This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft File: R-lMy3tgHaDKCUafYPZTZA_tjBw.mft (raw, json) Hash identifier: w9l2Sc0KZda17B+HP8Gu5tFjnshirVB4XK4NdxjrMKQ= Subject key identifier: 67:83:7C:50:67:23:5E:0A:BF:B7:22:78:03:ED:C7:77:63:57:2E:68 Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C Certificate issuer: /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c Certificate serial: 019BF763A312CB789CFC2FBB5B02A3A8897E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft Manifest number: 17FD Signing time: Sun 25 Jan 2026 23:01:00 +0000 Manifest this update: Sun 25 Jan 2026 23:01:00 +0000 Manifest next update: Mon 26 Jan 2026 23:01:00 +0000 Files and hashes: 1: AFEWredyAjvqwTGptAJ8OUVB7P4.roa (hash: 2m1v01Idcr237fiGD0VAWcDdfdXlJYmgXEBaQhLhLnM=) 2: NDSds1zweD0ntatyUwleIAzeIJM.roa (hash: +ZrwYT4v0e9jZWWQ6oW4TJF+kc5mZHurMYfZvW1kcaw=) 3: NG0J62IT4TEYyBuMqKM6OpYG_0Q.roa (hash: 0M3OIOezZ3BNzW0tJgVErTfGfdQ/cL0eGWBKnFHK6bA=) 4: R-lMy3tgHaDKCUafYPZTZA_tjBw.crl (hash: v2eZI+T/aobZmmBCkyXl14nR7cU9tXryEPgWuRZTzOg=) 5: c4vO0T2N1wxzMzxlgtz0m8cOMRE.roa (hash: 8oVfciD817bSEs2qpkUByGlM63u7F5Is6kgsu7Ks33U=) 6: eUCYKUszQzKLl5y0TD_e2TpUs_M.roa (hash: sXPTK8NFfl134JTfg8VQ0nOUGTnLwDMaXmy5yBYZ7ag=) 7: ydzz4qC4IHTCEdAs_sR3u8QA-U0.roa (hash: BxYGaauFkfj9FqWYAmJGU+STO4UuDXKQhKUEiwoFjr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:a3:12:cb:78:9c:fc:2f:bb:5b:02:a3:a8:89:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c Validity Not Before: Jan 25 23:01:00 2026 GMT Not After : Jan 26 23:01:00 2026 GMT Subject: CN=67837c5067235e0abfb7227803edc77763572e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3f:96:64:41:f3:b8:a4:e9:e4:aa:97:d9:ee: 51:6e:62:65:06:bf:c8:3d:91:38:39:f9:aa:fe:c9: ee:a9:8f:77:18:35:a7:e0:69:f6:80:7f:8e:cf:43: 61:f5:61:e6:10:fb:5d:7f:3d:44:44:d5:99:3b:22: c3:07:76:a6:f9:75:d6:62:b5:05:e7:35:07:21:a6: 70:91:d8:c2:45:a2:aa:0a:73:eb:d9:7c:0c:7a:e9: e7:93:c4:b3:1c:96:b6:29:2e:9d:59:01:e2:49:d0: da:a7:b1:4c:e7:a5:9f:71:7e:b5:d0:c2:8f:99:c3: 5b:7a:f0:fc:66:2e:c5:84:68:bc:67:e8:64:3c:15: a1:33:b7:a8:0d:0d:a9:e8:5a:bc:f8:86:84:1f:84: 02:26:da:30:1a:10:c8:4a:e6:6e:41:62:38:c4:2c: 22:fc:29:b2:99:4e:aa:de:23:02:9f:bb:7e:4c:e9: 04:da:4e:28:8f:45:0a:91:0d:cd:75:9a:46:c8:71: 0d:1c:9a:e1:2f:e5:5c:2b:51:65:4b:80:d5:de:8e: 1e:f5:2d:12:df:3d:34:ac:05:3c:a9:ae:cd:c3:de: fe:9f:14:c0:ec:fd:59:91:d2:59:85:33:37:76:c2: 8a:7c:41:59:5a:23:c5:37:50:ec:33:15:d7:53:e2: