This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft File: lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft (raw, json) Hash identifier: BjrZVScorOHdR2vtJf5BtGe6U7+uDzbNwEtpyiTaZbI= Subject key identifier: 8E:04:57:9B:02:AE:05:CB:06:22:BC:DB:3C:88:5C:28:46:3F:B2:92 Authority key identifier: 95:4B:07:1A:03:DB:5D:23:3D:05:AB:03:94:54:80:07:76:7F:83:E7 Certificate issuer: /CN=954b071a03db5d233d05ab0394548007767f83e7 Certificate serial: 019BF4D04477E44F3DD292F7425B31E3D169 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft Manifest number: 085F Signing time: Sun 25 Jan 2026 11:00:47 +0000 Manifest this update: Sun 25 Jan 2026 11:00:47 +0000 Manifest next update: Mon 26 Jan 2026 11:00:47 +0000 Files and hashes: 1: ICqVIuqnGDQ2U9fP3d1W-e4TDf8.roa (hash: 60NTvkE84gguHU2fFEBFq8qOMCvmzn8pCex8KwPB/e0=) 2: lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl (hash: y4irFYKeogGpsw2bnls8qRRSHCCAM2S8edoJGbX7j2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:44:77:e4:4f:3d:d2:92:f7:42:5b:31:e3:d1:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954b071a03db5d233d05ab0394548007767f83e7 Validity Not Before: Jan 25 11:00:47 2026 GMT Not After : Jan 26 11:00:47 2026 GMT Subject: CN=8e04579b02ae05cb0622bcdb3c885c28463fb292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ff:a4:6b:00:30:33:2e:14:bb:bb:3b:63:24: 81:e6:73:00:d0:94:a4:b7:b8:de:e3:4a:55:34:c0: 5f:0c:43:a6:d0:53:6d:02:cf:41:64:9a:b8:c9:74: 42:ba:ea:18:f1:d7:76:d0:38:fe:03:2a:36:7f:84: e6:d8:37:16:76:07:a9:18:8d:06:7f:b0:d4:40:29: 93:43:3c:d6:0b:71:12:cb:15:9f:90:35:cd:f3:4a: 7b:6f:dc:6b:b4:ce:5e:e9:b8:23:3e:db:15:7f:6c: ad:1a:2c:e7:38:52:a1:ee:8e:64:d3:fb:8c:1e:cd: 52:ac:01:af:76:bd:be:61:b4:65:3e:62:1d:e0:1e: 2c:0a:ef:bf:de:e6:a1:e0:99:6d:b5:30:43:7b:f5: 11:5a:27:1c:0a:4b:6d:12:10:98:84:7c:07:eb:2f: 67:a3:40:67:ce:12:19:76:2d:4b:3b:82:63:ea:f1: 2e:95:34:bc:74:ea:7f:3b:08:2a:9b:aa:c2:ab:b6: e6:3a:2e:c1:d6:a2:de:11:67:7f:46:3b:80:02:f1: 6e:62:fb:ee:42:eb:e9:7c:c9:71:01:07:bd:53:99: d8:9f:8f:32:f8:a7:8e:cd:92:28:78:ba:0d:94:a2: d9:31:cf:06:74:fe:cd:47:2e:a6:44:33:15:9b:00: 95:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:04:57:9B:02:AE:05:CB:06:22:BC:DB:3C:88:5C:28:46:3F:B2:92 X509v3 Authority Key Identifier: keyid:95:4B:07:1A:03:DB:5D:23:3D:05:AB:03:94:54:80:07:76:7F:83:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:f0:8f:52:4a:95:dc:60:a7:ad:65:44:a7:8e:ad:4d:43:40: 