This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft File: L72QjQxb06rPUoDdgeogOCzZeOo.mft (raw, json) Hash identifier: 6sx4kB6UWI0y8V0C9GnOT5Bv13nhWuixKUsQSh014Vc= Subject key identifier: 80:4E:EF:A5:35:6C:41:F4:95:A5:EB:B9:04:04:F5:B4:3B:80:DF:B5 Authority key identifier: 2F:BD:90:8D:0C:5B:D3:AA:CF:52:80:DD:81:EA:20:38:2C:D9:78:EA Certificate issuer: /CN=2fbd908d0c5bd3aacf5280dd81ea20382cd978ea Certificate serial: 019BFDD37F8419CFA8573F416ABE4E0CD4D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft Manifest number: 01E8 Signing time: Tue 27 Jan 2026 05:00:54 +0000 Manifest this update: Tue 27 Jan 2026 05:00:54 +0000 Manifest next update: Wed 28 Jan 2026 05:00:54 +0000 Files and hashes: 1: KGmdJojDynuXCO2Kz5Vxd1BvZJQ.roa (hash: 67OBKUEXhz+km8nUmISJwb9v5PxLdH7qxV+fNu26gt4=) 2: L72QjQxb06rPUoDdgeogOCzZeOo.crl (hash: SF+n7ziv6VdKaYHnZ6zGeEOA3XwHCqV7M44oTtIwdbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 05:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:d3:7f:84:19:cf:a8:57:3f:41:6a:be:4e:0c:d4:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fbd908d0c5bd3aacf5280dd81ea20382cd978ea Validity Not Before: Jan 27 05:00:54 2026 GMT Not After : Jan 28 05:00:54 2026 GMT Subject: CN=804eefa5356c41f495a5ebb90404f5b43b80dfb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1d:23:20:6e:53:13:fb:54:e4:4f:f3:6d:03: 91:a9:2c:71:62:eb:22:68:cd:5c:d5:0d:bd:cd:22: fe:67:42:7e:5b:8c:7a:40:ca:c3:a8:8f:51:2a:22: 73:26:fe:97:e0:72:b1:c9:92:cc:34:81:67:10:f8: 14:e1:40:f7:36:da:b0:54:98:f9:94:7e:ca:6e:55: 60:77:97:c0:0b:59:99:d8:60:11:ab:6b:df:93:c0: 2c:e9:14:3e:01:2f:67:8d:ab:0a:89:d4:3c:c0:5f: 00:fe:01:df:e0:0f:e1:d5:d2:78:fa:81:70:9e:67: f4:79:8d:d6:01:a6:b2:6c:1a:f2:30:d7:b2:f2:41: 5c:97:34:d9:d6:23:d4:2e:e5:48:52:c1:0e:bf:e9: 5f:88:13:36:90:3d:aa:c5:1d:7b:3b:cf:09:0e:03: 38:53:fd:05:3e:c7:9f:98:e1:36:53:db:36:d3:8b: 72:35:87:a9:dd:04:c3:ac:98:9f:15:4a:d8:c6:87: 55:bc:d2:65:61:bc:f9:b5:64:90:1c:7f:ae:53:34: 89:0a:53:23:91:94:c7:6c:fd:ac:b4:17:7f:20:1a: eb:b1:35:33:85:cf:e6:5d:42:48:ab:88:ad:49:d7: 7e:28:cb:6f:bf:74:09:27:96:38:03:c8:c3:59:22: 65:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:4E:EF:A5:35:6C:41:F4:95:A5:EB:B9:04:04:F5:B4:3B:80:DF:B5 X509v3 Authority Key Identifier: keyid:2F:BD:90:8D:0C:5B:D3:AA:CF:52:80:DD:81:EA:20:38:2C:D9:78:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:3b:f3:36:58:b7:e2:63:ac:d7:91:64:56:d1:2f:d4:ee:0c: 