZA3uFyCaggVUxugQ4xxHe5W g/M83hoSt1dGnLE/p7o0/bgCUsM4yNgSz/4DBQ2Oddm2FqaYQMSCfbwVSRTwtZld qwG94n5N+UFjuAqgqECTCSFg4dTdFeWRIou5+eFlVgrNh5uc6r4YHPRyRkyeyE7y d/vvoFpQ1WMCU2IoIvALmc/udVprF/1e3707kHeX6V/Ownsmpt/Rt/zjla0OkKCw uHB8JdWu4FfvsA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:32 2026 by rpki-client