This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft File: lDBvaK6kuuEk-shfLJqj9a6FARM.mft (raw, json) Hash identifier: bE8/5rwggo8BkNDwCSMohKdv8JAsKs51n1Gbd3QKrOU= Subject key identifier: 85:23:18:B9:95:0A:03:A0:94:04:DD:E2:2D:0F:31:C3:64:58:00:49 Authority key identifier: 94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13 Certificate issuer: /CN=94306f68aea4bae124fac85f2c9aa3f5ae850113 Certificate serial: 019BF575369A2DC07B230A6592B761600D04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft Manifest number: 0504 Signing time: Sun 25 Jan 2026 14:00:58 +0000 Manifest this update: Sun 25 Jan 2026 14:00:58 +0000 Manifest next update: Mon 26 Jan 2026 14:00:58 +0000 Files and hashes: 1: 0S5WgWNA9Jpe-KcTd_sdYpyiaYo.roa (hash: c7DpYKj73JKX2DEHdN+T0nrc/rYvZLnTJkF6lYxE+e8=) 2: 32MPHrhab7tLeHA1QgnK1TjEYxU.roa (hash: JXdy+SGJGsVbR9WQI9uRSAp0xDEYoI/Mip8shHcZQPM=) 3: 49joF_4IAz2wl7KbPrKLoLa3pRQ.roa (hash: fdsATKk2aFvQW4eJks7KIlsXE+EQbgWm1W06MslxugE=) 4: lDBvaK6kuuEk-shfLJqj9a6FARM.crl (hash: s7q6Phchxk34CXmlmDi7diRzK/giA6TXTk+CZhIwiN8=) 5: xb6xFdizKg83UpWTs6O9IzIE0x4.roa (hash: 9WlZEi/4plVHygYQD8tYe4ThNR/Fd3krNDoyWiRXrD4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:36:9a:2d:c0:7b:23:0a:65:92:b7:61:60:0d:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94306f68aea4bae124fac85f2c9aa3f5ae850113 Validity Not Before: Jan 25 14:00:58 2026 GMT Not After : Jan 26 14:00:58 2026 GMT Subject: CN=852318b9950a03a09404dde22d0f31c364580049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9b:e5:67:c6:87:65:20:a8:37:1a:0e:da:1d: 66:c6:a5:cc:8e:09:97:41:73:8e:be:3d:63:2b:ae: 45:0e:5e:d2:e2:85:31:c8:68:53:39:1e:f4:48:71: a3:89:fc:27:7e:86:db:c2:10:09:d5:19:e5:99:ed: bc:4c:33:4e:c8:a9:5e:38:09:8d:ea:70:f2:2d:f3: bb:f4:61:e3:84:b6:a4:7f:d6:3c:ce:b8:62:e2:55: 64:c0:d9:ae:68:64:da:56:0d:6c:31:07:5f:15:2f: 09:0c:f1:88:8c:1c:b8:17:4e:fb:97:3d:95:26:c8: 13:a4:d9:f1:9f:8a:7b:8e:9a:19:97:bb:49:df:9c: 2c:8c:dd:ed:1f:70:d5:71:9b:a0:1d:48:a4:b7:72: 3d:45:0a:8f:c7:ec:72:84:77:4f:07:b5:d8:11:c2: 88:26:85:0c:aa:2c:d3:7a:57:d7:04:ea:16:8b:bd: 9f:de:8e:7d:43:7f:51:37:ba:20:2d:cd:e6:51:83: 58:89:32:c7:6d:de:87:63:59:c9:20:f6:69:d2:fe: 42:11:c6:38:ef:02:92:b3:be:03:fb:18:ae:c7:ea: 56:18:d3:7a:5f:ba:ca:8e:ab:21:5f:94:93:98:f1: 26:0a:e2:4a:32:59:38:ec:c0:59:6a:eb:78:5c:05: 51:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:23:18:B9:95:0A:03:A0:94:04:DD:E2:2D:0F:31:C3:64:58:00:49 