This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft File: l6r4kriZHowCd5yy24ZNMh7r6QU.mft (raw, json) Hash identifier: BHOl3CDrjUouwR/DAhJQXSQDOm1jmqpb7SaeWH5B1fc= Subject key identifier: 58:10:F1:C0:E7:7E:31:6E:8B:12:A4:C7:CB:CB:80:E6:87:B0:55:EF Authority key identifier: 97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05 Certificate issuer: /CN=97aaf892b8991e8c02779cb2db864d321eebe905 Certificate serial: 019BF5AC2C986C44B7554F790EE0B2EF2399 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft Manifest number: 0EC9 Signing time: Sun 25 Jan 2026 15:01:00 +0000 Manifest this update: Sun 25 Jan 2026 15:01:00 +0000 Manifest next update: Mon 26 Jan 2026 15:01:00 +0000 Files and hashes: 1: WB_mADfJlCgt_xSlZ9hPegF8MZQ.roa (hash: kxZ7EdAvbHTtvdvBXeZjcprnDUkeyC7fLZksUUvbJuo=) 2: l6r4kriZHowCd5yy24ZNMh7r6QU.crl (hash: KX+CGCYYH0hSRdGysVnUAcLIp6MT2bf++BPf8Wp2E9c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:2c:98:6c:44:b7:55:4f:79:0e:e0:b2:ef:23:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97aaf892b8991e8c02779cb2db864d321eebe905 Validity Not Before: Jan 25 15:01:00 2026 GMT Not After : Jan 26 15:01:00 2026 GMT Subject: CN=5810f1c0e77e316e8b12a4c7cbcb80e687b055ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:32:4c:ab:5d:b6:9e:ca:cc:cb:d1:90:da:4e: f3:81:cf:94:46:2d:86:2e:5c:fa:13:8c:a5:ec:bf: 31:55:b9:fa:cd:4f:0a:b9:83:cc:a1:bb:19:81:ba: 36:3e:76:14:2e:03:85:89:d4:a5:77:8b:e7:4a:07: ea:b6:f3:99:2f:5f:38:19:ee:21:c1:ee:e9:c0:30: f2:9a:a0:10:96:1d:44:69:69:47:07:02:7b:1e:d9: a7:1c:26:29:63:45:48:c5:8e:db:24:4d:25:62:ac: db:bf:9d:55:48:4b:fd:95:fb:34:ba:3f:ad:54:91: af:20:79:ee:61:15:c6:a3:ad:22:28:6c:eb:f2:ae: 81:9e:e9:7e:ce:14:01:5e:cd:a8:de:fe:6d:3f:18: b5:c9:7a:76:09:2e:92:68:e0:a3:1c:ef:47:ac:e2: d4:af:30:86:44:2a:2f:8f:1f:b8:7b:ef:25:4d:28: 51:62:12:08:bb:a4:7c:83:2d:17:51:dd:aa:83:74: 5e:7b:08:05:1a:bc:4a:f4:28:c0:5b:a3:57:61:73: 94:93:7d:c9:de:72:9f:92:8f:51:0c:fb:47:01:26: 69:df:39:f3:7c:7b:98:00:ba:19:08:3a:87:4d:62: 67:fb:88:da:ae:d6:42:5c:66:7d:06:08:9a:58:53: c2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:10:F1:C0:E7:7E:31:6E:8B:12:A4:C7:CB:CB:80:E6:87:B0:55:EF X509v3 Authority Key Identifier: keyid:97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:5e:7c:76:22:30:b7:57:b3:98:6d:5b:5f:96:59:75:de:6d: 61:61:32:aa:82:fe:15:0c:99:c6:60:d0:40:06:a7:b6:b8:fc: 