This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft File: lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft (raw, json) Hash identifier: EUOUgeNkdZYJjLNk/khP3T8oqBYGh6TKiFVfP+AVYgQ= Subject key identifier: 1B:CC:94:67:D5:C3:8E:73:2C:E9:B2:9D:49:34:13:A4:83:FB:DB:A7 Authority key identifier: 95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C Certificate issuer: /CN=959efe6ef97728a4282ae2c7b05a240506571f1c Certificate serial: 019BFCF7DE1D5C78DC8DBF1102FFF0D4FC09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft Manifest number: 17F4 Signing time: Tue 27 Jan 2026 01:01:01 +0000 Manifest this update: Tue 27 Jan 2026 01:01:01 +0000 Manifest next update: Wed 28 Jan 2026 01:01:01 +0000 Files and hashes: 1: GOIVhBnn15XT5eXlASEvxn2hNDw.roa (hash: AmDJ5Odj0fdYze4B6QAdyi2ODpezKvZwj7zUISc+vO0=) 2: lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl (hash: SIjsrDgaaMhx26AA6Y2ajGLNXw3Cr3n3cTiIqdtCyMU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f7:de:1d:5c:78:dc:8d:bf:11:02:ff:f0:d4:fc:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=959efe6ef97728a4282ae2c7b05a240506571f1c Validity Not Before: Jan 27 01:01:01 2026 GMT Not After : Jan 28 01:01:01 2026 GMT Subject: CN=1bcc9467d5c38e732ce9b29d493413a483fbdba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:60:93:2f:4c:f8:85:c4:72:ff:58:17:46:f1: 40:37:9b:d6:15:3e:e2:89:f0:a4:9e:f9:2a:8d:cb: b3:6f:73:c0:01:b0:ca:0a:99:fb:d2:10:1e:09:0c: 1a:91:c6:25:2d:e4:95:91:6a:99:f2:ac:ed:60:6c: 17:29:f7:ae:3f:5a:c3:06:e2:ed:39:00:47:60:1e: 60:2d:ff:74:e8:5b:05:83:a5:5c:10:80:0f:51:d3: 90:58:a0:62:fd:e0:9c:f8:de:36:ea:90:7b:58:a8: 32:56:23:20:c2:1e:42:7d:2b:fb:da:3a:0a:d5:6d: a1:ae:d1:f8:d0:71:d9:47:1a:81:6e:cd:48:d0:17: 17:95:5a:c5:cb:25:60:dd:b2:9f:9b:44:cc:54:c6: 18:cc:d7:07:30:07:76:96:c1:e4:0a:c4:42:ab:f7: ed:5b:21:54:80:a3:10:ee:c6:13:b8:3c:8d:82:91: dd:7c:4b:95:7a:9c:3b:0d:3c:d4:13:0e:93:ca:ea: 42:cc:54:f7:3a:5f:bf:08:6d:8b:37:46:40:3a:45: b5:83:28:8d:75:9c:3d:75:e3:0f:6a:4e:66:f3:c7: 5d:28:ad:65:ed:9f:0f:ae:e8:83:f4:25:e0:e8:76: fc:83:bd:07:97:2e:af:12:fe:9b:fd:ac:04:9a:40: 8c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CC:94:67:D5:C3:8E:73:2C:E9:B2:9D:49:34:13:A4:83:FB:DB:A7 X509v3 Authority Key Identifier: keyid:95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:70:c5:6d:86:96:3d:00:6f:d4:35:c1:3a:8d:98:35:24:92: 