This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft File: l3d1zogEaVmWznfH02gbnCQbNi8.mft (raw, json) Hash identifier: NGBKT1KNB3PI/Nf0YJwqyGw8HSkpK/WbairKZE/nor0= Subject key identifier: 8B:13:7D:B5:BC:25:00:A8:DE:87:29:78:EB:2E:E4:EA:9D:B9:5B:96 Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f Certificate serial: 019BF499981E493C8504A66BD5D86AA53EC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 10:01:04 +0000 Manifest this update: Sun 25 Jan 2026 10:01:04 +0000 Manifest next update: Mon 26 Jan 2026 10:01:04 +0000 Files and hashes: 1: BSE98FzK5j337SGXcJiqoMH_kF4.roa (hash: xTUQIPRKlSvAwXtZUqS4ipgxLNyVd2NotYhIujM5Dgk=) 2: IYDcWXVOin0X4eF-OQ1Vti4U54Q.roa (hash: nqLHyjeiC0RivLdIbTbmn4gjwwFAxF1g54vATpHiW9s=) 3: l3d1zogEaVmWznfH02gbnCQbNi8.crl (hash: dZnzORvH6g2zkEACfs6q2mcB/ZhUA/CQDrzHTH58HbA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:98:1e:49:3c:85:04:a6:6b:d5:d8:6a:a5:3e:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f Validity Not Before: Jan 25 10:01:04 2026 GMT Not After : Jan 26 10:01:04 2026 GMT Subject: CN=8b137db5bc2500a8de872978eb2ee4ea9db95b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e7:bf:9f:9c:51:ee:3e:3c:52:0d:7f:9c:89: 19:6e:5d:0c:4f:83:e8:6a:c9:1f:6f:0f:e1:41:10: 67:ca:0a:d4:23:7c:8c:22:6b:98:d1:74:29:31:2d: db:c1:c4:b0:35:05:f7:9e:70:a7:db:a6:26:24:4e: 5c:4c:b1:0f:9d:f9:84:9c:59:ae:0e:64:bc:e5:1a: 70:55:c3:9e:bc:f9:2a:3e:ef:ec:c0:60:8f:42:76: 88:05:6d:fd:a2:a9:b0:18:dd:d7:48:b1:4b:fb:e0: 55:09:a0:db:13:cd:ca:9d:23:9e:3d:1a:63:26:95: 92:0b:64:2f:c9:c3:3d:53:8c:55:f8:2f:fd:09:53: 99:88:c4:3a:37:9c:d9:f4:0d:77:26:77:21:3e:69: e0:ee:c1:af:7d:42:71:f3:08:ca:0e:cc:13:b7:51: 52:d2:21:30:57:d8:e1:f1:3a:ed:17:9e:f3:d5:79: cf:79:06:4f:ed:a4:34:71:42:e2:94:fb:2d:37:e5: 51:44:c2:36:a4:79:c9:56:5f:e3:48:eb:37:bd:0e: 00:ae:5e:d7:e6:24:69:13:eb:11:ec:54:0e:94:f2: 3d:a6:1c:d9:d0:84:64:76:f6:1f:96:3e:43:55:5b: 2c:d6:b4:3a:1e:58:1c:c0:63:86:df:de:1d:75:79: 09:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:13:7D:B5:BC:25:00:A8:DE:87:29:78:EB:2E:E4:EA:9D:B9:5B:96 X509v3 Authority Key Identifier: keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:18:b7:cf:6d:6e:cb:43:7c:85:aa:c9:55:d9:4d:94:4b:b2: c1:38:37:6b:2e:16:a8:2b:3c:5d:30:32:20:dd:06:6b:be:32: cc:4e:70:92:ef:fe:1f:cb:e3:4f:22:09:06:dc:32:6c:7b:1d: