This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft File: p-LOMQlICu57P9KEbsj4ZGiFzbo.mft (raw, json) Hash identifier: ylCnHa1/jSBTDqq/Y2c18bfZDScfs4MG1FpnEAXt7js= Subject key identifier: B5:99:39:A1:52:95:62:6B:46:18:A6:F7:72:4C:87:BF:9D:E2:36:1C Authority key identifier: A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA Certificate issuer: /CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba Certificate serial: 019B94E5F5DA1F11876969545C6B812C52FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft Manifest number: 17C9 Signing time: Tue 06 Jan 2026 20:00:57 +0000 Manifest this update: Tue 06 Jan 2026 20:00:57 +0000 Manifest next update: Wed 07 Jan 2026 20:00:57 +0000 Files and hashes: 1: 1FmJS162fQbGwB70KRRIxqQYTPA.roa (hash: wZ0mqVcfmtfFGvqCihWmXQC/JMhhCh9+TH6XvIsulCo=) 2: 6oZ5EjqZisGcBSFRGAY0I58w2z8.roa (hash: L22Ki4i/bHR4nsGJUs2wsOygUoNgPdGybFfVf2yeFJ4=) 3: Jcrma76ylAdAlGHz2It6HjItjVY.roa (hash: gxRmdXqrCHXXDsq6yXCM2hWnNFd/SuqVgvjo3oxIpIo=) 4: MBnHYmvHgfFqe99fU0s4rn0KXV4.roa (hash: Wq2dVDQ3LLdiDt+3Q/nPxFVfP5iqbuOdoj4/h9WIEZA=) 5: OkvrHqovIuCvA9DKylZPzJjsiLw.roa (hash: zDYM6sW/jEHSN9/osUFU8Hrx77FyqMIJs5+jayqems0=) 6: Z-Bltd0Hd8Wiwq9a-uJVdfU9kmY.roa (hash: 9o3h5OJ6yuOmpiGRC8WyL9keSG9Y6pKzn5PzuEfOyaY=) 7: huYXzYbwmRIlzSXqCG_XMzLFfLI.roa (hash: KMWYZ0oGUPWGO8v+CPLewWBemgNzQ4Q4bJS+rkHUyUY=) 8: p-LOMQlICu57P9KEbsj4ZGiFzbo.crl (hash: m+2Q6CA2AYF4fZ4kUJ9EeHpR3DcSobeqfTV+UmK53yQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 20:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:94:e5:f5:da:1f:11:87:69:69:54:5c:6b:81:2c:52:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba Validity Not Before: Jan 6 20:00:57 2026 GMT Not After : Jan 7 20:00:57 2026 GMT Subject: CN=b59939a15295626b4618a6f7724c87bf9de2361c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0d:e7:56:d3:a5:4a:95:21:0f:35:c4:16:4c: 5f:35:31:f6:46:50:45:40:3f:cd:dd:6f:c1:ae:5b: fa:50:5b:7b:02:f9:6f:a6:e0:77:59:e5:57:34:05: 28:57:fe:f5:29:f3:28:04:4f:a0:44:03:0b:ab:49: 23:07:18:41:67:9d:38:63:25:a8:36:02:eb:85:34: 26:66:79:5b:2c:51:af:05:5f:4d:39:52:9a:b7:57: 6c:01:56:ab:e9:ba:35:4b:c4:28:1d:17:3b:3f:b3: 72:fb:f1:2e:5d:cf:ee:2b:6e:78:f7:b8:7c:89:df: c7:8e:e9:7f:a5:b8:ea:4b:02:d9:49:94:c0:53:da: 86:e9:f6:41:ad:21:a4:e3:89:92:b8:2e:de:fd:46: 95:66:f9:bb:5f:ef:52:73:56:91:36:64:58:17:12: 26:db:44:e6:e6:2c:43:37:39:dd:86:a0:bf:89:08: 69:79:eb:45:d8:08:ba:29:6e:7c:49:84:ad:84:44: 58:9e:03:3e:cf:3d:da:67:71:10:cb:fb:17:a0:40: 88:57:c5:ff:a2:f9:83:b2:4d:d4:13:73:88:43:34: 01:5e:9a:9e:6e:23:27:04:0b:8b:55:5c:ac:b1:cc: 6c:e6:0c:fe:44:75:8e:b3:03:fc:87:a6:c4:ea:1a: 68:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:99:39:A1:52:95:62:6B:46:18:A6:F7:72:4C:87:BF:9D:E2:36:1C X509v3 Authority Key Identifier: keyid:A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ed:de:80:40:03:50:b1:9c:94:83:ae:1e:2e:2a:ff:2b:98: 0c:b1:c2:24:80:69:dc:ce:41:93:16:ac:b5:1a:27:98:0f:48: 33:04:3f:42:15:73:a9:5f:23:c4:a9:2b:ce:e8:13:0e:92:14: cf:b2:72:11:be:f2:32:b3:4b:6a:ba:34:ae:b4:f2:91:5d:ee: 38:1b:81:9f:2e:9b:f5:8b:8d:41:51:99:49:9e:f0:4a:5e:b6: 95:ca:d6:90:5f:3f:5d:ca:16:a4:0f:03:c2:58:51:8e:cb:55: 73:96:3a:5b:6b:13:a7:dd:0e:55:e2:80:31:3b:63:4a:2a:c4: d3:6d:b0:f8:85:a3:9a:38:21:b5:4b:8a:3e:63:6d:2d:a4:42: de:77:68:40:48:cf:01:8e:46:dc:a3:15:65:7a:a8:a7:71:14: ee:9c:da:4a:1a:ff:46:02:34:b8:e3:bb:d7:5c:0e:d1:95:9e: 50:de:d0:0e:b7:0e:32:24:2d:3e:37:02:de:b5:b0:32:3f:2f: 00:92:db:41:81:c3:28:15:84:65:cb:1e:98:01:11:28:fe:cf: 99:dd:d3:b0:c8:cd:2c:04:ba:85:b1:65:19:fe:a4:bc:90:f2: 54:0d:09:ac:22:e4:96:d4:82:5b:1c:06:8b:3d:d9:14:6a:dc: cf:47:b5:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuU5fXaHxGHaWlUXGuBLFL+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZTJjZTMxMDk0ODBhZWU3YjNmZDI4NDZlYzhmODY0Njg4 NWNkYmEwHhcNMjYwMTA2MjAwMDU3WhcNMjYwMTA3MjAwMDU3WjAzMTEwLwYDVQQD EyhiNTk5MzlhMTUyOTU2MjZiNDYxOGE2Zjc3MjRjODdiZjlkZTIzNjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA3nVtOlSpUhDzXEFkxfNTH2RlBF QD/N3W/Brlv6UFt7AvlvpuB3WeVXNAUoV/71KfMoBE+gRAMLq0kjBxhBZ504YyWo NgLrhTQmZnlbLFGvBV9NOVKat1dsAVar6bo1S8QoHRc7P7Ny+/EuXc/uK25497h8 id/Hjul/pbjqSwLZSZTAU9qG6fZBrSGk44mSuC7e/UaVZvm7X+9Sc1aRNmRYFxIm 20Tm5ixDNzndhqC/iQhpeetF2Ai6KW58SYSthERYngM+zz3aZ3EQy/sXoECIV8X/ ovmDsk3UE3OIQzQBXpqebiMnBAuLVVysscxs5gz+RHWOswP8h6bE6hpoYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWZOaFSlWJrRhim93JMh7+d4jYcMB8GA1UdIwQY MBaAFKfizjEJSAruez/ShG7I+GRohc26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC1MT01RbElDdTU3UDlLRWJzajRaR2lGemJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9iNjFhZGQtMzJmMC00MmY0LWEzMDEt NzgxOGE4OTQ1NmNiLzEvcC1MT01RbElDdTU3UDlLRWJzajRaR2lGemJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9iNjFhZGQtMzJmMC00MmY0LWEzMDEtNzgxOGE4OTQ1NmNi LzEvcC1MT01RbElDdTU3UDlLRWJzajRaR2lGemJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfe3egEAD ULGclIOuHi4q/yuYDLHCJIBp3M5BkxastRonmA9IMwQ/QhVzqV8jxKkrzugTDpIU z7JyEb7yMrNLaro0rrTykV3uOBuBny6b9YuNQVGZSZ7wSl62lcrWkF8/XcoWpA8D wlhRjstVc5Y6W2sTp90OVeKAMTtjSirE022w+IWjmjghtUuKPmNtLaRC3ndoQEjP AY5G3KMVZXqop3EU7pzaShr/RgI0uOO711wO0ZWeUN7QDrcOMiQtPjcC3rWwMj8v AJLbQYHDKBWEZcsemAERKP7Pmd3TsMjNLAS6hbFlGf6kvJDyVA0JrCLkltSCWxwG iz3ZFGrcz0e1UQ== -----END CERTIFICATE-----Generated at Wed Jan 7 06:37:47 2026 by rpki-client