This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft File: LnPLOHXZEhkmGzrpAQgTEaWgcas.mft (raw, json) Hash identifier: tGXbnQK9ncGUpk92YmdBouA2I+SpKqty8YxKh6weg9M= Subject key identifier: E9:03:60:64:00:12:2A:94:E9:79:B1:22:A3:73:6E:33:AD:74:41:B0 Authority key identifier: 2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB Certificate issuer: /CN=2e73cb3875d91219261b3ae901081311a5a071ab Certificate serial: 019BF53E6F4BBC120A0B4794FE7EB3CEBE62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft Manifest number: 0164 Signing time: Sun 25 Jan 2026 13:01:08 +0000 Manifest this update: Sun 25 Jan 2026 13:01:08 +0000 Manifest next update: Mon 26 Jan 2026 13:01:08 +0000 Files and hashes: 1: LnPLOHXZEhkmGzrpAQgTEaWgcas.crl (hash: CVGJy0+RRGEyUHxo4vJJz5JwJebFmPVddhNSZ38iug8=) 2: d9bKfKc4CWNG5hnKSbTK0Rni9UU.roa (hash: 4jZ3a0Nmi0XTCu3Uai+tAC5QbHyDGtcHMO/I90in7Wg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:6f:4b:bc:12:0a:0b:47:94:fe:7e:b3:ce:be:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e73cb3875d91219261b3ae901081311a5a071ab Validity Not Before: Jan 25 13:01:08 2026 GMT Not After : Jan 26 13:01:08 2026 GMT Subject: CN=e903606400122a94e979b122a3736e33ad7441b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2b:9a:2f:09:62:f9:7c:89:90:97:c0:5d:9c: 33:7e:51:39:3c:de:b0:b9:00:6a:8a:80:32:f4:58: 1b:08:66:d2:eb:e9:60:01:c4:6b:48:15:1b:43:44: 7b:16:08:6b:97:1c:de:4e:39:14:ac:8b:98:58:d0: c4:4b:b5:49:66:69:e9:07:7b:3a:4a:d8:96:c3:91: 69:3f:05:1d:3c:60:cb:d7:55:8d:ec:f4:23:40:12: 9c:3d:07:ec:eb:16:5b:5c:94:13:39:94:cf:06:89: fa:2c:9f:30:4a:67:db:96:95:6f:cd:97:f8:94:1b: 25:fd:73:2c:9b:64:0a:67:1f:39:7a:f0:73:93:78: c5:f4:c9:4c:09:81:40:ef:94:7c:ea:47:db:c7:24: a6:0d:b3:51:75:e1:a2:6f:e7:fc:d8:fe:f5:0e:c1: 42:7d:6e:16:ea:ec:f3:99:a0:2d:13:60:8b:0a:87: 81:08:c7:51:b0:db:b7:7f:02:a9:11:67:18:25:67: 40:73:8a:35:0c:e0:f9:7e:4a:56:8c:e9:cd:d2:db: 50:5c:1f:a9:0b:70:0e:2e:57:86:ae:f3:f6:d5:a9: 7d:ae:bd:e9:9f:d6:66:36:cc:49:00:5f:cb:15:88: ae:5a:59:be:70:03:67:26:ea:a5:df:b7:52:4c:26: 5b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:03:60:64:00:12:2A:94:E9:79:B1:22:A3:73:6E:33:AD:74:41:B0 X509v3 Authority Key Identifier: keyid:2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:59:43:fe:cc:b7:ef:9c:1a:73:fb:2f:57:fa:79:39:9e:e7: 01:0e:52:0a:86:0d:c7:62:ec:43:39:05:54:1a:6c:14:2d:cb: 