This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft File: lp1GNhtq9yD7mDas7JZbD1L0sJw.mft (raw, json) Hash identifier: 0/3gVEhCU/mtgEQz1hJCApXKbvKjj+7uZNO3AK7m67A= Subject key identifier: 48:11:DE:69:36:88:77:DE:D3:D4:90:5F:81:2E:65:0F:6E:DC:B7:AB Authority key identifier: 96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C Certificate issuer: /CN=969d46361b6af720fb9836acec965b0f52f4b09c Certificate serial: 019BF4D087D389EBBD00A8F5CFCEE8F12649 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft Manifest number: 08A5 Signing time: Sun 25 Jan 2026 11:01:05 +0000 Manifest this update: Sun 25 Jan 2026 11:01:05 +0000 Manifest next update: Mon 26 Jan 2026 11:01:05 +0000 Files and hashes: 1: a-DNVnXzKcyTBpRv7rCFDhEA2Ks.roa (hash: uHevbCCqsNL4Z3mLZg7vrx9rkzYsimXYtM+5KXA7MHE=) 2: bF43U3f2C3oZKi5xCJyfrpb0UyU.roa (hash: xOZJDiJzdJhpqqUUdV/C2PROWovDWV42fskqATRdmx0=) 3: lp1GNhtq9yD7mDas7JZbD1L0sJw.crl (hash: H3+6KC7YLg/qGATbaJnF1buAIBQrDJ+DhBe363la11w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:87:d3:89:eb:bd:00:a8:f5:cf:ce:e8:f1:26:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=969d46361b6af720fb9836acec965b0f52f4b09c Validity Not Before: Jan 25 11:01:05 2026 GMT Not After : Jan 26 11:01:05 2026 GMT Subject: CN=4811de69368877ded3d4905f812e650f6edcb7ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5e:ef:4d:c2:06:15:5e:d8:6c:32:b1:3b:ef: 4a:8f:af:e3:4d:6b:59:17:5a:29:5b:d8:0b:66:08: 19:0d:03:e1:41:b6:d3:b4:fd:2d:d4:95:f0:1b:3a: c5:0a:50:2c:39:72:bd:49:91:4d:ed:f7:d2:a6:fc: c7:58:83:8d:4e:f7:8a:6b:f6:ed:72:fa:d2:83:34: be:51:d0:ad:ec:8e:8d:b6:bc:24:35:2d:af:81:57: 3e:1e:32:55:06:2d:be:48:a0:6e:5c:c2:64:84:7c: 0c:0b:65:3d:78:5f:7f:e5:e6:8c:fa:f3:ba:3e:94: 4d:48:f5:fd:4c:5c:b1:a5:35:e3:02:98:52:f4:8c: 38:26:31:e7:08:76:ef:c3:e4:36:aa:94:40:8f:49: b4:0e:18:fe:30:cd:33:0e:ba:01:ca:a9:24:4e:87: fc:66:60:bb:46:80:a1:74:ba:3e:cb:42:0c:43:85: 8e:51:cb:e8:cb:8b:47:c0:6e:8c:7e:a5:24:a8:f6: 73:4c:d6:cc:55:8c:00:8d:04:47:13:37:d2:05:c2: e2:86:da:06:b4:0c:17:50:75:82:3f:7c:b7:ea:eb: ee:74:9e:90:b6:97:67:a2:3b:52:67:d6:94:22:58: 39:28:ea:27:bd:1f:b9:26:b2:1f:4a:75:91:a0:b5: 78:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:11:DE:69:36:88:77:DE:D3:D4:90:5F:81:2E:65:0F:6E:DC:B7:AB X509v3 Authority Key Identifier: keyid:96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:ff:74:fa:77:30:eb:15:16:48:2c:04:43:49:04:31:01:1d: 