This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft File: l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft (raw, json) Hash identifier: zGql/Ij+rET7tJoSA2p3GnhBl68At5TtwfK4OM1VX5o= Subject key identifier: 47:95:8F:23:F9:48:95:EB:42:57:3F:64:42:FF:47:A8:6E:D1:9A:EC Authority key identifier: 97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3 Certificate issuer: /CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3 Certificate serial: 019B77EDC4BE5989E9F36DF0044D9E130C38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft Manifest number: 06F4 Signing time: Thu 01 Jan 2026 05:00:29 +0000 Manifest this update: Thu 01 Jan 2026 05:00:29 +0000 Manifest next update: Fri 02 Jan 2026 05:00:29 +0000 Files and hashes: 1: 5ODJwRdnQa13oezz5TNTCEyKtws.roa (hash: zQdrgcuE5ymqxo+lmUXMohaBUr8MekfjfO1peWkuPsk=) 2: 8PEWFaitqsUZ6z1cmHuAHUZb0BQ.roa (hash: eQE9VX3LaUVY9e8uyeXfzxRtJvjbxOh0QvDdkJtI1qM=) 3: l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl (hash: xQFULI7J3WX8EQ2U9yDnvYuy9hSonrtnjWs8pKKGa1Q=) 4: ookYOsl62US6mMi6GMg2HcD_y2A.roa (hash: NEIgALewSP5rnsPbfbCrZ+39OwZPrksdjPilVku316k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:ed:c4:be:59:89:e9:f3:6d:f0:04:4d:9e:13:0c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3 Validity Not Before: Jan 1 05:00:29 2026 GMT Not After : Jan 2 05:00:29 2026 GMT Subject: CN=47958f23f94895eb42573f6442ff47a86ed19aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bf:54:ac:b7:2f:05:a7:b1:b0:e9:99:dc:fa: c3:73:3d:a3:70:08:34:ba:cd:2a:2e:96:54:89:4e: 18:e3:19:b4:bd:89:1b:86:d5:79:0e:f1:72:20:39: a8:3c:cd:75:e9:81:31:1a:fe:71:ce:27:6d:1b:c2: 18:66:fd:55:2b:3d:e2:00:d2:78:ab:2b:c3:4b:9d: fa:8e:59:4c:65:71:33:3c:43:ec:23:0c:1e:76:e3: 70:51:c2:d6:b0:9a:99:89:34:e0:8b:24:dc:38:57: 9f:13:4a:85:da:fe:4f:aa:7a:98:e1:20:05:bf:22: 35:02:60:48:4f:29:ce:58:0d:77:b0:f3:79:4f:63: a6:95:44:27:c4:ba:08:f8:0a:50:ae:65:67:8d:d9: 61:1a:71:99:98:ae:1a:fa:83:dd:2c:c6:94:7e:7e: 05:db:fc:c2:41:bb:0a:3f:70:24:05:01:fc:6a:e7: 14:b3:d6:8d:78:83:c5:2d:43:d3:f2:99:b4:c9:fe: 8f:c1:73:16:9f:83:f7:8c:c3:b6:35:a3:3b:b4:86: d6:d9:df:3c:57:eb:77:6e:ee:42:0d:df:c4:5c:af: c0:a6:6c:56:f5:3c:54:7b:22:4a:87:9a:72:12:7c: e7:7d:a7:49:98:34:06:9e:ff:2e:a6:74:4f:50:4a: 7d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:95:8F:23:F9:48:95:EB:42:57:3F:64:42:FF:47:A8:6E:D1:9A:EC X509v3 Authority Key Identifier: keyid:97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:72:de:15:48:c6:3e:3a:4d:4e:be:61:f3:84:25:8a:42:37: