This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft File: lvGXfPF_5OHeLxYpPGafRNW9dDM.mft (raw, json) Hash identifier: HpcQi0CTknf5dVuoo4lG6xhPqLuhQu9Dcy/WYGbYOCI= Subject key identifier: 99:EC:78:93:24:E9:82:62:58:6B:06:7F:DF:A3:F7:6E:E1:DE:D1:60 Authority key identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33 Certificate issuer: /CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433 Certificate serial: 019BF5E3A73DCEBB338B668D48A631945329 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft Manifest number: 0A60 Signing time: Sun 25 Jan 2026 16:01:35 +0000 Manifest this update: Sun 25 Jan 2026 16:01:35 +0000 Manifest next update: Mon 26 Jan 2026 16:01:35 +0000 Files and hashes: 1: lvGXfPF_5OHeLxYpPGafRNW9dDM.crl (hash: lWfEIlu4jfPLECtiD0dkTogGO1dYiZydZEOP/dhd23g=) 2: w9C2YEP1w5Y_JbXVYJuueL5--a4.roa (hash: +XN99efnsnCoGzlf+tUbIokhlmEnZBGkv0fp+mcWEF0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:a7:3d:ce:bb:33:8b:66:8d:48:a6:31:94:53:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433 Validity Not Before: Jan 25 16:01:35 2026 GMT Not After : Jan 26 16:01:35 2026 GMT Subject: CN=99ec789324e98262586b067fdfa3f76ee1ded160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d7:ed:2c:dd:ad:5b:f1:00:dc:cd:4d:0f:6f: 96:e7:e8:a3:c4:1c:fc:b6:00:04:7f:70:ee:89:68: 17:0d:d6:83:d2:bf:69:44:64:a3:f9:6f:58:fa:be: eb:98:80:d1:43:8b:28:bd:14:c6:00:ea:b3:8d:5f: 9a:97:a6:25:4a:3a:ac:f3:a1:be:ba:21:19:72:c8: 77:07:2b:70:47:bd:b4:5a:df:a2:0d:a1:ec:eb:63: 94:3d:4e:f5:41:53:f7:41:90:70:e0:cc:e4:3c:fb: 67:a2:c5:bf:c2:7d:aa:f9:47:61:3f:cd:52:a0:84: 8b:36:4a:c7:e4:e5:2e:44:91:c1:9c:48:6b:ab:52: 85:4c:f9:ab:98:28:0d:49:25:7e:5f:04:da:53:32: a7:da:0c:2a:b4:14:48:80:b5:2f:5b:56:b4:3e:f1: 12:1b:06:af:e3:47:75:a5:e9:b7:81:42:68:45:00: 8d:fd:9f:dd:0b:26:fb:0e:49:ca:1a:e5:3b:80:87: 3b:46:3f:d5:17:d5:d2:d9:18:47:c6:22:93:d4:41: f6:ff:82:0a:91:0b:36:9e:05:6e:80:d5:a4:16:26: 4e:e3:cf:f0:9d:c6:bf:40:a8:29:08:f2:fb:c7:2e: 98:be:5b:a7:a9:33:ff:88:c7:08:41:da:ed:bc:e5: 9c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:EC:78:93:24:E9:82:62:58:6B:06:7F:DF:A3:F7:6E:E1:DE:D1:60 X509v3 Authority Key Identifier: keyid:96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:a8:62:c3:13:46:53:62:c1:86:a4:4d:1c:58:1b:66:52:73: 0f:33:e9:10:12:d3:85:39:87:cb:de:4e:b3:fd:31:af:ca:06: 