This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft File: L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft (raw, json) Hash identifier: c0HU6s/7HD8hNwjbrVtKMJFX7Gm0qQClGsjKOxG+X7s= Subject key identifier: 1F:02:3B:D5:86:8B:F5:36:4F:70:07:BC:F5:00:94:EE:6D:E9:40:E4 Authority key identifier: 2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4 Certificate issuer: /CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4 Certificate serial: 019B77127061E972E0842F044739D6F80824 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft Manifest number: 0854 Signing time: Thu 01 Jan 2026 01:00:55 +0000 Manifest this update: Thu 01 Jan 2026 01:00:55 +0000 Manifest next update: Fri 02 Jan 2026 01:00:55 +0000 Files and hashes: 1: L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl (hash: DYiZ4vYWPU+Hinea29ttqD5SCTuL/NDxOf5ZYtnmNF0=) 2: upvfUH_YjoaPJNTn3nKwVUkJlqc.roa (hash: GMdb4SO6ufP1WGhwXYRzniR/Z7eY9kD3nmj07BQxDnQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:12:70:61:e9:72:e0:84:2f:04:47:39:d6:f8:08:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4 Validity Not Before: Jan 1 01:00:55 2026 GMT Not After : Jan 2 01:00:55 2026 GMT Subject: CN=1f023bd5868bf5364f7007bcf50094ee6de940e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b1:8c:0a:fb:69:23:36:d5:57:7b:86:7b:91: 50:6f:b7:85:28:2d:f9:73:ee:ca:fe:dc:0d:58:31: 94:47:39:22:98:7f:79:58:4f:1b:f2:97:3a:e7:dc: 9d:ce:27:a9:16:71:cc:f5:de:1e:9a:ec:d5:b0:f2: 31:e4:13:f6:47:da:66:98:5c:1d:5b:f7:3d:0e:0b: cb:33:f7:9d:49:0f:86:0f:32:b2:0c:00:8e:6f:fe: 36:4d:e2:19:d2:b2:f5:7f:33:cc:73:db:cc:fd:18: fa:bb:eb:e1:7b:5f:3c:68:de:02:bd:8e:33:87:99: e0:b2:29:c3:dd:ba:0a:b6:93:df:aa:82:09:fc:e3: 8c:04:d2:02:04:60:f4:05:37:01:48:f3:52:65:99: f8:83:3a:ee:6c:24:d5:c9:b3:3e:fb:09:31:f3:15: da:ba:de:25:27:f5:07:81:0b:2c:af:af:b9:f9:e2: ca:e8:db:ee:e5:49:26:81:9b:a7:4e:94:b8:74:1b: 5d:db:a6:03:47:3f:20:15:9f:33:ef:33:a3:59:45: 7a:c5:0d:b7:11:6c:33:90:ab:3b:2f:16:45:1b:9f: 9d:6b:06:26:36:6b:e2:47:00:dd:1c:05:37:e9:41: c5:4d:db:f4:e4:54:fa:03:8b:76:68:68:08:ca:83: b4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:02:3B:D5:86:8B:F5:36:4F:70:07:BC:F5:00:94:EE:6D:E9:40:E4 X509v3 Authority Key Identifier: keyid:2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:5e:88:29:46:56:56:bb:49:97:ca:a5:fd:72:d5:34:65:50: 71:87:fb:5a:51:d1:21:93:50:fb:f9:f7:d0:46:3d:74:f9:96: ce:b9:c1:f3:d8:e4:27:3e:27:b1:32:73:e8:1c:3f:42:e6:26: 89:d3:9f:cb:2d:dd:14:35:3b:7d:67:1a:d7:4b:5e:be:e7:eb: 09:41:9a:e3:1a:2e:00:c1:52:1b:fe:c8:be:ec:18:1c:ed:f9: 76:fb:6f:a5:80:c7:1a:02:55:d7:14:ec:1c:16:aa:86:f0:41: 49:8b:83:f7:98:45:ff:99:f7:ce:c7:aa:03:71:f9:f0:9f:f3: 81:5f:c1:b9:a9:6f:2d:05:c4:6a:f8:cd:ec:1b:7e:a3:80:a9: fb:59:f2:ed:a1:a5:8b:9e:ee:a5:38:f2:1f:07:6d:fa:b0:c3: 4c:11:00:32:b6:43:79:64:eb:cc:e1:cb:be:d3:19:6b:f1:12: fe:c0:a8:c5:72:4c:7f:80:55:e4:ab:99:d7:46:5a:c4:6c:bb: 8a:48:e6:4b:3d:ef:f3:22:cc:d0:46:1c:96:62:4a:b7:57:ff: 2e:d7:41:d8:fd:18:ad:df:7a:90:df:24:ca:23:4e:94:54:6e: 5e:74:8b:4e:c4:37:a6:44:6e:4a:15:e2:08:4c:7f:72:1d:f5: 2a:dc:cf:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3EnBh6XLghC8ERznW+AgkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZmI2NDFkM2NhMmVjMTE1N2Y0NzczMjE3ODljZWMwY2M1 ZjI5YTQwHhcNMjYwMTAxMDEwMDU1WhcNMjYwMTAyMDEwMDU1WjAzMTEwLwYDVQQD EygxZjAyM2JkNTg2OGJmNTM2NGY3MDA3YmNmNTAwOTRlZTZkZTk0MGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7GMCvtpIzbVV3uGe5FQb7eFKC35 c+7K/twNWDGURzkimH95WE8b8pc659ydziepFnHM9d4emuzVsPIx5BP2R9pmmFwd W/c9DgvLM/edSQ+GDzKyDACOb/42TeIZ0rL1fzPMc9vM/Rj6u+vhe188aN4CvY4z h5ngsinD3boKtpPfqoIJ/OOMBNICBGD0BTcBSPNSZZn4gzrubCTVybM++wkx8xXa ut4lJ/UHgQssr6+5+eLK6Nvu5UkmgZunTpS4dBtd26YDRz8gFZ8z7zOjWUV6xQ23 EWwzkKs7LxZFG5+dawYmNmviRwDdHAU36UHFTdv05FT6A4t2aGgIyoO05QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8CO9WGi/U2T3AHvPUAlO5t6UDkMB8GA1UdIwQY MBaAFC/7ZB08ouwRV/R3MheJzsDMXymkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTF90a0hUeWk3QkZYOUhjeUY0bk93TXhmS2FRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iMDZmZTAtMzY5MC00MzdkLTg5MjQt MDcxZGFhMDVkYWJmLzEvTF90a0hUeWk3QkZYOUhjeUY0bk93TXhmS2FRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9iMDZmZTAtMzY5MC00MzdkLTg5MjQtMDcxZGFhMDVkYWJm LzEvTF90a0hUeWk3QkZYOUhjeUY0bk93TXhmS2FRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAil6IKUZW VrtJl8ql/XLVNGVQcYf7WlHRIZNQ+/n30EY9dPmWzrnB89jkJz4nsTJz6Bw/QuYm idOfyy3dFDU7fWca10tevufrCUGa4xouAMFSG/7IvuwYHO35dvtvpYDHGgJV1xTs HBaqhvBBSYuD95hF/5n3zseqA3H58J/zgV/BualvLQXEavjN7Bt+o4Cp+1ny7aGl i57upTjyHwdt+rDDTBEAMrZDeWTrzOHLvtMZa/ES/sCoxXJMf4BV5KuZ10ZaxGy7 ikjmSz3v8yLM0EYclmJKt1f/LtdB2P0Yrd96kN8kyiNOlFRuXnSLTsQ3pkRuShXi CEx/ch31KtzPLg== -----END CERTIFICATE-----Generated at Thu Jan 1 09:06:49 2026 by rpki-client