This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft File: LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft (raw, json) Hash identifier: z/4UprttWjj+jUTJySDhIdaBGSjGJYQSuHYIS6+lb5w= Subject key identifier: DE:63:7A:22:D0:3D:DB:6E:70:D6:3A:31:5B:61:78:C2:11:6B:ED:32 Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13 Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513 Certificate serial: 019BF6BF0E4DFB86BF6C1646A650FC475478 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 20:01:14 +0000 Manifest this update: Sun 25 Jan 2026 20:01:14 +0000 Manifest next update: Mon 26 Jan 2026 20:01:14 +0000 Files and hashes: 1: L4LkPtTKu6uh824DJ6xjRvNmWTU.roa (hash: 0NgdalWgdZZseus2rUGUIbaj+mAP6w8e2361KL42z6g=) 2: LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl (hash: 20KC+A48urMQYd0PgKbNWSIb4TpdkDVUBHrCdlF+VtQ=) 3: fRlgrC6V-4hpDOR3xf-j7dbCZZ8.roa (hash: aMV6NBt217+iKos/Lhiyotp7vHjyI7McAj/90qITACM=) 4: qsejt5iw_nC2cpa2gTFa-6x-D30.roa (hash: OQehKpZjdvH5fT9tftK+VPDJxCO7SZpTNsO/1LiDTxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:0e:4d:fb:86:bf:6c:16:46:a6:50:fc:47:54:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513 Validity Not Before: Jan 25 20:01:14 2026 GMT Not After : Jan 26 20:01:14 2026 GMT Subject: CN=de637a22d03ddb6e70d63a315b6178c2116bed32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8f:c0:7e:3f:73:22:e7:8b:4d:72:0f:b5:d0: 6c:4e:f0:90:bd:2e:6a:ee:80:c4:d5:11:9f:1e:96: de:33:be:fc:c1:f0:69:64:ea:91:f0:1c:44:7a:cb: 8b:2c:d2:bf:a0:4a:b2:fe:79:52:5f:e7:12:14:6d: 7b:f1:22:25:b0:58:42:21:aa:08:db:18:d9:11:90: 05:a7:0d:65:0c:75:35:91:c5:a4:f1:dd:7b:6e:7a: 65:0f:a4:22:cd:77:6e:c9:f9:a0:0b:cb:52:03:fb: cf:cb:b9:53:43:3a:0d:a4:bb:d8:ce:1a:6e:d3:54: 23:a6:0f:ac:62:90:ca:64:8a:e0:7d:5f:7f:49:f7: 0d:69:6c:db:00:3b:91:41:ad:60:1e:c2:3e:38:d7: 48:05:4c:c7:d2:58:b1:73:f2:27:b2:45:cb:06:4b: 3d:7b:df:cc:f7:36:57:cd:a6:59:79:5c:b4:6f:a6: 43:56:54:34:4b:89:f8:e1:47:81:4e:25:6a:fb:f5: 4f:1e:86:f2:c4:8e:be:64:93:81:1a:7a:0d:30:d8: 4b:3b:47:c2:50:ad:d8:3e:3c:17:1b:b6:3c:2f:4e: fe:65:b2:a0:9d:a3:11:6b:0f:ba:8c:68:3b:87:47: d7:30:cb:e6:e6:59:3a:c6:6a:67:1b:f5:3b:72:fb: 37:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:63:7A:22:D0:3D:DB:6E:70:D6:3A:31:5B:61:78:C2:11:6B:ED:32 X509v3 Authority Key Identifier: keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:3c:80:81:6e:e4:6b:e4:8e:aa:57:1c:33:fd:13:32:86:82: e3:40:78:20:87:0a:ed:7a:42:3c:3c:07:01:75:bd:c0:86:ae: 16:85:d1:30:74:8a:8b:79:9a:4e:b2:b3:de:81:08:7c:13:db: e0:78:22:b2:70:1d:3f:75:ba:5f:a2:83:25:73:35:59:4a:4e: cd:29:fa:cb:1f:97:57:7e:bf:de:48:cd:31:54:4d:fc:46:e3: a2:74:83:bc:26:b9:f4:72:ae:c6:81:29:96:d9:d3:ff:b8:c0: ff:6d:d3:c9:12:70:92:f0:82:59:48:0f:b6:db:19:9d:ab:0a: 8f:bb:ae:f1:bf:0c:0e:d6:ad:07:d9:0e:b8:08:c5:9c:6e:a2: d5:8e:9a:9a:91:98:a7:fe:d7:0e:ba:22:a2:61:51:90:a2:e0: 97:f6:9f:02:20:dc:6a:b5:ad:2e:29:db:e2:38:3a:cf:a9:7b: 88:5a:e3:4e:62:d4:34:c2:4a:e3:2f:6d:42:5d:36:42:51:1e: d0:f1:68:ac:de:66:5b:8e:af:76:fb:11:6d:3d:14:ac:c1:4d: 96:ae:dc:76:d7:f4:c4:e2:cb:53:94:36:19:de:10:50:ae:67: 2f:ba:71:5b:c7:52:be:5d:97:da:80:f9:72:1a:cd:a2:bc:17: 67:b3:e9:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vw5N+4a/bBZGplD8R1R4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTYyMDg5MGY3MDBmMDEyYjBiYTYwMTcyMzE0ZTNjODU5 MTk1MTMwHhcNMjYwMTI1MjAwMTE0WhcNMjYwMTI2MjAwMTE0WjAzMTEwLwYDVQQD EyhkZTYzN2EyMmQwM2RkYjZlNzBkNjNhMzE1YjYxNzhjMjExNmJlZDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2o/Afj9zIueLTXIPtdBsTvCQvS5q 7oDE1RGfHpbeM778wfBpZOqR8BxEesuLLNK/oEqy/nlSX+cSFG178SIlsFhCIaoI 2xjZEZAFpw1lDHU1kcWk8d17bnplD6QizXduyfmgC8tSA/vPy7lTQzoNpLvYzhpu 01Qjpg+sYpDKZIrgfV9/SfcNaWzbADuRQa1gHsI+ONdIBUzH0lixc/InskXLBks9 e9/M9zZXzaZZeVy0b6ZDVlQ0S4n44UeBTiVq+/VPHobyxI6+ZJOBGnoNMNhLO0fC UK3YPjwXG7Y8L07+ZbKgnaMRaw+6jGg7h0fXMMvm5lk6xmpnG/U7cvs36wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5jeiLQPdtucNY6MVtheMIRa+0yMB8GA1UdIwQY MBaAFC4WIIkPcA8BKwumAXIxTjyFkZUTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhZZ2lROXdEd0VyQzZZQmNqRk9QSVdSbFJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy84MjExNTItOWYxMy00YzA5LTlkY2Qt NDViYmIyM2ExNWQ4LzEvTGhZZ2lROXdEd0VyQzZZQmNqRk9QSVdSbFJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy84MjExNTItOWYxMy00YzA5LTlkY2QtNDViYmIyM2ExNWQ4 LzEvTGhZZ2lROXdEd0VyQzZZQmNqRk9QSVdSbFJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnDyAgW7k a+SOqlccM/0TMoaC40B4IIcK7XpCPDwHAXW9wIauFoXRMHSKi3maTrKz3oEIfBPb 4HgisnAdP3W6X6KDJXM1WUpOzSn6yx+XV36/3kjNMVRN/EbjonSDvCa59HKuxoEp ltnT/7jA/23TyRJwkvCCWUgPttsZnasKj7uu8b8MDtatB9kOuAjFnG6i1Y6ampGY p/7XDroiomFRkKLgl/afAiDcarWtLinb4jg6z6l7iFrjTmLUNMJK4y9tQl02QlEe 0PForN5mW46vdvsRbT0UrMFNlq7cdtf0xOLLU5Q2Gd4QUK5nL7pxW8dSvl2X2oD5 chrNorwXZ7PpTA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:20 2026 by rpki-client