This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft File: lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft (raw, json) Hash identifier: HVEHO7R8i2WugiUkM2xBijYr04zvlhrjSoMCSuPSWPg= Subject key identifier: C0:E3:63:66:7C:2D:4C:88:69:A3:2D:6A:A5:E0:C0:D7:0A:C9:91:01 Authority key identifier: 94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD Certificate issuer: /CN=946733318c62c47920fe375ad99cb729ee90a1ad Certificate serial: 019BF5AC52529606EABFB204A4F2A54B6EB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft Manifest number: 13A3 Signing time: Sun 25 Jan 2026 15:01:09 +0000 Manifest this update: Sun 25 Jan 2026 15:01:09 +0000 Manifest next update: Mon 26 Jan 2026 15:01:09 +0000 Files and hashes: 1: 1zl8hvX3_gPGXE5X8R_qEDtuWNE.roa (hash: fVmkH8rl9RfajUFgYehLLo2+tJYzAA36TeZ8+xZ0XpI=) 2: Da5LxG19Yw6xhI6ZJi1ReVDgTQY.roa (hash: eUEOcJxF25gsT7/MsFXHCve7nn05zSmOBLGby7gQmpo=) 3: lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl (hash: +XfknnKIIsenaQq1KmwEgrOuBAU122h/VB6MCv9NZgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:52:52:96:06:ea:bf:b2:04:a4:f2:a5:4b:6e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=946733318c62c47920fe375ad99cb729ee90a1ad Validity Not Before: Jan 25 15:01:09 2026 GMT Not After : Jan 26 15:01:09 2026 GMT Subject: CN=c0e363667c2d4c8869a32d6aa5e0c0d70ac99101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:87:c2:ff:16:11:5d:78:42:1e:fc:41:fd:2b: 71:e8:7f:c3:c3:c6:d5:82:11:44:77:a5:01:25:04: eb:94:df:8f:48:0d:28:66:f1:28:9b:50:99:48:63: 39:9d:37:e7:58:12:03:d4:43:ee:dc:bc:b8:84:72: 27:1a:87:b2:bf:07:50:43:63:40:b8:83:91:ae:f0: 37:3e:68:b1:d9:c3:94:06:af:28:ca:6a:e6:82:69: ed:09:5f:72:91:9c:45:a1:9e:5e:a7:f7:e2:fe:17: 88:b0:b1:41:39:29:cf:60:a9:cf:fa:af:cd:3d:30: ae:a1:37:f1:e1:27:76:29:ff:91:50:db:6e:63:91: a7:ae:bb:d1:d3:d0:fe:13:26:ab:95:51:57:2f:6e: b8:28:43:5e:09:29:a6:f3:ba:44:ab:cb:f4:2c:6c: 0d:88:3f:04:b4:33:b5:d4:bd:fa:2f:73:94:cc:63: 05:be:2e:87:98:07:e2:72:d5:08:c8:1b:b9:9a:ff: 78:8c:38:bd:9b:99:fc:41:28:09:11:75:84:b6:e4: cb:c6:99:23:e2:c6:9c:cf:36:3d:8b:44:07:10:eb: 35:7b:b9:15:2e:b2:7e:cc:f2:2c:63:a9:bd:d8:55: d2:f1:c5:73:21:e0:2d:b7:3e:84:5d:3f:fa:f4:bc: 6d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E3:63:66:7C:2D:4C:88:69:A3:2D:6A:A5:E0:C0:D7:0A:C9:91:01 X509v3 Authority Key Identifier: keyid:94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c3:4e:40:03:7d:76:17:7b:58:1b:e1:68:fe:fc:05:61:53: 