This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft File: l6r4kriZHowCd5yy24ZNMh7r6QU.mft (raw, json) Hash identifier: MFHusm/4ZuGep3XlfnYMh8TmROkr6c9MQ0L5uBe3r/w= Subject key identifier: 05:D3:44:E1:C4:55:C2:07:F7:A0:41:62:73:0F:0B:DC:67:DE:B6:6A Authority key identifier: 97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05 Certificate issuer: /CN=97aaf892b8991e8c02779cb2db864d321eebe905 Certificate serial: 019BFB77BDCC7F208B23E400CBEA28B25ACF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft Manifest number: 0ECC Signing time: Mon 26 Jan 2026 18:01:27 +0000 Manifest this update: Mon 26 Jan 2026 18:01:27 +0000 Manifest next update: Tue 27 Jan 2026 18:01:27 +0000 Files and hashes: 1: WB_mADfJlCgt_xSlZ9hPegF8MZQ.roa (hash: kxZ7EdAvbHTtvdvBXeZjcprnDUkeyC7fLZksUUvbJuo=) 2: l6r4kriZHowCd5yy24ZNMh7r6QU.crl (hash: xir8G8hpgSvOttVUQehARbzMj20kBDkLPblW8B1IANo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 18:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:bd:cc:7f:20:8b:23:e4:00:cb:ea:28:b2:5a:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97aaf892b8991e8c02779cb2db864d321eebe905 Validity Not Before: Jan 26 18:01:27 2026 GMT Not After : Jan 27 18:01:27 2026 GMT Subject: CN=05d344e1c455c207f7a04162730f0bdc67deb66a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:2b:9a:1f:07:c9:7a:73:cb:ff:aa:a4:d2:78: 63:a7:8f:89:60:d9:db:2b:4f:2a:e2:16:bf:6a:22: f1:f2:d3:0a:8f:13:fa:e2:aa:73:98:30:f5:59:28: 69:74:fa:62:40:00:37:c2:a0:cd:af:dc:50:cb:80: ea:83:1e:90:99:c2:25:b1:bd:7f:10:08:47:e3:d4: 30:a9:19:72:e4:a9:12:e9:9a:ee:27:65:ea:cf:9f: c1:0f:40:cc:06:3e:ea:32:ed:24:e1:99:b0:b4:01: 1f:55:bd:73:73:cb:51:73:04:cc:c0:16:52:99:8c: e9:cd:56:41:c3:b7:50:04:37:fc:c2:0b:d5:7d:39: db:3d:d7:2b:7a:eb:1c:21:69:49:03:6e:b3:a8:58: 37:3b:58:59:57:86:0d:41:a4:46:33:b3:01:5c:60: 25:64:35:24:77:f5:73:da:08:da:f5:2b:2f:d7:b6: 8e:ab:49:6b:11:1c:57:a9:eb:f9:0e:c8:56:3c:d1: fa:b1:8a:d1:ac:23:0a:86:c4:4f:72:dd:a4:36:6e: 1f:81:ce:12:d9:a7:25:a2:8b:c2:ca:31:05:57:f1: 22:99:f9:1f:ca:20:86:47:04:0c:2e:6d:0d:fe:d6: dc:53:2e:79:9a:7a:e0:fa:f1:c1:01:09:2d:bd:19: e2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D3:44:E1:C4:55:C2:07:F7:A0:41:62:73:0F:0B:DC:67:DE:B6:6A X509v3 Authority Key Identifier: keyid:97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:fd:18:54:9a:89:61:79:b3:5e:1b:1c:13:7d:95:40:61:ee: 