This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft File: L7oAN1bRATuUPrT1B_tOfHR3gmk.mft (raw, json) Hash identifier: RMlAX5jRaMSFWdd3fjy752V81Vu/XiUVwqCBPBNrNLk= Subject key identifier: 38:DD:F3:9E:E8:CF:25:55:7D:CE:05:62:E6:26:22:C2:11:06:11:5A Authority key identifier: 2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69 Certificate issuer: /CN=2fba003756d1013b943eb4f507fb4e7c74778269 Certificate serial: 019C06D6C7E02D8BDE463D0D2D4430484421 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft Manifest number: 0122 Signing time: Wed 28 Jan 2026 23:01:05 +0000 Manifest this update: Wed 28 Jan 2026 23:01:05 +0000 Manifest next update: Thu 29 Jan 2026 23:01:05 +0000 Files and hashes: 1: L7oAN1bRATuUPrT1B_tOfHR3gmk.crl (hash: jUOFcSJRKRLraeFsjyc4rhraRGCDVAUj3mln5g0smqw=) 2: Qt5FyyoDlj0YHpPNUFsAKekF6tM.roa (hash: T9UiTSXHZWvGquYOfGokmG8Ee9UykPig78Bt+PH4Uss=) 3: elVY3vqQhqwXbGtUDC6eCusDZg4.roa (hash: /YmMz1Uwy7zMCN1Of52sW1YGZKU0QEfD3dwCbGK6wnY=) 4: hMXGPmesHafq1ldVlCqzO5jhnK4.roa (hash: atdNH467wE+RBwnetrSvy++hllXan+TQKM5dBpraPhA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:06:d6:c7:e0:2d:8b:de:46:3d:0d:2d:44:30:48:44:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fba003756d1013b943eb4f507fb4e7c74778269 Validity Not Before: Jan 28 23:01:05 2026 GMT Not After : Jan 29 23:01:05 2026 GMT Subject: CN=38ddf39ee8cf25557dce0562e62622c21106115a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:49:ba:8a:60:1f:c2:f3:ab:d2:d4:8a:49:69: 4f:26:5f:34:7f:b2:f9:da:aa:c0:ba:62:83:53:41: 65:06:05:21:9f:19:3d:3e:5c:9d:bb:02:24:95:09: 46:b3:67:12:a9:c6:93:21:8b:20:ab:68:99:4b:1a: 66:d7:41:2a:ee:95:83:23:a4:90:66:ee:0d:a0:d6: 12:70:1d:dc:b2:23:ef:29:3e:6e:b2:78:a8:19:db: 04:5b:24:42:32:62:3e:5e:a2:39:c8:0a:fe:4d:1d: 6a:cc:ef:1b:5e:16:40:2b:88:85:57:37:95:ab:da: dd:b3:a7:33:84:a4:45:9f:aa:1d:01:0c:85:7a:4b: 61:a7:7c:58:4e:18:d6:55:2a:57:0c:f1:a0:54:85: d4:9b:d3:61:31:82:be:e3:54:6c:76:37:78:a0:27: 85:12:26:7d:25:89:a9:d6:13:3a:66:12:b0:64:49: e9:e7:34:ed:60:3a:84:ac:2d:81:ee:fc:0b:90:03: 19:90:66:51:4f:67:4a:b5:55:0c:c0:d7:f2:9c:70: 70:9d:33:0b:3d:d4:5b:d2:6f:0b:3e:4a:d8:ea:9e: b1:12:01:24:e4:f8:e8:3d:05:ca:5f:00:9d:0c:76: d7:f1:00:4f:56:04:41:71:b8:bb:c3:0d:f2:19:18: a3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DD:F3:9E:E8:CF:25:55:7D:CE:05:62:E6:26:22:C2:11:06:11:5A X509v3 Authority Key Identifier: keyid:2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:20:04:7d:69:77:dc:36:7c:ac:87:71:bc:eb:69:6e:2d:5c: