This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft File: lDyQO00Og7yLLUVDE26c1fOYZPU.mft (raw, json) Hash identifier: IL6I8hv5qK6FJildYXfLI8bCcLwqgADk01cn6rbpfX8= Subject key identifier: 61:F9:60:A1:5B:DE:08:F3:76:03:A7:B6:D8:82:34:3C:6A:1C:FA:94 Authority key identifier: 94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5 Certificate issuer: /CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5 Certificate serial: 019BF650DD17DD9A4FABF6BBDF261F657691 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft Manifest number: 0918 Signing time: Sun 25 Jan 2026 18:00:53 +0000 Manifest this update: Sun 25 Jan 2026 18:00:53 +0000 Manifest next update: Mon 26 Jan 2026 18:00:53 +0000 Files and hashes: 1: NvHVcOuHPgyc57kdkgknLviy86E.roa (hash: y99G00GU2pSghDNIsvoE0LPbq8qsxNZ2XK//ZEAFwIQ=) 2: lDyQO00Og7yLLUVDE26c1fOYZPU.crl (hash: CkgzPeuR1cQVYylnTSsrtJy2JzyIdQ32CMGuLkfHE6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:dd:17:dd:9a:4f:ab:f6:bb:df:26:1f:65:76:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5 Validity Not Before: Jan 25 18:00:53 2026 GMT Not After : Jan 26 18:00:53 2026 GMT Subject: CN=61f960a15bde08f37603a7b6d882343c6a1cfa94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:20:09:6e:4a:be:b6:04:e6:30:d0:b4:ba:61: f9:8c:f2:a7:27:37:93:6f:34:2f:68:d6:26:48:eb: e3:71:8b:24:8b:3d:4c:af:3f:b2:6c:d7:94:ea:6f: b0:d0:b7:34:13:82:b9:f6:5a:91:04:79:ae:7d:77: 2c:18:03:c5:86:2c:ce:e4:bc:2c:e3:67:86:13:dc: 68:a5:3c:af:b1:c8:3d:bc:c3:0b:c1:dc:4b:e1:8a: 1a:85:7a:c0:ac:36:e0:4c:46:19:9e:15:94:96:b6: 16:dc:0a:5d:f7:f4:e4:93:91:33:90:8d:69:44:ac: 62:db:3a:ef:a4:21:84:19:69:a4:02:53:32:fe:60: db:03:e9:be:0b:56:d1:7e:1a:74:c1:9d:96:b8:9e: 9e:a7:86:4a:6e:b1:20:7f:43:1b:e0:83:ee:48:fd: 18:b2:5a:da:a6:bb:dd:34:c9:11:27:24:1d:29:b0: e7:76:a8:49:cb:76:3d:92:c1:d8:eb:98:f8:3e:f0: b1:ac:aa:fe:6d:69:d4:8d:2c:19:06:75:ec:8f:0e: 98:09:64:88:e1:7f:13:80:da:e1:40:a3:35:25:57: 85:4e:d8:ce:4e:d3:c9:15:18:66:59:2b:cf:bd:76: b4:a7:39:35:ae:99:63:a3:33:54:82:f8:5c:68:99: 32:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F9:60:A1:5B:DE:08:F3:76:03:A7:B6:D8:82:34:3C:6A:1C:FA:94 X509v3 Authority Key Identifier: keyid:94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:f6:99:4a:16:ed:35:c8:7f:20:27:2c:49:9d:8c:11:8e:e8: a1:64:69:16:a3:11:07:23:9e:1c:29:78:95:38:0c:01:4a:02: 