This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft File: l7y-5E9M7wkZheVGpoVPnMsq2oo.mft (raw, json) Hash identifier: uH/Hcwzjndh0aTKqk7hsfl2eC8d6qfR5hQFwq1NZ1ew= Subject key identifier: 32:DA:2F:AD:3A:FD:AD:F3:B8:1F:36:37:EC:6B:8A:90:89:A3:E4:EF Authority key identifier: 97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A Certificate issuer: /CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a Certificate serial: 019BFC52D2631DBE93F8DA2721D44CB31541 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 22:00:44 +0000 Manifest this update: Mon 26 Jan 2026 22:00:44 +0000 Manifest next update: Tue 27 Jan 2026 22:00:44 +0000 Files and hashes: 1: O_wCNsyDbT6MUYABz8-3j0us_9g.roa (hash: lcEmRT5pvsNkeswk2lk75S2Q+qGFNRLgl2uhLFsTeD4=) 2: bDIaKUq5ow0olhUpFCtBXBJMo6o.roa (hash: 9hfkjt3EwE+QLaV9BjMUSGSaxIGmTaaJQ1x9H7t99BU=) 3: l7y-5E9M7wkZheVGpoVPnMsq2oo.crl (hash: O5UOhZ28E1q+gRMDjUxVticeKhO68PeMcDdSE1aY71E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:52:d2:63:1d:be:93:f8:da:27:21:d4:4c:b3:15:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a Validity Not Before: Jan 26 22:00:44 2026 GMT Not After : Jan 27 22:00:44 2026 GMT Subject: CN=32da2fad3afdadf3b81f3637ec6b8a9089a3e4ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a9:f4:2f:c9:23:24:38:19:8a:54:fc:12:59: f9:3b:af:e3:15:79:c4:1e:5e:00:82:55:30:22:5c: 79:75:f2:36:58:92:e9:3f:52:c0:92:a8:ef:45:77: 6a:8a:fe:f6:cf:a1:74:d6:1b:cb:cf:e5:16:24:07: 41:55:53:64:ca:c2:18:72:99:d9:ed:ff:63:36:8b: d3:6d:17:a7:e1:d5:e1:a8:1f:12:85:d5:7f:92:f7: 06:02:54:f1:23:6f:2c:8e:23:ce:7f:08:5e:f1:ec: 7a:1c:88:09:7b:5a:82:85:3f:16:fb:96:6c:be:29: d2:64:22:85:a0:73:7a:19:3a:8e:a0:26:a3:1b:e5: ad:61:fc:cc:5d:4b:1d:b9:3f:87:da:f3:0b:24:22: a5:89:8c:ed:05:e9:85:42:a8:ec:bf:43:bc:d2:d9: 0f:09:af:2b:f5:88:4b:7c:34:1d:7b:2b:15:52:54: f1:6f:5c:34:a6:0f:a1:e1:fa:76:38:1e:6d:fd:a5: 75:11:32:1f:9c:2e:29:8b:6c:d9:30:2f:0b:e3:41: 80:d0:9d:9b:ae:d7:4e:cf:2d:52:25:ab:4e:d9:b6: 96:32:65:f2:aa:79:12:0f:67:79:e9:5a:49:54:3e: 66:3c:7a:fd:55:41:3c:ce:51:93:55:22:d7:da:9a: ba:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:DA:2F:AD:3A:FD:AD:F3:B8:1F:36:37:EC:6B:8A:90:89:A3:E4:EF X509v3 Authority Key Identifier: keyid:97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:07:b5:c9:29:9a:80:85:e9:2a:db:ad:87:b9:cb:21:55:35: b5:8a:6b:44:7b:53:7d:5d:de:f8:48:16:c5:b0:c2:8b:0c:76: 