This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft File: l-rHUzef0i_2UVAz9RPcKCRjrS0.mft (raw, json) Hash identifier: wIyJAfMo4zl1VhgAonu03sIAbiFyx68XIDbGgNlijwo= Subject key identifier: AD:0E:4D:F2:F1:40:1E:7C:79:85:8F:07:3E:85:F4:87:A4:70:20:2F Authority key identifier: 97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D Certificate issuer: /CN=97eac753379fd22ff6515033f513dc282463ad2d Certificate serial: 019BF4D114301BE4D6521A90DEC1AC58F90E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft Manifest number: 0CCA Signing time: Sun 25 Jan 2026 11:01:41 +0000 Manifest this update: Sun 25 Jan 2026 11:01:41 +0000 Manifest next update: Mon 26 Jan 2026 11:01:41 +0000 Files and hashes: 1: HQ9in2gPerdxnIF0h-xK9cg53u8.roa (hash: XzbavZekgRPq70hu9alvl/LqU0pRSF/b7Peoc0VfuYg=) 2: RZOthdT6C9nuwbu3UIjhWwOwnms.roa (hash: 4fpWeQoxlDupX+sNQZiRpRjPM8u1NiZ4u0eyQTGiQO8=) 3: W9BSfJR_Mh1sxRdUNbIw0z_Nuio.roa (hash: 1JlHRLvbAOq6rKIVKlBTqSD7sE9lvV18Y1IWJ6XjyXw=) 4: l-rHUzef0i_2UVAz9RPcKCRjrS0.crl (hash: L6xNNqvNGhG6vSUPu8/sY2qtygfz3+cXkuiYbA8UCE8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d1:14:30:1b:e4:d6:52:1a:90:de:c1:ac:58:f9:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97eac753379fd22ff6515033f513dc282463ad2d Validity Not Before: Jan 25 11:01:41 2026 GMT Not After : Jan 26 11:01:41 2026 GMT Subject: CN=ad0e4df2f1401e7c79858f073e85f487a470202f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e3:19:24:cf:50:29:11:d4:a1:09:a9:d2:c5: fe:b8:e0:d2:8e:30:59:c0:59:31:f3:0a:67:f0:4a: dd:91:01:bd:b8:28:39:27:76:4c:61:86:8b:d6:a6: b4:35:92:57:d9:80:39:2a:16:88:a6:b5:ed:5e:de: 5d:54:a5:1b:1b:11:4c:77:d1:7a:12:7f:5a:04:35: cb:13:a1:4b:af:2e:30:30:3c:0d:4d:0f:73:8b:cf: 61:60:09:28:c9:56:b4:38:43:94:b7:8b:2d:d9:1c: 51:7c:6e:8a:d6:52:5b:42:74:d5:47:9e:b8:2a:b5: 67:e9:13:a9:55:22:c7:e9:eb:ee:29:00:12:68:4f: 09:21:3c:3b:3c:22:9c:fe:34:a5:a4:81:a2:c0:88: 40:e0:ef:09:1d:77:98:36:dc:fd:8e:b9:aa:ef:63: fd:78:43:e2:9f:d9:0b:2a:7f:b7:b3:a3:b2:5c:93: ca:5b:e1:f7:91:8d:1f:17:5a:3f:aa:d0:4d:b8:9a: f1:bc:be:3e:eb:e0:67:1f:9e:4b:ef:ff:8c:7e:fd: b8:6b:aa:9b:75:da:ee:d5:ea:7d:e1:f0:0f:3d:39: 7e:28:e5:c7:e9:a8:cd:64:04:f1:52:96:10:f6:db: 64:16:bc:a1:aa:9f:6b:2c:b3:86:85:8b:43:60:0d: a7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:0E:4D:F2:F1:40:1E:7C:79:85:8F:07:3E:85:F4:87:A4:70:20:2F X509v3 Authority Key Identifier: keyid:97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:66:09:0d:a4:b1:c2:06:fd:57:47:41:45:8e:75:22:5f:23: 