This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: 2ct0PHRn+ft7PYuxG6EzOa7T/faf9NyRNjk6DAKZgSA= Subject key identifier: 5C:B3:46:47:C2:50:60:63:D9:0F:12:E3:60:EF:21:26:20:D5:5E:DC Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 019BF5ABBAD24B906862F1BDAA363B732518 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 0A1B Signing time: Sun 25 Jan 2026 15:00:30 +0000 Manifest this update: Sun 25 Jan 2026 15:00:30 +0000 Manifest next update: Mon 26 Jan 2026 15:00:30 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: PErZZpsVM3R/5V+lCk0JjINpH/EYHg5zUCkNlKD9hV0=) 2: 9iY8zZM2GSyPT4mF8aJhMS5PM8Y.roa (hash: xNWcTes1rfng2Xoo1q/dVG7NMZ8Ww7cO2s1+2Z0yWlA=) 3: E9APco7X5s-y_ndtROFoXtIewVo.roa (hash: ivFiLkZ8In0JyMQIcM+7PA1jeMldEvXCr0uAAOVK9i8=) 4: Ea_6BYNPNVYXpJIw6V8w4iHsn34.roa (hash: MmpGqyxYpKQIYnf6OI/K/GvwLTjCCsiguVNJ0TpVI8A=) 5: LZ_m2waZIs7_F9DFpQeDZwKSqaI.roa (hash: AswbWRxQk3rPm90PMBMeMwOGoat0R8hOqCGqrGPRnek=) 6: MdyX1edjlp-yz1Rj3rPjziFXB9Y.roa (hash: KbrH7LcYaa394FA8k0S5gWJFBJdKc28amMjP1aLjN/M=) 7: P12Bd5VdoMxJk2YYVATcG1-aLsk.roa (hash: tMed7m101KjSKZGY84e4m62zANDxSX8qjIVWkfIG7SI=) 8: PEzreo_YaPTvZmeHLlLFR5kVjWY.roa (hash: eXeiZ79p8Uap0Wt90BnDGjxDFdIM/UYDOLfaEdoVu7k=) 9: YsTwicH1tOydKXwijh3NKIAFLS0.roa (hash: a4Esas1VFYhKGMF7C/m0rI+wkbXft/Q6b4xO9aKQj64=) 10: eExRkfPu0Gwge_hF5bZ87TMqJSc.roa (hash: GbCahJADgly+/ikqsEm4KY5sCrzG5FQDBoPzkX+HqA0=) 11: gkcGn3ENPLtTEnDqjUqXbmSRgng.roa (hash: U6oenFeqTjFDCfsFo9/G7/iGAGLsgJkrsjxoMp46oSE=) 12: k4m5uF6d86bKxXryYJZgXjvW8I0.roa (hash: H2jNyKD+HmfBkpz7JaRABFyLsbIlNp19F4CUBAdQu10=) 13: k9h8QS5gEzXpkcVVNe-dAvt8_v8.roa (hash: zBG+kHBGYstuoXqKiYKOkY+fZi1x5xlU5harwXVVNII=) 14: py8kH9n_2-OnxW6spEMi6oEGK_w.roa (hash: GsXp7eLTo1qCtBBCoDFQgU12gK3EvVtwUdWIN2dH9CY=) 15: rhGX_5s3UmZjlpks20dW8Uwf5xY.roa (hash: JBHH+NoWY0D+hMChID36tmQIbWsMkAg53XmNFpTIjc4=) 16: rw4pdFSTNcqR4HSLH99TYBGU5M8.roa (hash: ArUMSjBrgFsVWtaXlYqazL0AVRoBUJiJ/pOtvA7ObNw=) 17: zn4F63TYgWqEf5oY3C0aSoOPaXU.roa (hash: 4XzpBGSKIpqrgzYV8bDUbJCBoMSY0ytUeCyMxChhVnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:ba:d2:4b:90:68:62:f1:bd:aa:36:3b:73:25:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Jan 25 15:00:30 2026 GMT Not After : Jan 26 15:00:30 2026 GMT Subject: CN=5cb34647c2506063d90f12e360ef212620d55edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:7c:51:d2:1c:18:06:2b:78:8c:79:d8:d4:1d: 57:8f:43:6a:f0:83:bd:15:ae:2e:bf:d4:cc:09:23: 7e:e2:b8:ed:42:c8:81:16:39:73:d1:a8:73:c1:85: 20:7d:91:e2:0c:95:6e:ea:22:74:d8:0d:be:37:b1: 2c:e4:bf:b5:b1:b4:f3:7f:8f:ff:cd:19:6e:b0:af: 0c:da:83:e9:00:bc:21:78:18:cc:83:05:38:80:fb: 9a:66:a7:91:c9:9b:e9:e6:ef:eb:50:43:09:be:8c: 