This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft File: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft (raw, json) Hash identifier: isracTp3konsrTkOZ2PRDWEaNs1W+SVgoHjYOCuiWzw= Subject key identifier: 66:E2:AE:DE:7F:FC:5C:67:EB:AD:75:54:9C:3A:48:F2:BB:EA:FA:8F Authority key identifier: 2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6 Certificate issuer: /CN=2d2a08a7438a49589d634f88a09e93941f8107f6 Certificate serial: 019BF5E3D75EBDDD1B7EE296152AC2257297 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft Manifest number: 0287 Signing time: Sun 25 Jan 2026 16:01:48 +0000 Manifest this update: Sun 25 Jan 2026 16:01:48 +0000 Manifest next update: Mon 26 Jan 2026 16:01:48 +0000 Files and hashes: 1: 4JF1qt0-QbN1J-vDwjcoq3kWbQ0.roa (hash: eq8is2mM85ya95EGP40Q8n1JwKPY2Okwq8fFsHrSk/0=) 2: AH26kSMHALdMjY18ZcT8tq9G66U.roa (hash: XYLKSg2vJS9jqWZ8IveozNDr31RNvSVezeErjFL58Qo=) 3: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl (hash: 2r7gRUelrX5WvdMMRK3Dm4neb5Efzg2Gso0dPQPfltE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:d7:5e:bd:dd:1b:7e:e2:96:15:2a:c2:25:72:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2a08a7438a49589d634f88a09e93941f8107f6 Validity Not Before: Jan 25 16:01:48 2026 GMT Not After : Jan 26 16:01:48 2026 GMT Subject: CN=66e2aede7ffc5c67ebad75549c3a48f2bbeafa8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9b:36:57:aa:ff:2a:6a:86:03:2f:32:e9:2b: 7a:29:9d:03:67:5a:a7:96:7d:d2:7f:c1:df:57:73: 77:24:5f:79:3c:d0:43:19:57:5d:11:05:15:20:e2: ed:9b:d9:97:c5:e7:46:f5:3e:88:71:e1:40:3e:ad: f3:43:54:56:cd:2f:58:5f:2a:9d:f0:00:94:6c:4f: 95:de:d8:82:7e:a8:6c:3c:4b:28:7a:0e:d8:16:76: 8d:8b:d1:68:12:95:4f:71:78:37:80:44:9f:4e:ff: 4f:8a:3b:31:22:86:ae:49:3d:90:db:ca:98:34:4b: 0c:ea:2b:9a:b7:af:1c:e9:3f:d5:85:af:11:57:41: 97:27:86:d7:f8:9e:5e:0e:61:1d:62:76:42:7f:62: e8:f1:f9:8d:c1:09:ad:f6:16:f4:ff:25:05:07:fd: c1:b9:f3:12:df:e9:cb:08:ad:39:31:00:ee:3b:8a: 4c:e8:98:d2:73:20:49:45:92:fb:82:47:73:5e:cc: 9e:cf:d5:ba:ea:84:1a:a2:3a:f9:28:6b:30:12:96: be:1f:3f:f7:ba:38:0a:f4:f4:89:fe:c7:80:10:27: 75:e4:68:8c:03:26:f7:bf:30:38:b8:7f:56:e4:33: cf:58:9b:6d:02:6c:3b:51:2b:91:96:a4:29:9b:0e: da:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E2:AE:DE:7F:FC:5C:67:EB:AD:75:54:9C:3A:48:F2:BB:EA:FA:8F X509v3 Authority Key Identifier: keyid:2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:61:fe:69:b4:88:e2:6c:c2:89:1a:a4:5c:ff:39:f3:cd:4d: 