9e:a9:a1:09:1a:44:7d:8e:85:41:f2:7b:31:38:81:1e:d5:40: 94:45:92:78:36:cf:36:4a:25:bd:e9:ae:f1:2b:b1:64:b2:3f: 87:2b:12:ae:30:84:f2:72:c6:46:18:0e:83:a6:13:48:8e:63: ec:0f:ce:ae:72:ac:b1:d7:21:05:a8:67:2b:e8:52:68:6d:9b: ec:9d:2b:fe:14:b6:d4:6f:94:54:ef:42:5f:91:57:67:42:df: 96:08:49:ff:4a:f2:75:74:4c:4e:b8:b2:d7:33:56:1e:e5:26: b1:9e:5b:42:a4:36:57:56:da:6f:5d:47:89:58:23:98:a5:fb: 1a:3b:cf:2c:f0:f8:02:f8:f9:58:e0:af:58:1a:9c:30:f3:1b: 3d:9d:d9:fb:13:25:de:39:8d:b7:b3:76:48:a9:a4:92:05:c3: 45:1b:c1:e0:ac:b3:01:19:ad:ec:cd:9a:4a:d4:a7:9f:b4:08: ab:f9:78:cb:20:1c:74:91:59:df:e6:d8:35:0f:12:8a:8b:81: b8:22:5a:3a:11:ec:c9:a0:69:f7:57:a4:0c:db:42:71:2a:39: e2:11:eb:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Pm9LvBIKC0eU/n6zzr5iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNzNjYjM4NzVkOTEyMTkyNjFiM2FlOTAxMDgxMzExYTVh MDcxYWIwHhcNMjYwMTI1MTMwMTA4WhcNMjYwMTI2MTMwMTA4WjAzMTEwLwYDVQQD EyhlOTAzNjA2NDAwMTIyYTk0ZTk3OWIxMjJhMzczNmUzM2FkNzQ0MWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliuaLwli+XyJkJfAXZwzflE5PN6w uQBqioAy9FgbCGbS6+lgAcRrSBUbQ0R7FghrlxzeTjkUrIuYWNDES7VJZmnpB3s6 StiWw5FpPwUdPGDL11WN7PQjQBKcPQfs6xZbXJQTOZTPBon6LJ8wSmfblpVvzZf4 lBsl/XMsm2QKZx85evBzk3jF9MlMCYFA75R86kfbxySmDbNRdeGib+f82P71DsFC fW4W6uzzmaAtE2CLCoeBCMdRsNu3fwKpEWcYJWdAc4o1DOD5fkpWjOnN0ttQXB+p C3AOLleGrvP21al9rr3pn9ZmNsxJAF/LFYiuWlm+cANnJuql37dSTCZbQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOkDYGQAEiqU6XmxIqNzbjOtdEGwMB8GA1UdIwQY MBaAFC5zyzh12RIZJhs66QEIExGloHGrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG5QTE9IWFpFaGttR3pycEFRZ1RFYVdnY2FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mM2YyZDktMmE4Zi00YWU2LWJhNTUt ZjRhZmZjODAyOGYzLzEvTG5QTE9IWFpFaGttR3pycEFRZ1RFYVdnY2FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mM2YyZDktMmE4Zi00YWU2LWJhNTUtZjRhZmZjODAyOGYz LzEvTG5QTE9IWFpFaGttR3pycEFRZ1RFYVdnY2FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnFlD/sy3 75wac/svV/p5OZ7nAQ5SCoYNx2LsQzkFVBpsFC3LnqmhCRpEfY6FQfJ7MTiBHtVA lEWSeDbPNkolvemu8SuxZLI/hysSrjCE8nLGRhgOg6YTSI5j7A/OrnKssdchBahn K+hSaG2b7J0r/hS21G+UVO9CX5FXZ0LflghJ/0rydXRMTriy1zNWHuUmsZ5bQqQ2 V1bab11HiVgjmKX7GjvPLPD4Avj5WOCvWBqcMPMbPZ3Z+xMl3jmNt7N2SKmkkgXD RRvB4KyzARmt7M2aStSnn7QIq/l4yyAcdJFZ3+bYNQ8SiouBuCJaOhHsyaBp91ek DNtCcSo54hHrHg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:12:04 2026 by rpki-client