This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft File: LS-TOfu4yzPFInUcUw86IKdTVHw.mft (raw, json) Hash identifier: qqlvv85FfNleb2ZRfloB+5yBQgTgTB8pIV0bd9wPMiA= Subject key identifier: 5B:82:5D:7E:D9:78:89:30:5B:F8:F1:57:7A:F0:36:51:FC:AE:E0:65 Authority key identifier: 2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C Certificate issuer: /CN=2d2f9339fbb8cb33c522751c530f3a20a753547c Certificate serial: 019BF687FEF2A227914DC61D60029C6E4168 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft Manifest number: 17ED Signing time: Sun 25 Jan 2026 19:01:06 +0000 Manifest this update: Sun 25 Jan 2026 19:01:06 +0000 Manifest next update: Mon 26 Jan 2026 19:01:06 +0000 Files and hashes: 1: Gqk3HeaV0au9T4DEhe8Q6dNAwh8.asa (hash: sHOLc6rxic8mt40+Kc4tGFD0dGCTe4h6CEWIfcWi1Ak=) 2: LS-TOfu4yzPFInUcUw86IKdTVHw.crl (hash: mdypWmBpKOykva+iuFRww0U49y0NWfsWnQAjs5XhYZ0=) 3: YVpYa83TD7oGn7X_LXUUtSI-ptg.asa (hash: O3vV+GOncjyLoTdN6mJYitrleGSMhll91b2ImouHYPs=) 4: Ytkz7IxlIJqgH0OSm69kUlp-EPE.roa (hash: 7rQof/E5rSCbBHNmieO3tmtfWyDOmcOWMAzvg/zrozI=) 5: lK_21cfqHhmJDzSShJrfpf28gUs.roa (hash: kBqpwIbu+aOiILYXAzJqhtjAR9DT0AhDNrOMT8mT30s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:fe:f2:a2:27:91:4d:c6:1d:60:02:9c:6e:41:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2f9339fbb8cb33c522751c530f3a20a753547c Validity Not Before: Jan 25 19:01:06 2026 GMT Not After : Jan 26 19:01:06 2026 GMT Subject: CN=5b825d7ed97889305bf8f1577af03651fcaee065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0d:3d:b6:a4:12:2e:9c:e6:d2:85:9b:b1:83: 29:cf:44:97:e8:aa:25:d6:49:47:6f:4b:a1:59:ae: 04:fd:1f:35:4d:5f:ad:cf:93:3e:5d:72:7b:8c:3d: df:4e:19:e9:42:10:e3:48:00:b5:f6:b8:c1:81:d2: 55:58:41:f4:a4:ab:49:26:eb:f7:03:e9:fe:34:71: 50:90:96:b1:3b:de:c5:e8:3c:a1:87:cb:44:e8:d0: 4b:94:85:6c:45:f1:5e:9e:08:a8:c0:ca:c0:5f:fe: e1:56:ee:4f:24:97:5b:c5:15:c3:b8:1a:7f:6a:85: 71:ba:33:7a:60:0c:3c:87:f5:6d:e7:52:3c:44:ce: ec:a3:8a:b1:16:a8:88:64:08:c2:ce:9a:00:68:98: fb:16:e8:98:2f:1f:ba:22:5d:29:9c:00:db:08:f7: 23:39:82:f7:4b:dc:87:b9:41:79:5c:24:68:41:1d: ef:3c:44:99:6f:15:f0:d0:0f:c3:1b:86:23:36:41: fb:68:da:4c:ad:90:45:5a:49:cb:ce:86:ec:50:57: 76:3c:38:35:6c:0c:62:16:c8:91:cb:24:92:c2:41: 13:e7:e5:15:d2:19:21:9b:43:50:97:34:3d:8e:5e: 9e:e9:0d:3a:9c:ec:5a:c9:b2:66:23:c3:d6:88:da: 34:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:82:5D:7E:D9:78:89:30:5B:F8:F1:57:7A:F0:36:51:FC:AE:E0:65 X509v3 Authority Key Identifier: keyid:2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:a5:d1:9b:c2:bf:d5:9b:28:71:47:9d:53:c4:76:73:f6:e3: 42:bd:24:d4:96:5a:68:3b:99:d5:75:c2:b8:01:fe:f8:cb:69: 25:89:c2:85:f9:fc:e6:06:d8:81:a8:8e:d1:9a:84:e3:a4:c9: 59:fa:4b:b1:ae:1f:8d:66:6c:01:49:5b:2e:29:42:7f:a9:28: 0d:eb:a3:a9:b5:59:13:ad:43:74:e0:f1:14:ae:f3:e9:e5:1f: 78:bd:a6:d6:44:6c:3b:0d:00:75:89:bb:35:4f:69:35:7f:43: 63:60:b6:24:24:52:cd:d3:af:a8:c4:ab:65:7b:c3:63:de:9e: 47:48:47:81:ca:36:b5:e2:db:78:f0:c8:4b:f3:3b:3e:22:e8: 72:0c:c0:c4:f5:c7:bf:c5:be:6f:0b:2f:07:af:a6:f6:4d:df: 59:ad:b0:75:b5:08:e3:f7:66:ec:4d:bc:03:e8:40:b2:81:f9: 34:80:83:f6:46:0f:5e:ac:ee:ad:f3:0f:e1:37:f3:41:df:db: f5:25:81:b6:de:b7:e7:a5:7b:f7:91:19:9a:98:64:9b:03:e7: 82:19:14:95:0a:ef:49:95:a0:a6:1c:61:0b:d7:bb:8f:e7:54: 7f:6b:60:3a:04:e0:df:95:61:9c:25:21:9b:38:91:cf:da:cd: c3:d0:9c:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h/7yoieRTcYdYAKcbkFoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMmY5MzM5ZmJiOGNiMzNjNTIyNzUxYzUzMGYzYTIwYTc1 MzU0N2MwHhcNMjYwMTI1MTkwMTA2WhcNMjYwMTI2MTkwMTA2WjAzMTEwLwYDVQQD Eyg1YjgyNWQ3ZWQ5Nzg4OTMwNWJmOGYxNTc3YWYwMzY1MWZjYWVlMDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzA09tqQSLpzm0oWbsYMpz0SX6Kol 1klHb0uhWa4E/R81TV+tz5M+XXJ7jD3fThnpQhDjSAC19rjBgdJVWEH0pKtJJuv3 A+n+NHFQkJaxO97F6Dyhh8tE6NBLlIVsRfFengiowMrAX/7hVu5PJJdbxRXDuBp/ aoVxujN6YAw8h/Vt51I8RM7so4qxFqiIZAjCzpoAaJj7FuiYLx+6Il0pnADbCPcj OYL3S9yHuUF5XCRoQR3vPESZbxXw0A/DG4YjNkH7aNpMrZBFWknLzobsUFd2PDg1 bAxiFsiRyySSwkET5+UV0hkhm0NQlzQ9jl6e6Q06nOxaybJmI8PWiNo0GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFuCXX7ZeIkwW/jxV3rwNlH8ruBlMB8GA1UdIwQY MBaAFC0vkzn7uMszxSJ1HFMPOiCnU1R8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFMtVE9mdTR5elBGSW5VY1V3ODZJS2RUVkh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi85NWZhNjEtMTdmYi00ODkwLTk1OTgt MWQzYTFlOWI3NTQ1LzEvTFMtVE9mdTR5elBGSW5VY1V3ODZJS2RUVkh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi85NWZhNjEtMTdmYi00ODkwLTk1OTgtMWQzYTFlOWI3NTQ1 LzEvTFMtVE9mdTR5elBGSW5VY1V3ODZJS2RUVkh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdaXRm8K/ 1ZsocUedU8R2c/bjQr0k1JZaaDuZ1XXCuAH++MtpJYnChfn85gbYgaiO0ZqE46TJ WfpLsa4fjWZsAUlbLilCf6koDeujqbVZE61DdODxFK7z6eUfeL2m1kRsOw0AdYm7 NU9pNX9DY2C2JCRSzdOvqMSrZXvDY96eR0hHgco2teLbePDIS/M7PiLocgzAxPXH v8W+bwsvB6+m9k3fWa2wdbUI4/dm7E28A+hAsoH5NICD9kYPXqzurfMP4TfzQd/b 9SWBtt6356V795EZmphkmwPnghkUlQrvSZWgphxhC9e7j+dUf2tgOgTg35VhnCUh mziRz9rNw9CcqQ== -----END CERTIFICATE-----Generated at Mon Jan 26 03:12:04 2026 by rpki-client