This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft File: l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft (raw, json) Hash identifier: 0P4MLmL7KNHcsLDPRM3TPB6SOnp3AnmPe3VXmu0LrdY= Subject key identifier: 08:DC:85:91:E7:62:AC:A4:CF:BB:98:50:0A:55:37:6C:37:60:3B:09 Authority key identifier: 97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75 Certificate issuer: /CN=97da420008cfb9193499278ef558bd42d61c7f75 Certificate serial: 019BFD2E985D32E0970DBEEF86C860E87EE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft Manifest number: 0D46 Signing time: Tue 27 Jan 2026 02:00:47 +0000 Manifest this update: Tue 27 Jan 2026 02:00:47 +0000 Manifest next update: Wed 28 Jan 2026 02:00:47 +0000 Files and hashes: 1: RRtfB43pqBCM6OCwQmvlGxGMPl0.roa (hash: LR6JcqCChdanxUEAC+gj24/t+Ng0ZaCy6iSBjwr0kN4=) 2: RosKSFL_tFtQ89bX-qHP5zLu6m0.roa (hash: I4juV9hPvK9S7lanhjFS1ERPjUkTsd9rdm1n5n9GOHM=) 3: fUgeR2nF_pXWNWV55rMg8WE-3cA.roa (hash: tWjY+UnVt+eeOEtvKdASRIS/bltLwSGhZ5m+5B8PJGo=) 4: l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl (hash: 1mDmyI/GXMRKm0jIN+9JKAH0wJ4MmuARe1/XpgHoK8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:2e:98:5d:32:e0:97:0d:be:ef:86:c8:60:e8:7e:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97da420008cfb9193499278ef558bd42d61c7f75 Validity Not Before: Jan 27 02:00:47 2026 GMT Not After : Jan 28 02:00:47 2026 GMT Subject: CN=08dc8591e762aca4cfbb98500a55376c37603b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c9:b8:ba:e3:ac:38:05:4f:ab:4c:b8:de:a2: a2:8c:fe:1e:42:f9:11:cb:e0:96:75:6f:96:66:35: 70:9f:10:5a:d5:c6:4c:5d:81:27:73:2b:f9:e7:cc: c9:ab:c3:4d:26:27:b7:49:da:81:8d:59:04:2b:cf: 84:a2:e4:a3:ae:f7:1a:4d:59:db:40:dd:72:f6:0d: cb:11:8a:15:8a:3f:29:ec:85:df:be:91:10:48:43: cc:df:48:6f:06:95:5a:3e:01:26:8e:29:02:70:54: cb:f3:95:54:29:2c:6e:18:6f:ad:d2:56:57:9c:df: 6c:eb:24:09:87:d4:26:79:11:ab:c4:ed:d7:6b:09: bd:18:8b:5f:57:ee:16:46:54:62:ad:ac:72:6f:bb: 40:b9:42:89:78:3d:fe:2d:5f:6c:c0:22:bc:3e:da: 14:2b:d1:13:ba:da:91:ac:ce:aa:9e:7e:0e:de:d5: 34:93:aa:6b:29:cc:fe:c3:8c:7f:43:0f:74:ec:bc: 80:78:ab:bb:68:5a:b8:38:0c:cf:be:02:97:57:70: aa:ad:01:54:3d:6d:5e:b8:3b:fa:3d:a0:3d:ee:50: 2d:5a:f0:ee:e1:69:28:15:e0:c8:5c:81:bf:f2:59: d1:70:27:81:87:7f:0f:4e:e6:cd:a2:fc:1c:3f:b7: 4b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DC:85:91:E7:62:AC:A4:CF:BB:98:50:0A:55:37:6C:37:60:3B:09 X509v3 Authority Key Identifier: