This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft File: 0LhJubyQQqFVczGTfkrXFRivYc8.mft (raw, json) Hash identifier: zzo9qVUjk0nvu9MPkmNrWvR8H0s5gucE7iQnxRKQPmM= Subject key identifier: 39:FA:2C:2A:5E:58:25:06:E1:A9:29:5D:43:E8:9C:52:24:D4:6B:50 Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf Certificate serial: 019BFA2D5D7EE40A9DCB4CA6E0173AF6BD74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft Manifest number: 17F5 Signing time: Mon 26 Jan 2026 12:00:35 +0000 Manifest this update: Mon 26 Jan 2026 12:00:35 +0000 Manifest next update: Tue 27 Jan 2026 12:00:35 +0000 Files and hashes: 1: 0LhJubyQQqFVczGTfkrXFRivYc8.crl (hash: Pi0Xo6js9uzwDroip5TcSdBuZCJgy+t2HFBhyNzGBfo=) 2: AHwZLzMSIzjdiILFlHimNy1KVH0.roa (hash: y5lR675u3Up+2TOOlskI792uCxkPkEvihlTIWi4xd1I=) 3: ECoz_Sqbad8xhzrXYOPW_x5hkWs.roa (hash: fhkp1qGbHfnV+x8UJdhpoApY2XHyqofSBo+ygly5ePc=) 4: bCD_tq_1R_WkwnNptbSONR7egi0.roa (hash: kbtkGeS9624Gz1BHggPnBisTuD3laygElyKlMRfT7I8=) 5: g97yKKTw0qoO3z8jCDHeZy3h_sA.roa (hash: BG+WNmPh44Y/W0xYtmXHCAEYFDjw7vRLIThzcdS18hY=) 6: jil2Xf5CXEY6D5-mLBwdepFrP7k.roa (hash: HuI1ETEHE5rq3Q55IY7fwIV6AkP3lT5Eh7F+L+wNoCM=) 7: kxfj2nv76RgasA6SFw9h3YIvRV8.roa (hash: t6hEcQl764cybmk/fsQro0yyYfk+r+X51eI3dq/XPII=) 8: y_I-Rx6c6ZO5cg0hshn5JRXp8OQ.roa (hash: /H74JIaGZ/O6ji1TsDEo7znyzAE5IDXwnYg53gQ9tCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:5d:7e:e4:0a:9d:cb:4c:a6:e0:17:3a:f6:bd:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf Validity Not Before: Jan 26 12:00:35 2026 GMT Not After : Jan 27 12:00:35 2026 GMT Subject: CN=39fa2c2a5e582506e1a9295d43e89c5224d46b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:35:ec:38:58:e1:13:4b:c6:fc:d5:c6:8c:f8: ae:41:a2:d1:5c:95:d8:4b:ba:2a:8b:ae:63:45:1d: 61:5c:12:f0:e0:77:45:8f:45:4b:81:ed:bf:6e:6e: b3:d3:2a:53:0a:a1:67:88:2d:58:7b:c0:b0:65:66: f4:8a:a5:91:75:02:01:74:6d:6c:00:6b:30:72:97: e9:9a:b3:8f:6d:62:05:fe:a4:c8:eb:77:fc:ca:b1: ab:32:83:36:65:7a:ad:3b:1b:a5:c6:f4:70:f3:1f: 8e:7a:c8:4d:85:dc:8c:d3:e8:94:39:6a:3d:f3:15: 4a:fb:6d:dc:1f:df:01:cc:1f:72:4a:6c:4b:06:75: 8c:e3:15:8c:6d:fd:19:b1:ab:53:dc:6f:d0:7c:d8: ce:31:c2:3f:e0:28:32:a1:5b:28:4a:41:a4:9f:39: fb:66:24:88:bb:62:09:61:b4:7e:79:51:46:36:d0: f2:da:fa:16:54:08:3f:cc:4c:6c:ae:5e:d5:e1:f0: 70:a5:29:fa:ab:15:24:87:b8:ed:18:8e:76:ee:29: e9:80:97:1e:ec:77:53:56:fe:0a:e6:b8:a7:22:7d: cd:52:a8:db:1f:b2:ce:31:b0:27:da:d1:3c:52:20: 4e:08:ec:2c:32:17:6f:e7:d7:5f:d7:aa:83:6b:42: 70:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FA:2C:2A:5E:58:25:06:E1:A9:29:5D:43:E8:9C:52:24:D4:6B:50 