This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft File: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft (raw, json) Hash identifier: KRh7bp27p175KLWKAuz/2WW7BdFQew8YHMUCIfWIcLI= Subject key identifier: 61:55:58:F4:DD:95:F9:EA:40:D7:9A:9B:DE:D0:AA:CF:72:81:C2:7E Authority key identifier: 2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50 Certificate issuer: /CN=2fc20be6167890247303214197658ca7c9676150 Certificate serial: 019BAC13119E0F1CB8A9DAD103F3288A8A53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft Manifest number: 17C0 Signing time: Sun 11 Jan 2026 08:01:29 +0000 Manifest this update: Sun 11 Jan 2026 08:01:29 +0000 Manifest next update: Mon 12 Jan 2026 08:01:29 +0000 Files and hashes: 1: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl (hash: 9/daX5wUAb8aEcGhtLqyxqcFFfK5L40fW1jG2lv8le8=) 2: jCsyE7PeO8MwI0WSmbdCicVhzBc.roa (hash: tv7EyDQ+IoB8bLb4GNx3/nwZP+BAJaSjfG7GlSBQTM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ac:13:11:9e:0f:1c:b8:a9:da:d1:03:f3:28:8a:8a:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fc20be6167890247303214197658ca7c9676150 Validity Not Before: Jan 11 08:01:29 2026 GMT Not After : Jan 12 08:01:29 2026 GMT Subject: CN=615558f4dd95f9ea40d79a9bded0aacf7281c27e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:dc:ec:ab:a7:7d:88:14:5e:d0:c0:94:1f:fc: 24:9f:c8:fc:79:00:34:e0:0d:38:e5:f0:d0:24:f8: d3:82:b6:06:f7:c3:39:23:b0:ff:7f:ff:fa:60:b1: b0:ac:dc:90:3c:6b:aa:a8:c2:2f:9f:02:1c:6d:e6: 84:f9:84:ef:24:b3:84:4a:06:1b:50:76:49:2d:a1: d3:aa:12:44:a6:e1:01:12:0e:2a:ee:31:36:c3:4a: 92:db:9d:ac:f7:cb:c6:e0:00:c1:00:98:b8:bc:48: 55:5e:44:1b:37:98:3b:e9:0d:d6:98:5a:56:dd:26: 8e:29:21:db:1f:72:aa:7c:f7:ad:2d:b4:36:8a:20: 53:89:bd:4c:cf:af:77:54:51:da:8f:bd:5a:10:34: b3:2f:7a:cd:1b:4a:be:a3:b8:b0:03:07:62:15:ec: 7c:71:1b:b8:42:76:6d:14:d2:2c:82:0e:3e:11:d9: c8:a1:da:df:b3:52:ec:80:02:92:11:b5:e2:dd:0d: 39:ab:3c:4d:8a:34:bf:23:76:c5:b2:96:cb:db:d5: ac:fe:e2:e5:5f:9a:87:ed:15:c0:0e:a9:c3:18:88: 17:c0:05:2e:0f:69:3a:af:8f:41:69:3a:a5:11:50: 55:dd:07:33:fa:e5:83:be:95:ef:b3:2e:a7:08:9e: ac:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:55:58:F4:DD:95:F9:EA:40:D7:9A:9B:DE:D0:AA:CF:72:81:C2:7E X509v3 Authority Key Identifier: keyid:2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:72:5e:63:89:b4:b7:24:cb:17:6a:a9:52:07:c8:9a:7d:a6: 7b:9a:0e:d7:84:b3:bb:bd:6c:31:b3:32:96:7e:88:12:09:da: 6c:35:ae:48:33:01:9b:e5:66:30:b3:24:65:b2:29:8c:bb:82: 8a:3f:93:a6:87:63:8b:af:7d:af:bb:6f:90:46:c9:a1:54:60: 43:9a:be:94:8e:55:50:66:86:19:05:c6:0b:4a:9b:d7:5c:7a: e6:58:70:cb:20:37:bf:76:61:6a:b3:3a:2d:d5:a2:06:21:55: 42:23:d0:e1:0a:15:52:35:e4:f1:43:7f:d6:33:99:d8:9d:08: 4e:cf:7b:d1:89:7a:c6:20:e2:2a:8c:a3:7d:ce:50:12:df:19: 51:df:45:ec:87:52:b3:60:17:7a:79:96:d9:ab:33:eb:b4:39: a3:71:94:67:fd:8e:7e:dc:6c:24:c2:cf:81:0c:41:2e:dc:52: 82:5e:1a:98:46:03:d4:1b:26:5a:5c:73:de:a3:54:de:f7:b7: 94:71:83:79:a8:dc:28:ee:db:98:9f:fb:e8:6c:9d:02:1e:db: cb:ea:1d:db:a9:00:e6:93:ea:42:a5:e3:e2:20:f2:6d:8b:f7: 89:e7:85:8d:bc:e6:55:3e:3a:f5:47:f3:9e:cb:2c:e0:69:e2: 7f:d4:0b:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZusExGeDxy4qdrRA/MoiopTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYzIwYmU2MTY3ODkwMjQ3MzAzMjE0MTk3NjU4Y2E3Yzk2 NzYxNTAwHhcNMjYwMTExMDgwMTI5WhcNMjYwMTEyMDgwMTI5WjAzMTEwLwYDVQQD Eyg2MTU1NThmNGRkOTVmOWVhNDBkNzlhOWJkZWQwYWFjZjcyODFjMjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptzsq6d9iBRe0MCUH/wkn8j8eQA0 4A045fDQJPjTgrYG98M5I7D/f//6YLGwrNyQPGuqqMIvnwIcbeaE+YTvJLOESgYb UHZJLaHTqhJEpuEBEg4q7jE2w0qS252s98vG4ADBAJi4vEhVXkQbN5g76Q3WmFpW 3SaOKSHbH3KqfPetLbQ2iiBTib1Mz693VFHaj71aEDSzL3rNG0q+o7iwAwdiFex8 cRu4QnZtFNIsgg4+EdnIodrfs1LsgAKSEbXi3Q05qzxNijS/I3bFspbL29Ws/uLl X5qH7RXADqnDGIgXwAUuD2k6r49BaTqlEVBV3Qcz+uWDvpXvsy6nCJ6sXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGFVWPTdlfnqQNeam97Qqs9ygcJ+MB8GA1UdIwQY MBaAFC/CC+YWeJAkcwMhQZdljKfJZ2FQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mNWZhZmMtNjY4ZC00YWRhLThlYzYt MjQ0OWEzZWM5MjNlLzEvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9mNWZhZmMtNjY4ZC00YWRhLThlYzYtMjQ0OWEzZWM5MjNl LzEvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmHJeY4m0 tyTLF2qpUgfImn2me5oO14Szu71sMbMyln6IEgnabDWuSDMBm+VmMLMkZbIpjLuC ij+Tpodji699r7tvkEbJoVRgQ5q+lI5VUGaGGQXGC0qb11x65lhwyyA3v3ZharM6 LdWiBiFVQiPQ4QoVUjXk8UN/1jOZ2J0ITs970Yl6xiDiKoyjfc5QEt8ZUd9F7IdS s2AXenmW2asz67Q5o3GUZ/2OftxsJMLPgQxBLtxSgl4amEYD1BsmWlxz3qNU3ve3 lHGDeajcKO7bmJ/76GydAh7by+od26kA5pPqQqXj4iDybYv3ieeFjbzmVT469Ufz nsss4Gnif9QLcA== -----END CERTIFICATE-----Generated at Sun Jan 11 15:13:43 2026 by rpki-client