This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft File: lZmz54I3DcKBT1JcHW7OhNj3DzY.mft (raw, json) Hash identifier: WJTVr4Th3MpjefZ9dpGER4j/fs42EYEq5y23eKi9LMM= Subject key identifier: 50:FC:DC:93:A6:A6:BA:9C:53:F6:87:79:1F:32:BA:15:1B:01:36:CC Authority key identifier: 95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36 Certificate issuer: /CN=9599b3e782370dc2814f525c1d6ece84d8f70f36 Certificate serial: 019BF5E2F1A755ABABDB0F3A01DF38131655 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft Manifest number: 0489 Signing time: Sun 25 Jan 2026 16:00:49 +0000 Manifest this update: Sun 25 Jan 2026 16:00:49 +0000 Manifest next update: Mon 26 Jan 2026 16:00:49 +0000 Files and hashes: 1: INyi55Cem-fKRbCyhWoBxset2V8.roa (hash: ewguotn20Zrkv6k2+CkZNOeCi50wOffr5aj3RIiSuA0=) 2: lZmz54I3DcKBT1JcHW7OhNj3DzY.crl (hash: Q8mDoXiGzErFCUsozcApUymupUJNstrvN1gIGM6F5do=) 3: lot016U7U6JL43wtM60yljMjF4I.roa (hash: 18/d/s7/WmFdWb3qjzEB9yH+6YTufgLNjpNy8KhdOs0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e2:f1:a7:55:ab:ab:db:0f:3a:01:df:38:13:16:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9599b3e782370dc2814f525c1d6ece84d8f70f36 Validity Not Before: Jan 25 16:00:49 2026 GMT Not After : Jan 26 16:00:49 2026 GMT Subject: CN=50fcdc93a6a6ba9c53f687791f32ba151b0136cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c7:56:30:96:a0:0d:99:d0:46:c2:da:4a:30: c7:72:3e:cd:27:29:00:93:0c:d2:16:2d:03:97:ae: 6f:85:0a:b4:47:d3:8f:c7:07:b9:40:f0:aa:fc:5e: 0b:4b:67:52:c4:bb:a6:4f:c1:2d:e6:36:43:68:71: c2:18:9a:3b:bc:ab:fd:c7:1e:3e:f9:08:0b:d7:d4: a1:1b:df:61:ed:69:33:37:1d:2c:23:c2:46:8f:3e: d7:4a:f1:11:cf:c0:e1:64:04:0a:6d:bb:bf:9a:68: 31:ac:b4:d0:cb:f3:4a:ff:2d:e0:94:b6:22:96:35: bc:19:51:79:76:03:b0:1a:f0:ff:e6:4a:2e:d2:89: 65:ad:bc:d4:e8:87:89:46:62:6d:18:ba:0d:9f:5b: 5c:24:c1:bc:74:61:58:8e:c6:d7:54:e0:1d:23:dd: 23:0d:7e:0f:1b:13:ef:3b:bf:23:e6:43:b3:10:5d: 79:53:9d:49:9d:cf:da:5b:74:cb:60:26:56:fc:e4: b0:6a:b9:42:1d:ba:b6:cf:c3:62:34:f5:79:00:67: e9:9a:62:b8:eb:c6:e7:f9:c4:51:1c:07:70:12:19: d6:6c:79:8e:99:09:55:02:bc:ed:f3:de:fe:ef:fd: 93:ff:84:ba:12:6d:dc:1d:1c:41:71:c7:cd:c5:96: 39:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:FC:DC:93:A6:A6:BA:9C:53:F6:87:79:1F:32:BA:15:1B:01:36:CC X509v3 Authority Key Identifier: keyid:95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:60:65:7a:43:10:b3:ca:03:e6:15:9d:e0:52:00:95:ea:ee: 