This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft File: L72QjQxb06rPUoDdgeogOCzZeOo.mft (raw, json) Hash identifier: MA98lX+in6viKc991q/kiwfr6KKERXHTHE2LRS5sYHs= Subject key identifier: EC:E3:82:BE:7B:7B:31:1B:15:8A:C3:75:85:C5:2C:A7:E4:D1:E5:4E Authority key identifier: 2F:BD:90:8D:0C:5B:D3:AA:CF:52:80:DD:81:EA:20:38:2C:D9:78:EA Certificate issuer: /CN=2fbd908d0c5bd3aacf5280dd81ea20382cd978ea Certificate serial: 019BF808731004AF20A53C56ECA923B8CAF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft Manifest number: 01E5 Signing time: Mon 26 Jan 2026 02:01:01 +0000 Manifest this update: Mon 26 Jan 2026 02:01:01 +0000 Manifest next update: Tue 27 Jan 2026 02:01:01 +0000 Files and hashes: 1: KGmdJojDynuXCO2Kz5Vxd1BvZJQ.roa (hash: 67OBKUEXhz+km8nUmISJwb9v5PxLdH7qxV+fNu26gt4=) 2: L72QjQxb06rPUoDdgeogOCzZeOo.crl (hash: 7/O6MtyffXRUpPwrWPQF2GrRjEJyA6u/rtBtinb7iTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:73:10:04:af:20:a5:3c:56:ec:a9:23:b8:ca:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fbd908d0c5bd3aacf5280dd81ea20382cd978ea Validity Not Before: Jan 26 02:01:01 2026 GMT Not After : Jan 27 02:01:01 2026 GMT Subject: CN=ece382be7b7b311b158ac37585c52ca7e4d1e54e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fd:2a:ca:89:44:47:fc:34:ba:1a:b1:91:7b: f9:8a:09:b1:6d:09:28:41:16:45:a7:19:cb:ba:1b: c8:66:66:23:d8:a9:ce:ae:f2:38:77:0c:e7:b8:14: 28:41:72:8b:1d:4d:e1:d1:9e:fa:94:83:d1:ba:17: 62:6d:0b:93:f6:87:f1:9e:82:0d:e2:72:f3:a9:14: d4:42:f9:6f:d9:3c:4e:76:31:9c:9b:43:22:a1:6f: e7:98:bc:74:3f:7b:12:a7:1e:61:4e:fc:33:b6:69: 86:bf:9f:d4:a1:6e:35:37:ef:ec:ad:5a:91:26:29: 02:9e:67:df:e9:86:92:4c:97:9a:5e:af:e5:c6:a5: eb:98:f9:c3:ba:29:7e:98:95:1e:35:bd:e7:51:6e: a4:f8:7b:7a:87:e2:e5:98:58:73:5b:d9:0c:59:0f: cf:0b:dc:7a:6b:78:eb:1d:aa:71:3d:c2:c4:38:69: 86:f1:27:a4:da:15:62:ca:60:d1:f9:32:9b:81:6a: 56:a3:89:c9:b4:35:d1:58:ae:e1:d1:62:bb:25:17: 58:9f:54:04:8f:85:68:32:bc:b0:d1:72:28:5d:4e: 45:3c:c5:98:15:f9:b2:1e:ff:85:4e:a0:38:2c:81: c9:21:9a:0c:b6:12:d3:0a:f3:fe:73:1e:cf:45:5c: 5d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E3:82:BE:7B:7B:31:1B:15:8A:C3:75:85:C5:2C:A7:E4:D1:E5:4E X509v3 Authority Key Identifier: keyid:2F:BD:90:8D:0C:5B:D3:AA:CF:52:80:DD:81:EA:20:38:2C:D9:78:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:af:f8:8b:f5:5f:ef:2a:ab:01:f4:0a:e7:39:de:f8:14:2a: ed:ea:c4:43:cc:31:83:78:a2:0f:d9:4a:12:59:63:b7:0a:16: 44:2d:a6:d3:0c:32:83:1e:9e:b1:75:51:ae:96:89:01:ff:dc: 0d:71:8f:a9:0f:8a:86:d5:a5:6d:e8:7a:16:c6:3e:9c:25:ec: c1:2d:30:ca:4b:6c:03:be:39:f1:fc:56:4f:67:f0:4b:cd:e9: 34:50:44:8a:05:f0:6d:b4:1d:da:c0:6c:dc:57:b9:c5:20:64: 1e:6b:87:f9:4e:75:ab:e1:b5:a4:9b:b5:ab:bf:8b:c6:f6:f6: 5b:41:f6:b8:07:2e:91:25:1e:33:4d:76:6e:1d:32:da:a7:7c: 3c:87:79:3b:1f:bc:42:58:7a:ae:82:ec:cd:c4:79:19:a1:c3: 92:ef:90:2f:8d:d6:6d:0e:e0:34:b6:f4:f1:89:ab:d8:f9:94: 1a:8a:ec:3e:90:67:6f:d3:71:c6:58:e4:0e:71:47:22:ab:b2: c5:59:46:a3:c4:b4:e5:02:b9:00:73:b8:af:1b:65:48:a9:1e: 54:ec:21:7e:0c:a3:41:63:bf:ce:6b:30:a5:b6:47:e6:5f:61: cc:77:c5:2d:1f:0c:a3:db:fe:50:b6:a6:af:c3:50:51:96:7c: db:43:61:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CHMQBK8gpTxW7KkjuMryMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYmQ5MDhkMGM1YmQzYWFjZjUyODBkZDgxZWEyMDM4MmNk OTc4ZWEwHhcNMjYwMTI2MDIwMTAxWhcNMjYwMTI3MDIwMTAxWjAzMTEwLwYDVQQD EyhlY2UzODJiZTdiN2IzMTFiMTU4YWMzNzU4NWM1MmNhN2U0ZDFlNTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2f0qyolER/w0uhqxkXv5igmxbQko QRZFpxnLuhvIZmYj2KnOrvI4dwznuBQoQXKLHU3h0Z76lIPRuhdibQuT9ofxnoIN 4nLzqRTUQvlv2TxOdjGcm0MioW/nmLx0P3sSpx5hTvwztmmGv5/UoW41N+/srVqR JikCnmff6YaSTJeaXq/lxqXrmPnDuil+mJUeNb3nUW6k+Ht6h+LlmFhzW9kMWQ/P C9x6a3jrHapxPcLEOGmG8Sek2hViymDR+TKbgWpWo4nJtDXRWK7h0WK7JRdYn1QE j4VoMryw0XIoXU5FPMWYFfmyHv+FTqA4LIHJIZoMthLTCvP+cx7PRVxdQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzjgr57ezEbFYrDdYXFLKfk0eVOMB8GA1UdIwQY MBaAFC+9kI0MW9Oqz1KA3YHqIDgs2XjqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDcyUWpReGIwNnJQVW9EZGdlb2dPQ3paZU9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNzIzNGMtODg3ZS00MWU5LWFkM2Mt N2VjZGQyZjY0ZDJkLzEvTDcyUWpReGIwNnJQVW9EZGdlb2dPQ3paZU9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNzIzNGMtODg3ZS00MWU5LWFkM2MtN2VjZGQyZjY0ZDJk LzEvTDcyUWpReGIwNnJQVW9EZGdlb2dPQ3paZU9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaa/4i/Vf 7yqrAfQK5zne+BQq7erEQ8wxg3iiD9lKElljtwoWRC2m0wwygx6esXVRrpaJAf/c DXGPqQ+KhtWlbeh6FsY+nCXswS0wyktsA7458fxWT2fwS83pNFBEigXwbbQd2sBs 3Fe5xSBkHmuH+U51q+G1pJu1q7+Lxvb2W0H2uAcukSUeM012bh0y2qd8PId5Ox+8 Qlh6roLszcR5GaHDku+QL43WbQ7gNLb08Ymr2PmUGorsPpBnb9NxxljkDnFHIquy xVlGo8S05QK5AHO4rxtlSKkeVOwhfgyjQWO/zmswpbZH5l9hzHfFLR8Mo9v+ULam r8NQUZZ820Nh6w== -----END CERTIFICATE-----Generated at Mon Jan 26 07:45:21 2026 by rpki-client