This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft File: lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft (raw, json) Hash identifier: iyrbDThl9WOPfTq55ZW6OZRuuEAB/+mmCh6+63eY6gg= Subject key identifier: 0B:28:14:97:0F:D5:0A:D5:60:69:53:D3:2F:2A:57:C6:4C:42:87:4A Authority key identifier: 94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A Certificate issuer: /CN=943bc576732374e8d89d7013ab3630b6e0a9f19a Certificate serial: 019BF91BF3A2829F642FA9104E0B1A979799 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft Manifest number: 1211 Signing time: Mon 26 Jan 2026 07:01:57 +0000 Manifest this update: Mon 26 Jan 2026 07:01:57 +0000 Manifest next update: Tue 27 Jan 2026 07:01:57 +0000 Files and hashes: 1: XA0hanAouJl2ycFS_6jOkWOebDo.roa (hash: A3fTkPkEhBhccpT47iyF3/WYn8UVXxPajs9rFRIKGYs=) 2: lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl (hash: /hNIiXqcS8n05+ZMLv8r7I7glk9qRiH4B58g2IgDKac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:f3:a2:82:9f:64:2f:a9:10:4e:0b:1a:97:97:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=943bc576732374e8d89d7013ab3630b6e0a9f19a Validity Not Before: Jan 26 07:01:57 2026 GMT Not After : Jan 27 07:01:57 2026 GMT Subject: CN=0b2814970fd50ad5606953d32f2a57c64c42874a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d2:9a:86:d4:4a:e3:0d:f3:99:47:f7:ef:be: 8f:4f:01:65:65:94:f3:e1:0e:86:ed:4c:3d:2d:e9: a2:09:60:5f:57:25:91:fd:d8:3a:3d:80:26:d1:76: 1a:52:a8:ba:98:ed:d6:1a:23:cf:ca:79:fa:34:24: 83:5b:57:94:bf:2d:6c:66:b0:9e:16:03:7d:d6:cd: 3f:14:9d:2d:5f:43:1a:96:59:6f:3e:d7:b9:35:4a: 2e:3d:6f:32:cf:23:0a:06:16:0b:0b:61:81:82:ad: 99:10:7c:7a:d4:6a:d7:bc:bc:d7:99:81:81:b7:b8: bf:fc:bd:25:11:0b:56:c3:83:05:fe:31:00:fb:35: 97:07:b5:24:a9:23:bb:02:65:49:70:d1:b9:5a:63: 8a:dc:41:96:08:f6:89:d6:00:09:ff:ed:fc:9d:25: 4e:cc:ac:e9:7c:ae:d6:e9:e2:45:7a:d0:da:a0:e9: 40:92:55:08:c9:4b:0b:fe:0e:c7:7d:75:99:7d:e4: 02:bd:57:df:82:93:c9:76:b1:74:af:d9:36:0a:f4: 1e:34:11:ba:91:e7:d3:61:93:59:d4:ee:1b:47:5f: 64:68:c6:5e:bd:f5:cf:01:04:e4:20:fc:5c:b4:e9: 3c:1a:e8:d0:18:17:f4:23:22:32:73:c6:b8:9d:54: 05:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:28:14:97:0F:D5:0A:D5:60:69:53:D3:2F:2A:57:C6:4C:42:87:4A X509v3 Authority Key Identifier: keyid:94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:c3:af:0a:12:65:51:38:e8:fa:e7:6e:a5:b6:2b:99:6f:0d: 