1f:f6:55:41:d1:f4:89:f9:54:59:e6:71:72:cb:04:ce:74:9b: fb:00:f1:20:70:04:5f:8c:d2:b8:73:3f:4f:13:04:9d:f3:cd: 25:27:ff:55:17:8f:bc:37:3d:af:36:3b:af:ad:0a:6e:37:5f: 21:2b:50:7b:e3:e1:4e:4b:e0:e0:ed:e8:1f:b7:ca:7d:54:28: 52:f5:3f:23:73:a2:27:24:ac:3e:e9:b0:d2:70:8e:24:ee:46: 49:0b:05:eb:f7:a2:14:bf:bb:24:86:19:27:a7:60:9c:62:6e: 23:e9:cd:ef:76:47:8a:be:76:4f:f2:4c:9c:44:56:f2:20:fc: 8f:c6:42:9c:44:2c:ee:18:29:2e:b3:e7:49:ea:92:cc:f0:30: 32:3b:7a:9e:72:d0:16:67:ae:36:16:6b:f7:98:06:3d:29:8a: 0b:bf:ab:ab:11:e9:3f:95:28:c6:bd:f1:a2:7a:2a:21:1f:ad: d6:d8:ca:01:02:bd:b7:06:af:22:1d:ca:26:23:94:65:28:c2: 74:79:9f:26:3f:a2:e8:60:a5:13:04:35:1c:16:14:58:5f:24: ef:e8:83:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UN0X3ZpPq/a73yYfZXaRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0M2M5MDNiNGQwZTgzYmM4YjJkNDU0MzEzNmU5Y2Q1ZjM5 ODY0ZjUwHhcNMjYwMTI1MTgwMDUzWhcNMjYwMTI2MTgwMDUzWjAzMTEwLwYDVQQD Eyg2MWY5NjBhMTViZGUwOGYzNzYwM2E3YjZkODgyMzQzYzZhMWNmYTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCAJbkq+tgTmMNC0umH5jPKnJzeT bzQvaNYmSOvjcYskiz1Mrz+ybNeU6m+w0Lc0E4K59lqRBHmufXcsGAPFhizO5Lws 42eGE9xopTyvscg9vMMLwdxL4YoahXrArDbgTEYZnhWUlrYW3Apd9/Tkk5EzkI1p RKxi2zrvpCGEGWmkAlMy/mDbA+m+C1bRfhp0wZ2WuJ6ep4ZKbrEgf0Mb4IPuSP0Y slraprvdNMkRJyQdKbDndqhJy3Y9ksHY65j4PvCxrKr+bWnUjSwZBnXsjw6YCWSI 4X8TgNrhQKM1JVeFTtjOTtPJFRhmWSvPvXa0pzk1rpljozNUgvhcaJkywwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGH5YKFb3gjzdgOnttiCNDxqHPqUMB8GA1UdIwQY MBaAFJQ8kDtNDoO8iy1FQxNunNXzmGT1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbER5UU8wME9nN3lMTFVWREUyNmMxZk9ZWlBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81MDhhMjYtZTE5OS00MWI5LTllMTkt Zjk4Yzc1ZGVhMjkyLzEvbER5UU8wME9nN3lMTFVWREUyNmMxZk9ZWlBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS81MDhhMjYtZTE5OS00MWI5LTllMTktZjk4Yzc1ZGVhMjky LzEvbER5UU8wME9nN3lMTFVWREUyNmMxZk9ZWlBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPaZShbt Nch/ICcsSZ2MEY7ooWRpFqMRByOeHCl4lTgMAUoCH/ZVQdH0iflUWeZxcssEznSb +wDxIHAEX4zSuHM/TxMEnfPNJSf/VRePvDc9rzY7r60KbjdfIStQe+PhTkvg4O3o H7fKfVQoUvU/I3OiJySsPumw0nCOJO5GSQsF6/eiFL+7JIYZJ6dgnGJuI+nN73ZH ir52T/JMnERW8iD8j8ZCnEQs7hgpLrPnSeqSzPAwMjt6nnLQFmeuNhZr95gGPSmK C7+rqxHpP5Uoxr3xonoqIR+t1tjKAQK9twavIh3KJiOUZSjCdHmfJj+i6GClEwQ1 HBYUWF8k7+iDRw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:37:06 2026 by rpki-client