23:54:0c:09:67:4e:ac:4e:7f:a2:56:54:54:c3:01:17:a8:ad: e0:b2:18:53:64:f6:c9:a5:c5:40:3c:ae:e5:c3:b8:70:37:62: 94:91:68:e6:7a:8e:27:c5:22:0b:0b:f1:a9:1d:51:16:55:06: b9:f7:6c:06:18:1c:22:fa:5c:bd:c1:69:d8:9d:85:f3:1c:7a: b4:53:78:e8:79:72:97:b1:c5:1f:e6:47:42:39:04:54:f9:20: af:6b:53:18:91:0a:63:21:e6:94:f7:fd:f7:41:da:2a:35:f9: ac:2c:e9:38:ff:28:36:2e:81:2b:13:8b:f2:f0:5c:3e:2e:63: 6d:8c:e0:34:9f:bb:d0:ea:e6:72:22:0e:4d:0e:ac:88:de:b9: 50:75:6a:de:95:f1:d4:e5:20:07:b4:40:13:0a:2f:58:a1:44: 8b:91:52:fc:03:d7:72:e6:3e:e3:fa:31:b4:07:de:34:f3:bb: 22:14:db:43:93:bc:b9:25:b6:e7:cc:a2:6f:5a:87:d8:6e:8a: e0:d8:71:46:bf:16:ae:7a:55:eb:a3:cc:91:ef:24:19:4a:f3: 96:62:72:c0:9f:e1:f1:ff:37:a9:5b:07:8e:4b:18:fa:34:ee: 82:72:de:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00ER35E890pL3Qlsx49FpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NGIwNzFhMDNkYjVkMjMzZDA1YWIwMzk0NTQ4MDA3NzY3 ZjgzZTcwHhcNMjYwMTI1MTEwMDQ3WhcNMjYwMTI2MTEwMDQ3WjAzMTEwLwYDVQQD Eyg4ZTA0NTc5YjAyYWUwNWNiMDYyMmJjZGIzYzg4NWMyODQ2M2ZiMjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv+kawAwMy4Uu7s7YySB5nMA0JSk t7je40pVNMBfDEOm0FNtAs9BZJq4yXRCuuoY8dd20Dj+Ayo2f4Tm2DcWdgepGI0G f7DUQCmTQzzWC3ESyxWfkDXN80p7b9xrtM5e6bgjPtsVf2ytGiznOFKh7o5k0/uM Hs1SrAGvdr2+YbRlPmId4B4sCu+/3uah4JlttTBDe/URWiccCkttEhCYhHwH6y9n o0BnzhIZdi1LO4Jj6vEulTS8dOp/Owgqm6rCq7bmOi7B1qLeEWd/RjuAAvFuYvvu QuvpfMlxAQe9U5nYn48y+KeOzZIoeLoNlKLZMc8GdP7NRy6mRDMVmwCV/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4EV5sCrgXLBiK82zyIXChGP7KSMB8GA1UdIwQY MBaAFJVLBxoD210jPQWrA5RUgAd2f4PnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFVzSEdnUGJYU005QmFzRGxGU0FCM1pfZy1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lNjQ2MjUtY2I4Yi00OWNiLTg1Njkt MjY2YWMxMDRmN2I0LzEvbFVzSEdnUGJYU005QmFzRGxGU0FCM1pfZy1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9lNjQ2MjUtY2I4Yi00OWNiLTg1NjktMjY2YWMxMDRmN2I0 LzEvbFVzSEdnUGJYU005QmFzRGxGU0FCM1pfZy1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPvCPUkqV 3GCnrWVEp46tTUNAI1QMCWdOrE5/olZUVMMBF6it4LIYU2T2yaXFQDyu5cO4cDdi lJFo5nqOJ8UiCwvxqR1RFlUGufdsBhgcIvpcvcFp2J2F8xx6tFN46Hlyl7HFH+ZH QjkEVPkgr2tTGJEKYyHmlPf990HaKjX5rCzpOP8oNi6BKxOL8vBcPi5jbYzgNJ+7 0OrmciIOTQ6siN65UHVq3pXx1OUgB7RAEwovWKFEi5FS/APXcuY+4/oxtAfeNPO7 IhTbQ5O8uSW258yib1qH2G6K4NhxRr8WrnpV66PMke8kGUrzlmJywJ/h8f83qVsH jksY+jTugnLeZQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:51:41 2026 by rpki-client