1e:a6:0b:49:56:d8:ab:a3:69:13:c8:d1:8b:eb:de:d7:90:7c: bd:03:69:4c:fd:a5:fe:2e:a1:01:e6:5f:b4:1a:9c:81:78:66: 10:28:f7:9e:85:1b:c4:ef:b2:96:0f:de:1b:9a:1c:4f:4b:69: 34:c5:34:28:88:78:d1:cf:e5:e7:be:e9:16:4c:6c:da:00:9b: a0:ed:99:16:5d:fe:51:3c:81:c8:e7:51:47:28:82:1d:ff:1b: 03:46:0b:27:0a:2a:3c:2d:3b:60:d9:46:57:a0:fd:ad:64:fe: 42:c0:1d:97:6f:24:80:f6:4e:3a:7b:31:ba:76:81:ea:52:cc: 77:ca:85:df:06:ea:a3:ac:32:ed:dd:58:9e:65:1e:9c:6d:20: 61:56:98:e5:44:a9:89:9a:5c:71:87:d7:7c:c7:dd:00:37:96: 64:13:ed:fa:64:c4:a9:c4:56:43:fe:22:de:2c:d1:9b:ee:e3: 86:79:d1:76:5a:7d:db:92:f0:42:34:5b:3e:57:7e:c8:bf:40: 25:eb:84:53:d3:54:62:c1:fa:96:89:f6:e6:3f:83:63:be:76: a7:36:fa:04:56:b2:42:8d:37:40:a6:0c:21:60:59:50:fc:9a: bb:8f:39:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00RQwG+TWUhqQ3sGsWPkOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ZWFjNzUzMzc5ZmQyMmZmNjUxNTAzM2Y1MTNkYzI4MjQ2 M2FkMmQwHhcNMjYwMTI1MTEwMTQxWhcNMjYwMTI2MTEwMTQxWjAzMTEwLwYDVQQD EyhhZDBlNGRmMmYxNDAxZTdjNzk4NThmMDczZTg1ZjQ4N2E0NzAyMDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOMZJM9QKRHUoQmp0sX+uODSjjBZ wFkx8wpn8ErdkQG9uCg5J3ZMYYaL1qa0NZJX2YA5KhaIprXtXt5dVKUbGxFMd9F6 En9aBDXLE6FLry4wMDwNTQ9zi89hYAkoyVa0OEOUt4st2RxRfG6K1lJbQnTVR564 KrVn6ROpVSLH6evuKQASaE8JITw7PCKc/jSlpIGiwIhA4O8JHXeYNtz9jrmq72P9 eEPin9kLKn+3s6OyXJPKW+H3kY0fF1o/qtBNuJrxvL4+6+BnH55L7/+Mfv24a6qb ddru1ep94fAPPTl+KOXH6ajNZATxUpYQ9ttkFryhqp9rLLOGhYtDYA2n7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0OTfLxQB58eYWPBz6F9IekcCAvMB8GA1UdIwQY MBaAFJfqx1M3n9Iv9lFQM/UT3CgkY60tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbC1ySFV6ZWYwaV8yVVZBejlSUGNLQ1JqclMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80YjA4YWYtNjdkYi00MmRhLWEwOTQt ZWY1OTBjMWM4ZTEyLzEvbC1ySFV6ZWYwaV8yVVZBejlSUGNLQ1JqclMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC80YjA4YWYtNjdkYi00MmRhLWEwOTQtZWY1OTBjMWM4ZTEy LzEvbC1ySFV6ZWYwaV8yVVZBejlSUGNLQ1JqclMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAymYJDaSx wgb9V0dBRY51Il8jHqYLSVbYq6NpE8jRi+ve15B8vQNpTP2l/i6hAeZftBqcgXhm ECj3noUbxO+ylg/eG5ocT0tpNMU0KIh40c/l577pFkxs2gCboO2ZFl3+UTyByOdR RyiCHf8bA0YLJwoqPC07YNlGV6D9rWT+QsAdl28kgPZOOnsxunaB6lLMd8qF3wbq o6wy7d1YnmUenG0gYVaY5USpiZpccYfXfMfdADeWZBPt+mTEqcRWQ/4i3izRm+7j hnnRdlp925LwQjRbPld+yL9AJeuEU9NUYsH6lon25j+DY752pzb6BFayQo03QKYM IWBZUPyau485gw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:45:29 2026 by rpki-client