This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft File: lJgy8CXL76HqG8oMOQtjwXaUjNI.mft (raw, json) Hash identifier: rCZQmojXDP+hIez7/h51O1sxBNt4VRE2kFVHEczQjBs= Subject key identifier: 1D:D3:A3:5D:9A:10:51:55:AE:08:EF:E9:6E:83:CE:64:08:70:5E:7B Authority key identifier: 94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2 Certificate issuer: /CN=949832f025cbefa1ea1bca0c390b63c176948cd2 Certificate serial: 019BF50714EED33170CCD03C296CDB6212DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft Manifest number: 0662 Signing time: Sun 25 Jan 2026 12:00:40 +0000 Manifest this update: Sun 25 Jan 2026 12:00:40 +0000 Manifest next update: Mon 26 Jan 2026 12:00:40 +0000 Files and hashes: 1: cb-mqGrD9TdvPSnuiFKPTNSp4k0.roa (hash: 3D9GKzTfBklRbCdmXiO06QWtVtwBT318N1GZYxQn0ZA=) 2: lJgy8CXL76HqG8oMOQtjwXaUjNI.crl (hash: 3ed7EuqLZwAdrqmFHlrNE4IsuJamYGFyrRbkzVxnMMc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.crl rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:14:ee:d3:31:70:cc:d0:3c:29:6c:db:62:12:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=949832f025cbefa1ea1bca0c390b63c176948cd2 Validity Not Before: Jan 25 12:00:40 2026 GMT Not After : Jan 26 12:00:40 2026 GMT Subject: CN=1dd3a35d9a105155ae08efe96e83ce6408705e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:19:f1:9b:32:b2:17:65:ab:af:01:c6:b6:42: 89:a2:26:37:a0:14:c7:d8:49:62:bc:8a:0d:25:74: 4c:54:3f:fd:e1:4c:70:4e:b5:d4:ff:db:ed:a7:b4: 95:a8:fe:f1:5f:8e:ee:22:79:3e:95:e9:03:20:96: 32:56:16:60:d6:b1:66:7e:bf:97:ab:29:ed:8a:63: 8e:1e:b8:2a:4a:cb:28:83:d7:b3:d0:88:37:6f:2b: 6e:27:be:f4:0f:60:d1:cb:ca:05:3d:81:f3:3b:15: 9f:55:3d:35:4a:d8:5f:6f:68:85:bd:7f:25:12:65: cd:74:4d:dd:f9:f1:3b:6f:68:f3:90:76:12:60:b1: fc:7e:80:ba:73:17:62:2e:7c:5b:37:d6:3f:4e:47: 48:82:a3:f9:3f:65:d2:ef:48:82:79:44:64:8b:44: 39:d1:39:a1:6d:1d:0a:45:f5:73:e0:a8:70:5c:aa: e2:3f:a8:11:42:14:e0:3e:cc:5a:a5:83:5f:2f:ca: 8d:7a:fd:a9:64:b1:4d:72:2c:c0:f7:7f:14:16:71: 3c:fe:66:7b:55:6a:8b:90:70:82:bf:0f:8d:47:cb: 80:8e:df:31:d9:ed:29:be:bd:74:68:2c:f7:00:da: a1:d7:a9:ac:e4:27:cc:3b:f9:94:90:41:37:f6:c5: 85:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D3:A3:5D:9A:10:51:55:AE:08:EF:E9:6E:83:CE:64:08:70:5E:7B X509v3 Authority Key Identifier: keyid:94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:83:dd:5b:ba:8f:74:9f:51:d2:ee:5f:66:42:36:3f:31:1f: 