This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft File: L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft (raw, json) Hash identifier: 6MfxxI45zLbG2Dn480sKqLxgSpDMeo11OpCtJdgo02Q= Subject key identifier: 56:ED:53:1C:13:BC:81:4D:39:1E:E5:55:42:60:5B:28:6C:1E:54:1B Authority key identifier: 2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B Certificate issuer: /CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b Certificate serial: 019BFE0AD725EA1783CFE02423C2B680197A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft Manifest number: 17ED Signing time: Tue 27 Jan 2026 06:01:21 +0000 Manifest this update: Tue 27 Jan 2026 06:01:21 +0000 Manifest next update: Wed 28 Jan 2026 06:01:21 +0000 Files and hashes: 1: L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl (hash: HQ/41nj+l+Gm6qXkNIQhWcx06d6aBGHQJpzCs/YJSK4=) 2: W6FjOnvEDK4nIE1NTMn5BVz3fuM.roa (hash: 3HTrKjjRsVy1cVU/H1CFW3GVw/q8a/eXNoo6L1gCpFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:0a:d7:25:ea:17:83:cf:e0:24:23:c2:b6:80:19:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b Validity Not Before: Jan 27 06:01:21 2026 GMT Not After : Jan 28 06:01:21 2026 GMT Subject: CN=56ed531c13bc814d391ee55542605b286c1e541b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0e:29:4a:28:74:66:b8:cd:09:5d:33:54:22: 75:61:6d:6e:d0:ef:75:82:6e:84:d3:45:3e:68:69: 87:6d:c7:03:ba:23:82:b2:1d:6a:8e:93:56:a1:dd: 8b:ef:08:56:9f:14:09:a1:7c:b2:57:1c:ec:ce:48: c6:b3:f0:6a:da:51:c8:03:3d:32:05:4e:4a:96:9f: f6:4d:48:f3:df:ef:fb:1f:5d:ff:9f:26:6b:5c:fc: 09:0c:cd:22:ab:9e:12:f0:9f:9e:6f:d9:86:42:e0: 8e:16:9c:2b:b4:cb:68:df:6d:81:6a:d2:d5:83:c2: 40:f8:02:45:bc:26:41:7c:a9:29:d0:fe:44:cf:1d: 77:f4:40:63:50:07:bb:e1:04:6a:db:91:a9:52:f9: 5a:0e:71:ad:a7:11:91:98:59:50:d2:c6:cb:1f:02: c3:b4:fe:14:66:33:cf:fe:8a:4c:ca:fc:07:bb:b7: 43:a5:b1:6c:37:6e:e0:49:14:14:38:4c:46:f7:c1: e2:66:68:bd:37:5c:1c:3c:ba:3d:d7:18:2d:e6:72: 0b:81:02:6a:2f:d9:61:97:b9:ab:ae:32:80:5d:4f: 8b:f3:20:1e:01:dc:56:8f:ef:d9:a6:f1:46:ad:44: 17:c9:ae:11:9d:87:de:09:ef:63:be:06:c3:34:d3: 51:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:ED:53:1C:13:BC:81:4D:39:1E:E5:55:42:60:5B:28:6C:1E:54:1B X509v3 Authority Key Identifier: keyid:2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:64:0f:21:55:ce:5c:ec:96:15:26:c1:f3:5f:88:77:b8:ad: 35:05:ce:0f:6a:da:ef:81:61:47:62:3f:8c:14:e5:6e:94:45: 