This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft File: lt2IX_TTiauqvQOlF10JdBrLpg0.mft (raw, json) Hash identifier: KtPFC2eORAiP+l40y08y8ZV/f5e/RUest8nlNjpqsyI= Subject key identifier: 65:6D:D3:65:05:61:75:8D:4B:0B:85:A5:FB:36:21:D9:CD:D9:C4:56 Authority key identifier: 96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D Certificate issuer: /CN=96dd885ff4d389abaabd03a5175d09741acba60d Certificate serial: 019BF5AC3B6B01F0E56E34936D45614158B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft Manifest number: 0240 Signing time: Sun 25 Jan 2026 15:01:03 +0000 Manifest this update: Sun 25 Jan 2026 15:01:03 +0000 Manifest next update: Mon 26 Jan 2026 15:01:03 +0000 Files and hashes: 1: 6kMdvrwU2pCwvdQx9e2jtc6HHm0.roa (hash: qE4aJsmYODQ0nzOFNhlgM1kvgijeIJ6BoQLe8YycTn8=) 2: lt2IX_TTiauqvQOlF10JdBrLpg0.crl (hash: ZD3Ghh+OuRBmh8tYSDVx/B5LuF38eAMnCf4W6HNVQTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:3b:6b:01:f0:e5:6e:34:93:6d:45:61:41:58:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96dd885ff4d389abaabd03a5175d09741acba60d Validity Not Before: Jan 25 15:01:03 2026 GMT Not After : Jan 26 15:01:03 2026 GMT Subject: CN=656dd3650561758d4b0b85a5fb3621d9cdd9c456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:85:3f:d3:94:49:fc:69:44:39:c4:49:5a:31: 26:8d:2b:3a:f4:aa:b5:40:d6:77:ff:72:bd:0a:c1: 1d:a6:5e:c2:fb:27:4f:71:68:d9:7c:53:d5:91:5c: d1:c8:f9:c1:52:57:e2:ef:06:f8:65:68:c1:8a:cc: bf:d3:35:7f:d1:d1:fd:d2:77:5e:92:37:59:44:7a: 07:f0:de:95:b1:2c:26:42:b2:cb:ab:11:fa:06:66: 6d:4a:a1:bd:16:95:59:71:97:48:8b:f4:45:13:2f: d1:4f:0f:f2:8e:82:c2:63:b7:73:39:0a:d3:4f:45: 84:24:03:af:e4:ff:fc:5c:c7:9a:a6:60:60:d9:2f: 10:25:3d:fe:cd:64:4b:ae:de:75:11:86:f4:66:44: 42:89:35:04:00:63:4f:e7:05:2a:6a:d8:8e:3a:da: b0:c4:1c:26:58:35:4c:94:7d:af:2d:3d:bb:88:24: 6b:a1:bd:df:a2:49:fc:01:2e:7f:2f:4a:7c:3c:40: eb:ca:61:2f:70:4e:60:4d:71:bc:25:4e:ba:d4:e8: 0b:90:0d:7c:1a:42:5e:af:80:65:e2:ca:d9:1d:f7: fa:6b:a1:54:c8:20:6f:49:47:f8:7b:8b:73:3a:85: 32:c6:3b:7f:13:75:f4:74:fe:38:b5:da:2a:5f:50: 06:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6D:D3:65:05:61:75:8D:4B:0B:85:A5:FB:36:21:D9:CD:D9:C4:56 X509v3 Authority Key Identifier: keyid:96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d2:f5:4c:9e:80:08:67:4a:87:54:d9:6d:41:84:f5:74:c5: 20:8e:58:8c:f9:25:84:ce:30:58:14:29:35:5f:71:c4:c8:80: ee:51:70:7d:04:e4:b9:54:a7:5d:c4:36:75:b1:c9:1b:22:15: 35:75:9e:d0:34:25:97:ff:f7:df:19:d9:32:c1:cc:8d:da:eb: 7e:24:d7:6f:bb:17:5f:cd:86:24:85:6b:9c:2e:a2:39:eb:4a: f2:71:69:be:b0:62:3b:40:28:2b:b9:a0:18:65:38:db:fd:d4: 1c:1c:d3:98:62:63:69:22:36:a5:4c:e1:88:bf:36:2e:13:0d: a7:bf:98:5f:62:5d:e7:00:9f:7b:7b:1c:5c:41:4e:35:34:96: 57:e4:8a:72:30:e8:d5:0f:cc:8c:8c:fb:ff:52:1a:3b:ad:f2: df:95:34:fa:3d:c1:9e:5a:06:51:03:14:b8:8e:d2:08:4a:b3: 61:a5:57:24:0a:0d:f6:2a:bb:c4:9c:17:0e:72:96:e2:b0:0a: c7:48:7f:17:9c:d8:82:e5:3b:1c:24:d7:66:2f:81:6c:5f:90: 4f:0f:8f:a8:49:eb:02:92:50:43:ee:71:fc:7e:de:51:20:f9: a8:3f:4a:b4:cb:17:7d:d1:ec:02:24:95:9f:1b:d8:56:24:7d: 2e:30:06:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rDtrAfDlbjSTbUVhQVi1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZGQ4ODVmZjRkMzg5YWJhYWJkMDNhNTE3NWQwOTc0MWFj YmE2MGQwHhcNMjYwMTI1MTUwMTAzWhcNMjYwMTI2MTUwMTAzWjAzMTEwLwYDVQQD Eyg2NTZkZDM2NTA1NjE3NThkNGIwYjg1YTVmYjM2MjFkOWNkZDljNDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4U/05RJ/GlEOcRJWjEmjSs69Kq1 QNZ3/3K9CsEdpl7C+ydPcWjZfFPVkVzRyPnBUlfi7wb4ZWjBisy/0zV/0dH90nde kjdZRHoH8N6VsSwmQrLLqxH6BmZtSqG9FpVZcZdIi/RFEy/RTw/yjoLCY7dzOQrT T0WEJAOv5P/8XMeapmBg2S8QJT3+zWRLrt51EYb0ZkRCiTUEAGNP5wUqatiOOtqw xBwmWDVMlH2vLT27iCRrob3fokn8AS5/L0p8PEDrymEvcE5gTXG8JU661OgLkA18 GkJer4Bl4srZHff6a6FUyCBvSUf4e4tzOoUyxjt/E3X0dP44tdoqX1AGdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVt02UFYXWNSwuFpfs2IdnN2cRWMB8GA1UdIwQY MBaAFJbdiF/004mrqr0DpRddCXQay6YNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHQySVhfVFRpYXVxdlFPbEYxMEpkQnJMcGcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8wYzUyNjUtMzJhZi00OGYyLTkwNmQt YjY1MmM4NTU1NmJiLzEvbHQySVhfVFRpYXVxdlFPbEYxMEpkQnJMcGcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8wYzUyNjUtMzJhZi00OGYyLTkwNmQtYjY1MmM4NTU1NmJi LzEvbHQySVhfVFRpYXVxdlFPbEYxMEpkQnJMcGcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmtL1TJ6A CGdKh1TZbUGE9XTFII5YjPklhM4wWBQpNV9xxMiA7lFwfQTkuVSnXcQ2dbHJGyIV NXWe0DQll//33xnZMsHMjdrrfiTXb7sXX82GJIVrnC6iOetK8nFpvrBiO0AoK7mg GGU42/3UHBzTmGJjaSI2pUzhiL82LhMNp7+YX2Jd5wCfe3scXEFONTSWV+SKcjDo 1Q/MjIz7/1IaO63y35U0+j3BnloGUQMUuI7SCEqzYaVXJAoN9iq7xJwXDnKW4rAK x0h/F5zYguU7HCTXZi+BbF+QTw+PqEnrApJQQ+5x/H7eUSD5qD9KtMsXfdHsAiSV nxvYViR9LjAGPA== -----END CERTIFICATE-----Generated at Mon Jan 26 00:43:42 2026 by rpki-client