5a:54:7c:bb:d5:c0:6f:55:df:2b:d0:86:d4:5b:e1:88:1f:86: 83:89:10:d1:85:4a:69:02:30:5d:2e:50:bf:0e:39:c7:96:86: 4a:de:a7:96:9d:ca:e6:4b:3a:a7:9a:fa:e7:e6:bc:f3:41:6d: b6:da:85:41:27:28:ee:9a:19:a5:a8:bf:21:57:9b:ae:29:85: f9:d9:74:f0:6a:b2:d7:a1:d9:82:f0:6f:e3:5f:39:e1:1b:dd: 5e:a7:9e:c6:28:28:ef:92:66:3d:f7:9d:4d:47:d9:f7:f0:8e: f7:74:fb:6c:c7:b7:69:0b:dc:b3:0e:f9:01:ee:11:b6:f3:bf: 28:69:02:fc:b0:bc:97:61:2e:7d:57:57:59:df:06:39:83:33: 58:a7:20:38:5b:95:bb:f7:6c:c7:c5:a8:9c:da:76:33:67:c5: 9e:eb:60:c0:d8:dc:61:24:66:06:12:c0:bc:f9:f1:c9:3d:2f: b7:88:b6:e0:e0:f4:6d:a4:ea:79:19:6a:68:c4:04:cf:85:60: b4:4a:4c:41:62:38:71:b2:b0:ab:18:18:15:bc:83:db:05:8f: eb:c5:68:82:91:a3:6a:e3:28:cf:ac:9d:37:25:2c:bd:1e:2e: 79:a9:1d:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14vGnVaur2w86Ad84ExZVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1OTliM2U3ODIzNzBkYzI4MTRmNTI1YzFkNmVjZTg0ZDhm NzBmMzYwHhcNMjYwMTI1MTYwMDQ5WhcNMjYwMTI2MTYwMDQ5WjAzMTEwLwYDVQQD Eyg1MGZjZGM5M2E2YTZiYTljNTNmNjg3NzkxZjMyYmExNTFiMDEzNmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8dWMJagDZnQRsLaSjDHcj7NJykA kwzSFi0Dl65vhQq0R9OPxwe5QPCq/F4LS2dSxLumT8Et5jZDaHHCGJo7vKv9xx4+ +QgL19ShG99h7WkzNx0sI8JGjz7XSvERz8DhZAQKbbu/mmgxrLTQy/NK/y3glLYi ljW8GVF5dgOwGvD/5kou0ollrbzU6IeJRmJtGLoNn1tcJMG8dGFYjsbXVOAdI90j DX4PGxPvO78j5kOzEF15U51Jnc/aW3TLYCZW/OSwarlCHbq2z8NiNPV5AGfpmmK4 68bn+cRRHAdwEhnWbHmOmQlVArzt897+7/2T/4S6Em3cHRxBccfNxZY5tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFD83JOmprqcU/aHeR8yuhUbATbMMB8GA1UdIwQY MBaAFJWZs+eCNw3CgU9SXB1uzoTY9w82MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFptejU0STNEY0tCVDFKY0hXN09oTmozRHpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi80MGExMDItZWZjZC00ZmQyLTkzNzMt ZDA2YWE1MThhYTZkLzEvbFptejU0STNEY0tCVDFKY0hXN09oTmozRHpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi80MGExMDItZWZjZC00ZmQyLTkzNzMtZDA2YWE1MThhYTZk LzEvbFptejU0STNEY0tCVDFKY0hXN09oTmozRHpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUGBlekMQ s8oD5hWd4FIAleruWlR8u9XAb1XfK9CG1FvhiB+Gg4kQ0YVKaQIwXS5Qvw45x5aG St6nlp3K5ks6p5r65+a880FtttqFQSco7poZpai/IVebrimF+dl08Gqy16HZgvBv 41854RvdXqeexigo75JmPfedTUfZ9/CO93T7bMe3aQvcsw75Ae4RtvO/KGkC/LC8 l2EufVdXWd8GOYMzWKcgOFuVu/dsx8WonNp2M2fFnutgwNjcYSRmBhLAvPnxyT0v t4i24OD0baTqeRlqaMQEz4VgtEpMQWI4cbKwqxgYFbyD2wWP68VogpGjauMoz6yd NyUsvR4ueakdkg== -----END CERTIFICATE-----Generated at Mon Jan 26 00:19:59 2026 by rpki-client