66:5a:c4:23:e7:82:ec:c6:46:f6:d7:43:2f:31:cf:bd:7a:e9: 2f:c6:76:8e:a5:ca:5e:17:a3:75:e8:4f:40:71:02:d8:71:ac: f8:2a:c6:a8:cd:36:81:e8:78:8b:b1:27:ca:39:e2:00:7a:72: 0f:8f:38:2a:98:96:63:45:7a:71:c2:91:fc:f2:2f:d5:15:3c: ff:f5:00:af:d4:c4:92:1f:56:37:8c:75:b5:b5:52:68:2d:e0: 69:30:58:10:38:10:16:4d:7f:12:b0:3f:a4:f4:df:30:34:04: c1:e0:f1:72:18:31:dd:49:22:30:57:3d:27:91:78:84:d4:68: a4:2a:78:d9:fb:03:a2:25:19:af:c2:0e:90:e3:43:a8:85:0f: a1:ec:fb:6a:20:f2:99:f7:e5:c7:f0:46:fb:55:9b:84:6a:ad: c6:f0:9d:47:e5:85:07:1c:83:3f:71:5d:f2:20:cc:66:18:d0: dd:4b:b2:b5:20:c0:2c:93:b0:26:6f:93:79:62:94:5b:3c:d8: 5f:82:01:48:d4:4a:9d:e7:17:c0:4f:97:c1:87:26:8f:5d:d6: 87:d8:d3:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+Ctcl6heDz+AkI8K2gBl6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOTVhMDU4OWIyODQ2ZWJmYzczNjZjMDZjNjQ0YjQ2YTJk OGQzMmIwHhcNMjYwMTI3MDYwMTIxWhcNMjYwMTI4MDYwMTIxWjAzMTEwLwYDVQQD Eyg1NmVkNTMxYzEzYmM4MTRkMzkxZWU1NTU0MjYwNWIyODZjMWU1NDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA4pSih0ZrjNCV0zVCJ1YW1u0O91 gm6E00U+aGmHbccDuiOCsh1qjpNWod2L7whWnxQJoXyyVxzszkjGs/Bq2lHIAz0y BU5Klp/2TUjz3+/7H13/nyZrXPwJDM0iq54S8J+eb9mGQuCOFpwrtMto322BatLV g8JA+AJFvCZBfKkp0P5Ezx139EBjUAe74QRq25GpUvlaDnGtpxGRmFlQ0sbLHwLD tP4UZjPP/opMyvwHu7dDpbFsN27gSRQUOExG98HiZmi9N1wcPLo91xgt5nILgQJq L9lhl7mrrjKAXU+L8yAeAdxWj+/ZpvFGrUQXya4RnYfeCe9jvgbDNNNRxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFbtUxwTvIFNOR7lVUJgWyhsHlQbMB8GA1UdIwQY MBaAFC+VoFibKEbr/HNmwGxkS0ai2NMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDVXZ1dKc29SdXY4YzJiQWJHUkxScUxZMHlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9kNmE1NTItZTAzNS00NzIxLTllY2Yt OTNmZTViZjZkYWZmLzEvTDVXZ1dKc29SdXY4YzJiQWJHUkxScUxZMHlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9kNmE1NTItZTAzNS00NzIxLTllY2YtOTNmZTViZjZkYWZm LzEvTDVXZ1dKc29SdXY4YzJiQWJHUkxScUxZMHlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFGQPIVXO XOyWFSbB81+Id7itNQXOD2ra74FhR2I/jBTlbpRFZlrEI+eC7MZG9tdDLzHPvXrp L8Z2jqXKXhejdehPQHEC2HGs+CrGqM02geh4i7EnyjniAHpyD484KpiWY0V6ccKR /PIv1RU8//UAr9TEkh9WN4x1tbVSaC3gaTBYEDgQFk1/ErA/pPTfMDQEweDxchgx 3UkiMFc9J5F4hNRopCp42fsDoiUZr8IOkONDqIUPoez7aiDymfflx/BG+1WbhGqt xvCdR+WFBxyDP3Fd8iDMZhjQ3UuytSDALJOwJm+TeWKUWzzYX4IBSNRKnecXwE+X wYcmj13Wh9jTcw== -----END CERTIFICATE-----Generated at Tue Jan 27 07:41:36 2026 by rpki-client