b0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:83:7C:50:67:23:5E:0A:BF:B7:22:78:03:ED:C7:77:63:57:2E:68 X509v3 Authority Key Identifier: keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f4:67:f0:21:04:89:d6:0f:76:63:e1:fa:cc:ac:73:60:8c: 8f:1b:ac:3c:1e:68:e2:53:7b:79:58:76:c1:ba:f5:20:72:fd: 6d:d1:a3:c8:88:0b:4a:75:21:bc:31:df:06:05:ef:1f:d9:3a: 72:cf:6a:b8:b2:50:bb:bf:83:e7:4e:17:6b:ea:62:e1:ac:0d: 69:ff:54:0f:ad:46:c3:23:d6:da:eb:49:82:91:4f:9f:3d:0b: 8e:5c:c6:97:ba:e7:4a:4c:56:99:4b:bc:75:cb:8c:b3:94:6c: 31:7b:3c:88:90:3f:aa:f4:f0:48:f6:68:9d:c0:60:fa:56:05: f4:ad:fb:99:a2:96:fc:26:e2:05:a2:9c:3e:9c:9d:11:53:2a: 53:fa:fb:79:18:b7:e7:65:e2:a7:37:db:8c:f8:12:cd:53:f0: 89:f7:e8:a8:da:88:ef:c0:b2:c3:1b:c1:c3:58:b8:51:29:83: 94:71:89:5c:ab:20:1d:9e:02:30:7f:d3:8a:10:31:f3:18:33: bc:d2:92:91:c7:dc:97:9c:a6:7a:2a:b2:b6:86:b2:a2:a1:94: ed:5e:dc:5b:41:e4:4e:24:62:3d:d9:87:50:a5:a8:fb:68:a6: 0c:8e:2d:f5:d8:5f:2e:73:fd:e1:41:b3:b0:81:5d:49:48:c5: 78:fc:7f:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y6MSy3ic/C+7WwKjqIl+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZTk0Y2NiN2I2MDFkYTBjYTA5NDY5ZjYwZjY1MzY0MGZl ZDhjMWMwHhcNMjYwMTI1MjMwMTAwWhcNMjYwMTI2MjMwMTAwWjAzMTEwLwYDVQQD Eyg2NzgzN2M1MDY3MjM1ZTBhYmZiNzIyNzgwM2VkYzc3NzYzNTcyZTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD+WZEHzuKTp5KqX2e5RbmJlBr/I PZE4Ofmq/snuqY93GDWn4Gn2gH+Oz0Nh9WHmEPtdfz1ERNWZOyLDB3am+XXWYrUF 5zUHIaZwkdjCRaKqCnPr2XwMeunnk8SzHJa2KS6dWQHiSdDap7FM56WfcX610MKP mcNbevD8Zi7FhGi8Z+hkPBWhM7eoDQ2p6Fq8+IaEH4QCJtowGhDISuZuQWI4xCwi /CmymU6q3iMCn7t+TOkE2k4oj0UKkQ3NdZpGyHENHJrhL+VcK1FlS4DV3o4e9S0S 3z00rAU8qa7Nw97+nxTA7P1ZkdJZhTM3dsKKfEFZWiPFN1DsMxXXU+KwGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGeDfFBnI14Kv7cieAPtx3djVy5oMB8GA1UdIwQY MBaAFEfpTMt7YB2gyglGn2D2U2QP7YwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC85ZTI5ZGMtY2VjOS00OWUyLWJjZTQt YmQ5MGEzZjA2ZTE2LzEvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC85ZTI5ZGMtY2VjOS00OWUyLWJjZTQtYmQ5MGEzZjA2ZTE2 LzEvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASvRn8CEE idYPdmPh+sysc2CMjxusPB5o4lN7eVh2wbr1IHL9bdGjyIgLSnUhvDHfBgXvH9k6 cs9quLJQu7+D504Xa+pi4awNaf9UD61GwyPW2utJgpFPnz0LjlzGl7rnSkxWmUu8 dcuMs5RsMXs8iJA/qvTwSPZoncBg+lYF9K37maKW/CbiBaKcPpydEVMqU/r7eRi3 52XipzfbjPgSzVPwiffoqNqI78CywxvBw1i4USmDlHGJXKsgHZ4CMH/TihAx8xgz vNKSkcfcl5ymeiqytoayoqGU7V7cW0HkTiRiPdmHUKWo+2imDI4t9dhfLnP94UGz sIFdSUjFePx/4A== -----END CERTIFICATE-----Generated at Mon Jan 26 03:12:11 2026 by rpki-client