a9:fb:79:da:4b:03:61:dd:dc:2f:f0:4f:d2:08:27:4e:10:eb: 45:aa:cc:20:3c:0d:6b:18:34:f3:ca:cc:34:d1:04:df:0d:94: cd:67:4d:e0:18:cd:54:74:01:42:87:b9:7f:36:cf:e1:7e:16: 1f:d3:3c:0d:00:e6:5f:4f:14:ce:14:7c:db:b1:9b:f3:1b:6d: 3c:83:87:c9:a1:9d:e8:b4:67:8b:d4:9a:b3:c7:1a:68:78:a5: 58:e2:da:ac:7c:6b:5b:14:4c:cd:c2:ee:b3:cb:a5:51:13:43: 43:6c:c3:84:8a:f8:a9:b6:52:e5:dd:d1:32:5d:7c:61:69:13: 50:bc:af:50:db:0a:82:46:85:2e:67:b9:62:6e:62:df:7a:94: 76:b9:09:d3:7f:37:a7:26:94:ff:59:e6:03:5c:ee:fc:17:71: 54:b3:8f:33:d2:c1:f4:ea:63:a1:a3:db:96:3f:5d:8f:d2:92: 86:20:c3:ca:91:a5:17:79:f9:e0:ff:50:5f:41:a1:94:40:c0: 4f:e0:3b:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mZgeSTyFBKZr1dhqpT7BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3Nzc3NWNlODgwNDY5NTk5NmNlNzdjN2QzNjgxYjljMjQx YjM2MmYwHhcNMjYwMTI1MTAwMTA0WhcNMjYwMTI2MTAwMTA0WjAzMTEwLwYDVQQD Eyg4YjEzN2RiNWJjMjUwMGE4ZGU4NzI5NzhlYjJlZTRlYTlkYjk1Yjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApee/n5xR7j48Ug1/nIkZbl0MT4Po askfbw/hQRBnygrUI3yMImuY0XQpMS3bwcSwNQX3nnCn26YmJE5cTLEPnfmEnFmu DmS85RpwVcOevPkqPu/swGCPQnaIBW39oqmwGN3XSLFL++BVCaDbE83KnSOePRpj JpWSC2QvycM9U4xV+C/9CVOZiMQ6N5zZ9A13JnchPmng7sGvfUJx8wjKDswTt1FS 0iEwV9jh8TrtF57z1XnPeQZP7aQ0cULilPstN+VRRMI2pHnJVl/jSOs3vQ4Arl7X 5iRpE+sR7FQOlPI9phzZ0IRkdvYflj5DVVss1rQ6HlgcwGOG394ddXkJHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsTfbW8JQCo3ocpeOsu5OqduVuWMB8GA1UdIwQY MBaAFJd3dc6IBGlZls53x9NoG5wkGzYvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDNkMXpvZ0VhVm1Xem5mSDAyZ2JuQ1FiTmk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iYzhlMTAtNDYxZS00Y2U0LThiZTkt NjIzOTczM2M2MTg0LzEvbDNkMXpvZ0VhVm1Xem5mSDAyZ2JuQ1FiTmk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9iYzhlMTAtNDYxZS00Y2U0LThiZTktNjIzOTczM2M2MTg0 LzEvbDNkMXpvZ0VhVm1Xem5mSDAyZ2JuQ1FiTmk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcRi3z21u y0N8harJVdlNlEuywTg3ay4WqCs8XTAyIN0Ga74yzE5wku/+H8vjTyIJBtwybHsd qft52ksDYd3cL/BP0ggnThDrRarMIDwNaxg088rMNNEE3w2UzWdN4BjNVHQBQoe5 fzbP4X4WH9M8DQDmX08UzhR827Gb8xttPIOHyaGd6LRni9Sas8caaHilWOLarHxr WxRMzcLus8ulURNDQ2zDhIr4qbZS5d3RMl18YWkTULyvUNsKgkaFLme5Ym5i33qU drkJ0383pyaU/1nmA1zu/BdxVLOPM9LB9OpjoaPblj9dj9KShiDDypGlF3n54P9Q X0GhlEDAT+A7LA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:24:08 2026 by rpki-client