97:99:fa:35:85:6f:78:34:17:23:3d:8e:45:2d:61:c9:7a:2e: fb:2f:95:98:d4:8e:c1:b5:c7:f3:43:f2:01:c2:d0:b3:b9:87: 53:31:50:fa:72:30:88:a9:1c:24:83:d3:e6:8b:51:37:ea:6b: df:f8:33:91:81:b9:cf:84:9f:0b:1f:c5:c7:2d:a9:d7:1a:96: c7:13:9b:95:74:f8:3a:b0:03:62:1e:6e:4c:2f:4a:6c:3f:44: f8:d0:66:00:f6:9c:19:92:1b:11:fa:ab:d8:8a:12:c1:b0:57: 5b:a7:c9:7c:7c:10:13:88:61:5f:66:44:12:35:27:b5:80:b9: 19:12:c7:e9:a0:8c:8e:f3:a2:03:04:10:bb:80:ff:87:de:0e: 36:ad:0b:fc:c8:56:09:aa:3a:52:89:82:dc:f8:5c:ef:93:88: 67:91:e7:44:e5:b6:b8:d4:32:11:bc:0c:39:62:51:6d:11:ed: 5a:63:27:08:6a:46:4d:77:e2:be:97:f1:69:39:71:fd:e5:d1: 7a:6c:10:35:88:01:5d:da:21:22:e5:9f:57:bf:0c:57:6a:61: fd:15:14:28:f6:f5:00:82:37:5e:50:05:cd:4e:1c:8e:9d:7a: 39:7e:a1:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7d73MfyCLI+QAy+ooslrPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3YWFmODkyYjg5OTFlOGMwMjc3OWNiMmRiODY0ZDMyMWVl YmU5MDUwHhcNMjYwMTI2MTgwMTI3WhcNMjYwMTI3MTgwMTI3WjAzMTEwLwYDVQQD EygwNWQzNDRlMWM0NTVjMjA3ZjdhMDQxNjI3MzBmMGJkYzY3ZGViNjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9yuaHwfJenPL/6qk0nhjp4+JYNnb K08q4ha/aiLx8tMKjxP64qpzmDD1WShpdPpiQAA3wqDNr9xQy4Dqgx6QmcIlsb1/ EAhH49QwqRly5KkS6ZruJ2Xqz5/BD0DMBj7qMu0k4ZmwtAEfVb1zc8tRcwTMwBZS mYzpzVZBw7dQBDf8wgvVfTnbPdcreuscIWlJA26zqFg3O1hZV4YNQaRGM7MBXGAl ZDUkd/Vz2gja9Ssv17aOq0lrERxXqev5DshWPNH6sYrRrCMKhsRPct2kNm4fgc4S 2acloovCyjEFV/EimfkfyiCGRwQMLm0N/tbcUy55mnrg+vHBAQktvRniFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXTROHEVcIH96BBYnMPC9xn3rZqMB8GA1UdIwQY MBaAFJeq+JK4mR6MAnecstuGTTIe6+kFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDZyNGtyaVpIb3dDZDV5eTI0Wk5NaDdyNlFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC80MWZlMWItMmYwZS00ZmFhLTlmZDQt Y2E3NDY4NjdkYWM4LzEvbDZyNGtyaVpIb3dDZDV5eTI0Wk5NaDdyNlFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC80MWZlMWItMmYwZS00ZmFhLTlmZDQtY2E3NDY4NjdkYWM4 LzEvbDZyNGtyaVpIb3dDZDV5eTI0Wk5NaDdyNlFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARf0YVJqJ YXmzXhscE32VQGHul5n6NYVveDQXIz2ORS1hyXou+y+VmNSOwbXH80PyAcLQs7mH UzFQ+nIwiKkcJIPT5otRN+pr3/gzkYG5z4SfCx/Fxy2p1xqWxxOblXT4OrADYh5u TC9KbD9E+NBmAPacGZIbEfqr2IoSwbBXW6fJfHwQE4hhX2ZEEjUntYC5GRLH6aCM jvOiAwQQu4D/h94ONq0L/MhWCao6UomC3Phc75OIZ5HnROW2uNQyEbwMOWJRbRHt WmMnCGpGTXfivpfxaTlx/eXRemwQNYgBXdohIuWfV78MV2ph/RUUKPb1AII3XlAF zU4cjp16OX6hkg== -----END CERTIFICATE-----Generated at Tue Jan 27 02:12:18 2026 by rpki-client