08:cf:d2:70:e2:05:be:11:85:58:e9:4b:2f:86:fd:eb:18:27: 77:b9:6f:fa:09:c2:5c:e6:84:fe:58:bb:55:6a:7e:5e:6d:7f: 5a:35:b1:08:5b:b3:9c:ed:8c:69:0a:5d:82:11:c8:ef:f4:be: d2:61:f1:2e:0b:22:a7:ba:a8:70:6e:f0:f0:9b:37:7a:25:56: f0:7c:4b:0f:7b:56:c1:75:5a:bf:73:ca:ff:43:fd:c2:92:a2: f3:4b:2b:22:0f:24:35:5f:91:bf:78:f9:9b:59:c9:7b:7b:c3: 07:99:e8:ef:98:a5:44:7f:04:2c:d9:8b:d6:2e:df:8e:7e:b2: 3e:9c:ff:f7:ab:78:73:63:16:ab:60:d3:34:bb:c9:4e:63:05: 7a:03:5c:19:75:52:24:2d:20:47:86:89:a8:3e:62:1a:d4:e5: b6:89:27:93:88:f7:19:64:e8:3c:b3:37:0e:b3:ca:65:67:85: 16:fe:6f:ef:ce:78:73:07:b6:73:bf:68:91:c6:58:d4:c8:b3: 9a:87:b9:e3:ed:bd:85:f3:a0:de:f3:53:65:3f:4f:4f:f7:99: 79:c9:00:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv146c9zrszi2aNSKYxlFMpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZjE5NzdjZjE3ZmU0ZTFkZTJmMTYyOTNjNjY5ZjQ0ZDVi ZDc0MzMwHhcNMjYwMTI1MTYwMTM1WhcNMjYwMTI2MTYwMTM1WjAzMTEwLwYDVQQD Eyg5OWVjNzg5MzI0ZTk4MjYyNTg2YjA2N2ZkZmEzZjc2ZWUxZGVkMTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tftLN2tW/EA3M1ND2+W5+ijxBz8 tgAEf3DuiWgXDdaD0r9pRGSj+W9Y+r7rmIDRQ4sovRTGAOqzjV+al6YlSjqs86G+ uiEZcsh3BytwR720Wt+iDaHs62OUPU71QVP3QZBw4MzkPPtnosW/wn2q+UdhP81S oISLNkrH5OUuRJHBnEhrq1KFTPmrmCgNSSV+XwTaUzKn2gwqtBRIgLUvW1a0PvES Gwav40d1pem3gUJoRQCN/Z/dCyb7DknKGuU7gIc7Rj/VF9XS2RhHxiKT1EH2/4IK kQs2ngVugNWkFiZO48/wnca/QKgpCPL7xy6YvlunqTP/iMcIQdrtvOWc0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnseJMk6YJiWGsGf9+j927h3tFgMB8GA1UdIwQY MBaAFJbxl3zxf+Th3i8WKTxmn0TVvXQzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHZHWGZQRl81T0hlTHhZcFBHYWZSTlc5ZERNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yNGE0N2QtNmE0ZC00ZTE1LWEyMzgt Nzc0MGIzZDY5MDVlLzEvbHZHWGZQRl81T0hlTHhZcFBHYWZSTlc5ZERNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yNGE0N2QtNmE0ZC00ZTE1LWEyMzgtNzc0MGIzZDY5MDVl LzEvbHZHWGZQRl81T0hlTHhZcFBHYWZSTlc5ZERNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqKhiwxNG U2LBhqRNHFgbZlJzDzPpEBLThTmHy95Os/0xr8oGCM/ScOIFvhGFWOlLL4b96xgn d7lv+gnCXOaE/li7VWp+Xm1/WjWxCFuznO2MaQpdghHI7/S+0mHxLgsip7qocG7w 8Js3eiVW8HxLD3tWwXVav3PK/0P9wpKi80srIg8kNV+Rv3j5m1nJe3vDB5no75il RH8ELNmL1i7fjn6yPpz/96t4c2MWq2DTNLvJTmMFegNcGXVSJC0gR4aJqD5iGtTl toknk4j3GWToPLM3DrPKZWeFFv5v7854cwe2c79okcZY1Mizmoe54+29hfOg3vNT ZT9PT/eZeckApw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:48 2026 by rpki-client