5f:98:89:c9:f5:f9:83:33:f0:3d:9f:74:28:28:ea:8f:d6:e0: 54:0e:77:f9:08:b5:b2:68:0b:d9:46:86:5f:a6:df:85:c1:c6: a1:f5:03:08:8a:33:de:72:22:d8:21:ea:be:7c:89:83:92:7f: 7f:87:bc:5e:96:5e:e7:de:3d:2b:65:f0:cc:52:82:30:7f:47: e4:fc:79:7a:df:6d:11:eb:da:b9:ad:a4:82:7d:e4:4f:cf:fc: dc:ae:ce:29:a4:4f:68:a0:5b:1c:4e:86:b4:5a:93:a7:ad:cb: aa:ae:d5:58:02:d8:e2:03:bb:be:68:60:33:1e:45:56:b0:4a: 5f:a7:bc:7c:b2:f8:fd:8a:8e:30:d1:39:e7:77:da:c5:90:47: 1c:37:7a:ca:8e:df:cf:1a:82:12:46:2a:60:b9:7c:d3:b0:c9: d7:2c:0a:ff:fc:2c:9c:0a:58:b5:25:da:6f:35:d2:8a:c0:ad: 62:41:d7:85:e1:6b:07:50:18:ec:d1:6c:8d:be:3c:f7:62:70: 52:76:36:b8:46:25:44:4b:68:b4:71:05:8d:83:02:e8:37:09: 40:1d:d2:0a:fb:fb:49:52:e9:4b:28:14:07:ea:1c:75:b5:a8: 28:c4:60:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BxTu0zFwzNA8KWzbYhLaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0OTgzMmYwMjVjYmVmYTFlYTFiY2EwYzM5MGI2M2MxNzY5 NDhjZDIwHhcNMjYwMTI1MTIwMDQwWhcNMjYwMTI2MTIwMDQwWjAzMTEwLwYDVQQD EygxZGQzYTM1ZDlhMTA1MTU1YWUwOGVmZTk2ZTgzY2U2NDA4NzA1ZTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxnxmzKyF2WrrwHGtkKJoiY3oBTH 2ElivIoNJXRMVD/94UxwTrXU/9vtp7SVqP7xX47uInk+lekDIJYyVhZg1rFmfr+X qyntimOOHrgqSssog9ez0Ig3bytuJ770D2DRy8oFPYHzOxWfVT01Sthfb2iFvX8l EmXNdE3d+fE7b2jzkHYSYLH8foC6cxdiLnxbN9Y/TkdIgqP5P2XS70iCeURki0Q5 0TmhbR0KRfVz4KhwXKriP6gRQhTgPsxapYNfL8qNev2pZLFNcizA938UFnE8/mZ7 VWqLkHCCvw+NR8uAjt8x2e0pvr10aCz3ANqh16ms5CfMO/mUkEE39sWF5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3To12aEFFVrgjv6W6DzmQIcF57MB8GA1UdIwQY MBaAFJSYMvAly++h6hvKDDkLY8F2lIzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEpneThDWEw3NkhxRzhvTU9RdGp3WGFVak5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNWMwNTYtMDNiMS00NmE5LWIyMTQt NzhmYzNiYzI4YmExLzEvbEpneThDWEw3NkhxRzhvTU9RdGp3WGFVak5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9lNWMwNTYtMDNiMS00NmE5LWIyMTQtNzhmYzNiYzI4YmEx LzEvbEpneThDWEw3NkhxRzhvTU9RdGp3WGFVak5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjIPdW7qP dJ9R0u5fZkI2PzEfX5iJyfX5gzPwPZ90KCjqj9bgVA53+Qi1smgL2UaGX6bfhcHG ofUDCIoz3nIi2CHqvnyJg5J/f4e8XpZe5949K2XwzFKCMH9H5Px5et9tEevaua2k gn3kT8/83K7OKaRPaKBbHE6GtFqTp63Lqq7VWALY4gO7vmhgMx5FVrBKX6e8fLL4 /YqOMNE553faxZBHHDd6yo7fzxqCEkYqYLl807DJ1ywK//wsnApYtSXabzXSisCt YkHXheFrB1AY7NFsjb4892JwUnY2uEYlREtotHEFjYMC6DcJQB3SCvv7SVLpSygU B+ocdbWoKMRgnw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:51:59 2026 by rpki-client