This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft File: l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft (raw, json) Hash identifier: h1fVNzZPlUQ3hYVDS0NqFnpQPB1q/gMTp2JgPP1MpoI= Subject key identifier: 08:87:5F:E9:5B:D7:1E:54:E1:32:A1:3C:5E:0B:F2:51:8C:A3:F7:BD Authority key identifier: 97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82 Certificate issuer: /CN=974506f3f202d86849bb4dd5c7539d22b4df5182 Certificate serial: 019BA158668FC19CF0B060FEC5867BAB5B59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft Manifest number: 0A4A Signing time: Fri 09 Jan 2026 06:01:23 +0000 Manifest this update: Fri 09 Jan 2026 06:01:23 +0000 Manifest next update: Sat 10 Jan 2026 06:01:23 +0000 Files and hashes: 1: JmukJcLMTVnoHK721SIDdRGwjZc.roa (hash: rPjeyMPjxCCECDKXZfovT9WYlr1pvcOFIEVBpeffV88=) 2: l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl (hash: AKt532tdNtbY8ZBmYpoULrzd5H9+LMDqRHjnmsTXiRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 06:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:58:66:8f:c1:9c:f0:b0:60:fe:c5:86:7b:ab:5b:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=974506f3f202d86849bb4dd5c7539d22b4df5182 Validity Not Before: Jan 9 06:01:23 2026 GMT Not After : Jan 10 06:01:23 2026 GMT Subject: CN=08875fe95bd71e54e132a13c5e0bf2518ca3f7bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:93:1c:2f:54:6f:a5:c8:ed:2c:4e:fc:2e:90: 76:56:bc:99:f6:0f:01:d5:4f:07:16:0c:08:3d:71: 2d:42:86:b8:fa:6b:90:f6:08:23:61:8b:ae:6a:1b: 8e:f3:ff:79:18:da:92:11:ac:31:96:cd:44:62:b3: 85:6a:43:77:d8:f8:03:60:c0:ee:dd:25:f8:b6:03: d4:00:11:be:61:b6:25:f4:cb:b1:3e:88:4e:30:fe: 37:10:c0:a5:37:ec:da:0e:32:82:13:ee:58:50:b0: 64:da:c0:8a:61:09:a6:92:e7:39:1c:b4:fc:b8:d4: 0b:94:c6:40:38:b7:d9:eb:58:31:30:9b:cf:22:86: 28:d3:e2:a5:9f:09:3c:0d:9e:ea:70:e3:80:21:4c: 28:e3:ad:16:a0:75:c5:b3:2b:0b:2b:16:ef:3e:fc: 59:b1:50:6c:b4:5b:4f:9a:1f:f3:30:e8:e2:65:07: d0:db:a2:c6:c0:b1:3e:36:db:fb:e7:13:01:ec:d6: 69:66:f2:19:98:81:cc:11:b6:5b:f5:8f:a9:8b:fd: 56:be:8d:27:4b:fe:c0:6c:71:cc:61:43:b5:1c:c2: bc:a7:ca:d9:34:00:66:73:38:81:39:b0:c0:e8:21: 62:33:17:70:90:ef:42:d4:ef:9d:26:2b:de:e9:bd: dc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:87:5F:E9:5B:D7:1E:54:E1:32:A1:3C:5E:0B:F2:51:8C:A3:F7:BD X509v3 Authority Key Identifier: keyid:97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:7d:16:d6:e0:74:3e:77:d7:a3:5d:7e:8c:03:97:e3:05:a8: 