This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft File: lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft (raw, json) Hash identifier: Ia7+qRWkP2JJMrRaPV2t68nFXPoMx8+85AoR0Qxt80I= Subject key identifier: 90:61:23:E1:E4:F8:87:E1:83:34:04:9E:B3:A9:55:4F:CB:EF:16:44 Authority key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2 Certificate issuer: /CN=95461fbee1c06e3eafac0f2f95253ca8603accf2 Certificate serial: 019BF2AB08E089FF8421F7611307C9A80BBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft Manifest number: 095D Signing time: Sun 25 Jan 2026 01:00:53 +0000 Manifest this update: Sun 25 Jan 2026 01:00:53 +0000 Manifest next update: Mon 26 Jan 2026 01:00:53 +0000 Files and hashes: 1: DlYdZNTLvfx2OD11UfQRnD3hK2o.roa (hash: Yz+AdjCjCsAlEW+BjCHTyQFo7Owy/uvBTZnF71MgcBA=) 2: lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl (hash: rWFByeAGoAwBJFJNY3qaNMSpln2pDFYiFGXirbItkuU=) 3: zw7G6rZ3OugQehoBP3QpVRIzHKs.roa (hash: Ywv0pQZLRrxCf8Y+ep3+4GqTg47V6bf1LboUdnUKZNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:ab:08:e0:89:ff:84:21:f7:61:13:07:c9:a8:0b:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2 Validity Not Before: Jan 25 01:00:53 2026 GMT Not After : Jan 26 01:00:53 2026 GMT Subject: CN=906123e1e4f887e18334049eb3a9554fcbef1644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b1:ad:cd:24:87:a5:c3:10:24:e9:7a:6a:41: 6b:f7:21:9a:45:99:c0:e7:96:34:eb:a8:a5:7d:37: 9a:ff:6b:47:86:f0:4f:08:bc:82:8f:7a:9a:ea:96: 7e:82:e9:c8:8e:6e:9b:fd:21:fb:a1:ac:6b:cb:a2: 80:0b:bf:e3:5d:18:2d:78:e6:fd:e5:91:9a:24:79: 2b:7a:a3:6f:87:b0:fa:d1:41:21:9e:57:57:94:d3: 06:83:f8:41:25:fd:2d:c6:15:55:23:6f:b0:42:2a: 20:bf:38:45:36:a6:19:f9:c2:4c:9e:f1:3e:b0:c3: 79:ff:40:8f:f3:f7:4a:1e:14:ae:32:9c:9a:d5:66: b5:5c:8d:64:22:aa:5f:29:66:98:02:50:77:08:53: 33:36:9e:f1:e1:81:58:b9:94:27:d4:93:50:fe:5d: 45:fa:69:9c:cd:7e:c7:03:bf:7d:15:c9:4c:ea:eb: 94:9c:a5:b9:a5:75:14:84:19:91:1e:a4:42:1b:ef: 2f:f6:bd:b5:84:96:16:69:10:9c:75:e1:26:cd:c0: a1:16:de:9b:fe:1c:69:ec:f6:21:e6:4d:6c:2e:00: c3:31:83:1a:7c:44:a6:f0:22:8b:6a:a0:1b:b9:d1: c3:fe:b2:47:1f:d5:77:99:d2:4b:f8:a0:fd:c6:af: 17:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:61:23:E1:E4:F8:87:E1:83:34:04:9E:B3:A9:55:4F:CB:EF:16:44 X509v3 Authority Key Identifier: