This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft File: L9XGHpMiaUuHL10yzB-lwbu6sbY.mft (raw, json) Hash identifier: tJxBIFz8Ugc3+Lu83nLYTrsrazSgOETB0wkTJWNjx2g= Subject key identifier: 32:21:BB:25:0E:09:DF:E8:E8:20:34:08:AC:2D:41:9D:28:C1:03:43 Authority key identifier: 2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6 Certificate issuer: /CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6 Certificate serial: 019BB51615FF42052F545E7E114A5D9C5869 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft Manifest number: 07D8 Signing time: Tue 13 Jan 2026 02:01:22 +0000 Manifest this update: Tue 13 Jan 2026 02:01:22 +0000 Manifest next update: Wed 14 Jan 2026 02:01:22 +0000 Files and hashes: 1: L9XGHpMiaUuHL10yzB-lwbu6sbY.crl (hash: q4teI1q6tK9RFRj03mWzjnsu/xEhlYanX1MOyAqAedw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 02:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b5:16:15:ff:42:05:2f:54:5e:7e:11:4a:5d:9c:58:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6 Validity Not Before: Jan 13 02:01:22 2026 GMT Not After : Jan 14 02:01:22 2026 GMT Subject: CN=3221bb250e09dfe8e8203408ac2d419d28c10343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:59:82:e7:12:48:48:a6:e9:fb:81:8e:fc:46: cd:0e:8b:99:73:50:54:69:6f:e5:a9:5b:2b:d1:0b: 15:20:7e:c3:18:a3:e9:b9:95:48:54:24:3e:b7:08: 81:f8:52:1e:9b:f0:87:fd:3b:bd:71:1d:c1:9c:7b: 41:a0:4b:3b:a5:82:a5:26:c3:08:e1:5e:75:80:63: 70:7d:4a:5a:81:99:5d:6c:70:57:fa:b8:7c:33:b8: 75:af:12:3d:4f:17:62:d8:e9:e6:88:ce:ce:b9:c0: 76:a9:ca:80:6a:1c:fd:cc:86:32:69:75:a7:70:3f: 55:3e:d1:3c:70:bf:86:40:0c:11:61:be:a9:a2:e9: 36:65:e8:28:6f:c7:c2:33:37:d8:72:c7:db:53:21: 76:85:1b:ad:69:40:65:66:f9:4b:d8:f4:c2:6c:45: d9:08:39:a9:bb:3e:22:2b:c8:c0:d5:72:ea:36:ff: af:36:bb:44:be:4a:c1:f2:2a:48:26:48:63:7e:b5: 0b:fb:a0:07:de:0b:08:85:62:04:ab:26:a3:dc:35: 52:e9:d6:4a:cf:1e:d7:b7:9f:51:b3:1c:30:40:b1: 30:eb:8d:31:e1:af:bc:01:ac:e5:8e:03:2c:5f:23: b8:85:25:03:03:17:d4:52:17:02:69:dc:f8:59:b5: 76:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:21:BB:25:0E:09:DF:E8:E8:20:34:08:AC:2D:41:9D:28:C1:03:43 X509v3 Authority Key Identifier: keyid:2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:55:bb:ce:76:eb:c9:94:17:47:51:04:98:88:e9:92:09:f1: 2b:2b:bc:7f:91:2a:d9:db:fb:77:c9:55:a2:33:08:98:39:f4: 15:b6:47:b4:5a:e6:e0:6b:63:76:29:00:0c:13:39:10:f5:f7: f5:34:3f:80:99:1d:17:f5:db:bc:b6:b6:e9:74:64:19:88:66: ea:82:51:de:53:68:c8:0d:48:b2:9c:77:d4:90:21:9e:f2:3d: c6:2e:c6:73:4e:fa:48:7a:19:03:66:13:65:16:d5:fe:f5:fb: b2:5f:19:c0:30:e0:f6:ca:e1:ca:4a:d0:16:cf:30:7b:e5:16: 8e:54:80:3a:28:b9:0e:b2:a4:2c:e7:c7:39:a5:bd:23:d0:81: 2e:62:53:17:1c:8e:77:e6:03:1f:57:45:8d:01:34:0b:e3:f9: e4:e0:af:da:c1:ff:af:10:00:a0:13:86:79:1c:30:40:54:3c: c6:4c:cd:4f:74:11:15:18:8d:e8:6d:73:78:7e:84:43:7c:f5: 5d:d8:fa:9a:7e:1a:a4:7f:fb:ac:ce:64:38:a9:19:e6:06:c6: d0:5f:49:a2:df:1c:02:57:1a:35:5f:94:c1:ff:f6:7c:e5:82: 7a:97:15:53:11:cd:c2:0d:c6:fc:c7:ef:60:4e:16:e0:0b:eb: 87:20:5e:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZu1FhX/QgUvVF5+EUpdnFhpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZDVjNjFlOTMyMjY5NGI4NzJmNWQzMmNjMWZhNWMxYmJi YWIxYjYwHhcNMjYwMTEzMDIwMTIyWhcNMjYwMTE0MDIwMTIyWjAzMTEwLwYDVQQD EygzMjIxYmIyNTBlMDlkZmU4ZTgyMDM0MDhhYzJkNDE5ZDI4YzEwMzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1mC5xJISKbp+4GO/EbNDouZc1BU aW/lqVsr0QsVIH7DGKPpuZVIVCQ+twiB+FIem/CH/Tu9cR3BnHtBoEs7pYKlJsMI 4V51gGNwfUpagZldbHBX+rh8M7h1rxI9Txdi2OnmiM7OucB2qcqAahz9zIYyaXWn cD9VPtE8cL+GQAwRYb6pouk2Zegob8fCMzfYcsfbUyF2hRutaUBlZvlL2PTCbEXZ CDmpuz4iK8jA1XLqNv+vNrtEvkrB8ipIJkhjfrUL+6AH3gsIhWIEqyaj3DVS6dZK zx7Xt59RsxwwQLEw640x4a+8AazljgMsXyO4hSUDAxfUUhcCadz4WbV2JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIhuyUOCd/o6CA0CKwtQZ0owQNDMB8GA1UdIwQY MBaAFC/Vxh6TImlLhy9dMswfpcG7urG2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDlYR0hwTWlhVXVITDEweXpCLWx3YnU2c2JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8yMzcwZGUtYjhlNy00ODkwLTk5OTkt YWIzMDdjYjFlM2JiLzEvTDlYR0hwTWlhVXVITDEweXpCLWx3YnU2c2JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8yMzcwZGUtYjhlNy00ODkwLTk5OTktYWIzMDdjYjFlM2Ji LzEvTDlYR0hwTWlhVXVITDEweXpCLWx3YnU2c2JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWVW7znbr yZQXR1EEmIjpkgnxKyu8f5Eq2dv7d8lVojMImDn0FbZHtFrm4GtjdikADBM5EPX3 9TQ/gJkdF/XbvLa26XRkGYhm6oJR3lNoyA1Ispx31JAhnvI9xi7Gc076SHoZA2YT ZRbV/vX7sl8ZwDDg9srhykrQFs8we+UWjlSAOii5DrKkLOfHOaW9I9CBLmJTFxyO d+YDH1dFjQE0C+P55OCv2sH/rxAAoBOGeRwwQFQ8xkzNT3QRFRiN6G1zeH6EQ3z1 Xdj6mn4apH/7rM5kOKkZ5gbG0F9Jot8cAlcaNV+Uwf/2fOWCepcVUxHNwg3G/Mfv YE4W4AvrhyBeZg== -----END CERTIFICATE-----Generated at Tue Jan 13 12:26:42 2026 by rpki-client