This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft File: lSGiYvUHXiSys8m2nIr0DimIoeQ.mft (raw, json) Hash identifier: pVubBGaZmnPho9Ia4Ya2ipjKBlrU6fv8cdTBfEluNV0= Subject key identifier: 69:82:39:39:D4:0E:58:8E:B6:DC:03:B8:EF:D5:28:E2:8A:95:81:20 Authority key identifier: 95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4 Certificate issuer: /CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4 Certificate serial: 019BF8769D7950D322011BCEB46DEEC26812 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft Manifest number: 050A Signing time: Mon 26 Jan 2026 04:01:21 +0000 Manifest this update: Mon 26 Jan 2026 04:01:21 +0000 Manifest next update: Tue 27 Jan 2026 04:01:21 +0000 Files and hashes: 1: Us6LmDa2YeON0ni7ME7KB6TjHTo.roa (hash: 3dbTQjtAd+rn0Ht0LtA0Xi1wOrgAsw7gilT3TC7acgs=) 2: arPUcXSO6F2hXmotLmbEkPslkyo.roa (hash: +PNrD3DQwa3lDAFBlDnjQZ5Mt4rCaOW5cH8zFw/pSq0=) 3: lSGiYvUHXiSys8m2nIr0DimIoeQ.crl (hash: O/ctHiUhPdow60IVFLuw260Jyimkx5Ji8/bk5Oriufg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:9d:79:50:d3:22:01:1b:ce:b4:6d:ee:c2:68:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4 Validity Not Before: Jan 26 04:01:21 2026 GMT Not After : Jan 27 04:01:21 2026 GMT Subject: CN=69823939d40e588eb6dc03b8efd528e28a958120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ae:ee:2d:4a:df:b9:89:01:4a:42:77:96:e1: 5c:4d:eb:0d:80:d5:87:1f:19:01:8f:c6:02:1a:49: 98:e2:66:81:1c:83:7b:aa:a6:dd:44:79:80:21:0f: fc:84:ee:cb:55:cd:fb:1d:04:96:40:c3:23:04:56: 4c:55:11:2f:d0:88:cb:b4:3d:09:e0:8c:4f:8f:e8: 32:b6:d1:85:b2:85:6b:f3:bd:30:23:2e:62:3f:22: f2:47:ba:18:61:9e:3a:d1:02:18:fa:54:34:8b:c2: e7:2e:76:15:2a:98:4c:9e:19:23:15:40:cf:cc:61: cf:e8:43:7f:33:0f:12:8d:75:9d:ae:e1:8c:9e:35: 79:94:4f:d7:23:08:9e:0d:db:86:fd:c8:f7:b8:5e: 6e:99:9a:9d:ab:fc:7b:aa:db:f2:ae:a1:f5:b7:4b: d7:c5:8c:bf:af:6e:6e:9f:d8:77:8e:74:b4:2d:7e: 15:50:d0:62:d0:3d:58:8d:f6:b5:c5:ce:76:d6:0b: 47:4c:f7:d9:57:77:1e:ea:91:1b:82:a8:9e:8f:72: 85:5c:f2:4f:b0:1d:70:f7:63:fe:76:b3:96:e1:33: 62:28:fb:ad:b5:5e:89:37:a5:54:ca:90:17:37:c1: 0e:2e:11:7c:76:a7:e2:6e:62:8a:63:b1:ce:eb:72: 93:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:82:39:39:D4:0E:58:8E:B6:DC:03:B8:EF:D5:28:E2:8A:95:81:20 X509v3 Authority Key Identifier: keyid:95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:0b:90:3e:1b:0f:84:1a:0b:dc:d7:d6:c5:4f:be:fa:75:d2: 