This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft File: l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft (raw, json) Hash identifier: b+RculfSM/zXAZ4Gjxe9Bsp/tt1Hpre+jfbZIm29Ldw= Subject key identifier: 9A:30:BE:A2:68:2F:D0:2D:0E:AF:62:FC:27:5C:D6:C0:00:AD:BE:12 Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 019BD73434A34BD330EFC5C6BE76324C7EDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft Manifest number: 08CD Signing time: Mon 19 Jan 2026 17:01:21 +0000 Manifest this update: Mon 19 Jan 2026 17:01:21 +0000 Manifest next update: Tue 20 Jan 2026 17:01:21 +0000 Files and hashes: 1: 1-poRw1eFyj6cHnpX6jhcnrovucM.roa (hash: exJnBsL3FhsYcVwE6Jm8wuXjW1OAjQMMx4txHG99Zxc=) 2: 1ZCW-3XyV7UUdWvnZS34ZxS-vyg.roa (hash: AsfQqdl/xsaW9IYhySqScr2PgyTmm64VZ6eM34CvYX8=) 3: 41UDb8PFLYomt2031aTgiY3AQ40.roa (hash: bmp07VNfPBzFitEFlf/fmkB49dR4XxuwZAwtFoPyweY=) 4: 4v_iwBzOpciC0YWjVDg_w5r563M.roa (hash: F5kWV5HiM8c6dQiiFtOG3n7NW+KRh+raqsJXmMUP0SM=) 5: 7p6dd7n2c_iahQHtUgZQiIIJrtQ.roa (hash: XRHiyUNGvTwvAeaPPS/YuesfKfNsucxDCcsj9pUMxso=) 6: Do7W5qGfDMAJEMN6BzBVspjXxYU.roa (hash: SRYxQrkADeDmRh/1IPI3QXOB27eJYEqHNj2TfVv7whg=) 7: Ljz0YqAl4apWJMxAUgKBsFnQJaE.roa (hash: GUPbQPDC9wNuXEfadb1ttXVKajWPMc9cbCuQfVhp8gw=) 8: NJpLyq2ti9mgv7XrR8IcC5lB92k.roa (hash: X6oNrTIzLpsjoLrgrTl+vU7DqhTACh+EHu5pKkzZfC4=) 9: YzVa-BUJnuWH4diErgPUKokymQ0.roa (hash: QcBSZdMSRm/lWv+szi2oRyb+M3WP6bg67A4t9dEA1tc=) 10: b3vOSe_mCh8vX6WXedzDGAgnGbo.roa (hash: CPPk4Dgo5ucS2VKPYwD2IIYHos2u7Bwwefa5OhjzMKQ=) 11: l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl (hash: FJ18GjGNb4qW1mQ0iyJoJns2G/+B88U5wsG4hRVtnwQ=) 12: yvu8AxQYxM3ws7oGYgq0UFdLwY4.roa (hash: 87fEDzcHgs5DE+7kqQ5/TAh2kzd7q9M1YgTV/N72Otc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:34:34:a3:4b:d3:30:ef:c5:c6:be:76:32:4c:7e:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: Jan 19 17:01:21 2026 GMT Not After : Jan 20 17:01:21 2026 GMT Subject: CN=9a30bea2682fd02d0eaf62fc275cd6c000adbe12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8f:88:5c:fb:29:8e:3e:6b:a2:30:96:a9:a2: c2:32:49:07:dd:90:2e:51:9d:ed:87:cd:1b:52:b8: 5e:38:a6:02:0b:30:29:f5:30:5f:7a:87:3c:2d:c9: 82:37:51:45:ec:56:7e:07:7a:27:25:1c:78:4e:06: 80:c2:f9:31:46:a8:fa:ee:2f:ae:7a:86:59:71:12: 73:3e:18:0a:a2:c6:80:d0:82:15:84:b5:a6:5b:77: 82:75:3a:b0:2b:01:1e:ca:00:ee:76:46:6d:e7:d9: 8e:59:2d:f8:b1:f8:e4:a3:2f:45:67:5c:40:57:61: ea:86:7f:ee:15:51:db:23:67:5a:6d:53:05:b0:e7: ec:cc:91:e6:a5:4e:cc:a5:3e:d4:ca:ca:c5:6e:e3: 