This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft File: llE13UJRn92j3T_aqdszV4FfrXU.mft (raw, json) Hash identifier: PBNAsc1HRun+Rt8E+ILdiQu0g1MsZ+bOJmDbWyIQ/bM= Subject key identifier: 52:B8:6B:C3:22:24:B4:1C:C2:8F:2A:5A:F7:6A:B0:2B:0C:C0:38:1E Authority key identifier: 96:51:35:DD:42:51:9F:DD:A3:DD:3F:DA:A9:DB:33:57:81:5F:AD:75 Certificate issuer: /CN=965135dd42519fdda3dd3fdaa9db3357815fad75 Certificate serial: 019BFA64654FC697919B868864545A7324D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft Manifest number: 1552 Signing time: Mon 26 Jan 2026 13:00:42 +0000 Manifest this update: Mon 26 Jan 2026 13:00:42 +0000 Manifest next update: Tue 27 Jan 2026 13:00:42 +0000 Files and hashes: 1: FwHHGDuiIFa52ARkZ9ESZ3au7NI.roa (hash: 3HUhYNCu5qpy7dP4zYZjir8YCzM2yFohiBtl0jP26zw=) 2: llE13UJRn92j3T_aqdszV4FfrXU.crl (hash: hucRtOeOy8VAS7ztz0Dgr9uAwD+Elj/JYnJ45ckSzEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:65:4f:c6:97:91:9b:86:88:64:54:5a:73:24:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=965135dd42519fdda3dd3fdaa9db3357815fad75 Validity Not Before: Jan 26 13:00:42 2026 GMT Not After : Jan 27 13:00:42 2026 GMT Subject: CN=52b86bc32224b41cc28f2a5af76ab02b0cc0381e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d6:08:60:7e:60:7c:da:e7:dd:1c:52:c0:ab: e9:f9:bc:c5:fa:69:03:29:a2:cd:b4:f8:e6:9f:90: b7:7d:60:02:4a:3e:fd:18:14:08:1b:8f:9b:de:fd: a0:ec:db:fc:06:8c:41:de:54:5b:1a:8a:88:0e:99: 9c:e8:e7:cc:7e:e7:c8:59:81:ee:a5:e8:b1:2d:e6: 23:f3:ec:8d:9d:3a:ee:60:cc:92:dc:87:51:e7:5e: f1:77:46:fa:d9:e9:2e:6a:33:3c:b3:4b:49:bb:38: 0e:87:a8:ef:7d:cd:b0:0e:b5:72:33:31:19:b7:8d: 27:49:a7:08:88:04:77:45:16:a7:b7:ca:7b:d3:c4: ce:8e:24:69:2b:6b:97:86:e3:92:fa:12:97:9b:ed: ec:92:9e:d3:0e:5c:72:04:df:d0:2c:3f:6e:c9:9a: 7a:fc:84:b2:7f:65:6f:53:b8:2c:a3:e1:ed:b4:eb: ab:48:37:b6:ea:ec:8d:08:7c:65:bd:93:e3:8a:e7: 02:d5:ba:16:cc:c3:44:0c:81:74:94:9d:0c:4d:1b: 4f:1c:5d:84:91:14:a1:6d:b6:78:72:07:ea:04:e0: a5:42:ca:78:5a:b5:3c:df:c1:be:d7:b0:c0:03:d8: 90:c9:b1:f0:71:01:31:73:c7:ce:cc:4d:68:f2:5d: 34:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B8:6B:C3:22:24:B4:1C:C2:8F:2A:5A:F7:6A:B0:2B:0C:C0:38:1E X509v3 Authority Key Identifier: keyid:96:51:35:DD:42:51:9F:DD:A3:DD:3F:DA:A9:DB:33:57:81:5F:AD:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:e6:f6:fe:b0:c7:45:5e:cc:78:10:d8:24:95:b6:61:e3:7b: 