This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft File: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft (raw, json) Hash identifier: DryHRl5nvUYKCq+NXJ8OYtCGs7DtpMm71h2qV3nqGbI= Subject key identifier: CE:CD:24:A4:66:1D:4A:CD:BA:A6:40:74:11:26:F7:49:83:CF:63:0D Authority key identifier: 95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08 Certificate issuer: /CN=9577345dfcc93478c5ff221d482ee4c98483f908 Certificate serial: 019BF6883F94C68D391A9EF49EB5951E89C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft Manifest number: 0306 Signing time: Sun 25 Jan 2026 19:01:22 +0000 Manifest this update: Sun 25 Jan 2026 19:01:22 +0000 Manifest next update: Mon 26 Jan 2026 19:01:22 +0000 Files and hashes: 1: 18kHGWCAiXEwLk5tToiHTfxt3EM.roa (hash: +mCxyAdWpIpIXzXNLb7s3rq4vAYM5UY8Hn2uQ7Wbe0w=) 2: 4hphMIiGnD5dkRsiJyBBPbVD-VA.asa (hash: nDZrttogDfPJ+CPWuZAXD7WXRjv1eX2CBPcPX7A56PM=) 3: TWNFCCObGkb6aNl1-64DYQpBWus.roa (hash: UlueX8sbWPD2fhvWmHL9sCcVILRKQCMdFOnEOQOjliY=) 4: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl (hash: C1/9uJ7rlYiqwPfnnOa4Bvkdp5tJ+cptprXq9XMJS3o=) 5: rJNKAC_7vgy7WAf0s8sdhHN9BiQ.roa (hash: 1B23Y1SamnbnH9DuB2QCnvYB+p28JNjbqvc9WGT21MQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:3f:94:c6:8d:39:1a:9e:f4:9e:b5:95:1e:89:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9577345dfcc93478c5ff221d482ee4c98483f908 Validity Not Before: Jan 25 19:01:22 2026 GMT Not After : Jan 26 19:01:22 2026 GMT Subject: CN=cecd24a4661d4acdbaa640741126f74983cf630d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a4:91:0c:dc:6c:ac:91:a1:88:d8:17:33:0a: 7b:54:cf:13:4f:04:5b:e6:7b:30:73:9b:89:02:b1: 77:76:c7:43:d1:f5:cc:66:40:99:5a:8a:8c:ed:49: f5:7d:d8:e3:57:cd:5f:3b:35:38:48:fb:04:1c:d0: 19:8f:3c:b8:f9:0b:9e:b3:d9:4b:42:f2:f2:5f:da: b0:ca:d5:4a:26:b9:74:e5:bd:24:26:8a:be:6f:b5: 24:1e:03:e7:5f:9a:8d:13:1d:6a:aa:5a:57:2a:47: c1:84:ab:d6:e9:c5:a7:a6:de:5e:24:93:e6:70:75: 1e:7c:e6:b0:ac:65:9f:e6:74:4e:9b:42:28:42:dd: 73:af:9a:f3:83:97:08:61:96:af:e0:ff:1d:27:ec: d0:0b:ef:b0:64:e8:04:3a:e3:d6:24:f1:c3:63:5e: cf:68:2a:bd:3c:43:f7:69:33:30:1a:23:88:2b:94: 09:40:b5:70:76:12:ab:c9:0f:de:a2:14:73:75:28: eb:b0:57:44:45:7b:6f:d6:c1:1f:ef:30:0f:9c:0f: 96:2f:8a:5a:5b:13:e3:5b:94:5d:a3:1b:e3:3f:15: f1:6d:2a:4e:21:c2:3a:17:93:33:75:18:40:02:e0: 80:b9:c3:48:6f:2d:b9:52:62:cc:67:71:82:e6:ce: b9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CD:24:A4:66:1D:4A:CD:BA:A6:40:74:11:26:F7:49:83:CF:63:0D