keyid:97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:4d:4c:d9:85:5c:54:58:7d:0c:08:e4:e5:6c:43:28:fd:c9: 3d:31:04:51:f1:b8:c3:80:f1:97:eb:f9:f1:cd:66:1d:1d:ed: 90:2b:96:b2:e2:35:ac:f8:a1:c6:d0:8c:fa:23:8f:73:1e:d7: 3f:fc:93:e7:52:e0:02:5e:e6:52:8c:dd:18:64:63:71:57:a7: 82:85:9f:c8:6e:12:e6:92:d2:e7:86:fc:df:c6:e6:21:79:1e: e4:a2:93:e7:9f:87:ec:57:57:f8:dd:4d:59:48:38:ea:18:6b: a9:08:e9:cc:ab:23:e2:9b:05:35:1b:e8:4c:0b:86:9d:35:af: 29:13:d8:74:26:85:bc:e2:ae:1e:b0:04:46:ed:b4:7e:95:a2: 7e:0c:9f:93:4a:5c:d1:c6:02:ad:2f:a9:5c:cb:76:d7:fe:aa: 3f:8a:9a:7b:b3:6f:28:6b:85:1a:8a:37:28:db:c4:19:0e:6a: 4a:9b:b6:4d:08:69:6d:7d:8a:33:83:9a:37:7a:87:54:cf:74: a0:e3:19:18:f9:a9:bf:81:c7:c4:11:bf:c4:4a:f8:27:87:29: 59:ca:0c:2c:b7:04:88:0b:f0:54:a4:01:8c:85:44:0f:40:ff: 8f:fc:f7:ab:cf:f3:1e:74:61:31:ae:a2:32:ef:ac:b8:bf:8d: 44:05:d0:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9LphdMuCXDb7vhshg6H7iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ZGE0MjAwMDhjZmI5MTkzNDk5Mjc4ZWY1NThiZDQyZDYx YzdmNzUwHhcNMjYwMTI3MDIwMDQ3WhcNMjYwMTI4MDIwMDQ3WjAzMTEwLwYDVQQD EygwOGRjODU5MWU3NjJhY2E0Y2ZiYjk4NTAwYTU1Mzc2YzM3NjAzYjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8m4uuOsOAVPq0y43qKijP4eQvkR y+CWdW+WZjVwnxBa1cZMXYEncyv558zJq8NNJie3SdqBjVkEK8+EouSjrvcaTVnb QN1y9g3LEYoVij8p7IXfvpEQSEPM30hvBpVaPgEmjikCcFTL85VUKSxuGG+t0lZX nN9s6yQJh9QmeRGrxO3Xawm9GItfV+4WRlRiraxyb7tAuUKJeD3+LV9swCK8PtoU K9ETutqRrM6qnn4O3tU0k6prKcz+w4x/Qw907LyAeKu7aFq4OAzPvgKXV3CqrQFU PW1euDv6PaA97lAtWvDu4WkoFeDIXIG/8lnRcCeBh38PTubNovwcP7dLDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjchZHnYqykz7uYUApVN2w3YDsJMB8GA1UdIwQY MBaAFJfaQgAIz7kZNJknjvVYvULWHH91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDlwQ0FBalB1UmswbVNlTzlWaTlRdFljZjNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xMzkwNDQtOWViYy00NTU5LWJhMTAt YTM4ZTFlY2E0ZmQ0LzEvbDlwQ0FBalB1UmswbVNlTzlWaTlRdFljZjNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8xMzkwNDQtOWViYy00NTU5LWJhMTAtYTM4ZTFlY2E0ZmQ0 LzEvbDlwQ0FBalB1UmswbVNlTzlWaTlRdFljZjNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW01M2YVc VFh9DAjk5WxDKP3JPTEEUfG4w4Dxl+v58c1mHR3tkCuWsuI1rPihxtCM+iOPcx7X P/yT51LgAl7mUozdGGRjcVengoWfyG4S5pLS54b838bmIXke5KKT55+H7FdX+N1N WUg46hhrqQjpzKsj4psFNRvoTAuGnTWvKRPYdCaFvOKuHrAERu20fpWifgyfk0pc 0cYCrS+pXMt21/6qP4qae7NvKGuFGoo3KNvEGQ5qSpu2TQhpbX2KM4OaN3qHVM90 oOMZGPmpv4HHxBG/xEr4J4cpWcoMLLcEiAvwVKQBjIVED0D/j/z3q8/zHnRhMa6i Mu+suL+NRAXQRQ== -----END CERTIFICATE-----Generated at Tue Jan 27 08:37:40 2026 by rpki-client