keyid:95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:b2:38:62:dd:84:b1:63:4e:82:07:1f:45:15:27:2c:ca:c0: 9c:54:84:0b:74:50:6c:ea:96:4b:7e:58:b4:bf:20:77:21:85: 70:f0:ac:d4:50:54:55:17:cc:90:27:de:5a:4c:cf:ce:ef:27: f1:4f:a3:93:e6:a4:72:7f:13:fa:46:21:53:97:15:3e:b3:10: cf:10:1c:b2:65:27:de:f4:27:73:c3:82:0f:79:a5:ec:c9:93: fd:1c:3b:6d:41:56:37:2d:82:49:a1:c6:66:71:00:d2:9b:53: 48:74:53:48:68:f8:1e:c0:b7:69:ef:10:71:43:77:79:02:b3: 59:5e:2f:f3:ff:4b:8f:2a:fd:18:71:c3:fd:43:49:d2:ec:2b: 1f:f2:ee:7f:ec:c5:0b:76:42:75:30:c4:39:b7:57:4a:af:74: a9:02:ad:02:72:a5:f0:f1:4b:70:ba:36:8c:2d:2b:a3:9d:c4: a1:a8:c5:c6:6b:42:87:16:58:d6:c9:b2:ec:dc:e4:c9:2e:63: 0a:2d:2f:a3:9e:dd:0a:8c:32:1b:a1:65:e6:46:dc:5d:98:42: d2:7b:65:df:78:1f:e1:69:a2:4e:47:33:0d:94:e5:54:4c:37: d7:4f:46:bf:b9:ff:15:17:c6:73:d8:53:4f:67:32:7c:a7:42: 02:ad:bc:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyqwjgif+EIfdhEwfJqAu8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NDYxZmJlZTFjMDZlM2VhZmFjMGYyZjk1MjUzY2E4NjAz YWNjZjIwHhcNMjYwMTI1MDEwMDUzWhcNMjYwMTI2MDEwMDUzWjAzMTEwLwYDVQQD Eyg5MDYxMjNlMWU0Zjg4N2UxODMzNDA0OWViM2E5NTU0ZmNiZWYxNjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubGtzSSHpcMQJOl6akFr9yGaRZnA 55Y066ilfTea/2tHhvBPCLyCj3qa6pZ+gunIjm6b/SH7oaxry6KAC7/jXRgteOb9 5ZGaJHkreqNvh7D60UEhnldXlNMGg/hBJf0txhVVI2+wQiogvzhFNqYZ+cJMnvE+ sMN5/0CP8/dKHhSuMpya1Wa1XI1kIqpfKWaYAlB3CFMzNp7x4YFYuZQn1JNQ/l1F +mmczX7HA799FclM6uuUnKW5pXUUhBmRHqRCG+8v9r21hJYWaRCcdeEmzcChFt6b /hxp7PYh5k1sLgDDMYMafESm8CKLaqAbudHD/rJHH9V3mdJL+KD9xq8XOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJBhI+Hk+IfhgzQEnrOpVU/L7xZEMB8GA1UdIwQY MBaAFJVGH77hwG4+r6wPL5UlPKhgOszyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lNWNlOGYtNWVhMC00NzlmLTkzZTkt ODlkNWM2MGY1MDFmLzEvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9lNWNlOGYtNWVhMC00NzlmLTkzZTktODlkNWM2MGY1MDFm LzEvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjrI4Yt2E sWNOggcfRRUnLMrAnFSEC3RQbOqWS35YtL8gdyGFcPCs1FBUVRfMkCfeWkzPzu8n 8U+jk+akcn8T+kYhU5cVPrMQzxAcsmUn3vQnc8OCD3ml7MmT/Rw7bUFWNy2CSaHG ZnEA0ptTSHRTSGj4HsC3ae8QcUN3eQKzWV4v8/9Ljyr9GHHD/UNJ0uwrH/Luf+zF C3ZCdTDEObdXSq90qQKtAnKl8PFLcLo2jC0ro53EoajFxmtChxZY1smy7NzkyS5j Ci0vo57dCowyG6Fl5kbcXZhC0ntl33gf4WmiTkczDZTlVEw3109Gv7n/FRfGc9hT T2cyfKdCAq288w== -----END CERTIFICATE-----Generated at Sun Jan 25 10:43:19 2026 by rpki-client