This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft File: lER-sxl6ox5-aEnxavVaslMB-oI.mft (raw, json) Hash identifier: Df/5riQfu0WR0KYuiPZoE3JEcJcpioQmEoL//78Op4M= Subject key identifier: E9:DE:26:86:95:23:3A:5F:17:E6:74:03:9C:95:AC:3E:2C:D8:7F:2A Authority key identifier: 94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82 Certificate issuer: /CN=94447eb3197aa31e7e6849f16af55ab25301fa82 Certificate serial: 019C24AA7A286E2D434232C27F25A75BAE8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft Manifest number: 0779 Signing time: Tue 03 Feb 2026 18:01:18 +0000 Manifest this update: Tue 03 Feb 2026 18:01:18 +0000 Manifest next update: Wed 04 Feb 2026 18:01:18 +0000 Files and hashes: 1: lER-sxl6ox5-aEnxavVaslMB-oI.crl (hash: wNo//suQPZ6CnnolFqrX08hqqJNb7pfgBjj7PEm37BQ=) 2: r-CzU89_SuyLKe9Iq6cl2csYx4Y.roa (hash: m5kZfLAw+jxc8vjj9yc2VUaqIJQOjYrgrtSTCe9Iz/E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 15:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:24:aa:7a:28:6e:2d:43:42:32:c2:7f:25:a7:5b:ae:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94447eb3197aa31e7e6849f16af55ab25301fa82 Validity Not Before: Feb 3 18:01:18 2026 GMT Not After : Feb 4 18:01:18 2026 GMT Subject: CN=e9de268695233a5f17e674039c95ac3e2cd87f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0f:0e:94:7d:0a:fb:cf:7b:9f:77:a9:6c:c8: 97:d6:48:29:54:97:36:60:86:61:2c:f2:a8:44:eb: 5c:96:5e:1c:4f:4c:ee:cf:80:3b:41:f8:b5:59:20: 2f:48:42:db:43:79:0e:04:82:38:9c:e8:50:b9:e2: a0:85:1e:51:f3:2a:f5:4f:13:46:e4:eb:9c:b3:53: 43:73:24:46:79:db:48:c1:d4:3a:09:78:04:5b:7d: a4:9a:7d:47:cb:08:06:9f:84:9c:b5:48:46:e9:e9: 78:fb:b6:01:31:97:75:41:b5:4f:23:4b:f7:f9:f5: a4:7f:ac:1e:f1:d1:84:c8:cb:61:34:03:cf:e3:c6: 34:47:14:f9:99:8b:a9:05:a0:d2:92:89:fa:68:02: 0c:1e:5b:37:09:1b:23:5e:ae:c0:93:77:17:ce:da: 41:db:56:fe:f6:8b:bf:22:6f:04:79:a6:f4:bc:4d: f7:8f:7f:1b:30:29:4d:90:f9:da:93:87:e6:2f:03: 32:f4:02:a8:73:27:d2:e5:16:b7:44:55:8e:3c:de: 93:f0:92:87:06:65:50:c4:c7:c1:47:c3:34:02:b7: 98:a2:ca:76:10:32:09:42:48:5f:e5:d5:40:7c:11: 48:e2:f7:66:a5:cb:cc:80:c3:c7:a3:5f:b0:36:12: 35:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:DE:26:86:95:23:3A:5F:17:E6:74:03:9C:95:AC:3E:2C:D8:7F:2A X509v3 Authority Key Identifier: keyid:94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:18:3f:d4:85:b2:c3:bf:85:db:77:3d:2e:a8:61:18:11:ac: 