This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft File: p_lKuTUFS4bctdatutLf21ZLUkg.mft (raw, json) Hash identifier: UymzcC2cf7KHLWO261yhkPbZA13xfjAPBY9GxrUNOFo= Subject key identifier: 25:1A:8D:E5:AE:FC:DF:36:92:91:E7:67:56:0E:73:09:55:6C:BB:F3 Authority key identifier: A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48 Certificate issuer: /CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248 Certificate serial: 019BFD65C37EC95FF2EB201C6A8A195080EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft Manifest number: 17EF Signing time: Tue 27 Jan 2026 03:01:03 +0000 Manifest this update: Tue 27 Jan 2026 03:01:03 +0000 Manifest next update: Wed 28 Jan 2026 03:01:03 +0000 Files and hashes: 1: 1-qbRbX71ZtqzATiAIr_2cHLpT2E.roa (hash: 80UD49+4eAKYXdHmbKKPrWk/eFWzqmC9nsf2Sb2JWAc=) 2: OHNfoBMAU3xGnwf5tzn2G_YDSFI.roa (hash: T2noCjQvATNrV0LGWxL0yXlHH9lINoswZ6xk9SUmTdM=) 3: _Cx6x6OYI0AEDhlscd8HyWPxJFQ.roa (hash: Dl+MVhNB+0e5OFzfhLng21/Lw1g8tjBPug9HjFBm/XQ=) 4: p_lKuTUFS4bctdatutLf21ZLUkg.crl (hash: 3Hknd2wV6Cp8Pi/whA+6AXPIP2qayJMXpNYDXNYcgZ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:65:c3:7e:c9:5f:f2:eb:20:1c:6a:8a:19:50:80:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248 Validity Not Before: Jan 27 03:01:03 2026 GMT Not After : Jan 28 03:01:03 2026 GMT Subject: CN=251a8de5aefcdf369291e767560e7309556cbbf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8e:b4:dc:59:47:54:99:96:1f:1c:72:8b:d8: 77:a8:ed:9d:db:1b:46:fb:aa:7a:80:4e:16:eb:f8: d8:7a:30:37:7e:e6:b3:7b:f7:1f:50:36:db:3e:d1: 8d:19:86:85:29:cd:12:66:b0:76:4e:ea:69:71:4b: a4:70:31:c6:01:fb:42:74:07:ae:d5:9b:03:c2:18: 27:19:23:19:76:71:a9:a0:6b:0f:0b:8d:ec:16:92: a7:39:76:32:a5:59:fe:d1:d8:30:1c:48:d8:c1:ec: 3c:ed:f8:f3:33:dc:76:58:87:d9:01:a6:7f:24:75: de:9d:3e:6a:93:c4:c0:85:24:67:fa:e9:78:2f:a2: 86:18:95:fb:1f:5f:6a:b1:06:9a:9b:14:8d:a9:b0: 94:bc:71:10:2c:2c:f2:f7:5f:f1:03:a0:9f:3a:51: 01:e5:f3:09:76:13:1d:f3:35:81:a0:e1:8f:53:05: 21:93:d7:fc:c8:bf:5a:8a:3a:92:cd:6e:49:3b:2c: b7:d5:7e:10:d9:9a:38:83:c6:04:34:22:41:33:05: 0e:a6:71:c4:5e:b1:bd:ad:9a:96:1d:bf:b3:1b:1d: c3:a0:34:ed:30:b3:75:7b:de:b2:51:b4:a7:d7:db: ff:32:6d:15:15:69:71:e3:e5:da:6d:79:d0:52:d5: 5e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:1A:8D:E5:AE:FC:DF:36:92:91:E7:67:56:0E:73:09:55:6C:BB:F3 X509v3 Authority Key Identifier: keyid:A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:5f:b1:cd:7c:43:68:b2:7a:8e:8c:e7:71:c7:4c:fe:ca:ae: 2c:12:e4:d8:83:e3:b0:83:9c:c1:ba:15:34:a3:33:b1:cb:0a: d4:2c:40:4c:9b:62:94:32:2c:66:4e:38:51:a8:45:54:db:6a: 4f:29:e4:53:b0:8f:93:9c:39:08:63:c7:b3:62:8e:8b:6d:d3: 3d:ee:e0:a9:23:ce:b9:e2:6e:01:db:0c:60:9d:7e:60:fc:5c: 30:62:6e:71:64:fe:f7:02:7d:77:eb:c2:7f:f2:fa:68:53:47: 78:35:b0:fb:06:92:1a:fb:2a:9c:2e:84:88:dd:c9:eb:6b:03: 70:1e:25:87:03:4c:dd:30:83:0f:68:ee:f5:b7:5f:fe:10:fa: df:bc:53:04:e1:c8:11:ce:17:1a:5b:3b:9a:9b:3c:40:d1:c0: ba:f5:83:e5:01:c6:f5:cd:9a:2c:01:9d:10:0d:3b:46:67:9b: b9:06:85:24:ff:7e:c1:ef:d4:7f:06:f6:67:45:1a:dd:14:47: 99:11:de:50:8f:83:51:43:a1:6f:0e:e7:05:23:ed:df:27:b0: f9:f6:44:84:a9:2f:36:9b:89:0b:d8:5d:04:ae:f7:a0:52:4e: 92:b5:e0:ab:f8:81:da:77:2e:b7:f0:fc:b6:b5:7c:0c:11:51: 19:06:51:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9ZcN+yV/y6yAcaooZUIDqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3Zjk0YWI5MzUwNTRiODZkY2I1ZDZhZGJhZDJkZmRiNTY0 YjUyNDgwHhcNMjYwMTI3MDMwMTAzWhcNMjYwMTI4MDMwMTAzWjAzMTEwLwYDVQQD EygyNTFhOGRlNWFlZmNkZjM2OTI5MWU3Njc1NjBlNzMwOTU1NmNiYmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY603FlHVJmWHxxyi9h3qO2d2xtG +6p6gE4W6/jYejA3fuaze/cfUDbbPtGNGYaFKc0SZrB2TuppcUukcDHGAftCdAeu 1ZsDwhgnGSMZdnGpoGsPC43sFpKnOXYypVn+0dgwHEjYwew87fjzM9x2WIfZAaZ/ JHXenT5qk8TAhSRn+ul4L6KGGJX7H19qsQaamxSNqbCUvHEQLCzy91/xA6CfOlEB 5fMJdhMd8zWBoOGPUwUhk9f8yL9aijqSzW5JOyy31X4Q2Zo4g8YENCJBMwUOpnHE XrG9rZqWHb+zGx3DoDTtMLN1e96yUbSn19v/Mm0VFWlx4+XabXnQUtVeCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUajeWu/N82kpHnZ1YOcwlVbLvzMB8GA1UdIwQY MBaAFKf5Srk1BUuG3LXWrbrS39tWS1JIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy83ZTM4YjItYmVjMS00NDY0LWEwY2Et N2QyNThiNjIwMTY5LzEvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy83ZTM4YjItYmVjMS00NDY0LWEwY2EtN2QyNThiNjIwMTY5 LzEvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcl+xzXxD aLJ6joznccdM/squLBLk2IPjsIOcwboVNKMzscsK1CxATJtilDIsZk44UahFVNtq TynkU7CPk5w5CGPHs2KOi23TPe7gqSPOueJuAdsMYJ1+YPxcMGJucWT+9wJ9d+vC f/L6aFNHeDWw+waSGvsqnC6EiN3J62sDcB4lhwNM3TCDD2ju9bdf/hD637xTBOHI Ec4XGls7mps8QNHAuvWD5QHG9c2aLAGdEA07RmebuQaFJP9+we/Ufwb2Z0Ua3RRH mRHeUI+DUUOhbw7nBSPt3yew+fZEhKkvNpuJC9hdBK73oFJOkrXgq/iB2ncut/D8 trV8DBFRGQZRUA== -----END CERTIFICATE-----Generated at Tue Jan 27 06:06:30 2026 by rpki-client