This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft File: l8AN4AfUqkpAMdR2ELObd0kIv0k.mft (raw, json) Hash identifier: sIJ7g5rlNME8SWDNxWrGoVKXeFpjs6iNfN7K9GRQ+F0= Subject key identifier: 68:1E:0D:33:35:8F:C2:47:49:B9:8C:36:84:09:15:4B:15:56:9C:6D Authority key identifier: 97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49 Certificate issuer: /CN=97c00de007d4aa4a4031d47610b39b774908bf49 Certificate serial: 019BFBE52763D29B7735B4FC2D5912645837 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft Manifest number: 03D1 Signing time: Mon 26 Jan 2026 20:00:57 +0000 Manifest this update: Mon 26 Jan 2026 20:00:57 +0000 Manifest next update: Tue 27 Jan 2026 20:00:57 +0000 Files and hashes: 1: l8AN4AfUqkpAMdR2ELObd0kIv0k.crl (hash: Qa9jnHDW1TE7yKeU1Jq01rzG6ohIlLgq1reTOpTQzcY=) 2: odYIvbxaJeYmOjoyzYcsw6tdRBQ.roa (hash: gjz6TPRGymxJ3q8bit5/XLbB9ysikFUi3nJ/upxA8J0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:e5:27:63:d2:9b:77:35:b4:fc:2d:59:12:64:58:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97c00de007d4aa4a4031d47610b39b774908bf49 Validity Not Before: Jan 26 20:00:57 2026 GMT Not After : Jan 27 20:00:57 2026 GMT Subject: CN=681e0d33358fc24749b98c368409154b15569c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c2:2a:65:ac:3a:43:40:a0:14:59:20:04:d6: 05:a5:e0:d9:23:9a:be:e0:f9:6e:43:83:b2:b7:cc: 55:f1:d1:e9:f7:d7:5f:4c:77:0a:99:46:8e:d9:0d: cf:2b:5a:cf:20:2f:60:0d:66:21:fb:57:9a:c5:40: 5c:dc:a8:6a:7d:42:31:2f:3a:14:64:14:f1:e5:1c: 93:c8:77:68:64:44:a5:c3:bd:2e:e7:4b:d6:16:04: 45:1b:a1:0d:e4:8f:d3:a1:d1:28:7d:51:3d:ef:6d: fa:05:4c:32:c5:eb:5c:f4:5e:b7:36:e0:18:6f:84: 57:b0:66:1b:69:f8:e5:b8:24:f0:77:60:3d:00:78: 07:a9:4a:2b:cb:1d:3d:53:2d:17:0d:a5:cb:29:11: 08:73:17:ce:4d:00:3e:a6:f7:0d:fe:50:d9:cf:d5: 65:cf:08:eb:99:16:06:0e:64:8d:09:23:c2:dd:28: bf:dd:c8:56:0d:7e:41:66:68:dd:1f:25:bb:e8:bc: 78:ab:9f:f2:aa:b3:62:38:8a:73:bf:b7:56:9b:3f: 31:93:d2:ff:3b:19:2f:b3:d2:fd:b4:1a:c4:37:b6: a7:02:7d:2a:00:19:94:d0:33:b4:51:c6:7a:95:71: 6f:cc:0a:3f:ae:74:09:9d:dd:4e:3a:3d:9e:5a:b4: c2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1E:0D:33:35:8F:C2:47:49:B9:8C:36:84:09:15:4B:15:56:9C:6D X509v3 Authority Key Identifier: keyid:97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:72:e2:45:cf:2c:f4:c1:62:fd:b6:84:3f:11:ee:52:bd:02: 08:92:5e:c1:db:29:e2:f5:3e:b9:c6:0d:44:a6:9f:9d:8f:03: e1:f5:78:79:d6:3b:48:92:2c:df:90:29:85:8e:be:64:af:36: 69:92:5e:2f:35:7e:c7:c9:93:0b:4f:85:8b:e9:48:2b:cf:44: 31:c2:3d:ff:69:ff:9b:fb:31:a2:b9:17:4a:cb:5d:33:13:8e: cf:9d:0f:e5:f5:85:09:27:a9:96:85:7e:0d:04:d4:46:66:89: 21:0b:bb:63:13:a3:04:c0:2c:84:97:5e:9e:97:ea:a2:27:d9: 42:b1:2c:8d:34:4b:99:77:a5:46:73:e4:6f:d5:1e:aa:e5:cf: 85:57:a9:49:58:5a:de:51:a7:2f:a9:59:6b:ac:02:ac:47:4f: 01:3a:0e:9e:25:22:8f:2d:46:6f:20:c3:8b:c0:51:8f:f5:1e: 97:12:5f:e3:75:f4:05:77:78:c7:58:10:99:df:7a:41:f3:04: d8:2e:48:d3:6b:f6:59:d8:0f:91:50:48:bf:41:45:75:89:30: 61:18:c9:3f:cc:e9:6d:c7:3c:3f:b5:07:ee:c9:61:ea:18:0c: 42:15:92:0f:ef:f4:ee:e6:c5:f2:e7:21:2e:17:0f:51:d3:e7: b0:f1:c9:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv75Sdj0pt3NbT8LVkSZFg3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3YzAwZGUwMDdkNGFhNGE0MDMxZDQ3NjEwYjM5Yjc3NDkw OGJmNDkwHhcNMjYwMTI2MjAwMDU3WhcNMjYwMTI3MjAwMDU3WjAzMTEwLwYDVQQD Eyg2ODFlMGQzMzM1OGZjMjQ3NDliOThjMzY4NDA5MTU0YjE1NTY5YzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8IqZaw6Q0CgFFkgBNYFpeDZI5q+ 4PluQ4Oyt8xV8dHp99dfTHcKmUaO2Q3PK1rPIC9gDWYh+1eaxUBc3KhqfUIxLzoU ZBTx5RyTyHdoZESlw70u50vWFgRFG6EN5I/TodEofVE97236BUwyxetc9F63NuAY b4RXsGYbafjluCTwd2A9AHgHqUoryx09Uy0XDaXLKREIcxfOTQA+pvcN/lDZz9Vl zwjrmRYGDmSNCSPC3Si/3chWDX5BZmjdHyW76Lx4q5/yqrNiOIpzv7dWmz8xk9L/ Oxkvs9L9tBrEN7anAn0qABmU0DO0UcZ6lXFvzAo/rnQJnd1OOj2eWrTCVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgeDTM1j8JHSbmMNoQJFUsVVpxtMB8GA1UdIwQY MBaAFJfADeAH1KpKQDHUdhCzm3dJCL9JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDhBTjRBZlVxa3BBTWRSMkVMT2JkMGtJdjBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wMDc3YzUtZjBiZS00NjNmLWFiNzUt OGMzZGNjNDU5MDI2LzEvbDhBTjRBZlVxa3BBTWRSMkVMT2JkMGtJdjBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8wMDc3YzUtZjBiZS00NjNmLWFiNzUtOGMzZGNjNDU5MDI2 LzEvbDhBTjRBZlVxa3BBTWRSMkVMT2JkMGtJdjBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanLiRc8s 9MFi/baEPxHuUr0CCJJewdsp4vU+ucYNRKafnY8D4fV4edY7SJIs35AphY6+ZK82 aZJeLzV+x8mTC0+Fi+lIK89EMcI9/2n/m/sxorkXSstdMxOOz50P5fWFCSeploV+ DQTURmaJIQu7YxOjBMAshJdenpfqoifZQrEsjTRLmXelRnPkb9UequXPhVepSVha 3lGnL6lZa6wCrEdPAToOniUijy1GbyDDi8BRj/UelxJf43X0BXd4x1gQmd96QfME 2C5I02v2WdgPkVBIv0FFdYkwYRjJP8zpbcc8P7UH7slh6hgMQhWSD+/07ubF8uch LhcPUdPnsPHJhQ== -----END CERTIFICATE-----Generated at Tue Jan 27 01:18:30 2026 by rpki-client