79:8f:b7:8a:b5:f6:a8:0f:02:ed:b7:53:31:56:7a:c0:eb:e2: fa:95:c2:68:72:e5:ca:0a:00:7b:b3:06:91:07:23:a7:5e:27: 6f:56:48:49:ce:53:99:73:67:08:b9:ba:f3:43:fb:0b:70:a4: 53:ff:ed:21:40:1f:24:88:ba:0d:96:28:42:e3:68:e3:f9:67: 13:08:00:f0:86:64:00:60:b8:4b:53:0f:5c:14:c6:7a:70:9c: e1:df:11:2c:03:88:ed:b5:6a:cc:dd:39:61:a2:d0:2e:9b:c1: e2:60:bb:2c:b4:67:2f:50:c3:21:ff:45:af:d0:b7:7a:8d:96: 84:08:1c:94:27:43:f6:8b:3b:88:db:31:e5:e5:de:42:2f:12: d1:74:2c:f7:56:75:30:03:fc:b2:97:0a:80:b5:e0:65:f5:b6: 26:77:de:ba:9d:23:97:14:fa:54:2e:f4:50:2a:1e:04:b7:79: d8:cd:10:44:0a:8d:01:12:bf:eb:a4:fa:f7:66:1d:36:a3:ab: e2:c0:eb:6c:d7:5b:2e:84:20:0a:70:a0:af:48:a6:04:dd:fe: 19:05:ab:71:c2:73:8b:6d:e4:e4:18:3b:b3:ba:6d:c7:c7:bd: 46:95:3a:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuhWGaPwZzwsGD+xYZ7q1tZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NDUwNmYzZjIwMmQ4Njg0OWJiNGRkNWM3NTM5ZDIyYjRk ZjUxODIwHhcNMjYwMTA5MDYwMTIzWhcNMjYwMTEwMDYwMTIzWjAzMTEwLwYDVQQD EygwODg3NWZlOTViZDcxZTU0ZTEzMmExM2M1ZTBiZjI1MThjYTNmN2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15McL1RvpcjtLE78LpB2VryZ9g8B 1U8HFgwIPXEtQoa4+muQ9ggjYYuuahuO8/95GNqSEawxls1EYrOFakN32PgDYMDu 3SX4tgPUABG+YbYl9MuxPohOMP43EMClN+zaDjKCE+5YULBk2sCKYQmmkuc5HLT8 uNQLlMZAOLfZ61gxMJvPIoYo0+Klnwk8DZ7qcOOAIUwo460WoHXFsysLKxbvPvxZ sVBstFtPmh/zMOjiZQfQ26LGwLE+Ntv75xMB7NZpZvIZmIHMEbZb9Y+pi/1Wvo0n S/7AbHHMYUO1HMK8p8rZNABmcziBObDA6CFiMxdwkO9C1O+dJive6b3c7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAiHX+lb1x5U4TKhPF4L8lGMo/e9MB8GA1UdIwQY MBaAFJdFBvPyAthoSbtN1cdTnSK031GCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDBVRzhfSUMyR2hKdTAzVngxT2RJclRmVVlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85MzBjYWYtNzZlZS00NTZjLWFmZTAt YTI1MjU1MzI5ZGMwLzEvbDBVRzhfSUMyR2hKdTAzVngxT2RJclRmVVlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi85MzBjYWYtNzZlZS00NTZjLWFmZTAtYTI1MjU1MzI5ZGMw LzEvbDBVRzhfSUMyR2hKdTAzVngxT2RJclRmVVlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQX0W1uB0 PnfXo11+jAOX4wWoeY+3irX2qA8C7bdTMVZ6wOvi+pXCaHLlygoAe7MGkQcjp14n b1ZISc5TmXNnCLm680P7C3CkU//tIUAfJIi6DZYoQuNo4/lnEwgA8IZkAGC4S1MP XBTGenCc4d8RLAOI7bVqzN05YaLQLpvB4mC7LLRnL1DDIf9Fr9C3eo2WhAgclCdD 9os7iNsx5eXeQi8S0XQs91Z1MAP8spcKgLXgZfW2Jnfeup0jlxT6VC70UCoeBLd5 2M0QRAqNARK/66T692YdNqOr4sDrbNdbLoQgCnCgr0imBN3+GQWrccJzi23k5Bg7 s7ptx8e9RpU64Q== -----END CERTIFICATE-----Generated at Fri Jan 9 16:29:30 2026 by rpki-client