17:b6:9b:64:58:d2:76:b3:d7:d6:f1:ca:e9:c4:57:05:89:4e: 8d:ae:77:2c:05:52:50:db:70:69:e5:62:44:7e:df:c5:cc:b2: b4:70:a7:0b:17:06:57:18:68:90:17:50:55:a6:5e:6d:b1:da: 31:4c:fd:50:44:fc:8a:1f:7c:87:d1:bc:02:6e:aa:90:0a:67: 75:cf:0e:78:42:df:f8:da:97:b1:3b:e1:b8:56:30:04:cb:25: a0:8b:dd:ff:7b:3f:67:81:8b:15:98:57:2a:fd:13:b6:47:ef: 6c:8d:34:4b:d0:0b:b3:c6:64:ec:11:e0:d4:89:07:45:4e:2e: 6d:35:1e:b8:55:01:de:07:38:43:db:e5:64:a7:36:74:b7:93: 5d:22:62:69:25:7e:fa:3c:86:29:f6:60:0f:99:67:e7:b1:9a: 02:6f:b5:12:67:b4:e2:6a:4e:4b:27:35:87:81:b2:c7:ac:cc: e4:54:fc:71:42:4c:f4:f1:c7:16:79:7e:ef:73:44:ae:cd:7c: de:9f:f4:5a:e8:dd:7d:39:7e:67:27:de:64:3f:b9:3c:85:af: 77:6b:76:60:41:4c:30:3c:c2:9e:93:a4:fc:08:3e:e4:8d:ef: d8:09:85:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv149devd0bfuKWFSrCJXKXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMmEwOGE3NDM4YTQ5NTg5ZDYzNGY4OGEwOWU5Mzk0MWY4 MTA3ZjYwHhcNMjYwMTI1MTYwMTQ4WhcNMjYwMTI2MTYwMTQ4WjAzMTEwLwYDVQQD Eyg2NmUyYWVkZTdmZmM1YzY3ZWJhZDc1NTQ5YzNhNDhmMmJiZWFmYThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Zs2V6r/KmqGAy8y6St6KZ0DZ1qn ln3Sf8HfV3N3JF95PNBDGVddEQUVIOLtm9mXxedG9T6IceFAPq3zQ1RWzS9YXyqd 8ACUbE+V3tiCfqhsPEsoeg7YFnaNi9FoEpVPcXg3gESfTv9PijsxIoauST2Q28qY NEsM6iuat68c6T/Vha8RV0GXJ4bX+J5eDmEdYnZCf2Lo8fmNwQmt9hb0/yUFB/3B ufMS3+nLCK05MQDuO4pM6JjScyBJRZL7gkdzXsyez9W66oQaojr5KGswEpa+Hz/3 ujgK9PSJ/seAECd15GiMAyb3vzA4uH9W5DPPWJttAmw7USuRlqQpmw7aXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGbirt5//Fxn6611VJw6SPK76vqPMB8GA1UdIwQY MBaAFC0qCKdDiklYnWNPiKCek5QfgQf2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFNvSXAwT0tTVmlkWTAtSW9KNlRsQi1CQl9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8yZGNkMTgtYzViNi00ZmY1LWIyMzUt MjZjNjdjZDAxMjhjLzEvTFNvSXAwT0tTVmlkWTAtSW9KNlRsQi1CQl9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8yZGNkMTgtYzViNi00ZmY1LWIyMzUtMjZjNjdjZDAxMjhj LzEvTFNvSXAwT0tTVmlkWTAtSW9KNlRsQi1CQl9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR2H+abSI 4mzCiRqkXP85881NF7abZFjSdrPX1vHK6cRXBYlOja53LAVSUNtwaeViRH7fxcyy tHCnCxcGVxhokBdQVaZebbHaMUz9UET8ih98h9G8Am6qkApndc8OeELf+NqXsTvh uFYwBMsloIvd/3s/Z4GLFZhXKv0TtkfvbI00S9ALs8Zk7BHg1IkHRU4ubTUeuFUB 3gc4Q9vlZKc2dLeTXSJiaSV++jyGKfZgD5ln57GaAm+1Eme04mpOSyc1h4Gyx6zM 5FT8cUJM9PHHFnl+73NErs183p/0WujdfTl+ZyfeZD+5PIWvd2t2YEFMMDzCnpOk /Ag+5I3v2AmFcw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:44 2026 by rpki-client