06:98:c8:22:f2:39:8d:c5:b5:07:1b:c5:87:01:ab:4b:18:e3: e3:7c:bc:be:6e:8b:0c:83:63:da:74:b9:87:d9:84:bb:f3:e1: 3a:3d:0a:73:42:a5:60:69:e9:09:5a:5b:a6:49:94:6d:5c:ce: 30:59:c4:2d:f0:f4:17:0e:61:cd:0d:50:20:3a:92:19:32:5a: 4f:ef:0f:e9:1a:c2:6f:d5:49:0c:b2:77:02:c2:b3:1c:9b:72: 3d:e9:6c:05:81:2d:97:46:3b:fe:52:81:6a:96:8c:b3:82:53: 18:6a:a3:13:60:00:93:44:94:3c:0d:4e:a6:1d:e0:7e:e4:95: 29:c7:7c:a0:36:f6:56:fa:8b:4e:8f:c4:88:d5:23:07:b5:97: 9f:46:4e:89:1d:f4:85:57:40:d4:c2:e6:23:7e:57:c8:28:ef: 5a:8b:cf:6d:6c:11:94:ef:76:83:73:da:54:98:a4:e3:e9:0b: f7:8b:2d:ef:39:f9:a3:13:5b:ba:ea:a0:4a:1b:72:d3:b4:cd: db:b0:71:2f:42:46:a3:fc:1f:3c:63:f7:95:8c:63:e8:d5:6f: 53:0c:dd:2a:f5:27:12:79:1b:cb:cb:fd:a8:76:ec:98:df:07: 10:c5:85:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dp15UNMiARvOtG3uwmgSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjFhMjYyZjUwNzVlMjRiMmIzYzliNjljOGFmNDBlMjk4 OGExZTQwHhcNMjYwMTI2MDQwMTIxWhcNMjYwMTI3MDQwMTIxWjAzMTEwLwYDVQQD Eyg2OTgyMzkzOWQ0MGU1ODhlYjZkYzAzYjhlZmQ1MjhlMjhhOTU4MTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA667uLUrfuYkBSkJ3luFcTesNgNWH HxkBj8YCGkmY4maBHIN7qqbdRHmAIQ/8hO7LVc37HQSWQMMjBFZMVREv0IjLtD0J 4IxPj+gyttGFsoVr870wIy5iPyLyR7oYYZ460QIY+lQ0i8LnLnYVKphMnhkjFUDP zGHP6EN/Mw8SjXWdruGMnjV5lE/XIwieDduG/cj3uF5umZqdq/x7qtvyrqH1t0vX xYy/r25un9h3jnS0LX4VUNBi0D1Yjfa1xc521gtHTPfZV3ce6pEbgqiej3KFXPJP sB1w92P+drOW4TNiKPuttV6JN6VUypAXN8EOLhF8dqfibmKKY7HO63KT3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmCOTnUDliOttwDuO/VKOKKlYEgMB8GA1UdIwQY MBaAFJUhomL1B14ksrPJtpyK9A4piKHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNHaVl2VUhYaVN5czhtMm5JcjBEaW1Jb2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9jMWYyMGUtZDk0Zi00M2M1LWJiOGQt YWQzNjI5YjIwMmMwLzEvbFNHaVl2VUhYaVN5czhtMm5JcjBEaW1Jb2VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9jMWYyMGUtZDk0Zi00M2M1LWJiOGQtYWQzNjI5YjIwMmMw LzEvbFNHaVl2VUhYaVN5czhtMm5JcjBEaW1Jb2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQuQPhsP hBoL3NfWxU+++nXSBpjIIvI5jcW1BxvFhwGrSxjj43y8vm6LDINj2nS5h9mEu/Ph Oj0Kc0KlYGnpCVpbpkmUbVzOMFnELfD0Fw5hzQ1QIDqSGTJaT+8P6RrCb9VJDLJ3 AsKzHJtyPelsBYEtl0Y7/lKBapaMs4JTGGqjE2AAk0SUPA1Oph3gfuSVKcd8oDb2 VvqLTo/EiNUjB7WXn0ZOiR30hVdA1MLmI35XyCjvWovPbWwRlO92g3PaVJik4+kL 94st7zn5oxNbuuqgShty07TN27BxL0JGo/wfPGP3lYxj6NVvUwzdKvUnEnkby8v9 qHbsmN8HEMWFRQ== -----END CERTIFICATE-----Generated at Mon Jan 26 12:35:55 2026 by rpki-client