X509v3 Authority Key Identifier: keyid:95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:b5:ff:c4:8a:8e:a3:3f:c1:bd:68:cc:1a:6d:c2:13:9f:71: ab:9e:97:5e:f6:f3:b2:64:e2:fb:d7:58:5a:04:71:03:8b:5a: d8:f7:71:cd:7f:78:51:ac:21:01:e3:4c:99:d9:73:2b:fd:eb: 88:24:4e:ba:d7:9a:4c:57:6e:86:4c:de:bb:6b:e5:b8:4e:06: 5a:63:8f:4f:fc:44:7a:76:09:2b:6a:13:df:8f:e0:0f:e1:f9: 66:d1:a0:b1:81:33:56:21:ba:a0:62:fc:a4:b2:5b:b6:1c:38: 0b:0f:29:a8:fb:34:13:ef:f4:4f:1e:89:17:a6:e8:aa:cc:d7: e5:fd:ec:05:4b:04:a3:79:c5:13:ac:77:33:18:70:16:54:7d: 76:6c:06:2a:43:21:3b:6a:a2:f7:68:08:97:3b:1d:f6:f8:45: bd:1d:36:1b:c5:62:66:3d:a1:55:c7:8a:d2:0f:a6:91:8b:91: 2a:00:f8:47:35:b4:86:18:29:8d:e1:14:2e:f4:87:f4:14:d0: c0:3b:79:ad:35:5c:5a:25:43:46:5f:20:71:b1:c1:ec:d7:e8: 3d:8d:14:03:c5:2a:9f:f4:3b:25:85:b7:9b:4a:d1:9f:ad:78: 9d:50:6a:5a:16:27:7b:6c:e6:03:cb:ef:c9:ce:ee:e8:cb:29: 79:23:19:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iD+Uxo05Gp70nrWVHonHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NzczNDVkZmNjOTM0NzhjNWZmMjIxZDQ4MmVlNGM5ODQ4 M2Y5MDgwHhcNMjYwMTI1MTkwMTIyWhcNMjYwMTI2MTkwMTIyWjAzMTEwLwYDVQQD EyhjZWNkMjRhNDY2MWQ0YWNkYmFhNjQwNzQxMTI2Zjc0OTgzY2Y2MzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqSRDNxsrJGhiNgXMwp7VM8TTwRb 5nswc5uJArF3dsdD0fXMZkCZWoqM7Un1fdjjV81fOzU4SPsEHNAZjzy4+Ques9lL QvLyX9qwytVKJrl05b0kJoq+b7UkHgPnX5qNEx1qqlpXKkfBhKvW6cWnpt5eJJPm cHUefOawrGWf5nROm0IoQt1zr5rzg5cIYZav4P8dJ+zQC++wZOgEOuPWJPHDY17P aCq9PEP3aTMwGiOIK5QJQLVwdhKryQ/eohRzdSjrsFdERXtv1sEf7zAPnA+WL4pa WxPjW5RdoxvjPxXxbSpOIcI6F5MzdRhAAuCAucNIby25UmLMZ3GC5s65NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7NJKRmHUrNuqZAdBEm90mDz2MNMB8GA1UdIwQY MBaAFJV3NF38yTR4xf8iHUgu5MmEg/kIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iMTZmNjYtMmFmNC00NjNlLTk3ODUt NDMzZjVmYTRmOTAxLzEvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9iMTZmNjYtMmFmNC00NjNlLTk3ODUtNDMzZjVmYTRmOTAx LzEvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbX/xIqO oz/BvWjMGm3CE59xq56XXvbzsmTi+9dYWgRxA4ta2PdxzX94UawhAeNMmdlzK/3r iCROuteaTFduhkzeu2vluE4GWmOPT/xEenYJK2oT34/gD+H5ZtGgsYEzViG6oGL8 pLJbthw4Cw8pqPs0E+/0Tx6JF6boqszX5f3sBUsEo3nFE6x3MxhwFlR9dmwGKkMh O2qi92gIlzsd9vhFvR02G8ViZj2hVceK0g+mkYuRKgD4RzW0hhgpjeEULvSH9BTQ wDt5rTVcWiVDRl8gcbHB7NfoPY0UA8Uqn/Q7JYW3m0rRn614nVBqWhYne2zmA8vv yc7u6MspeSMZsw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:44:55 2026 by rpki-client