5f:a0:f5:f3:bf:fe:4a:cc:81:4f:4d:d8:1b:05:00: 7b:ac:d2:1c:ec:4d:5a:b6:5c:47:97:6e:de:5c:1d: 24:d1:9b:34:05:55:77:c4:a7:f5:14:eb:c7:81:2c: d1:a8:87:f6:9d:5e:f6:df:ce:43:f8:43:ea:64:ce: e3:e9:b5:5d:9d:76:34:12:bc:6e:90:a9:69:df:8b: 2e:fe:f1:4a:1e:0f:3c:9a:af:d5:79:39:ba:2f:dd: 00:f5:1c:3d:18:51:fa:11:99:9f:b7:f5:fb:b5:75: 8c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:30:BE:A2:68:2F:D0:2D:0E:AF:62:FC:27:5C:D6:C0:00:AD:BE:12 X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:19:49:a1:91:12:04:cf:2e:f6:ea:0f:55:db:fc:db:f9:da: 76:00:1a:ed:d1:c7:06:2d:b3:cb:df:94:72:32:b2:ec:c3:5b: bb:c5:40:53:70:5c:ff:52:0a:61:5f:76:6f:c7:76:f2:46:cc: ef:5f:40:f4:f5:23:a5:4f:97:dd:1e:f2:ad:e0:d0:55:51:96: 59:ca:65:4d:18:dc:44:fd:b2:be:52:a0:ad:14:7d:21:b9:3d: 10:79:c0:66:27:c3:41:cc:3a:c4:9b:e7:91:b2:46:20:a0:2e: 12:67:13:4f:8b:4e:e2:0a:f6:20:61:f0:8d:ce:f0:bd:e1:9d: 99:ff:00:53:c8:38:95:a1:d0:44:6d:6e:fb:9b:95:9a:11:6d: 1c:70:48:75:77:63:08:4a:ce:28:e0:17:4b:33:b4:b0:e2:ab: b4:f3:13:3d:23:ec:78:4a:4f:f9:3a:ee:c6:a7:c0:0f:f5:c2: 4a:6e:3d:d2:33:34:ec:9b:7a:c8:75:d4:cf:05:ab:07:fc:bd: 1a:3a:0e:01:cc:26:69:eb:c0:2f:bf:f2:ea:ee:2d:07:6c:ef: 8b:00:95:93:48:31:c8:00:89:e3:f0:d7:9a:bb:82:5f:69:a4: f6:fa:b3:d9:ad:f3:a9:27:37:fb:08:58:bc:82:be:31:96:f5: 8c:1b:d0:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvXNDSjS9Mw78XGvnYyTH7cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjYwMTE5MTcwMTIxWhcNMjYwMTIwMTcwMTIxWjAzMTEwLwYDVQQD Eyg5YTMwYmVhMjY4MmZkMDJkMGVhZjYyZmMyNzVjZDZjMDAwYWRiZTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo+IXPspjj5rojCWqaLCMkkH3ZAu UZ3th80bUrheOKYCCzAp9TBfeoc8LcmCN1FF7FZ+B3onJRx4TgaAwvkxRqj67i+u eoZZcRJzPhgKosaA0IIVhLWmW3eCdTqwKwEeygDudkZt59mOWS34sfjkoy9FZ1xA V2Hqhn/uFVHbI2dabVMFsOfszJHmpU7MpT7UysrFbuNfoPXzv/5KzIFPTdgbBQB7 rNIc7E1atlxHl27eXB0k0Zs0BVV3xKf1FOvHgSzRqIf2nV72385D+EPqZM7j6bVd nXY0ErxukKlp34su/vFKHg88mq/VeTm6L90A9Rw9GFH6EZmft/X7tXWMSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJowvqJoL9AtDq9i/Cdc1sAArb4SMB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARhlJoZES BM8u9uoPVdv82/nadgAa7dHHBi2zy9+UcjKy7MNbu8VAU3Bc/1IKYV92b8d28kbM 719A9PUjpU+X3R7yreDQVVGWWcplTRjcRP2yvlKgrRR9Ibk9EHnAZifDQcw6xJvn kbJGIKAuEmcTT4tO4gr2IGHwjc7wveGdmf8AU8g4laHQRG1u+5uVmhFtHHBIdXdj CErOKOAXSzO0sOKrtPMTPSPseEpP+TruxqfAD/XCSm490jM07Jt6yHXUzwWrB/y9 GjoOAcwmaevAL7/y6u4tB2zviwCVk0gxyACJ4/DXmruCX2mk9vqz2a3zqSc3+whY vIK+MZb1jBvQ9w== -----END CERTIFICATE-----Generated at Tue Jan 20 01:24:29 2026 by rpki-client