This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft File: L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft (raw, json) Hash identifier: KtJk5v9wc+PrK/GsBqIuqbVkDQaCBknP4Dbz+AWtcuo= Subject key identifier: CE:F8:81:FA:8E:F7:88:E1:8E:17:17:F6:EF:0D:B8:76:EA:76:83:ED Authority key identifier: 2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9 Certificate issuer: /CN=2f407dea499d73d7ebd4e68825188687559cb1f9 Certificate serial: 019BF7D1A2FEDDB7EFACD13253F9726154D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft Manifest number: 17CF Signing time: Mon 26 Jan 2026 01:01:09 +0000 Manifest this update: Mon 26 Jan 2026 01:01:09 +0000 Manifest next update: Tue 27 Jan 2026 01:01:09 +0000 Files and hashes: 1: 7w7oDCky3AV97MuZ6NwGQ3x9HGU.roa (hash: 7XBb43aHvOCSfipcR6qByLYTIyX5HDAp9+iD4nMHLV4=) 2: L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl (hash: +7nj7FdDyJCFus7JgfBsG8BP82s/OK+1Yzns5RwCdxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:a2:fe:dd:b7:ef:ac:d1:32:53:f9:72:61:54:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f407dea499d73d7ebd4e68825188687559cb1f9 Validity Not Before: Jan 26 01:01:09 2026 GMT Not After : Jan 27 01:01:09 2026 GMT Subject: CN=cef881fa8ef788e18e1717f6ef0db876ea7683ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f6:e2:9d:b0:19:7f:88:2d:4b:23:9b:ec:fe: d2:04:be:11:f2:a5:76:29:9b:fa:07:4f:f7:40:96: cf:76:29:dd:07:97:4d:d3:7e:03:7d:bb:fe:93:ba: a0:d7:50:8c:be:89:63:60:dd:9c:dc:ac:8a:8e:e6: e8:ba:5e:7e:dd:c7:0e:22:40:9a:dd:26:d8:4e:51: 4e:a5:e4:63:11:d1:18:9a:d3:1c:b9:1f:48:5c:51: cf:8e:8d:c6:c9:ac:c5:5b:52:55:7a:39:0d:d4:c8: 66:71:8e:b1:6e:c0:70:64:4a:47:db:0a:cb:1c:bf: 56:ab:23:23:7a:9c:9b:2c:7d:eb:00:b2:c7:6e:6f: 1e:4c:0d:b7:a3:2b:fc:35:2b:ec:c1:a0:e2:b8:7e: c0:59:63:12:b1:ac:b2:50:8a:ee:91:6a:12:d9:32: 40:5d:ef:ab:4f:b9:2d:d5:bb:e8:67:49:22:47:9e: 5f:06:70:85:3b:25:2d:db:9c:5a:ed:62:2a:73:ef: a9:3b:de:61:0a:4c:54:b1:0b:2a:bf:79:1f:89:ec: c1:6f:c2:20:d3:08:98:1e:d6:e7:a2:83:b0:e2:91: fe:39:98:91:44:02:3a:e4:6d:26:c8:df:1b:ce:1c: a6:2c:74:5b:d6:1a:29:61:49:77:6f:a5:41:bb:7f: c7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F8:81:FA:8E:F7:88:E1:8E:17:17:F6:EF:0D:B8:76:EA:76:83:ED X509v3 Authority Key Identifier: keyid:2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:37:2f:68:63:e2:ef:29:47:2a:37:f8:66:f5:f6:b7:a8:f7: a0:af:7d:48:5f:aa:c4:df:68:12:7e:f6:c6:2d:31:9d:14:04: 0e:ae:27:35:bc:fe:d8:4f:82:ba:2e:a3:5d:ee:58:7e:f8:a5: 43:b9:e4:ce:a3:ba:1d:62:00:9a:92:b2:a8:9c:8f:a9:85:ba: 86:c6:aa:9d:ad:dd:22:85:8b:33:06:55:a1:5c:40:1a:74:c3: 3d:31:b4:0f:36:2f:1c:5b:8c:9a:9a:cd:e3:ed:ac:27:56:1c: 7f:5a:e0:55:2b:a3:54:f1:01:b2:69:d6:5d:44:d5:16:5e:29: c9:1b:42:4e:c0:b6:04:48:22:ef:05:54:0e:32:00:0b:84:91: 75:e7:7c:db:05:35:15:24:d7:95:90:dd:19:f1:0a:83:76:ea: f4:19:79:5d:7f:fc:48:e8:ba:00:84:db:97:a4:91:e4:15:be: 16:ab:2e:78:6c:76:57:64:13:bf:c9:72:d3:ad:99:24:42:c3: 18:b4:f6:f3:37:76:43:6b:1e:1e:28:1b:5f:26:ad:cd:24:bb: 3b:11:92:7d:2f:37:99:db:04:4f:55:01:33:23:7d:e7:2c:bd: 79:1b:d3:61:29:a6:47:5e:80:8d:ef:cf:bc:14:2b:98:22:28: ce:80:df:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30aL+3bfvrNEyU/lyYVTVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNDA3ZGVhNDk5ZDczZDdlYmQ0ZTY4ODI1MTg4Njg3NTU5 Y2IxZjkwHhcNMjYwMTI2MDEwMTA5WhcNMjYwMTI3MDEwMTA5WjAzMTEwLwYDVQQD EyhjZWY4ODFmYThlZjc4OGUxOGUxNzE3ZjZlZjBkYjg3NmVhNzY4M2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfbinbAZf4gtSyOb7P7SBL4R8qV2 KZv6B0/3QJbPdindB5dN034Dfbv+k7qg11CMvoljYN2c3KyKjuboul5+3ccOIkCa 3SbYTlFOpeRjEdEYmtMcuR9IXFHPjo3GyazFW1JVejkN1MhmcY6xbsBwZEpH2wrL HL9WqyMjepybLH3rALLHbm8eTA23oyv8NSvswaDiuH7AWWMSsayyUIrukWoS2TJA Xe+rT7kt1bvoZ0kiR55fBnCFOyUt25xa7WIqc++pO95hCkxUsQsqv3kfiezBb8Ig 0wiYHtbnooOw4pH+OZiRRAI65G0myN8bzhymLHRb1hopYUl3b6VBu3/HeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM74gfqO94jhjhcX9u8NuHbqdoPtMB8GA1UdIwQY MBaAFC9AfepJnXPX69TmiCUYhodVnLH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iOWE0YWMtYjY3MS00MTFiLWFjNDct MTkwMDVjYjk4OTg5LzEvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9iOWE0YWMtYjY3MS00MTFiLWFjNDctMTkwMDVjYjk4OTg5 LzEvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjcvaGPi 7ylHKjf4ZvX2t6j3oK99SF+qxN9oEn72xi0xnRQEDq4nNbz+2E+Cui6jXe5Yfvil Q7nkzqO6HWIAmpKyqJyPqYW6hsaqna3dIoWLMwZVoVxAGnTDPTG0DzYvHFuMmprN 4+2sJ1Ycf1rgVSujVPEBsmnWXUTVFl4pyRtCTsC2BEgi7wVUDjIAC4SRded82wU1 FSTXlZDdGfEKg3bq9Bl5XX/8SOi6AITbl6SR5BW+FqsueGx2V2QTv8ly062ZJELD GLT28zd2Q2seHigbXyatzSS7OxGSfS83mdsET1UBMyN95yy9eRvTYSmmR16Aje/P vBQrmCIozoDftw== -----END CERTIFICATE-----Generated at Mon Jan 26 08:22:40 2026 by rpki-client