71:ee:35:9e:2b:52:01:24:f8:6c:b8:cf:2c:94:9e:e7:34:3e: 55:15:dc:a0:a6:b4:1c:95:d8:85:63:c1:3b:e1:65:47:c8:0d: eb:d7:0d:13:0f:a2:2e:42:d8:c1:66:92:bd:59:fe:f3:fd:a3: 2b:9d:c6:0a:42:b6:fd:4e:e2:9b:48:f3:cc:22:82:84:db:cb: 77:67:ab:d9:54:39:de:f2:d4:77:66:e6:49:b7:3f:ee:2c:d9: 0c:95:8d:51:a1:6b:25:6d:1e:6d:7c:22:ba:e3:26:e4:b5:0c: ac:ca:93:9f:4f:41:03:8a:fe:a3:1a:cb:6e:9d:fd:a6:3a:64: cf:83:6b:7d:1a:0a:74:82:76:0b:d9:72:19:af:2d:c3:e4:54: 7b:08:b8:c4:12:bf:71:3d:ce:3f:c5:98:bd:b9:6d:3c:66:c7: 17:f3:71:10:65:82:b0:6c:c8:39:43:db:26:a3:0c:f6:57:25: 05:19:60:12:a9:ad:69:47:f7:03:5f:3c:ae:bd:79:7c:a5:97: ea:12:8d:2d:d0:c3:6f:dc:4d:56:78:38:81:00:ea:bb:82:5c: 39:09:d9:f4:ce:3a:9e:c7:c6:00:d6:4c:ee:3a:6f:01:b1:19: 26:3d:bc:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G/Oigp9kL6kQTgsal5eZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0M2JjNTc2NzMyMzc0ZThkODlkNzAxM2FiMzYzMGI2ZTBh OWYxOWEwHhcNMjYwMTI2MDcwMTU3WhcNMjYwMTI3MDcwMTU3WjAzMTEwLwYDVQQD EygwYjI4MTQ5NzBmZDUwYWQ1NjA2OTUzZDMyZjJhNTdjNjRjNDI4NzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tKahtRK4w3zmUf3776PTwFlZZTz 4Q6G7Uw9LemiCWBfVyWR/dg6PYAm0XYaUqi6mO3WGiPPynn6NCSDW1eUvy1sZrCe FgN91s0/FJ0tX0MalllvPte5NUouPW8yzyMKBhYLC2GBgq2ZEHx61GrXvLzXmYGB t7i//L0lEQtWw4MF/jEA+zWXB7UkqSO7AmVJcNG5WmOK3EGWCPaJ1gAJ/+38nSVO zKzpfK7W6eJFetDaoOlAklUIyUsL/g7HfXWZfeQCvVffgpPJdrF0r9k2CvQeNBG6 kefTYZNZ1O4bR19kaMZevfXPAQTkIPxctOk8GujQGBf0IyIyc8a4nVQF3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAsoFJcP1QrVYGlT0y8qV8ZMQodKMB8GA1UdIwQY MBaAFJQ7xXZzI3To2J1wE6s2MLbgqfGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbER2RmRuTWpkT2pZblhBVHF6WXd0dUNwOFpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iOGQwNjUtZWQ4MS00MDllLWIxZjEt NzZhYjNmY2ExZjMyLzEvbER2RmRuTWpkT2pZblhBVHF6WXd0dUNwOFpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9iOGQwNjUtZWQ4MS00MDllLWIxZjEtNzZhYjNmY2ExZjMy LzEvbER2RmRuTWpkT2pZblhBVHF6WXd0dUNwOFpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsOvChJl UTjo+udupbYrmW8Nce41nitSAST4bLjPLJSe5zQ+VRXcoKa0HJXYhWPBO+FlR8gN 69cNEw+iLkLYwWaSvVn+8/2jK53GCkK2/U7im0jzzCKChNvLd2er2VQ53vLUd2bm Sbc/7izZDJWNUaFrJW0ebXwiuuMm5LUMrMqTn09BA4r+oxrLbp39pjpkz4NrfRoK dIJ2C9lyGa8tw+RUewi4xBK/cT3OP8WYvbltPGbHF/NxEGWCsGzIOUPbJqMM9lcl BRlgEqmtaUf3A188rr15fKWX6hKNLdDDb9xNVng4gQDqu4JcOQnZ9M46nsfGANZM 7jpvAbEZJj28rg== -----END CERTIFICATE-----Generated at Mon Jan 26 10:51:54 2026 by rpki-client