This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft File: Lg1AUXqHO33CrrKNDtai-ZOj100.mft (raw, json) Hash identifier: /b+rNqBcVSG2FSqhL/PGLvboD2L9FzDhlnHrPYqpnWk= Subject key identifier: 80:72:32:E6:94:7E:10:4A:AD:3A:E8:92:A4:F3:35:CD:44:10:6A:1C Authority key identifier: 2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D Certificate issuer: /CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d Certificate serial: 019BF8767E627EF9BDB29A2AF91BC063BD3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft Manifest number: 14D0 Signing time: Mon 26 Jan 2026 04:01:13 +0000 Manifest this update: Mon 26 Jan 2026 04:01:13 +0000 Manifest next update: Tue 27 Jan 2026 04:01:13 +0000 Files and hashes: 1: Lg1AUXqHO33CrrKNDtai-ZOj100.crl (hash: 92p6j3Bfje+Wl/z+QUeUy26QZgriX3VQrubOYRzspEw=) 2: mgEpeI12MEc1I9Yl4CGTBmBk2bE.roa (hash: +I2yVa8SpbahJZG3cLdGFLaq+xiLLvaqsYXX2ZnSZ5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:7e:62:7e:f9:bd:b2:9a:2a:f9:1b:c0:63:bd:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d Validity Not Before: Jan 26 04:01:13 2026 GMT Not After : Jan 27 04:01:13 2026 GMT Subject: CN=807232e6947e104aad3ae892a4f335cd44106a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e8:26:68:8c:60:bb:61:4c:c8:2a:b8:30:ff: 17:c7:50:59:4e:a7:22:63:a3:6e:07:51:e8:fa:58: 8c:6e:c6:28:4d:6d:14:98:d2:7a:f1:20:dd:42:5e: bf:a0:e5:57:f7:15:77:7f:6f:2f:19:6f:8d:30:97: 7b:32:bf:bf:bd:ae:15:eb:50:86:f8:2e:71:09:5b: 13:40:67:de:a2:7e:dc:dd:3e:4e:5b:4c:c4:ce:2a: 02:a5:91:73:9e:86:ef:07:1e:66:41:6a:e7:7b:99: 94:a4:7d:ad:17:d8:5f:8f:35:bc:27:cc:8f:e7:eb: ba:cd:68:1b:a9:db:96:7e:31:55:c7:7a:0d:62:67: 39:6d:76:d4:b2:a1:32:64:5f:fb:7e:19:34:3a:0c: af:05:bf:20:d6:46:dd:15:63:af:1d:b9:f4:21:93: 3b:04:0b:fd:e5:59:e2:c1:4a:29:e1:7f:2d:be:dd: 40:9d:0f:d8:80:f5:82:b6:03:31:d6:6b:f1:54:8a: 14:8d:9e:6f:83:58:f0:83:fd:a6:ef:a9:c6:dc:a8: c7:ca:91:64:d1:cd:34:5c:b1:f7:7c:e5:01:d9:a1: e9:74:5e:ac:30:d9:98:53:6b:ec:9f:05:05:19:01: 35:74:8e:99:62:7b:8c:31:65:37:4a:2b:e1:48:10: ca:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:72:32:E6:94:7E:10:4A:AD:3A:E8:92:A4:F3:35:CD:44:10:6A:1C X509v3 Authority Key Identifier: keyid:2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:2e:8f:46:b9:96:fb:fc:c1:3e:cc:04:37:f6:f2:d0:ab:60: db:31:f3:45:a5:20:a3:83:ba:94:31:7d:4a:ff:42:89:96:e6: c3:85:4e:75:8b:35:6c:4c:5f:f8:41:23:b6:1a:12:87:6b:f2: 1e:ad:ce:6f:91:4a:18:f7:85:6a:bb:b8:2f:ed:a8:aa:88:d1: 0d:ef:d3:f7:8a:d8:c0:89:ee:ce:68:2a:41:c1:70:3d:78:d6: 66:39:6d:3d:f6:c7:d1:4d:52:27:5c:69:75:ac:7d:8a:c2:33: c2:1c:1f:de:1d:8f:7d:dd:53:53:0b:e1:cd:72:a0:e5:9d:08: 2d:24:85:e0:c6:a4:b3:b7:02:cc:f3:21:da:58:64:45:8e:67: 3f:4e:4f:ce:9a:66:86:83:53:2f:ea:84:bd:50:96:c8:ac:ba: ee:91:1b:6e:6c:f3:78:ea:24:a8:8a:83:97:39:1b:39:2a:81: fa:59:cb:a0:e2:cc:61:dd:03:1b:33:cc:d3:d9:96:64:7e:26: 2d:b4:92:d9:47:85:34:e1:1d:f3:14:3e:ea:5f:cf:51:2d:ba: 4e:b8:22:85:cb:95:5a:58:ef:42:63:fd:5b:19:66:b8:69:e7: 1a:fb:2c:79:05:c2:31:23:9e:c2:aa:38:98:ea:20:fe:e6:e0: 47:70:2a:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dn5ifvm9spoq+RvAY70/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMGQ0MDUxN2E4NzNiN2RjMmFlYjI4ZDBlZDZhMmY5OTNh M2Q3NGQwHhcNMjYwMTI2MDQwMTEzWhcNMjYwMTI3MDQwMTEzWjAzMTEwLwYDVQQD Eyg4MDcyMzJlNjk0N2UxMDRhYWQzYWU4OTJhNGYzMzVjZDQ0MTA2YTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOgmaIxgu2FMyCq4MP8Xx1BZTqci Y6NuB1Ho+liMbsYoTW0UmNJ68SDdQl6/oOVX9xV3f28vGW+NMJd7Mr+/va4V61CG +C5xCVsTQGfeon7c3T5OW0zEzioCpZFznobvBx5mQWrne5mUpH2tF9hfjzW8J8yP 5+u6zWgbqduWfjFVx3oNYmc5bXbUsqEyZF/7fhk0OgyvBb8g1kbdFWOvHbn0IZM7 BAv95VniwUop4X8tvt1AnQ/YgPWCtgMx1mvxVIoUjZ5vg1jwg/2m76nG3KjHypFk 0c00XLH3fOUB2aHpdF6sMNmYU2vsnwUFGQE1dI6ZYnuMMWU3SivhSBDKGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIByMuaUfhBKrTrokqTzNc1EEGocMB8GA1UdIwQY MBaAFC4NQFF6hzt9wq6yjQ7WovmTo9dNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGcxQVVYcUhPMzNDcnJLTkR0YWktWk9qMTAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8xNGU5MjAtMTRhNy00MWNmLWJkZDct NTc3ODY5NTFiNzhmLzEvTGcxQVVYcUhPMzNDcnJLTkR0YWktWk9qMTAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8xNGU5MjAtMTRhNy00MWNmLWJkZDctNTc3ODY5NTFiNzhm LzEvTGcxQVVYcUhPMzNDcnJLTkR0YWktWk9qMTAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWi6PRrmW +/zBPswEN/by0Ktg2zHzRaUgo4O6lDF9Sv9CiZbmw4VOdYs1bExf+EEjthoSh2vy Hq3Ob5FKGPeFaru4L+2oqojRDe/T94rYwInuzmgqQcFwPXjWZjltPfbH0U1SJ1xp dax9isIzwhwf3h2Pfd1TUwvhzXKg5Z0ILSSF4Maks7cCzPMh2lhkRY5nP05Pzppm hoNTL+qEvVCWyKy67pEbbmzzeOokqIqDlzkbOSqB+lnLoOLMYd0DGzPM09mWZH4m LbSS2UeFNOEd8xQ+6l/PUS26TrgihcuVWljvQmP9WxlmuGnnGvsseQXCMSOewqo4 mOog/ubgR3Aqew== -----END CERTIFICATE-----Generated at Mon Jan 26 06:24:06 2026 by rpki-client