X509v3 Authority Key Identifier: keyid:94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:32:ae:05:62:21:ba:0e:4a:34:34:7e:f1:76:fc:71:1b:ff: a7:41:d8:97:34:19:56:f3:b9:be:0f:d0:93:be:56:fb:08:19: 5c:8f:89:00:50:70:e4:f3:ce:ee:6b:d0:62:16:32:0c:e9:39: 9e:2b:80:27:a3:41:4b:b3:5d:f1:fa:97:bc:1d:6c:d5:a4:28: 94:fe:c5:d3:e2:9e:7b:be:5e:88:f2:70:11:c4:42:cd:f5:fd: 51:e9:9d:6a:71:5b:ff:0d:fd:68:66:0c:99:bb:a3:00:df:87: 37:b5:d9:30:29:fb:c2:f7:a3:32:b5:1a:5e:08:b3:a2:b7:0f: 8e:e2:2c:48:d7:3a:21:35:77:3a:b5:73:6c:6b:d2:ea:de:f7: 58:74:5d:73:50:96:6b:bd:b4:d3:d6:6d:11:ae:29:e3:16:b1: a6:57:ab:28:0a:6e:38:46:d0:3e:80:c5:69:fa:2d:e3:75:8b: 0e:a0:01:89:01:a2:12:e8:93:93:d3:c3:d8:78:4a:a7:b2:8f: 0f:1d:45:05:78:a3:d7:8f:91:a3:a0:fc:95:5c:2d:e1:15:7d: 2b:66:d6:03:90:ac:6a:6e:93:56:67:a3:0d:64:a8:c3:c7:88: ea:b1:06:5c:18:4b:f5:7d:93:3d:cb:63:77:70:be:ef:c1:5d: 8e:8d:75:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dTaaLcB7IwplkrdhYA0EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MzA2ZjY4YWVhNGJhZTEyNGZhYzg1ZjJjOWFhM2Y1YWU4 NTAxMTMwHhcNMjYwMTI1MTQwMDU4WhcNMjYwMTI2MTQwMDU4WjAzMTEwLwYDVQQD Eyg4NTIzMThiOTk1MGEwM2EwOTQwNGRkZTIyZDBmMzFjMzY0NTgwMDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5vlZ8aHZSCoNxoO2h1mxqXMjgmX QXOOvj1jK65FDl7S4oUxyGhTOR70SHGjifwnfobbwhAJ1Rnlme28TDNOyKleOAmN 6nDyLfO79GHjhLakf9Y8zrhi4lVkwNmuaGTaVg1sMQdfFS8JDPGIjBy4F077lz2V JsgTpNnxn4p7jpoZl7tJ35wsjN3tH3DVcZugHUikt3I9RQqPx+xyhHdPB7XYEcKI JoUMqizTelfXBOoWi72f3o59Q39RN7ogLc3mUYNYiTLHbd6HY1nJIPZp0v5CEcY4 7wKSs74D+xiux+pWGNN6X7rKjqshX5STmPEmCuJKMlk47MBZaut4XAVR4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUjGLmVCgOglATd4i0PMcNkWABJMB8GA1UdIwQY MBaAFJQwb2iupLrhJPrIXyyao/WuhQETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC81ZmQ4OGUtZmZiNi00NjUyLWE5OTAt M2Q4YmM4OWI0NDI3LzEvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC81ZmQ4OGUtZmZiNi00NjUyLWE5OTAtM2Q4YmM4OWI0NDI3 LzEvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgDKuBWIh ug5KNDR+8Xb8cRv/p0HYlzQZVvO5vg/Qk75W+wgZXI+JAFBw5PPO7mvQYhYyDOk5 niuAJ6NBS7Nd8fqXvB1s1aQolP7F0+Kee75eiPJwEcRCzfX9UemdanFb/w39aGYM mbujAN+HN7XZMCn7wvejMrUaXgizorcPjuIsSNc6ITV3OrVzbGvS6t73WHRdc1CW a72009ZtEa4p4xaxplerKApuOEbQPoDFafot43WLDqABiQGiEuiTk9PD2HhKp7KP Dx1FBXij14+Ro6D8lVwt4RV9K2bWA5Csam6TVmejDWSow8eI6rEGXBhL9X2TPctj d3C+78Fdjo11Ow== -----END CERTIFICATE-----Generated at Sun Jan 25 16:21:04 2026 by rpki-client