1e:70:5b:b8:b7:e0:0e:44:1d:ee:c6:b8:f4:be:b9:ad:49:56: fd:01:56:de:d3:9e:58:bb:0d:e1:3d:35:5c:94:a6:9c:78:c0: 9b:cd:c0:d0:cb:09:7c:04:30:ca:fa:72:41:46:c3:65:e9:86: 35:0a:40:a3:05:59:e6:43:01:6b:c8:92:45:61:a1:e0:44:dc: ae:18:70:f4:54:f9:05:61:75:36:68:c9:87:40:13:a2:e2:ae: 6d:20:92:b3:3e:42:e5:ac:f4:bc:f8:41:0e:bb:12:40:ca:61: ff:0b:70:80:f2:d2:87:c8:2a:a6:5b:27:82:08:00:48:ef:5f: 3f:ce:11:25:4d:73:04:6c:a4:d7:71:92:55:cf:27:ce:e5:4c: fc:3d:5e:e9:d0:8e:00:a7:d0:43:62:92:50:da:09:d4:d7:8a: e6:aa:35:e3:ae:6f:19:21:43:3a:e1:6b:38:02:fa:78:95:75: f9:f4:8a:d7:2a:72:20:04:b6:4f:47:f1:b9:a8:f5:f0:27:b4: af:44:3a:ec:a7:96:0e:93:a2:e3:d4:63:88:63:79:38:a0:eb: 87:cd:c2:86:27:ca:40:1e:94:bf:9a:8c:d7:b1:10:8c:34:52: 68:20:24:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00IfTieu9AKj1z87o8SZJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2OWQ0NjM2MWI2YWY3MjBmYjk4MzZhY2VjOTY1YjBmNTJm NGIwOWMwHhcNMjYwMTI1MTEwMTA1WhcNMjYwMTI2MTEwMTA1WjAzMTEwLwYDVQQD Eyg0ODExZGU2OTM2ODg3N2RlZDNkNDkwNWY4MTJlNjUwZjZlZGNiN2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzF7vTcIGFV7YbDKxO+9Kj6/jTWtZ F1opW9gLZggZDQPhQbbTtP0t1JXwGzrFClAsOXK9SZFN7ffSpvzHWIONTveKa/bt cvrSgzS+UdCt7I6NtrwkNS2vgVc+HjJVBi2+SKBuXMJkhHwMC2U9eF9/5eaM+vO6 PpRNSPX9TFyxpTXjAphS9Iw4JjHnCHbvw+Q2qpRAj0m0Dhj+MM0zDroByqkkTof8 ZmC7RoChdLo+y0IMQ4WOUcvoy4tHwG6MfqUkqPZzTNbMVYwAjQRHEzfSBcLihtoG tAwXUHWCP3y36uvudJ6QtpdnojtSZ9aUIlg5KOonvR+5JrIfSnWRoLV40wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgR3mk2iHfe09SQX4EuZQ9u3LerMB8GA1UdIwQY MBaAFJadRjYbavcg+5g2rOyWWw9S9LCcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHAxR05odHE5eUQ3bURhczdKWmJEMUwwc0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi81ZmJjYmItMDBmYS00YWQ3LWE4MDEt NDM2MDAxNzFiOGJkLzEvbHAxR05odHE5eUQ3bURhczdKWmJEMUwwc0p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi81ZmJjYmItMDBmYS00YWQ3LWE4MDEtNDM2MDAxNzFiOGJk LzEvbHAxR05odHE5eUQ3bURhczdKWmJEMUwwc0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWf90+ncw 6xUWSCwEQ0kEMQEdHnBbuLfgDkQd7sa49L65rUlW/QFW3tOeWLsN4T01XJSmnHjA m83A0MsJfAQwyvpyQUbDZemGNQpAowVZ5kMBa8iSRWGh4ETcrhhw9FT5BWF1NmjJ h0ATouKubSCSsz5C5az0vPhBDrsSQMph/wtwgPLSh8gqplsngggASO9fP84RJU1z BGyk13GSVc8nzuVM/D1e6dCOAKfQQ2KSUNoJ1NeK5qo1465vGSFDOuFrOAL6eJV1 +fSK1ypyIAS2T0fxuaj18Ce0r0Q67KeWDpOi49RjiGN5OKDrh83ChifKQB6Uv5qM 17EQjDRSaCAkPQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:11:29 2026 by rpki-client