This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft File: LrTU3kCE88jhpPbU01U5B6sMgIo.mft (raw, json) Hash identifier: v3SC50f4EnRA/FgiR4GBK/lBzeFYzfj26x2R3YSYPaI= Subject key identifier: E4:73:E3:9C:DF:8C:83:57:B5:FF:B5:00:14:1F:20:7F:61:17:6F:0F Authority key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A Certificate issuer: /CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a Certificate serial: 019BF575520CA657EC984F47EAB60A9A59EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft Manifest number: 12DB Signing time: Sun 25 Jan 2026 14:01:05 +0000 Manifest this update: Sun 25 Jan 2026 14:01:05 +0000 Manifest next update: Mon 26 Jan 2026 14:01:05 +0000 Files and hashes: 1: LrTU3kCE88jhpPbU01U5B6sMgIo.crl (hash: 4UjRHvsEUi8Mcz3vEpE+WVu08OqGwKF1uOEODrT6JTk=) 2: Moeip8R_9eCgH5gE9qFlzdSPbf4.roa (hash: Xen0gyInzO8m2TyeEXkURaZEZO8wHBtan+ynje6Rv8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:52:0c:a6:57:ec:98:4f:47:ea:b6:0a:9a:59:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a Validity Not Before: Jan 25 14:01:05 2026 GMT Not After : Jan 26 14:01:05 2026 GMT Subject: CN=e473e39cdf8c8357b5ffb500141f207f61176f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fa:f2:ac:5f:cb:22:49:dd:2e:34:97:00:5a: 41:77:c7:54:61:c9:df:1d:cb:40:5a:b9:f9:6d:33: 24:0c:91:c4:0b:f1:d7:d1:f9:6e:a7:82:c3:7c:dc: 7e:8e:72:5e:35:88:0a:64:e7:f2:be:0b:ce:fb:f4: a1:4a:e4:08:74:32:07:a3:48:8d:96:97:77:b9:1f: 03:c0:d3:70:1e:02:9f:0e:54:88:f6:ea:d4:35:9c: b8:15:dd:95:69:ee:a3:95:8d:a0:70:61:06:b3:d3: c7:b5:23:3f:08:d6:ff:c4:d3:30:5e:65:37:48:02: b3:b0:1f:35:ae:4f:81:9b:c7:9d:49:63:f1:19:ca: ac:72:00:a1:62:3f:64:37:24:e7:66:8c:46:56:36: 8e:91:13:f7:1c:85:cd:eb:ba:6a:81:ed:3f:14:a9: cc:d6:b1:d7:84:33:f5:1b:4a:2f:f1:b1:e0:8e:ec: 88:b6:6b:04:d6:f5:8e:d3:38:ff:12:3a:90:4c:7c: 99:e2:84:35:c7:bf:48:31:1d:66:85:62:0a:e2:2f: 2a:43:e7:32:9a:c0:48:02:1f:fd:86:0c:0b:ff:c6: e1:ee:20:70:e0:61:a4:85:5a:22:10:b5:07:29:7b: b8:6b:ac:e5:1b:ec:44:f9:e6:c5:93:31:35:80:dd: 66:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:73:E3:9C:DF:8C:83:57:B5:FF:B5:00:14:1F:20:7F:61:17:6F:0F X509v3 Authority Key Identifier: keyid:2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:49:09:99:29:db:e7:c0:47:0e:3b:0f:b4:6d:0d:3c:04:6a: f3:ab:51:ff:fe:de:37:34:06:0b:02:57:24:65:88:8b:b4:35: ce:c6:5d:90:fd:88:00:49:ff:83:04:3e:66:28:21:44:af:d9: d9:5e:a0:ca:eb:11:71:91:7c:0a:60:24:36:de:81:b8:a4:ac: 98:83:08:d6:85:3b:62:ca:9e:b3:85:2f:67:9f:d7:b7:87:b4: 8c:17:3b:a8:08:89:e7:f5:63:f5:7c:0c:3b:45:fa:20:bb:f9: dd:30:1c:9b:dd:cc:94:8f:1e:44:e9:ff:2f:f7:8f:af:39:90: 36:91:51:19:05:98:b1:22:dc:36:af:ef:19:29:9e:80:89:09: 7e:56:54:8f:7e:12:28:c3:7a:f4:e4:b4:eb:48:d8:3c:26:5a: 97:6b:3f:c9:6d:69:6d:7d:04:ba:bc:af:80:e8:54:a8:a4:68: b7:4c:86:bb:1b:cd:dd:d1:62:69:bd:67:ca:1e:10:4b:c0:89: 9d:4b:1c:e7:c2:e6:08:28:cc:44:32:7f:65:f8:80:2a:2b:92: 85:68:2c:02:f5:c0:aa:4a:21:b2:42:e2:a8:06:1a:e4:5e:8c: 1b:4c:18:de:a1:a2:c4:6d:a5:ee:c8:e5:a5:14:86:f5:96:6c: f7:25:f0:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dVIMplfsmE9H6rYKmlnrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYjRkNGRlNDA4NGYzYzhlMWE0ZjZkNGQzNTUzOTA3YWIw YzgwOGEwHhcNMjYwMTI1MTQwMTA1WhcNMjYwMTI2MTQwMTA1WjAzMTEwLwYDVQQD EyhlNDczZTM5Y2RmOGM4MzU3YjVmZmI1MDAxNDFmMjA3ZjYxMTc2ZjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfryrF/LIkndLjSXAFpBd8dUYcnf HctAWrn5bTMkDJHEC/HX0flup4LDfNx+jnJeNYgKZOfyvgvO+/ShSuQIdDIHo0iN lpd3uR8DwNNwHgKfDlSI9urUNZy4Fd2Vae6jlY2gcGEGs9PHtSM/CNb/xNMwXmU3 SAKzsB81rk+Bm8edSWPxGcqscgChYj9kNyTnZoxGVjaOkRP3HIXN67pqge0/FKnM 1rHXhDP1G0ov8bHgjuyItmsE1vWO0zj/EjqQTHyZ4oQ1x79IMR1mhWIK4i8qQ+cy msBIAh/9hgwL/8bh7iBw4GGkhVoiELUHKXu4a6zlG+xE+ebFkzE1gN1mvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORz45zfjINXtf+1ABQfIH9hF28PMB8GA1UdIwQY MBaAFC601N5AhPPI4aT21NNVOQerDICKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83Y2ZjNjgtNDdiOC00NjI4LWI0MmYt OTUyOWJjY2JiYjE0LzEvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS83Y2ZjNjgtNDdiOC00NjI4LWI0MmYtOTUyOWJjY2JiYjE0 LzEvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa0kJmSnb 58BHDjsPtG0NPARq86tR//7eNzQGCwJXJGWIi7Q1zsZdkP2IAEn/gwQ+ZighRK/Z 2V6gyusRcZF8CmAkNt6BuKSsmIMI1oU7Ysqes4UvZ5/Xt4e0jBc7qAiJ5/Vj9XwM O0X6ILv53TAcm93MlI8eROn/L/ePrzmQNpFRGQWYsSLcNq/vGSmegIkJflZUj34S KMN69OS060jYPCZal2s/yW1pbX0EuryvgOhUqKRot0yGuxvN3dFiab1nyh4QS8CJ nUsc58LmCCjMRDJ/ZfiAKiuShWgsAvXAqkohskLiqAYa5F6MG0wY3qGixG2l7sjl pRSG9ZZs9yXwOw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:35 2026 by rpki-client