This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft File: lV_PknmKnbswq9K5-im_qIBCIPM.mft (raw, json) Hash identifier: OTTnO8PpqzTHCUXKUH2PBVsWLTuZysWO6dgtcrpO2kE= Subject key identifier: 0E:C4:AF:6F:45:9B:E1:9D:A8:22:66:95:A2:77:07:16:AA:14:A1:C3 Authority key identifier: 95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3 Certificate issuer: /CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3 Certificate serial: 019BF6881835CB5DEA803C5E58B272D4BAE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 19:01:12 +0000 Manifest this update: Sun 25 Jan 2026 19:01:12 +0000 Manifest next update: Mon 26 Jan 2026 19:01:12 +0000 Files and hashes: 1: EV5B5CDx-yO9QhQKgIOGKQuwu8Y.roa (hash: BneDEJ5QoDJkAJJC30tOaDJaCQOMhWb/wOIFibxQ6Ms=) 2: L8bZH6SZP0Do8W2usy05gMWTJfA.roa (hash: GqrUrTcZzLpiG3dkPkOQYKLJl/nz6um2HMjJRvXU0cM=) 3: N8RSRMP8UAQKEFAGsHIuhNlTork.roa (hash: ApP8TEU/5MswzkOImjIl/nU5p8uqAw/j2QPZ3Oxhfdg=) 4: lV_PknmKnbswq9K5-im_qIBCIPM.crl (hash: WmGnS/hnqvSRwxLJ+BPPGeiKY5w9U5PLHm/5qeI9M2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:18:35:cb:5d:ea:80:3c:5e:58:b2:72:d4:ba:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3 Validity Not Before: Jan 25 19:01:12 2026 GMT Not After : Jan 26 19:01:12 2026 GMT Subject: CN=0ec4af6f459be19da8226695a2770716aa14a1c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7d:bf:8d:f1:5e:82:1d:c4:a5:aa:ac:42:6d: 1d:f0:4d:99:e8:96:21:db:6e:c8:47:74:02:b1:73: 1d:6c:92:ca:db:1e:ff:d8:be:c5:ec:47:ba:0a:19: ff:af:6e:82:6f:1c:73:b5:58:46:17:64:6f:0e:db: 63:34:30:b7:47:12:57:9f:49:1e:3a:3e:79:ed:a0: 6d:8a:eb:dd:fe:7f:a5:bf:ed:a8:5b:fd:e3:8c:62: c1:56:28:9a:0e:aa:4d:98:88:9d:ba:0a:81:fe:d7: 5e:0d:2f:b7:16:b7:85:e3:93:60:bb:f7:1b:18:91: 18:bd:f1:c7:df:37:6e:09:fc:05:d8:90:6b:d5:b8: b5:b8:c6:32:97:17:34:bc:9c:7e:4d:b4:b3:ad:07: ba:43:35:f8:af:90:7d:b2:f0:f8:43:99:50:52:63: 1b:7e:49:4f:d2:dd:f8:d6:f5:af:8c:15:b1:11:3f: ae:c1:a3:86:fc:c9:00:79:2d:5d:ec:75:c9:d9:75: bf:31:4f:86:d9:e7:32:7c:a9:58:5d:f4:ea:96:20: a2:6c:0c:41:ad:b0:62:ff:27:5f:ad:16:a0:9a:84: 53:df:d3:40:74:9e:c7:34:77:34:6d:c2:21:1d:b6: 9d:3c:37:a7:e5:75:66:a7:54:28:04:8f:2d:95:cb: 30:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C4:AF:6F:45:9B:E1:9D:A8:22:66:95:A2:77:07:16:AA:14:A1:C3 X509v3 Authority Key Identifier: keyid:95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e5:9d:45:12:df:11:99:87:0d:d3:dd:46:9c:44:b4:54:e2: 