8a:bb:3d:d6:4f:02:05:b8:19:37:45:2d:75:02:1d:4e:97:bb: 2c:29:68:77:95:53:e8:c3:8c:26:9f:0c:79:22:62:d6:cd:6e: 24:23:50:54:b1:ea:90:dc:aa:ff:0b:a4:e5:37:f6:0a:99:dd: ab:ec:b5:99:74:cc:34:11:ad:49:52:46:da:5c:55:d6:cf:b3: f9:8f:e7:68:e6:8a:d4:5a:61:e8:8e:96:59:e5:14:27:8d:4a: cc:07:3b:ee:ab:fc:58:b9:ce:d3:a3:58:90:f3:45:c0:97:93: af:6f:e1:3b:a7:ca:a1:6a:ea:9d:67:a2:dd:be:f1:bb:76:a2: 62:81:04:b9:c8:96:68:05:29:10:5a:92:8e:a5:38:75:5e:49: 48:02:1f:54:53:84:95:9c:46:8f:45:39:82:76:e6:6d:59:cb: 3f:92:4e:4e:a2:9b:f1:9d:4f:fa:f3:0b:29:4b:f0:bd:2d:9d: b2:fa:52:70:a3:01:8a:2d:36:c6:f6:be:2a:67:6d:06:36:b1: 72:12:00:7c:74:03:8b:35:73:cd:e2:35:7d:19:43:10:12:f9: 85:ec:81:51:f4:ef:51:4f:3f:ed:3d:0a:34:e1:ec:a7:6b:ce: 51:2f:a3:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZGVPxpeRm4aIZFRacyTYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NTEzNWRkNDI1MTlmZGRhM2RkM2ZkYWE5ZGIzMzU3ODE1 ZmFkNzUwHhcNMjYwMTI2MTMwMDQyWhcNMjYwMTI3MTMwMDQyWjAzMTEwLwYDVQQD Eyg1MmI4NmJjMzIyMjRiNDFjYzI4ZjJhNWFmNzZhYjAyYjBjYzAzODFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdYIYH5gfNrn3RxSwKvp+bzF+mkD KaLNtPjmn5C3fWACSj79GBQIG4+b3v2g7Nv8BoxB3lRbGoqIDpmc6OfMfufIWYHu peixLeYj8+yNnTruYMyS3IdR517xd0b62ekuajM8s0tJuzgOh6jvfc2wDrVyMzEZ t40nSacIiAR3RRant8p708TOjiRpK2uXhuOS+hKXm+3skp7TDlxyBN/QLD9uyZp6 /ISyf2VvU7gso+HttOurSDe26uyNCHxlvZPjiucC1boWzMNEDIF0lJ0MTRtPHF2E kRShbbZ4cgfqBOClQsp4WrU838G+17DAA9iQybHwcQExc8fOzE1o8l00XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFK4a8MiJLQcwo8qWvdqsCsMwDgeMB8GA1UdIwQY MBaAFJZRNd1CUZ/do90/2qnbM1eBX611MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGxFMTNVSlJuOTJqM1RfYXFkc3pWNEZmclhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80NmQ5MDMtYWZkYS00MjFiLThhNjEt MDdlZTI0MmUxMzZkLzEvbGxFMTNVSlJuOTJqM1RfYXFkc3pWNEZmclhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS80NmQ5MDMtYWZkYS00MjFiLThhNjEtMDdlZTI0MmUxMzZk LzEvbGxFMTNVSlJuOTJqM1RfYXFkc3pWNEZmclhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+b2/rDH RV7MeBDYJJW2YeN7irs91k8CBbgZN0UtdQIdTpe7LClod5VT6MOMJp8MeSJi1s1u JCNQVLHqkNyq/wuk5Tf2Cpndq+y1mXTMNBGtSVJG2lxV1s+z+Y/naOaK1Fph6I6W WeUUJ41KzAc77qv8WLnO06NYkPNFwJeTr2/hO6fKoWrqnWei3b7xu3aiYoEEuciW aAUpEFqSjqU4dV5JSAIfVFOElZxGj0U5gnbmbVnLP5JOTqKb8Z1P+vMLKUvwvS2d svpScKMBii02xva+KmdtBjaxchIAfHQDizVzzeI1fRlDEBL5heyBUfTvUU8/7T0K NOHsp2vOUS+jcg== -----END CERTIFICATE-----Generated at Mon Jan 26 18:22:55 2026 by rpki-client