b9:09:10:2a:ad:7b:9a:ab:1b:93:f7:56:eb:41:2f:6c:d3:e4: 7b:11:37:ca:1d:b0:76:63:6f:51:c4:79:71:ee:8d:36:d3:ab: cd:a5:cd:df:a8:cd:2c:19:2b:ba:57:36:6e:d2:68:97:de:a4: d7:5e:88:35:1b:7f:58:70:bf:c0:fc:8b:ea:55:9b:25:cf:b1: a0:86:c0:f2:e0:33:83:cf:29:50:67:85:ae:40:5c:03:0c:f1: 8f:58:cd:55:27:70:54:b2:60:fc:b4:b6:ef:d0:b5:9a:8d:0e: 1f:66:bc:64:21:42:7d:7d:c0:02:e5:3c:84:9c:eb:71:54:4b: 50:25:78:2b:f7:d8:09:d1:5f:50:bf:f2:13:f6:8e:ce:d3:b0: 7e:06:3b:62:40:d6:c8:46:26:bf:a9:7a:01:0a:9c:c9:14:cf: 9b:28:2c:99:cb:0c:63:cf:2f:10:89:fd:e5:91:fa:ba:8c:37: 55:a4:2b:51:ed:7c:0d:87:16:14:4e:33:02:0b:df:bd:f5:b2: 87:50:11:fb:d6:37:09:f7:a3:d3:02:47:ee:a2:8d:24:09:14: a5:d1:c7:b5:fa:0d:5e:08:08:69:09:a2:9c:a4:3f:99:bb:1c: 83:28:e2:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwG1sfgLYveRj0NLUQwSEQhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYmEwMDM3NTZkMTAxM2I5NDNlYjRmNTA3ZmI0ZTdjNzQ3 NzgyNjkwHhcNMjYwMTI4MjMwMTA1WhcNMjYwMTI5MjMwMTA1WjAzMTEwLwYDVQQD EygzOGRkZjM5ZWU4Y2YyNTU1N2RjZTA1NjJlNjI2MjJjMjExMDYxMTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUm6imAfwvOr0tSKSWlPJl80f7L5 2qrAumKDU0FlBgUhnxk9PlyduwIklQlGs2cSqcaTIYsgq2iZSxpm10Eq7pWDI6SQ Zu4NoNYScB3csiPvKT5usnioGdsEWyRCMmI+XqI5yAr+TR1qzO8bXhZAK4iFVzeV q9rds6czhKRFn6odAQyFekthp3xYThjWVSpXDPGgVIXUm9NhMYK+41Rsdjd4oCeF EiZ9JYmp1hM6ZhKwZEnp5zTtYDqErC2B7vwLkAMZkGZRT2dKtVUMwNfynHBwnTML PdRb0m8LPkrY6p6xEgEk5PjoPQXKXwCdDHbX8QBPVgRBcbi7ww3yGRijDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjd857ozyVVfc4FYuYmIsIRBhFaMB8GA1UdIwQY MBaAFC+6ADdW0QE7lD609Qf7Tnx0d4JpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDdvQU4xYlJBVHVVUHJUMUJfdE9mSFIzZ21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy82MjJmZGItMGU1Ni00Yzg3LTg2NmIt YjMxZjI1MmYxOTY5LzEvTDdvQU4xYlJBVHVVUHJUMUJfdE9mSFIzZ21rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy82MjJmZGItMGU1Ni00Yzg3LTg2NmItYjMxZjI1MmYxOTY5 LzEvTDdvQU4xYlJBVHVVUHJUMUJfdE9mSFIzZ21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARiAEfWl3 3DZ8rIdxvOtpbi1cuQkQKq17mqsbk/dW60EvbNPkexE3yh2wdmNvUcR5ce6NNtOr zaXN36jNLBkrulc2btJol96k116INRt/WHC/wPyL6lWbJc+xoIbA8uAzg88pUGeF rkBcAwzxj1jNVSdwVLJg/LS279C1mo0OH2a8ZCFCfX3AAuU8hJzrcVRLUCV4K/fY CdFfUL/yE/aOztOwfgY7YkDWyEYmv6l6AQqcyRTPmygsmcsMY88vEIn95ZH6uow3 VaQrUe18DYcWFE4zAgvfvfWyh1AR+9Y3Cfej0wJH7qKNJAkUpdHHtfoNXggIaQmi nKQ/mbscgyjihA== -----END CERTIFICATE-----Generated at Thu Jan 29 00:58:34 2026 by rpki-client