da:07:aa:c4:56:11:cc:9e:fa:bb:88:b6:dd:8f:02:eb:11:29: 26:bd:c6:e9:6a:7f:31:c6:91:b1:0c:3d:66:a3:6e:73:6e:63: 02:8a:ae:5d:4d:16:69:58:3e:93:15:bc:08:44:fe:35:6d:74: 49:69:fd:51:ab:bb:65:dd:2f:3e:75:d9:1c:ed:3a:6e:b0:ff: c4:3e:a7:d3:e0:90:b1:98:19:3a:5e:78:0c:b0:bb:8a:17:20: 45:33:45:11:e5:1d:8c:6c:bd:53:c7:7a:38:1d:60:a3:97:9e: 53:0d:13:ae:38:85:3c:20:55:0d:1f:99:b3:3c:45:9c:ff:6e: 70:1c:0a:52:82:97:8c:fb:b1:f7:ec:27:6e:f1:38:17:e6:af: f3:a4:c6:47:39:ed:cc:c4:57:60:66:67:48:12:bf:19:38:0a: d9:59:e9:23:95:00:92:18:90:d2:af:2c:d8:53:cb:c6:70:8c: b5:32:54:8b:08:3b:21:61:0b:d5:ed:02:75:67:9d:2a:f2:8c: b0:6d:2d:17:43:39:70:3f:13:8e:04:5e:5e:f1:d6:76:4e:a5: 7e:ca:7b:be:cc:1c:68:d2:8f:91:eb:9c:7c:3c:67:ef:aa:bc: 3e:b5:3a:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt37cS+WYnp823wBE2eEww4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NTMwY2FiM2JhZTViNTI5ZmFiZWI5OTc5YmQ2ODVmN2Iy YmRhYjMwHhcNMjYwMTAxMDUwMDI5WhcNMjYwMTAyMDUwMDI5WjAzMTEwLwYDVQQD Eyg0Nzk1OGYyM2Y5NDg5NWViNDI1NzNmNjQ0MmZmNDdhODZlZDE5YWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob9UrLcvBaexsOmZ3PrDcz2jcAg0 us0qLpZUiU4Y4xm0vYkbhtV5DvFyIDmoPM116YExGv5xzidtG8IYZv1VKz3iANJ4 qyvDS536jllMZXEzPEPsIwweduNwUcLWsJqZiTTgiyTcOFefE0qF2v5PqnqY4SAF vyI1AmBITynOWA13sPN5T2OmlUQnxLoI+ApQrmVnjdlhGnGZmK4a+oPdLMaUfn4F 2/zCQbsKP3AkBQH8aucUs9aNeIPFLUPT8pm0yf6PwXMWn4P3jMO2NaM7tIbW2d88 V+t3bu5CDd/EXK/ApmxW9TxUeyJKh5pyEnznfadJmDQGnv8upnRPUEp9JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEeVjyP5SJXrQlc/ZEL/R6hu0ZrsMB8GA1UdIwQY MBaAFJdTDKs7rltSn6vrmXm9aF97K9qzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDFNTXF6dXVXMUtmcS11WmViMW9YM3NyMnJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82MjUyZjktNjc4Ny00MDZhLWI5MWYt OWNmYTJjN2Q4MTZlLzEvbDFNTXF6dXVXMUtmcS11WmViMW9YM3NyMnJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82MjUyZjktNjc4Ny00MDZhLWI5MWYtOWNmYTJjN2Q4MTZl LzEvbDFNTXF6dXVXMUtmcS11WmViMW9YM3NyMnJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM3LeFUjG PjpNTr5h84QlikI32geqxFYRzJ76u4i23Y8C6xEpJr3G6Wp/McaRsQw9ZqNuc25j AoquXU0WaVg+kxW8CET+NW10SWn9Uau7Zd0vPnXZHO06brD/xD6n0+CQsZgZOl54 DLC7ihcgRTNFEeUdjGy9U8d6OB1go5eeUw0TrjiFPCBVDR+ZszxFnP9ucBwKUoKX jPux9+wnbvE4F+av86TGRzntzMRXYGZnSBK/GTgK2VnpI5UAkhiQ0q8s2FPLxnCM tTJUiwg7IWEL1e0CdWedKvKMsG0tF0M5cD8TjgReXvHWdk6lfsp7vswcaNKPkeuc fDxn76q8PrU6qg== -----END CERTIFICATE-----Generated at Thu Jan 1 09:06:51 2026 by rpki-client