09:fb:ba:66:bb:51:94:9a:df:82:26:6b:a8:da:0f:6a:91:c7: aa:3f:a2:43:51:38:d0:ec:d5:51:d0:a6:9a:e9:bb:c9:6f:d2: 10:b0:03:43:d1:fe:24:5c:ba:ae:17:55:85:e6:28:30:85:96: 7b:17:30:68:d7:c3:46:62:63:9e:21:13:92:e8:56:de:fc:92: d8:e2:45:8e:13:e0:6e:dd:b7:6d:65:77:73:15:ef:71:8a:1b: 7e:93:cf:ce:be:dd:cd:ee:a2:61:61:33:e3:07:17:25:8e:3a: 5c:42:24:9b:fb:19:fd:ee:35:bf:ff:ba:4a:30:c4:a0:14:56: 68:75:b7:02:d3:69:60:08:42:03:d1:18:01:23:49:18:73:4c: 3b:1c:56:04:70:1a:75:a2:4a:77:39:56:2a:4e:ab:99:a7:27: 49:b1:91:fd:a8:d0:02:05:cf:f3:35:34:2e:60:7f:ed:c6:7d: ad:b6:b1:3f:aa:32:08:4a:65:af:fb:f9:ad:e1:17:bf:71:15: d2:0b:59:08:4d:0a:a3:b2:e8:26:93:56:64:16:9c:58:69:3e: a1:3d:7f:b9:67:66:4b:ff:19:f3:19:22:f5:c2:80:9b:24:8b: 8c:ba:24:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8994dXHjcjb8RAv/w1PwJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1OWVmZTZlZjk3NzI4YTQyODJhZTJjN2IwNWEyNDA1MDY1 NzFmMWMwHhcNMjYwMTI3MDEwMTAxWhcNMjYwMTI4MDEwMTAxWjAzMTEwLwYDVQQD EygxYmNjOTQ2N2Q1YzM4ZTczMmNlOWIyOWQ0OTM0MTNhNDgzZmJkYmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2CTL0z4hcRy/1gXRvFAN5vWFT7i ifCknvkqjcuzb3PAAbDKCpn70hAeCQwakcYlLeSVkWqZ8qztYGwXKfeuP1rDBuLt OQBHYB5gLf906FsFg6VcEIAPUdOQWKBi/eCc+N426pB7WKgyViMgwh5CfSv72joK 1W2hrtH40HHZRxqBbs1I0BcXlVrFyyVg3bKfm0TMVMYYzNcHMAd2lsHkCsRCq/ft WyFUgKMQ7sYTuDyNgpHdfEuVepw7DTzUEw6TyupCzFT3Ol+/CG2LN0ZAOkW1gyiN dZw9deMPak5m88ddKK1l7Z8PruiD9CXg6Hb8g70Hly6vEv6b/awEmkCM+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvMlGfVw45zLOmynUk0E6SD+9unMB8GA1UdIwQY MBaAFJWe/m75dyikKCrix7BaJAUGVx8cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFo3LWJ2bDNLS1FvS3VMSHNGb2tCUVpYSHh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84YzFlNDktN2RkMS00NDhkLTg4MTUt YTA5MjY2YmI0ZDhjLzEvbFo3LWJ2bDNLS1FvS3VMSHNGb2tCUVpYSHh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84YzFlNDktN2RkMS00NDhkLTg4MTUtYTA5MjY2YmI0ZDhj LzEvbFo3LWJ2bDNLS1FvS3VMSHNGb2tCUVpYSHh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcHDFbYaW PQBv1DXBOo2YNSSSCfu6ZrtRlJrfgiZrqNoPapHHqj+iQ1E40OzVUdCmmum7yW/S ELADQ9H+JFy6rhdVheYoMIWWexcwaNfDRmJjniETkuhW3vyS2OJFjhPgbt23bWV3 cxXvcYobfpPPzr7dze6iYWEz4wcXJY46XEIkm/sZ/e41v/+6SjDEoBRWaHW3AtNp YAhCA9EYASNJGHNMOxxWBHAadaJKdzlWKk6rmacnSbGR/ajQAgXP8zU0LmB/7cZ9 rbaxP6oyCEplr/v5reEXv3EV0gtZCE0Ko7LoJpNWZBacWGk+oT1/uWdmS/8Z8xki 9cKAmySLjLokPA== -----END CERTIFICATE-----Generated at Tue Jan 27 10:16:54 2026 by rpki-client