22:df:b9:b6:25:6a:4f:a0:33:ac:a4:06:ad:43:06: 6c:70:be:4c:6f:8e:75:82:7c:13:a1:4a:1a:77:36: 22:0f:37:89:77:43:28:2f:47:42:6c:13:66:f6:5d: a0:43:5e:a9:1c:bc:f9:84:84:b8:7e:81:78:c7:8d: f5:06:a2:9d:61:c9:a3:7f:55:da:04:fd:5d:78:03: 38:29:17:82:24:30:d4:16:e3:24:f2:7a:82:a4:2f: 4d:f2:f6:ae:49:60:92:ee:ae:eb:96:0e:ac:62:b3: 15:17:d7:58:bd:72:e8:72:9c:11:db:3a:56:18:5a: fc:12:86:7e:49:84:db:95:0e:2d:c8:69:5d:54:a1: e7:2b:76:c9:60:22:1d:8b:c1:4e:d4:d6:02:52:27: 7b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B3:46:47:C2:50:60:63:D9:0F:12:E3:60:EF:21:26:20:D5:5E:DC X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:e7:af:4f:d7:0b:f0:ad:6d:7c:ea:a5:fe:58:a6:3c:e9:38: 7c:9c:99:f0:a0:db:c1:21:bd:d8:d1:9e:1f:bb:61:2c:b7:50: 8f:78:55:82:a9:de:a3:e2:a0:1b:d5:8a:ae:ba:d4:12:a5:3d: 32:46:e6:1b:99:71:e0:6a:9d:fb:b0:07:e6:e0:a9:6a:85:61: 96:76:dc:ee:59:ca:70:25:df:4c:77:a0:71:fc:1d:f7:72:c7: f2:fc:6f:0e:9f:d5:b5:6a:89:c1:15:3a:fe:fd:b6:2e:65:3a: fa:79:2c:38:cc:63:13:5a:0b:27:76:38:1d:d4:dd:03:93:f8: 75:44:0f:01:95:bd:f8:9e:c8:db:99:48:8e:07:42:76:0b:5b: 93:e1:4d:d0:7f:66:10:cc:aa:9d:7c:63:ae:b8:98:ee:4c:75: 05:c0:11:50:67:e4:05:50:00:64:e9:f0:e0:23:96:d1:3f:5a: e4:62:22:de:38:d2:32:59:0d:eb:53:b9:52:25:25:9b:69:d9: 5a:78:53:92:6f:c0:9b:df:98:9d:35:b1:ec:62:c6:b3:00:f4: 62:4c:be:06:f0:ea:66:0a:e5:9b:04:f4:9a:6e:f3:44:d7:7d: 55:6b:dc:d4:20:70:93:67:ba:01:ac:06:2c:1b:cb:77:9e:eb: e2:81:51:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q7rSS5BoYvG9qjY7cyUYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjYwMTI1MTUwMDMwWhcNMjYwMTI2MTUwMDMwWjAzMTEwLwYDVQQD Eyg1Y2IzNDY0N2MyNTA2MDYzZDkwZjEyZTM2MGVmMjEyNjIwZDU1ZWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8HxR0hwYBit4jHnY1B1Xj0Nq8IO9 Fa4uv9TMCSN+4rjtQsiBFjlz0ahzwYUgfZHiDJVu6iJ02A2+N7Es5L+1sbTzf4// zRlusK8M2oPpALwheBjMgwU4gPuaZqeRyZvp5u/rUEMJvowi37m2JWpPoDOspAat QwZscL5Mb451gnwToUoadzYiDzeJd0MoL0dCbBNm9l2gQ16pHLz5hIS4foF4x431 BqKdYcmjf1XaBP1deAM4KReCJDDUFuMk8nqCpC9N8vauSWCS7q7rlg6sYrMVF9dY vXLocpwR2zpWGFr8EoZ+SYTblQ4tyGldVKHnK3bJYCIdi8FO1NYCUid70wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyzRkfCUGBj2Q8S42DvISYg1V7cMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAeevT9cL 8K1tfOql/limPOk4fJyZ8KDbwSG92NGeH7thLLdQj3hVgqneo+KgG9WKrrrUEqU9 MkbmG5lx4Gqd+7AH5uCpaoVhlnbc7lnKcCXfTHegcfwd93LH8vxvDp/VtWqJwRU6 /v22LmU6+nksOMxjE1oLJ3Y4HdTdA5P4dUQPAZW9+J7I25lIjgdCdgtbk+FN0H9m EMyqnXxjrriY7kx1BcARUGfkBVAAZOnw4COW0T9a5GIi3jjSMlkN61O5UiUlm2nZ WnhTkm/Am9+YnTWx7GLGswD0Yky+BvDqZgrlmwT0mm7zRNd9VWvc1CBwk2e6AawG LBvLd57r4oFR3g== -----END CERTIFICATE-----Generated at Sun Jan 25 21:19:11 2026 by rpki-client