This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft File: l0417CGA2uvRvz3URAOp4L_LVso.mft (raw, json) Hash identifier: 8oXmpzK2/Esv5t3MoEP6rwfo1kGX9Nl26hAOXLVylis= Subject key identifier: 60:E9:ED:61:6A:B6:15:20:5D:AC:61:95:A3:43:E6:64:DB:E7:31:D4 Authority key identifier: 97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA Certificate issuer: /CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca Certificate serial: 019BFE0B4EBDBA05BC2EAE8343A4CF98058D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft Manifest number: 075F Signing time: Tue 27 Jan 2026 06:01:52 +0000 Manifest this update: Tue 27 Jan 2026 06:01:52 +0000 Manifest next update: Wed 28 Jan 2026 06:01:52 +0000 Files and hashes: 1: ktuOQpvhIVshzEh1AKVHwjETmDQ.roa (hash: RkFBt5jBdqM9V+vWsmvf1KhOIAy1CQTkom8d2viWOuc=) 2: l0417CGA2uvRvz3URAOp4L_LVso.crl (hash: qYKCZrzCAFNeERxr3R84+9hcV5VJIg29cGR0WlpCouM=) 3: ly4jAghIqZcQUeWo_GsyRA8lugc.roa (hash: hPss/Kqk0zlga1lABVmDknuY7c7zTOu7Fb+2VoC/L1Y=) 4: o_HyBkikAR9w1apxuJDVKF2p-3Y.roa (hash: elrFF3wLFffPqJSdmbrmGaLjv6ONKW+nsnV6avvP20k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:0b:4e:bd:ba:05:bc:2e:ae:83:43:a4:cf:98:05:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca Validity Not Before: Jan 27 06:01:52 2026 GMT Not After : Jan 28 06:01:52 2026 GMT Subject: CN=60e9ed616ab615205dac6195a343e664dbe731d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:27:c8:9c:46:bf:8c:22:29:7e:0b:05:eb:1f: b9:8d:7f:ad:10:00:bf:69:45:5c:2a:3b:79:5c:43: 4c:b3:38:c3:95:ab:41:f5:14:e4:65:89:79:de:4b: 90:86:c3:eb:a9:3a:15:71:50:9c:2b:c4:27:7a:5d: d9:7d:5c:66:5c:ba:a0:35:1e:15:79:0d:99:1e:05: a1:83:a5:cb:03:84:9d:8c:da:aa:7c:d7:cf:a2:d6: c7:93:94:8a:69:51:cd:df:c4:a8:ce:06:d4:2c:ce: 2c:83:d8:ce:85:7d:dc:88:43:da:fc:b7:02:1d:3f: a6:7f:e6:c1:4b:0f:aa:b5:53:a7:1c:da:d0:33:9b: 66:a7:f6:b5:0c:71:87:9d:07:0f:d8:91:87:13:09: c4:43:0e:84:7c:74:53:9f:81:e1:ae:99:20:19:a5: 1f:96:76:a0:a6:de:f0:8f:e2:c2:c1:d0:a2:b7:75: 39:0a:e8:3a:d3:8d:cc:7f:f7:b0:65:5f:28:66:4b: de:ca:dd:f9:3d:32:f8:40:a7:c4:72:cb:cc:74:d7: 04:d0:5c:4c:d3:41:27:99:66:1e:75:1b:f4:6e:53: b9:ff:27:d4:92:91:b6:56:dd:ab:b3:e8:5c:95:b0: d5:c2:be:f2:2d:b3:ff:10:e2:f4:cf:d4:40:d0:6e: ee:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E9:ED:61:6A:B6:15:20:5D:AC:61:95:A3:43:E6:64:DB:E7:31:D4 X509v3 Authority Key Identifier: keyid:97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:fe:5d:9b:34:20:ec:e2:18:4d:61:72:b6:fa:23:11:cd:3a: 