6b:55:b7:1e:e1:f6:a2:16:97:2b:cc:bf:45:b4:11:07:d6:23: 30:d6:19:6a:c3:bc:fb:f5:0c:37:44:e4:c2:f0:ff:4a:e2:84: 57:c9:ff:5b:3c:3c:23:3f:5c:d1:56:62:6b:de:fa:2f:0e:1c: d5:9c:05:83:7c:b9:2d:05:1e:bc:62:ea:06:ca:dc:83:d1:a2: a7:f8:35:14:33:2c:f1:b2:84:88:ed:eb:fb:82:de:59:e1:29: e9:74:e1:02:41:27:1e:d6:a8:33:dc:8e:f6:cd:2a:4d:c9:32: a8:ef:75:25:d4:6f:34:89:7a:b5:93:4a:0b:ef:89:71:86:b7: 38:84:63:bb:79:63:4c:14:c8:e3:d3:34:4b:d5:0b:52:60:c1: 10:c6:35:a8:71:aa:40:c7:4c:46:fe:2a:01:85:69:78:13:1d: af:d4:ce:a2:40:ec:78:c4:f9:f3:e0:a1:72:63:66:e7:18:6d: 1f:b2:fa:fb:50:de:90:7d:ce:c5:e2:33:2f:07:1c:ca:70:a7: ac:9e:f5:39:6d:75:f8:28:42:be:65:5a:03:ae:70:09:2a:ad: 45:cd:09:4a:cb:a7:16:c2:9b:1b:14:f4:02:e9:0a:79:2c:a7: 92:f4:b8:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rFJSlgbqv7IEpPKlS26wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NjczMzMxOGM2MmM0NzkyMGZlMzc1YWQ5OWNiNzI5ZWU5 MGExYWQwHhcNMjYwMTI1MTUwMTA5WhcNMjYwMTI2MTUwMTA5WjAzMTEwLwYDVQQD EyhjMGUzNjM2NjdjMmQ0Yzg4NjlhMzJkNmFhNWUwYzBkNzBhYzk5MTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIfC/xYRXXhCHvxB/Stx6H/Dw8bV ghFEd6UBJQTrlN+PSA0oZvEom1CZSGM5nTfnWBID1EPu3Ly4hHInGoeyvwdQQ2NA uIORrvA3Pmix2cOUBq8oymrmgmntCV9ykZxFoZ5ep/fi/heIsLFBOSnPYKnP+q/N PTCuoTfx4Sd2Kf+RUNtuY5GnrrvR09D+EyarlVFXL264KENeCSmm87pEq8v0LGwN iD8EtDO11L36L3OUzGMFvi6HmAfictUIyBu5mv94jDi9m5n8QSgJEXWEtuTLxpkj 4saczzY9i0QHEOs1e7kVLrJ+zPIsY6m92FXS8cVzIeAttz6EXT/69Lxt+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDjY2Z8LUyIaaMtaqXgwNcKyZEBMB8GA1UdIwQY MBaAFJRnMzGMYsR5IP43WtmctynukKGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEdjek1ZeGl4SGtnX2pkYTJaeTNLZTZRb2EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kNzYwOWUtNjM5Ni00MTU1LWFkMzUt Yjc0MDg5ZDhlNTllLzEvbEdjek1ZeGl4SGtnX2pkYTJaeTNLZTZRb2EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9kNzYwOWUtNjM5Ni00MTU1LWFkMzUtYjc0MDg5ZDhlNTll LzEvbEdjek1ZeGl4SGtnX2pkYTJaeTNLZTZRb2EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADsNOQAN9 dhd7WBvhaP78BWFTa1W3HuH2ohaXK8y/RbQRB9YjMNYZasO8+/UMN0TkwvD/SuKE V8n/Wzw8Iz9c0VZia976Lw4c1ZwFg3y5LQUevGLqBsrcg9Gip/g1FDMs8bKEiO3r +4LeWeEp6XThAkEnHtaoM9yO9s0qTckyqO91JdRvNIl6tZNKC++JcYa3OIRju3lj TBTI49M0S9ULUmDBEMY1qHGqQMdMRv4qAYVpeBMdr9TOokDseMT58+ChcmNm5xht H7L6+1DekH3OxeIzLwccynCnrJ71OW11+ChCvmVaA65wCSqtRc0JSsunFsKbGxT0 AukKeSynkvS43g== -----END CERTIFICATE-----Generated at Mon Jan 26 02:30:45 2026 by rpki-client