This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft File: iLFUzheYuaxTDyB_LasGo606KWY.mft (raw, json) Hash identifier: rssRZz1i7uso8RONUm95wECQjpPwsrrkLX/Bko5PrnE= Subject key identifier: 99:2A:E2:C5:1A:2C:D5:F4:11:FC:87:91:1B:FB:0E:E3:43:DC:0E:43 Authority key identifier: 88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66 Certificate issuer: /CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966 Certificate serial: 019BF72D2273814A98637F4310FF8A5C3692 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft Manifest number: 01F2 Signing time: Sun 25 Jan 2026 22:01:28 +0000 Manifest this update: Sun 25 Jan 2026 22:01:28 +0000 Manifest next update: Mon 26 Jan 2026 22:01:28 +0000 Files and hashes: 1: brQWtJ_5TT7HC2FH24mA5Bw_fZw.roa (hash: 6T4RihKvWONSDdVBKM1YXGOOdPCgYZcJRb5CsAL+U7Q=) 2: iLFUzheYuaxTDyB_LasGo606KWY.crl (hash: QYsrpSp7xECkGg5WbKls21j+DoLTFYhjW0dr/4k2JM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:22:73:81:4a:98:63:7f:43:10:ff:8a:5c:36:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966 Validity Not Before: Jan 25 22:01:28 2026 GMT Not After : Jan 26 22:01:28 2026 GMT Subject: CN=992ae2c51a2cd5f411fc87911bfb0ee343dc0e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f0:b4:91:59:4e:c7:a5:19:3b:8a:56:01:39: f3:63:aa:d6:41:32:b0:30:35:5f:eb:e9:47:4f:ae: 15:59:51:d3:f0:6e:94:2a:08:d4:07:13:70:92:37: 5d:90:72:ed:4c:15:43:fb:28:d6:48:b8:1a:8e:2e: 20:cc:55:ea:c6:53:cd:98:1a:f4:c8:76:72:7e:d2: f0:62:66:6a:ee:5d:5b:95:c9:0d:07:da:43:ae:39: 3d:37:9e:bc:d5:4a:71:48:14:82:24:9a:a5:4a:be: 0a:ed:60:95:2a:94:ff:4a:ba:27:b7:3b:21:d4:19: d9:08:d3:9f:6d:96:35:1f:c5:43:85:12:83:2b:9e: b5:88:f3:36:52:4e:c8:a4:84:1f:bc:86:15:4c:d6: 28:e5:13:57:95:d7:2f:b2:ff:19:fb:21:ed:35:15: 33:07:29:c7:c7:75:2f:30:23:d0:74:ae:7f:1f:8c: fe:45:7e:95:6f:49:c8:ed:d2:76:d9:63:59:ea:c3: 3f:b7:43:fa:f1:31:45:1c:6b:64:83:51:89:78:fa: 2e:b2:db:07:ef:ca:1a:55:4f:64:26:1d:d6:10:27: 75:a3:0f:e9:e6:ee:fc:9b:ef:47:bb:e6:62:5a:41: 53:24:e5:c3:eb:99:5c:7a:5a:38:0e:5c:7e:9d:da: 5b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2A:E2:C5:1A:2C:D5:F4:11:FC:87:91:1B:FB:0E:E3:43:DC:0E:43 X509v3 Authority Key Identifier: keyid:88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:ef:97:a2:eb:97:f2:0f:f3:c3:5d:f9:5d:7d:e8:17:4b:d4: a9:34:7c:13:2a:6c:ab:30:9e:27:8a:26:e2:d2:19:8f:19:2c: 