This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft File: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft (raw, json) Hash identifier: IVf5yQvHhGZt837Vkc/eGMFJ6yY5akizB02r+ZOSY0U= Subject key identifier: 4A:87:CF:16:AE:DC:D0:3C:BF:BC:F1:C3:2F:7E:97:5D:F3:C4:8F:B8 Authority key identifier: 2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98 Certificate issuer: /CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198 Certificate serial: 019BF2E1C117DAC76CDD01DD9B540D9E59DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft Manifest number: 0381 Signing time: Sun 25 Jan 2026 02:00:39 +0000 Manifest this update: Sun 25 Jan 2026 02:00:39 +0000 Manifest next update: Mon 26 Jan 2026 02:00:39 +0000 Files and hashes: 1: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl (hash: 6jdNixY8VnVEU+dmUMPXshaLXZ3aSQN/eRrE3OMi0Bc=) 2: ntTY6bNs75yEDx8qQmeYR0RBDCE.roa (hash: iKXOwiDpqDa+XDGha/hoiXx2V9ibK6G6tZTQtPFDEqI=) 3: sFud2BTbJwkG-pVAdyDfG15ADY4.roa (hash: eFUaMvgAqEZ4NQM49KaL16OfknWWnOfs9H02j9J+2Bs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e1:c1:17:da:c7:6c:dd:01:dd:9b:54:0d:9e:59:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198 Validity Not Before: Jan 25 02:00:39 2026 GMT Not After : Jan 26 02:00:39 2026 GMT Subject: CN=4a87cf16aedcd03cbfbcf1c32f7e975df3c48fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1f:b1:dc:13:d2:23:28:95:2f:12:af:c7:64: 40:e1:0e:ef:71:07:45:82:42:84:6e:61:10:8f:46: 27:fb:87:ed:5d:2a:d5:6c:6e:2c:74:d3:55:e7:c5: 14:71:b1:e8:46:69:e9:e9:df:1e:4a:11:d7:49:ed: 45:2e:cc:08:e7:0f:cd:32:c7:ad:ec:40:d7:fc:8a: ea:85:61:e1:67:85:84:83:dc:cf:cb:51:47:98:4d: e4:5d:50:12:00:a3:f8:ea:cb:cf:76:95:ea:b9:a8: de:49:7c:21:cd:3b:ea:2e:8f:6f:f3:94:3b:24:55: 4a:a8:dc:8c:44:6d:0a:aa:81:78:31:95:67:4d:a0: a7:3f:8a:35:08:f1:06:ad:57:a7:34:cb:10:17:ba: 62:6f:23:6f:d6:51:7f:94:c5:04:17:3d:35:1e:fa: c0:8e:6a:3d:8f:9d:60:40:3f:9f:fd:b2:26:b5:29: a3:dd:24:dd:ef:08:e0:46:f4:5e:da:1f:81:bc:70: b5:ff:eb:bd:45:48:db:f7:f8:8c:2b:ec:1e:2c:62: a6:b4:eb:ea:6d:41:0b:f5:37:c2:ae:97:55:dd:b6: a5:d4:b4:10:83:a8:24:58:80:2c:97:36:b9:8d:fb: a2:ab:77:c6:25:87:e9:bd:e7:83:2c:01:ed:3d:39: cc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:87:CF:16:AE:DC:D0:3C:BF:BC:F1:C3:2F:7E:97:5D:F3:C4:8F:B8 X509v3 Authority Key Identifier: keyid:2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:9c:5f:e0:d0:47:ef:c3:00:6f:d4:19:5a:bb:19:8d:59:7a: e1:56:c5:a7:e0:40:2f:e2:0f:e5:8c:b0:d6:a8:20:cd:4e:3d: 92:77:56:c1:d1:0b:d5:81:41:57:0b:c1:f6:3d:64:7c:5a:14: d8:ba:ac:ff:0a:1e:e2:53:e3:04:f3:63:86:0e:d9:1f:6a:f3: d8:9d:21:c4:a7:c2:77:36:ab:0a:44:69:c2:29:2b:f1:58:a6: c6:2f:73:f3:e4:27:7f:22:db:7f:67:34:76:20:11:a1:28:03: 57:b4:d9:b1:e1:1d:40:a6:c3:dd:30:89:3d:85:1d:5a:0f:9a: 65:3c:ef:73:ee:0a:61:24:e3:ed:67:d0:6f:80:61:eb:38:b3: 77:5a:90:fc:2c:72:67:ce:55:63:65:24:48:f0:08:e1:8c:80: da:af:5a:5a:bf:cd:d7:6c:80:f8:fe:16:ab:03:e0:d7:e7:7d: a8:1b:d4:43:3d:1a:19:38:02:a5:82:de:18:f9:09:88:40:37: 17:1c:40:73:82:33:9f:fe:33:ef:0d:08:50:35:8c:95:ca:00: 5c:58:29:14:0e:ef:8f:de:fd:b7:8d:82:bc:f6:e8:b2:38:05: 75:d2:0f:2d:4d:cd:af:2f:93:d9:cb:82:90:68:f8:d5:90:37: f3:33:07:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4cEX2sds3QHdm1QNnlneMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkY2QyYzJjMTQxMWI0NmIxOGY3MGU2NzcxMDFhZGExMWNj YjUxOTgwHhcNMjYwMTI1MDIwMDM5WhcNMjYwMTI2MDIwMDM5WjAzMTEwLwYDVQQD Eyg0YTg3Y2YxNmFlZGNkMDNjYmZiY2YxYzMyZjdlOTc1ZGYzYzQ4ZmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB+x3BPSIyiVLxKvx2RA4Q7vcQdF gkKEbmEQj0Yn+4ftXSrVbG4sdNNV58UUcbHoRmnp6d8eShHXSe1FLswI5w/NMset 7EDX/IrqhWHhZ4WEg9zPy1FHmE3kXVASAKP46svPdpXquajeSXwhzTvqLo9v85Q7 JFVKqNyMRG0KqoF4MZVnTaCnP4o1CPEGrVenNMsQF7pibyNv1lF/lMUEFz01HvrA jmo9j51gQD+f/bImtSmj3STd7wjgRvRe2h+BvHC1/+u9RUjb9/iMK+weLGKmtOvq bUEL9TfCrpdV3bal1LQQg6gkWIAslza5jfuiq3fGJYfpveeDLAHtPTnMTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqHzxau3NA8v7zxwy9+l13zxI+4MB8GA1UdIwQY MBaAFC3NLCwUEbRrGPcOZ3EBraEcy1GYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGMwc0xCUVJ0R3NZOXc1bmNRR3RvUnpMVVpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kZmZhMWYtY2Y0YS00YzkwLWIzMDct ZGIzNmVlYTgzMDdmLzEvTGMwc0xCUVJ0R3NZOXc1bmNRR3RvUnpMVVpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kZmZhMWYtY2Y0YS00YzkwLWIzMDctZGIzNmVlYTgzMDdm LzEvTGMwc0xCUVJ0R3NZOXc1bmNRR3RvUnpMVVpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5xf4NBH 78MAb9QZWrsZjVl64VbFp+BAL+IP5Yyw1qggzU49kndWwdEL1YFBVwvB9j1kfFoU 2Lqs/woe4lPjBPNjhg7ZH2rz2J0hxKfCdzarCkRpwikr8Vimxi9z8+QnfyLbf2c0 diARoSgDV7TZseEdQKbD3TCJPYUdWg+aZTzvc+4KYSTj7WfQb4Bh6zizd1qQ/Cxy Z85VY2UkSPAI4YyA2q9aWr/N12yA+P4WqwPg1+d9qBvUQz0aGTgCpYLeGPkJiEA3 FxxAc4Izn/4z7w0IUDWMlcoAXFgpFA7vj979t42CvPbosjgFddIPLU3Nry+T2cuC kGj41ZA38zMHvQ== -----END CERTIFICATE-----Generated at Sun Jan 25 10:35:46 2026 by rpki-client