24:e4:58:a8:db:30:b7:6f:bb:25:72:48:9a:b0:a3:b5:95:d1: 58:43:b7:0f:0d:f3:5f:c4:5a:bc:6e:d6:b1:09:e0:0a:bc:7b: f2:f9:0b:fd:4a:b4:85:4f:46:e7:fb:45:e2:35:f5:b5:7f:83: d2:e2:aa:08:8b:44:41:9e:aa:85:22:d3:2d:02:44:ef:d1:d6: 6d:15:82:2f:92:6b:6e:f4:27:d6:29:fb:79:c0:02:6a:5a:40: 20:43:95:9e:72:e9:8b:a1:11:6f:f9:2b:02:d1:df:36:c8:8f: 21:5c:66:40:ae:63:5e:3f:60:24:78:77:ec:40:0b:6d:4b:61: a9:94:7e:55:06:9c:b5:0d:9c:fd:cb:1f:de:a9:b8:c9:05:68: a0:10:3a:ea:3c:e7:79:8c:7a:51:3a:94:40:ac:20:40:71:29: 07:e6:6f:98:2d:e2:6f:51:76:0a:3b:5a:f3:fc:39:76:a0:51: f6:6d:9c:0f:4a:70:72:dc:c9:45:73:45:da:be:9e:71:76:06: 7c:be:33:4d:98:c8:1f:be:44:49:2b:da:c0:13:12:b8:98:93: 66:19:ce:c2:72:db:4b:31:21:07:ff:fd:1a:c0:7d:c8:f6:cf: 3a:dd:ba:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv903+EGc+oVz9Bar5ODNTUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYmQ5MDhkMGM1YmQzYWFjZjUyODBkZDgxZWEyMDM4MmNk OTc4ZWEwHhcNMjYwMTI3MDUwMDU0WhcNMjYwMTI4MDUwMDU0WjAzMTEwLwYDVQQD Eyg4MDRlZWZhNTM1NmM0MWY0OTVhNWViYjkwNDA0ZjViNDNiODBkZmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh0jIG5TE/tU5E/zbQORqSxxYusi aM1c1Q29zSL+Z0J+W4x6QMrDqI9RKiJzJv6X4HKxyZLMNIFnEPgU4UD3NtqwVJj5 lH7KblVgd5fAC1mZ2GARq2vfk8As6RQ+AS9njasKidQ8wF8A/gHf4A/h1dJ4+oFw nmf0eY3WAaaybBryMNey8kFclzTZ1iPULuVIUsEOv+lfiBM2kD2qxR17O88JDgM4 U/0FPsefmOE2U9s204tyNYep3QTDrJifFUrYxodVvNJlYbz5tWSQHH+uUzSJClMj kZTHbP2stBd/IBrrsTUzhc/mXUJIq4itSdd+KMtvv3QJJ5Y4A8jDWSJlNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBO76U1bEH0laXruQQE9bQ7gN+1MB8GA1UdIwQY MBaAFC+9kI0MW9Oqz1KA3YHqIDgs2XjqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDcyUWpReGIwNnJQVW9EZGdlb2dPQ3paZU9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNzIzNGMtODg3ZS00MWU5LWFkM2Mt N2VjZGQyZjY0ZDJkLzEvTDcyUWpReGIwNnJQVW9EZGdlb2dPQ3paZU9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNzIzNGMtODg3ZS00MWU5LWFkM2MtN2VjZGQyZjY0ZDJk LzEvTDcyUWpReGIwNnJQVW9EZGdlb2dPQ3paZU9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAzvzNli3 4mOs15FkVtEv1O4MJORYqNswt2+7JXJImrCjtZXRWEO3Dw3zX8RavG7WsQngCrx7 8vkL/Uq0hU9G5/tF4jX1tX+D0uKqCItEQZ6qhSLTLQJE79HWbRWCL5JrbvQn1in7 ecACalpAIEOVnnLpi6ERb/krAtHfNsiPIVxmQK5jXj9gJHh37EALbUthqZR+VQac tQ2c/csf3qm4yQVooBA66jzneYx6UTqUQKwgQHEpB+ZvmC3ib1F2Cjta8/w5dqBR 9m2cD0pwctzJRXNF2r6ecXYGfL4zTZjIH75ESSvawBMSuJiTZhnOwnLbSzEhB//9 GsB9yPbPOt26pw== -----END CERTIFICATE-----Generated at Tue Jan 27 11:52:27 2026 by rpki-client