8e:d0:2d:a4:81:e8:ce:31:08:5d:4e:cc:db:8b:33:62:eb:1c: 25:97:15:c6:2e:45:2b:96:5b:38:75:75:72:f0:b8:96:da:b4: 8b:ac:70:5e:17:48:c1:58:d1:56:ae:06:f8:07:7c:2c:f0:50: 98:b5:49:36:dd:1d:6f:eb:e7:f6:db:d1:ff:a8:71:b1:4e:72: 70:b8:66:0c:98:d0:e2:62:28:36:31:11:f7:0e:71:05:98:64: e0:bd:26:5c:f8:eb:f5:10:4e:9a:ae:e4:a5:7e:19:57:44:96: 1f:a9:fb:55:64:76:66:c7:b8:ab:ff:00:de:62:f8:84:75:c0: 06:9f:df:5c:91:8a:a6:0b:f7:d2:03:75:50:ae:b6:d7:d5:bb: 74:ec:f3:24:dc:ff:9b:d1:66:6e:82:b0:79:e3:3b:2e:f8:68: 05:8e:70:25:e6:ba:a6:05:10:6f:58:fe:f9:8d:4f:28:82:32: 7c:cb:55:0c:18:5b:c3:a1:4c:e9:ce:3d:e5:9b:7f:de:46:0f: 02:ce:83:6b:9e:57:be:30:88:a8:33:21:19:85:8b:6f:fc:17: d7:69:17:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LSJzgUqYY39DEP+KXDaSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YjE1NGNlMTc5OGI5YWM1MzBmMjA3ZjJkYWIwNmEzYWQz YTI5NjYwHhcNMjYwMTI1MjIwMTI4WhcNMjYwMTI2MjIwMTI4WjAzMTEwLwYDVQQD Eyg5OTJhZTJjNTFhMmNkNWY0MTFmYzg3OTExYmZiMGVlMzQzZGMwZTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovC0kVlOx6UZO4pWATnzY6rWQTKw MDVf6+lHT64VWVHT8G6UKgjUBxNwkjddkHLtTBVD+yjWSLgaji4gzFXqxlPNmBr0 yHZyftLwYmZq7l1blckNB9pDrjk9N5681UpxSBSCJJqlSr4K7WCVKpT/Srontzsh 1BnZCNOfbZY1H8VDhRKDK561iPM2Uk7IpIQfvIYVTNYo5RNXldcvsv8Z+yHtNRUz BynHx3UvMCPQdK5/H4z+RX6Vb0nI7dJ22WNZ6sM/t0P68TFFHGtkg1GJePoustsH 78oaVU9kJh3WECd1ow/p5u78m+9Hu+ZiWkFTJOXD65lcelo4Dlx+ndpbrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkq4sUaLNX0EfyHkRv7DuND3A5DMB8GA1UdIwQY MBaAFIixVM4XmLmsUw8gfy2rBqOtOilmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUxGVXpoZVl1YXhURHlCX0xhc0dvNjA2S1dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iMjMyMDMtN2Q4OS00YmY0LWI2YjUt YWI0M2MwMDg1NDdmLzEvaUxGVXpoZVl1YXhURHlCX0xhc0dvNjA2S1dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iMjMyMDMtN2Q4OS00YmY0LWI2YjUtYWI0M2MwMDg1NDdm LzEvaUxGVXpoZVl1YXhURHlCX0xhc0dvNjA2S1dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAde+XouuX 8g/zw135XX3oF0vUqTR8EypsqzCeJ4om4tIZjxksjtAtpIHozjEIXU7M24szYusc JZcVxi5FK5ZbOHV1cvC4ltq0i6xwXhdIwVjRVq4G+Ad8LPBQmLVJNt0db+vn9tvR /6hxsU5ycLhmDJjQ4mIoNjER9w5xBZhk4L0mXPjr9RBOmq7kpX4ZV0SWH6n7VWR2 Zse4q/8A3mL4hHXABp/fXJGKpgv30gN1UK6219W7dOzzJNz/m9FmboKweeM7Lvho BY5wJea6pgUQb1j++Y1PKIIyfMtVDBhbw6FM6c495Zt/3kYPAs6Da55XvjCIqDMh GYWLb/wX12kXRA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:12 2026 by rpki-client