7b:1b:24:41:bb:eb:02:54:c7:e3:0e:47:90:d0:4c:17:f3:77: c0:2c:04:46:5e:3f:7c:1d:16:33:85:13:21:33:62:9e:75:71: 0a:48:f8:ca:14:49:a6:58:22:60:1c:8f:c4:fe:b7:df:d4:59: 77:91:e4:9c:b3:36:9e:34:6f:38:3e:77:c1:2b:a0:1f:6d:79: d9:bf:cc:b8:20:87:a1:4c:08:22:b4:58:b6:bb:3f:32:f8:19: e9:c3:4b:c0:eb:06:47:a2:73:0f:76:c5:27:68:6f:33:79:ef: 5d:8a:54:27:54:93:27:ea:88:04:dc:22:6f:8d:70:05:fc:09: b6:e9:cc:56:73:84:cf:a5:4b:df:f3:e1:64:da:db:a1:ad:3c: 65:fd:ba:32:cb:c4:ab:39:ba:e0:70:07:2e:df:5e:78:1d:0b: db:26:f9:e1:f9:6b:d5:de:a4:c9:6b:9f:0a:40:7b:9b:d8:d7: 85:f7:4b:c7:cc:c0:de:65:4d:34:b0:2f:b0:bb:7a:74:65:69: f4:b7:95:ba:98:ea:5d:e9:ba:fd:6f:42:80:62:1f:67:3c:b8: 77:1b:07:bd:ad:20:d0:60:58:cd:8e:98:20:68:91:ca:e5:9f: d5:26:40:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+C069ugW8Lq6DQ6TPmAWNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NGUzNWVjMjE4MGRhZWJkMWJmM2RkNDQ0MDNhOWUwYmZj YjU2Y2EwHhcNMjYwMTI3MDYwMTUyWhcNMjYwMTI4MDYwMTUyWjAzMTEwLwYDVQQD Eyg2MGU5ZWQ2MTZhYjYxNTIwNWRhYzYxOTVhMzQzZTY2NGRiZTczMWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCfInEa/jCIpfgsF6x+5jX+tEAC/ aUVcKjt5XENMszjDlatB9RTkZYl53kuQhsPrqToVcVCcK8Qnel3ZfVxmXLqgNR4V eQ2ZHgWhg6XLA4SdjNqqfNfPotbHk5SKaVHN38SozgbULM4sg9jOhX3ciEPa/LcC HT+mf+bBSw+qtVOnHNrQM5tmp/a1DHGHnQcP2JGHEwnEQw6EfHRTn4HhrpkgGaUf lnagpt7wj+LCwdCit3U5Cug6043Mf/ewZV8oZkveyt35PTL4QKfEcsvMdNcE0FxM 00EnmWYedRv0blO5/yfUkpG2Vt2rs+hclbDVwr7yLbP/EOL0z9RA0G7uCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDp7WFqthUgXaxhlaND5mTb5zHUMB8GA1UdIwQY MBaAFJdONewhgNrr0b891EQDqeC/y1bKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDA0MTdDR0EydXZSdnozVVJBT3A0TF9MVnNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kZjRhMGEtYzMzZC00ZTBlLWIxNWUt Y2RmNGM2YjQyNGUxLzEvbDA0MTdDR0EydXZSdnozVVJBT3A0TF9MVnNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9kZjRhMGEtYzMzZC00ZTBlLWIxNWUtY2RmNGM2YjQyNGUx LzEvbDA0MTdDR0EydXZSdnozVVJBT3A0TF9MVnNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACv5dmzQg 7OIYTWFytvojEc06exskQbvrAlTH4w5HkNBMF/N3wCwERl4/fB0WM4UTITNinnVx Ckj4yhRJplgiYByPxP6339RZd5HknLM2njRvOD53wSugH2152b/MuCCHoUwIIrRY trs/MvgZ6cNLwOsGR6JzD3bFJ2hvM3nvXYpUJ1STJ+qIBNwib41wBfwJtunMVnOE z6VL3/PhZNrboa08Zf26MsvEqzm64HAHLt9eeB0L2yb54flr1d6kyWufCkB7m9jX hfdLx8zA3mVNNLAvsLt6dGVp9LeVupjqXem6/W9CgGIfZzy4dxsHva0g0GBYzY6Y IGiRyuWf1SZATA== -----END CERTIFICATE-----Generated at Tue Jan 27 07:40:25 2026 by rpki-client