92:38:57:f9:0e:c8:b5:ed:42:44:fa:84:21:fc:a8:a3:53:76: 9b:d8:d8:08:30:39:a3:c6:50:73:c3:5e:26:70:d4:0d:8d:4a: 58:c8:26:0e:9b:1e:23:3a:dd:27:08:6e:65:2f:7d:1c:c4:49: 3c:05:43:bb:e9:9f:fd:b0:17:8b:b9:3e:fa:7b:86:ba:19:cd: 29:ae:fd:e8:55:72:b5:0f:84:61:a4:7d:60:5a:9d:3b:bf:84: 3c:98:99:7c:e8:6c:eb:93:56:0f:e9:f0:04:c3:61:bc:59:6d: f7:3e:13:56:09:e4:c4:43:66:ac:f1:13:31:0c:6b:a5:4a:ce: 2d:b4:96:0f:c1:40:7b:10:d1:fb:5b:40:12:31:4e:f4:29:8f: 6d:0a:81:22:16:da:4a:30:2e:1d:13:aa:0a:98:56:90:db:3a: 30:48:7c:7a:3a:6c:9e:bf:fb:3f:cf:10:81:a7:a6:1f:dc:df: 81:09:b3:81:71:08:f2:7d:42:7b:30:00:7f:23:25:05:b3:96: c4:49:d5:1d:e2:fb:2e:16:05:32:e1:7c:21:2b:9d:a9:04:88: ff:1b:78:45:0d:33:20:af:cc:12:bd:a6:66:c8:3a:43:69:25: 9d:25:f0:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iBg1y13qgDxeWLJy1LriMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NWZjZjkyNzk4YTlkYmIzMGFiZDJiOWZhMjliZmE4ODA0 MjIwZjMwHhcNMjYwMTI1MTkwMTEyWhcNMjYwMTI2MTkwMTEyWjAzMTEwLwYDVQQD EygwZWM0YWY2ZjQ1OWJlMTlkYTgyMjY2OTVhMjc3MDcxNmFhMTRhMWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH2/jfFegh3EpaqsQm0d8E2Z6JYh 227IR3QCsXMdbJLK2x7/2L7F7Ee6Chn/r26CbxxztVhGF2RvDttjNDC3RxJXn0ke Oj557aBtiuvd/n+lv+2oW/3jjGLBViiaDqpNmIidugqB/tdeDS+3FreF45Ngu/cb GJEYvfHH3zduCfwF2JBr1bi1uMYylxc0vJx+TbSzrQe6QzX4r5B9svD4Q5lQUmMb fklP0t341vWvjBWxET+uwaOG/MkAeS1d7HXJ2XW/MU+G2ecyfKlYXfTqliCibAxB rbBi/ydfrRagmoRT39NAdJ7HNHc0bcIhHbadPDen5XVmp1QoBI8tlcswAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7Er29Fm+GdqCJmlaJ3BxaqFKHDMB8GA1UdIwQY MBaAFJVfz5J5ip27MKvSufopv6iAQiDzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFZfUGtubUtuYnN3cTlLNS1pbV9xSUJDSVBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kZjE0MGEtMGFjMy00MTA1LWI4M2Et MDUxODg2ZDBlZDRlLzEvbFZfUGtubUtuYnN3cTlLNS1pbV9xSUJDSVBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9kZjE0MGEtMGFjMy00MTA1LWI4M2EtMDUxODg2ZDBlZDRl LzEvbFZfUGtubUtuYnN3cTlLNS1pbV9xSUJDSVBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOuWdRRLf EZmHDdPdRpxEtFTikjhX+Q7Ite1CRPqEIfyoo1N2m9jYCDA5o8ZQc8NeJnDUDY1K WMgmDpseIzrdJwhuZS99HMRJPAVDu+mf/bAXi7k++nuGuhnNKa796FVytQ+EYaR9 YFqdO7+EPJiZfOhs65NWD+nwBMNhvFlt9z4TVgnkxENmrPETMQxrpUrOLbSWD8FA exDR+1tAEjFO9CmPbQqBIhbaSjAuHROqCphWkNs6MEh8ejpsnr/7P88QgaemH9zf gQmzgXEI8n1CezAAfyMlBbOWxEnVHeL7LhYFMuF8ISudqQSI/xt4RQ0zIK/MEr2m Zsg6Q2klnSXw7g== -----END CERTIFICATE-----Generated at Mon Jan 26 03:32:46 2026 by rpki-client