7c:f9:23:67:db:2e:5d:7c:c6:a3:33:e1:c7:b9:d4:58:4c:bf: 3a:15:93:c1:7e:ae:59:41:84:5d:02:6c:45:e4:73:b7:de:a2: 4a:bb:6d:1a:b3:c0:66:ce:1a:9e:2a:7b:1a:e7:68:9d:14:35: 5e:f6:c0:c1:87:11:17:b6:08:06:55:c5:a3:20:9f:ec:f2:60: bb:1a:a6:7c:3f:07:df:e1:64:b6:ec:8d:3a:ce:c0:e0:53:a0: 27:c4:f7:13:e2:b7:c0:cc:f9:e5:90:ba:43:b8:7b:02:fc:1c: f7:ef:fa:2b:6a:81:37:a0:d9:b2:d3:26:58:72:61:4c:d3:77: b5:e4:83:b6:ad:80:ed:28:1f:93:b3:02:6e:74:ee:93:08:55: c6:c4:41:0b:bd:37:0d:c1:e1:9c:78:9e:f7:25:55:fc:d8:78: 3d:fe:7a:75:7d:8b:0b:01:82:20:40:9b:94:b1:45:b0:b0:1e: 18:fa:07:a9:5f:10:d8:7a:da:9d:f7:9e:64:de:34:7d:cf:45: da:0f:3f:c9:34:82:06:68:a9:36:46:8e:57:18:f9:7f:8e:a6: de:6e:64:df:05:84:c4:0a:e9:bd:f9:66:ed:f6:80:fc:be:01: a5:6c:26:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwkqnoobi1DQjLCfyWnW66KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NDQ3ZWIzMTk3YWEzMWU3ZTY4NDlmMTZhZjU1YWIyNTMw MWZhODIwHhcNMjYwMjAzMTgwMTE4WhcNMjYwMjA0MTgwMTE4WjAzMTEwLwYDVQQD EyhlOWRlMjY4Njk1MjMzYTVmMTdlNjc0MDM5Yzk1YWMzZTJjZDg3ZjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ8OlH0K+897n3epbMiX1kgpVJc2 YIZhLPKoROtcll4cT0zuz4A7Qfi1WSAvSELbQ3kOBII4nOhQueKghR5R8yr1TxNG 5Oucs1NDcyRGedtIwdQ6CXgEW32kmn1HywgGn4SctUhG6el4+7YBMZd1QbVPI0v3 +fWkf6we8dGEyMthNAPP48Y0RxT5mYupBaDSkon6aAIMHls3CRsjXq7Ak3cXztpB 21b+9ou/Im8Eeab0vE33j38bMClNkPnak4fmLwMy9AKocyfS5Ra3RFWOPN6T8JKH BmVQxMfBR8M0AreYosp2EDIJQkhf5dVAfBFI4vdmpcvMgMPHo1+wNhI1owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOneJoaVIzpfF+Z0A5yVrD4s2H8qMB8GA1UdIwQY MBaAFJREfrMZeqMefmhJ8Wr1WrJTAfqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEVSLXN4bDZveDUtYUVueGF2VmFzbE1CLW9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84ZDBiMDUtMjYzZi00MDNhLWFiZjQt MjM4YmRlMGUxZWY3LzEvbEVSLXN4bDZveDUtYUVueGF2VmFzbE1CLW9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84ZDBiMDUtMjYzZi00MDNhLWFiZjQtMjM4YmRlMGUxZWY3 LzEvbEVSLXN4bDZveDUtYUVueGF2VmFzbE1CLW9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOBg/1IWy w7+F23c9LqhhGBGsfPkjZ9suXXzGozPhx7nUWEy/OhWTwX6uWUGEXQJsReRzt96i SrttGrPAZs4anip7GudonRQ1XvbAwYcRF7YIBlXFoyCf7PJguxqmfD8H3+FktuyN Os7A4FOgJ8T3E+K3wMz55ZC6Q7h7Avwc9+/6K2qBN6DZstMmWHJhTNN3teSDtq2A 7Sgfk7MCbnTukwhVxsRBC703DcHhnHie9yVV/Nh4Pf56dX2LCwGCIECblLFFsLAe GPoHqV8Q2HranfeeZN40fc9F2g8/yTSCBmipNkaOVxj5f46m3m5k3wWExArpvflm 7faA/L4BpWwmDQ== -----END CERTIFICATE-----Generated at Tue Feb 3 22:53:28 2026 by rpki-client