X509v3 Authority Key Identifier: keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:fc:f8:9e:78:22:ce:73:9c:e2:bd:17:b5:e2:d3:b4:f6:36: 00:10:f4:4a:28:5d:6b:5c:f8:a4:cc:18:20:2a:21:6d:dd:56: d5:bb:45:a6:b5:d5:18:34:5b:6c:97:89:fd:de:3a:e6:c6:3c: 13:9e:0a:29:37:e1:33:6a:33:38:40:17:1e:9d:6a:d8:82:33: 4c:e7:1e:c1:92:84:df:ff:7e:6c:a4:1b:cd:1f:a3:64:c1:7a: 7a:66:eb:cd:6c:58:0b:0a:63:36:f1:66:96:ef:b6:da:35:5a: 9c:3d:a5:ae:b0:2c:7e:87:2b:2f:77:69:78:95:e7:fd:9c:7a: eb:dd:20:28:eb:18:d6:27:ed:cf:13:26:9d:c8:cb:a2:90:10: ba:9d:36:04:39:18:b9:e1:b4:4e:14:48:54:26:06:ef:b1:7a: 54:c0:30:62:70:ff:57:5b:ba:ce:e9:b0:0c:9d:dd:3f:74:20: a4:a3:7a:2a:20:c4:a3:8e:47:d7:a0:25:5a:95:94:16:e2:11: 5b:d3:f6:92:93:83:e1:b4:1b:cc:04:32:69:ef:71:ca:7c:2b: 3c:4f:51:4f:7a:a8:34:20:11:97:86:5b:40:7e:7a:78:3c:c6: 23:28:2a:d4:3f:83:a8:69:fc:39:c5:6f:fb:88:e5:9a:7d:5c: 82:8d:d8:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LV1+5Aqdy0ym4Bc69r10MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYjg0OWI5YmM5MDQyYTE1NTczMzE5MzdlNGFkNzE1MThh ZjYxY2YwHhcNMjYwMTI2MTIwMDM1WhcNMjYwMTI3MTIwMDM1WjAzMTEwLwYDVQQD EygzOWZhMmMyYTVlNTgyNTA2ZTFhOTI5NWQ0M2U4OWM1MjI0ZDQ2YjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDXsOFjhE0vG/NXGjPiuQaLRXJXY S7oqi65jRR1hXBLw4HdFj0VLge2/bm6z0ypTCqFniC1Ye8CwZWb0iqWRdQIBdG1s AGswcpfpmrOPbWIF/qTI63f8yrGrMoM2ZXqtOxulxvRw8x+OeshNhdyM0+iUOWo9 8xVK+23cH98BzB9ySmxLBnWM4xWMbf0ZsatT3G/QfNjOMcI/4CgyoVsoSkGknzn7 ZiSIu2IJYbR+eVFGNtDy2voWVAg/zExsrl7V4fBwpSn6qxUkh7jtGI527inpgJce 7HdTVv4K5rinIn3NUqjbH7LOMbAn2tE8UiBOCOwsMhdv59df16qDa0Jw9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDn6LCpeWCUG4akpXUPonFIk1GtQMB8GA1UdIwQY MBaAFNC4Sbm8kEKhVXMxk35K1xUYr2HPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMExoSnVieVFRcUZWY3pHVGZrclhGUml2WWM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9hM2ZiNjctZDUxNC00YWVlLWFkYjkt NzJiYWQ5ZDczYzgwLzEvMExoSnVieVFRcUZWY3pHVGZrclhGUml2WWM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9hM2ZiNjctZDUxNC00YWVlLWFkYjktNzJiYWQ5ZDczYzgw LzEvMExoSnVieVFRcUZWY3pHVGZrclhGUml2WWM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPz4nngi znOc4r0XteLTtPY2ABD0Sihda1z4pMwYICohbd1W1btFprXVGDRbbJeJ/d465sY8 E54KKTfhM2ozOEAXHp1q2IIzTOcewZKE3/9+bKQbzR+jZMF6embrzWxYCwpjNvFm lu+22jVanD2lrrAsfocrL3dpeJXn/Zx6690gKOsY1iftzxMmncjLopAQup02BDkY ueG0ThRIVCYG77F6VMAwYnD/V1u6zumwDJ3dP3QgpKN6KiDEo45H16AlWpWUFuIR W9P2kpOD4bQbzAQyae9xynwrPE9RT3qoNCARl4ZbQH56eDzGIygq1D+DqGn8OcVv +4jlmn1cgo3YVA== -----END CERTIFICATE-----Generated at Mon Jan 26 15:24:28 2026 by rpki-client