30:5e:a7:1b:8c:85:0c:76:eb:ed:ca:cc:f2:34:50:c7:35:c8: 53:0a:b3:eb:43:ad:77:6d:69:f5:65:75:3b:c2:a5:20:88:b8: 65:23:eb:ab:f3:19:e3:45:09:7d:66:75:55:63:7d:15:a9:20: 3d:a1:d0:e3:a9:a9:4c:49:50:87:53:1b:71:08:c6:22:75:42: 5a:5b:d1:92:0b:10:45:dd:5c:db:12:23:e6:69:03:d5:91:53: 37:5e:79:21:19:06:24:7e:c8:38:43:cb:93:74:5c:a8:57:f6: e8:8f:48:1d:47:4a:14:b9:a2:4a:80:a2:e2:ce:1d:fe:e0:a5: 25:82:b1:fc:71:ce:39:9c:25:51:f3:80:27:d9:ae:4b:1e:6d: 90:9d:ce:a3:d4:94:b0:d0:ae:86:b5:d3:b9:0d:5c:41:40:07: de:af:5c:96:3c:74:1d:0c:69:a2:94:19:0b:44:74:1b:7a:4e: 1e:84:0a:59:4b:27:39:9e:8c:81:70:27:5a:80:3f:a4:2c:84: 60:7c:d8:73:dd:f0:d7:d1:68:e1:b1:21:a5:d6:0a:a7:25:0a: 9d:62:f5:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rCyYbES3VU95DuCy7yOZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3YWFmODkyYjg5OTFlOGMwMjc3OWNiMmRiODY0ZDMyMWVl YmU5MDUwHhcNMjYwMTI1MTUwMTAwWhcNMjYwMTI2MTUwMTAwWjAzMTEwLwYDVQQD Eyg1ODEwZjFjMGU3N2UzMTZlOGIxMmE0YzdjYmNiODBlNjg3YjA1NWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DJMq122nsrMy9GQ2k7zgc+URi2G Llz6E4yl7L8xVbn6zU8KuYPMobsZgbo2PnYULgOFidSld4vnSgfqtvOZL184Ge4h we7pwDDymqAQlh1EaWlHBwJ7HtmnHCYpY0VIxY7bJE0lYqzbv51VSEv9lfs0uj+t VJGvIHnuYRXGo60iKGzr8q6Bnul+zhQBXs2o3v5tPxi1yXp2CS6SaOCjHO9HrOLU rzCGRCovjx+4e+8lTShRYhIIu6R8gy0XUd2qg3ReewgFGrxK9CjAW6NXYXOUk33J 3nKfko9RDPtHASZp3znzfHuYALoZCDqHTWJn+4jartZCXGZ9BgiaWFPCBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFgQ8cDnfjFuixKkx8vLgOaHsFXvMB8GA1UdIwQY MBaAFJeq+JK4mR6MAnecstuGTTIe6+kFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDZyNGtyaVpIb3dDZDV5eTI0Wk5NaDdyNlFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC80MWZlMWItMmYwZS00ZmFhLTlmZDQt Y2E3NDY4NjdkYWM4LzEvbDZyNGtyaVpIb3dDZDV5eTI0Wk5NaDdyNlFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC80MWZlMWItMmYwZS00ZmFhLTlmZDQtY2E3NDY4NjdkYWM4 LzEvbDZyNGtyaVpIb3dDZDV5eTI0Wk5NaDdyNlFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf158diIw t1ezmG1bX5ZZdd5tYWEyqoL+FQyZxmDQQAantrj8MF6nG4yFDHbr7crM8jRQxzXI Uwqz60Otd21p9WV1O8KlIIi4ZSPrq/MZ40UJfWZ1VWN9FakgPaHQ46mpTElQh1Mb cQjGInVCWlvRkgsQRd1c2xIj5mkD1ZFTN155IRkGJH7IOEPLk3RcqFf26I9IHUdK FLmiSoCi4s4d/uClJYKx/HHOOZwlUfOAJ9muSx5tkJ3Oo9SUsNCuhrXTuQ1cQUAH 3q9cljx0HQxpopQZC0R0G3pOHoQKWUsnOZ6MgXAnWoA/pCyEYHzYc93w19Fo4bEh pdYKpyUKnWL1KA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:31 2026 by rpki-client