71:6d:6e:d4:a0:1d:26:5d:ba:1f:ec:e0:ef:9b:14:d4:61:24: 26:c0:91:cf:68:ae:db:c8:af:6f:49:a1:fb:1b:55:13:58:8b: 94:a9:56:6c:5a:5d:d0:7b:9b:2f:11:dd:a8:e6:30:77:f2:d8: 1c:50:43:02:56:c4:e8:a0:b6:5a:6a:2f:1f:22:c8:c2:8c:11: 84:10:4b:da:5c:85:d7:06:7b:2f:ad:64:e2:7c:14:8d:a1:9a: 2f:8c:4f:fc:26:d4:ba:51:c2:77:d1:f8:48:4e:da:17:22:42: 40:c8:14:b0:8d:2a:95:4f:7d:a6:84:ae:f3:be:7d:0a:20:d8: c4:39:c4:11:b5:72:53:01:6f:1b:e1:b5:bb:79:ec:b2:be:0d: 2d:f8:03:f1:1e:32:c1:c4:34:f0:e8:1d:c9:5b:ec:f4:19:5b: 83:d8:d9:46:8e:1d:e7:58:1c:ec:86:7f:15:ed:9e:b8:a4:f0: df:d4:68:ba:65:63:b3:8d:06:97:5f:bd:32:67:30:91:67:7a: 37:63:f1:04:5b:c5:ec:4e:e0:cb:c5:db:38:a2:51:58:8c:38: 8d:4a:e9:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8UtJjHb6T+NonIdRMsxVBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3YmNiZWU0NGY0Y2VmMDkxOTg1ZTU0NmE2ODU0ZjljY2Iy YWRhOGEwHhcNMjYwMTI2MjIwMDQ0WhcNMjYwMTI3MjIwMDQ0WjAzMTEwLwYDVQQD EygzMmRhMmZhZDNhZmRhZGYzYjgxZjM2MzdlYzZiOGE5MDg5YTNlNGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6n0L8kjJDgZilT8Eln5O6/jFXnE Hl4AglUwIlx5dfI2WJLpP1LAkqjvRXdqiv72z6F01hvLz+UWJAdBVVNkysIYcpnZ 7f9jNovTbRen4dXhqB8ShdV/kvcGAlTxI28sjiPOfwhe8ex6HIgJe1qChT8W+5Zs vinSZCKFoHN6GTqOoCajG+WtYfzMXUsduT+H2vMLJCKliYztBemFQqjsv0O80tkP Ca8r9YhLfDQdeysVUlTxb1w0pg+h4fp2OB5t/aV1ETIfnC4pi2zZMC8L40GA0J2b rtdOzy1SJatO2baWMmXyqnkSD2d56VpJVD5mPHr9VUE8zlGTVSLX2pq6PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLaL606/a3zuB82N+xripCJo+TvMB8GA1UdIwQY MBaAFJe8vuRPTO8JGYXlRqaFT5zLKtqKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDd5LTVFOU03d2taaGVWR3BvVlBuTXNxMm9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8wYjJlZWYtNzVlOS00M2IyLTkwODgt ODMwM2FkMTM3MWRkLzEvbDd5LTVFOU03d2taaGVWR3BvVlBuTXNxMm9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8wYjJlZWYtNzVlOS00M2IyLTkwODgtODMwM2FkMTM3MWRk LzEvbDd5LTVFOU03d2taaGVWR3BvVlBuTXNxMm9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAswe1ySma gIXpKtuth7nLIVU1tYprRHtTfV3e+EgWxbDCiwx2cW1u1KAdJl26H+zg75sU1GEk JsCRz2iu28ivb0mh+xtVE1iLlKlWbFpd0HubLxHdqOYwd/LYHFBDAlbE6KC2Wmov HyLIwowRhBBL2lyF1wZ7L61k4nwUjaGaL4xP/CbUulHCd9H4SE7aFyJCQMgUsI0q lU99poSu8759CiDYxDnEEbVyUwFvG+G1u3nssr4NLfgD8R4ywcQ08OgdyVvs9Blb g9jZRo4d51gc7IZ/Fe2euKTw39RoumVjs40Gl1+9MmcwkWd6N2PxBFvF7E7gy8Xb OKJRWIw4jUrpXg== -----END CERTIFICATE-----Generated at Tue Jan 27 01:18:33 2026 by rpki-client