This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft File: lHMg0DCTAXjm987vkdKrh4TT3BY.mft (raw, json) Hash identifier: ZhXMjhrxyeWryGvkKSYQ/UldafRh0iMHc9J8zX0ykls= Subject key identifier: 7B:F2:AF:61:53:B7:D4:59:FE:86:0B:69:F6:10:D4:2C:C3:EA:24:6D Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16 Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16 Certificate serial: 019BF3BD62716E431D9F521B3242BFD296A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft Manifest number: 1419 Signing time: Sun 25 Jan 2026 06:00:33 +0000 Manifest this update: Sun 25 Jan 2026 06:00:33 +0000 Manifest next update: Mon 26 Jan 2026 06:00:33 +0000 Files and hashes: 1: 15WLZBLgJ9g9rpon7ikwmnOpu2o.roa (hash: cDtWR/sWDEjocXdbWFuLldw8hA+RRTGqd9G5Qgigc2g=) 2: L4FVL-IOve6YhBWZ8jz8Nor0cv4.roa (hash: IchcC27uPlsKIbmA49GFEPAY66Qr3a8M8fgjbxbsGQs=) 3: j7qwhPrSo-8ueCrFJo_GWwM93Tg.roa (hash: gJyu32k59hXhVllwZCm02crtrLnwlpxMsqibTEWrODw=) 4: jb81OuVJup1PLJeMNccOVNPoCJ8.roa (hash: deKoWNZnlpwFwiqew1tUzp1N8o/V+tWA//EpRC0uV3s=) 5: kEA4tj_KkVDLvM2DWnwX5k8m6BI.roa (hash: pnHIraVgBAZPz/3bw02SbdT0VFhTYaLYb8ZPwjAg3r4=) 6: lHMg0DCTAXjm987vkdKrh4TT3BY.crl (hash: vj9oMS6ktkVrPFQmGE7ECnoc8DrPszPOu+VcYt3EC8A=) 7: q-8ltpoThmmPBuTuT5C4cGm14Tk.roa (hash: 5hF8BW/BSTiPn3vyhPttnkUg4VDyaJiwZYhFxh/LtpA=) 8: zjv8SZhQ9gV8oRmS9YUAJhkKaT8.roa (hash: 9mmbxYMsoWHE5kxulUQxb1ol9WOyJhGIh77y7/oMRtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:62:71:6e:43:1d:9f:52:1b:32:42:bf:d2:96:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16 Validity Not Before: Jan 25 06:00:33 2026 GMT Not After : Jan 26 06:00:33 2026 GMT Subject: CN=7bf2af6153b7d459fe860b69f610d42cc3ea246d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:58:51:24:25:c0:14:6a:34:f9:19:1b:8e:dd: 7c:a2:e3:71:af:c4:65:14:03:87:af:86:76:8c:64: 34:93:c4:8b:ef:73:18:44:8b:4c:c4:ef:bc:c7:6e: d7:a0:04:7b:de:aa:89:05:18:06:50:16:8e:e0:98: 68:41:f7:bc:c8:00:5f:ba:00:75:83:ee:de:37:d8: cd:07:48:1c:c7:e2:88:f3:11:54:60:3f:f9:b7:49: 15:55:ac:02:75:9c:f7:c4:cf:3f:41:32:b6:53:01: 3d:85:40:eb:fb:ac:17:e0:dd:ea:a1:02:cc:d5:5f: 6e:1c:8c:d8:5b:9d:eb:e8:f4:78:a9:55:32:5e:a6: 29:e5:97:ff:03:c1:87:40:c6:52:d5:90:1a:7d:76: f6:51:d1:ba:cd:32:50:e1:cc:c7:e8:21:c4:6f:60: fe:de:82:10:b7:e2:77:9e:8e:66:86:83:c3:4e:31: d6:79:20:5c:b9:7a:12:00:32:02:9d:3c:6e:5c:95: 02:41:df:ad:28:2d:b4:f8:3a:ed:e4:73:a3:52:b6: 55:3f:7a:31:73:ca:32:8a:60:ac:56:62:16:27:3c: ae:8c:d1:6a:1d:e4:f6:b1:6c:7e:89:a1:15:b3:16: c5:25:82:32:f5:f4:3f:c0:62:2e:22:e1:23:c2:63: 5c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F2:AF:61:53:B7:D4:59:FE:86:0B:69:F6:10:D4:2C:C3:EA:24:6D X509v3 Authority Key Identifier: keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:04:c7:38:9d:52:13:38:97:2e:c8:2d:63:77:b8:0c:ea:2f: c4:a9:a9:57:eb:bf:b7:0a:ad:29:7c:7d:90:86:f5:5f:47:fc: bf:a7:6e:0b:bb:1d:3f:37:87:0f:ed:bd:e2:cb:18:5b:be:a9: 2a:b2:19:5a:06:d6:97:2b:c0:80:b8:74:59:1a:5e:a0:4f:a1: 76:96:9e:7a:73:e9:4a:ab:0b:52:1d:06:4d:2c:0a:28:19:3c: 53:a2:ba:9f:32:53:5d:8c:ce:63:11:31:d6:fd:ee:77:58:aa: a2:b8:28:87:87:cc:e7:fd:54:19:3b:d3:a3:6a:71:ca:3b:e2: 50:dc:3b:de:9e:18:51:8a:cc:e0:0e:ee:d4:ec:2a:c0:2f:12: 54:a1:4f:e3:96:c1:ad:ff:c4:d6:fa:3a:c5:65:0d:8c:3c:cf: c8:09:82:48:3c:96:ae:57:9f:0b:e1:c0:c1:23:8a:d6:72:c6: e3:9a:50:73:34:04:1d:56:c0:70:73:c5:1a:9f:03:e7:8e:e2: 75:da:b5:02:c2:1c:31:b1:be:49:68:03:20:37:c5:60:95:d2: 9c:d2:96:a7:3a:63:bf:2e:b4:ef:4c:2f:60:ca:e5:66:a9:ca: 7d:da:6e:63:0e:d9:c3:14:5c:80:6b:83:b2:53:cd:d2:2c:49: 36:1a:45:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvWJxbkMdn1IbMkK/0paoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NzMyMGQwMzA5MzAxNzhlNmY3Y2VlZjkxZDJhYjg3ODRk M2RjMTYwHhcNMjYwMTI1MDYwMDMzWhcNMjYwMTI2MDYwMDMzWjAzMTEwLwYDVQQD Eyg3YmYyYWY2MTUzYjdkNDU5ZmU4NjBiNjlmNjEwZDQyY2MzZWEyNDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VhRJCXAFGo0+Rkbjt18ouNxr8Rl FAOHr4Z2jGQ0k8SL73MYRItMxO+8x27XoAR73qqJBRgGUBaO4JhoQfe8yABfugB1 g+7eN9jNB0gcx+KI8xFUYD/5t0kVVawCdZz3xM8/QTK2UwE9hUDr+6wX4N3qoQLM 1V9uHIzYW53r6PR4qVUyXqYp5Zf/A8GHQMZS1ZAafXb2UdG6zTJQ4czH6CHEb2D+ 3oIQt+J3no5mhoPDTjHWeSBcuXoSADICnTxuXJUCQd+tKC20+Drt5HOjUrZVP3ox c8oyimCsVmIWJzyujNFqHeT2sWx+iaEVsxbFJYIy9fQ/wGIuIuEjwmNcjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvyr2FTt9RZ/oYLafYQ1CzD6iRtMB8GA1UdIwQY MBaAFJRzINAwkwF45vfO75HSq4eE09wWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEt OGFjNGEyMTkzOGI0LzEvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEtOGFjNGEyMTkzOGI0 LzEvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFATHOJ1S EziXLsgtY3e4DOovxKmpV+u/twqtKXx9kIb1X0f8v6duC7sdPzeHD+294ssYW76p KrIZWgbWlyvAgLh0WRpeoE+hdpaeenPpSqsLUh0GTSwKKBk8U6K6nzJTXYzOYxEx 1v3ud1iqorgoh4fM5/1UGTvTo2pxyjviUNw73p4YUYrM4A7u1OwqwC8SVKFP45bB rf/E1vo6xWUNjDzPyAmCSDyWrlefC+HAwSOK1nLG45pQczQEHVbAcHPFGp8D547i ddq1AsIcMbG+SWgDIDfFYJXSnNKWpzpjvy6070wvYMrlZqnKfdpuYw7ZwxRcgGuD slPN0ixJNhpFjA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:08:30 2026 by rpki-client