This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft File: LoOL9dPe_8At-hhOTw6FEVNeUX0.mft (raw, json) Hash identifier: /JQiAhzk2jdC+sZAaZD+kyBmymrTgnmjDwqwdJtI754= Subject key identifier: 84:98:23:1F:DF:BC:0C:FD:FA:20:79:CA:FB:D4:FE:15:77:CD:A0:1A Authority key identifier: 2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D Certificate issuer: /CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d Certificate serial: 019BFD2E67E557722AC9167EF41E58F85E8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft Manifest number: 07D2 Signing time: Tue 27 Jan 2026 02:00:35 +0000 Manifest this update: Tue 27 Jan 2026 02:00:35 +0000 Manifest next update: Wed 28 Jan 2026 02:00:35 +0000 Files and hashes: 1: LoOL9dPe_8At-hhOTw6FEVNeUX0.crl (hash: 2I1Xozu82fBFYZ5VwV21MyjYsNS/YhOBRggk1jM87h8=) 2: v2HU-O26_Ox_izyEAzWjTgSDSjA.roa (hash: oL/ObQcuILx3PCIrA6iIqY8GO/MJMz6xvPpy6djgBm8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:2e:67:e5:57:72:2a:c9:16:7e:f4:1e:58:f8:5e:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d Validity Not Before: Jan 27 02:00:35 2026 GMT Not After : Jan 28 02:00:35 2026 GMT Subject: CN=8498231fdfbc0cfdfa2079cafbd4fe1577cda01a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2d:06:1c:41:0a:ff:48:f9:5d:fd:c7:6a:8c: 2c:4a:2c:47:ab:e6:75:a6:55:48:73:b5:45:e6:12: b2:42:a7:ce:4f:43:db:bb:8c:4c:33:4f:b2:ed:63: 11:33:17:d0:da:b9:51:10:a9:55:90:56:00:1c:99: dc:1a:c0:35:b5:ec:cc:79:01:fb:ae:d4:59:5c:c2: 9e:b3:a5:66:31:42:54:6a:7d:4e:4b:d3:a1:73:ec: 20:06:3e:84:be:38:24:24:fe:42:82:2f:01:87:45: 6f:9b:94:97:0c:a9:8c:09:55:85:85:15:94:c8:1e: a7:97:a0:02:79:1b:00:61:78:12:70:47:b5:31:3b: 8f:3a:b6:1d:93:6f:84:be:a8:67:75:c3:f6:f2:0d: 90:ae:40:aa:07:90:8f:42:d2:c8:ef:da:0d:fd:d6: 99:f7:ac:c6:b7:bd:5c:fc:ee:69:42:49:a4:f5:c2: df:65:5f:85:a8:eb:a0:d4:94:23:c4:19:ce:d7:7f: cd:eb:17:4e:2b:58:c3:a8:ae:3d:a0:b9:db:68:7e: 1c:3c:29:a2:81:f1:3b:7c:36:45:5f:f1:b6:29:30: b3:43:fd:cf:8e:26:7a:d5:78:7d:f2:4b:56:79:99: a3:ee:e5:71:95:52:d1:06:de:0e:2e:0a:ac:46:b9: 76:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:98:23:1F:DF:BC:0C:FD:FA:20:79:CA:FB:D4:FE:15:77:CD:A0:1A X509v3 Authority Key Identifier: keyid:2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:7c:46:ac:b0:f5:cb:7f:64:7a:51:07:24:9f:2b:46:74:f7: 26:d7:49:e0:c3:6a:7b:a7:14:11:fc:ff:28:58:a6:b5:78:39: ce:e5:9a:d8:e4:e5:86:29:0b:ea:10:e4:71:39:11:f8:8a:cd: f8:8b:c0:15:f0:5f:75:69:75:15:c7:29:05:fc:8f:4c:3d:19: 3c:3f:fc:fd:49:c0:9b:08:73:7d:41:79:d1:15:e0:55:90:de: c7:4e:1c:ac:3d:92:4d:1f:b7:50:c9:8e:c9:cf:f5:d7:f7:53: 65:73:0a:ff:bc:a4:5d:61:66:b6:e6:a7:6c:9e:79:c5:25:cb: ae:69:2a:8b:26:3c:73:b8:e8:66:74:95:15:f5:1e:fc:4d:d6: d3:0a:66:a7:e6:74:40:06:fc:6b:0e:14:89:90:0d:81:4a:28: 7d:72:76:7c:ae:ac:c5:06:6a:c4:d7:00:57:fc:ef:90:32:c3: 13:d7:b4:76:d8:cc:63:a6:0f:5f:17:88:92:be:06:ad:af:e9: 82:56:dd:39:e5:46:33:de:32:a7:e4:82:0b:d3:aa:f6:62:ea: c3:a1:c1:1f:45:8e:64:4f:4d:23:ce:ac:49:be:10:2d:bb:38: 22:52:e5:3e:84:9e:81:be:35:a8:a5:28:64:60:20:a3:9a:98: cf:05:d9:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9LmflV3IqyRZ+9B5Y+F6KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODM4YmY1ZDNkZWZmYzAyZGZhMTg0ZTRmMGU4NTExNTM1 ZTUxN2QwHhcNMjYwMTI3MDIwMDM1WhcNMjYwMTI4MDIwMDM1WjAzMTEwLwYDVQQD Eyg4NDk4MjMxZmRmYmMwY2ZkZmEyMDc5Y2FmYmQ0ZmUxNTc3Y2RhMDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy0GHEEK/0j5Xf3HaowsSixHq+Z1 plVIc7VF5hKyQqfOT0Pbu4xMM0+y7WMRMxfQ2rlREKlVkFYAHJncGsA1tezMeQH7 rtRZXMKes6VmMUJUan1OS9Ohc+wgBj6EvjgkJP5Cgi8Bh0Vvm5SXDKmMCVWFhRWU yB6nl6ACeRsAYXgScEe1MTuPOrYdk2+EvqhndcP28g2QrkCqB5CPQtLI79oN/daZ 96zGt71c/O5pQkmk9cLfZV+FqOug1JQjxBnO13/N6xdOK1jDqK49oLnbaH4cPCmi gfE7fDZFX/G2KTCzQ/3PjiZ61Xh98ktWeZmj7uVxlVLRBt4OLgqsRrl2+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISYIx/fvAz9+iB5yvvU/hV3zaAaMB8GA1UdIwQY MBaAFC6Di/XT3v/ALfoYTk8OhRFTXlF9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9PTDlkUGVfOEF0LWhoT1R3NkZFVk5lVVgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9jNDQzODktODFiNS00NTVjLTg1YWMt NGNkODAzMDgxNzFhLzEvTG9PTDlkUGVfOEF0LWhoT1R3NkZFVk5lVVgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9jNDQzODktODFiNS00NTVjLTg1YWMtNGNkODAzMDgxNzFh LzEvTG9PTDlkUGVfOEF0LWhoT1R3NkZFVk5lVVgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhnxGrLD1 y39kelEHJJ8rRnT3JtdJ4MNqe6cUEfz/KFimtXg5zuWa2OTlhikL6hDkcTkR+IrN +IvAFfBfdWl1FccpBfyPTD0ZPD/8/UnAmwhzfUF50RXgVZDex04crD2STR+3UMmO yc/11/dTZXMK/7ykXWFmtuanbJ55xSXLrmkqiyY8c7joZnSVFfUe/E3W0wpmp+Z0 QAb8aw4UiZANgUoofXJ2fK6sxQZqxNcAV/zvkDLDE9e0dtjMY6YPXxeIkr4Gra/p glbdOeVGM94yp+SCC9Oq9mLqw6HBH0WOZE9NI86sSb4QLbs4IlLlPoSegb41qKUo ZGAgo5qYzwXZ3A== -----END CERTIFICATE-----Generated at Tue Jan 27 07:42:42 2026 by rpki-client