This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft File: LcgdJMRd2qNF-QZN4p-8p7EppSw.mft (raw, json) Hash identifier: xFTostJug8l/eXkyHyAQgG/5iGTARU2OLFY6PPRSrF8= Subject key identifier: 18:6B:59:6C:5A:91:6A:9D:88:F7:12:91:2B:6A:F9:6C:D0:AE:51:BE Authority key identifier: 2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C Certificate issuer: /CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c Certificate serial: 019BF462F5065E536B3F2F1AD3B0E916EC5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft Manifest number: 17FE Signing time: Sun 25 Jan 2026 09:01:24 +0000 Manifest this update: Sun 25 Jan 2026 09:01:24 +0000 Manifest next update: Mon 26 Jan 2026 09:01:24 +0000 Files and hashes: 1: 1jBYr9FWsRPu64lYAnK0ta-WBdA.roa (hash: 3LputYmrn0IPDDaA7qSescZ3E0lTXKfvLlqfzkE/kU0=) 2: HpLqibQGspD7I0_UJ2EcgU7t_k0.roa (hash: WDoBuCvl81J2NkEtc2oSPamqpTdUvE0GF3Mfe4I1HBQ=) 3: LcgdJMRd2qNF-QZN4p-8p7EppSw.crl (hash: Wc0UV7JmNnnvXdpWPZ8+q+zyWxf9qw3iVRC+BMDCDqg=) 4: PTD9xAwEKqmx4gmmtDTPK0hTyJw.roa (hash: ovDAPJ84DYuT4dk89ty5XzeA2lvBX0g4FHWlLvwK+L4=) 5: hXW_JJYbDEuARBvQ3ahscidHNa4.roa (hash: vgu1i3fvHneLweEnm2qJqevE9QNy+k15JJYScMlG9SQ=) 6: iAjz_7XGgeyKjKOC5mMhN8Ql2MM.roa (hash: 9fe4RXvq0cI0elK7H6sALndgETw3KtEVWMKky23SlPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:f5:06:5e:53:6b:3f:2f:1a:d3:b0:e9:16:ec:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c Validity Not Before: Jan 25 09:01:24 2026 GMT Not After : Jan 26 09:01:24 2026 GMT Subject: CN=186b596c5a916a9d88f712912b6af96cd0ae51be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:cc:9d:57:96:2d:57:86:54:55:5b:15:1b:8f: 6e:98:3a:45:12:7f:c4:34:9d:d9:04:09:13:45:45: ec:0e:5c:3e:1f:b6:9a:14:ed:32:87:b7:33:ab:0b: ee:7e:42:21:56:10:e5:45:9b:56:4a:87:39:4c:5a: 9f:71:bc:2a:f5:80:c8:0f:18:19:30:7c:27:97:47: c7:f2:90:f4:1e:17:5c:c9:6b:69:f0:66:21:c8:92: 92:21:7e:d2:6c:a9:66:86:e1:96:5a:e2:83:fc:5c: 58:d6:18:24:6e:1f:80:1a:b3:43:88:a4:58:c5:70: b4:b6:2b:a6:6e:10:88:4b:86:45:33:04:ec:a0:83: 12:e7:8a:4c:e1:dd:38:c4:f8:1b:90:fb:d0:93:c6: 9a:43:4c:e2:0c:1e:55:a4:0a:6a:df:24:4b:63:0c: 5f:63:05:08:01:5f:a9:57:68:6f:77:7f:57:57:b3: 7a:3b:cd:3d:5f:6c:c3:a2:73:f9:52:7e:07:25:90: 94:f1:c7:df:54:5a:fa:fa:f9:8d:6c:29:84:1b:6d: 33:9e:23:51:1d:7b:c2:f4:47:10:32:a7:b5:06:3f: 0c:1f:2c:44:29:b8:1d:47:bc:76:3e:53:07:cf:54: e8:09:f7:6d:a0:bd:88:36:0b:df:28:ea:43:b9:69: 6d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:6B:59:6C:5A:91:6A:9D:88:F7:12:91:2B:6A:F9:6C:D0:AE:51:BE X509v3 Authority Key Identifier: keyid:2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:72:ea:94:2f:57:fe:2b:4f:14:de:5c:35:3d:65:52:88:63: 7c:bf:f4:2e:a3:1a:59:f0:02:e4:4a:e8:31:f1:ac:47:2e:8a: aa:6b:9d:1b:2f:73:25:3c:09:75:28:02:01:95:53:16:4a:a5: 61:7d:5f:df:27:98:15:b7:2c:41:d3:1d:97:7f:0c:81:04:a7: 49:b5:43:18:f8:60:e6:f1:30:d9:3a:60:9e:2b:d8:56:11:8e: 7a:79:ed:4e:e2:49:b9:78:86:9a:97:fc:86:5b:c9:68:75:cf: 23:b7:70:71:32:d6:dc:76:c0:b2:f1:63:2f:63:0f:bc:f5:8b: 5f:d3:23:72:95:37:6a:9d:bf:10:d9:99:36:ae:5f:a2:3f:f9: e8:80:0f:e9:76:09:0f:66:fa:f1:34:35:c3:6c:2f:b3:3a:99: b5:06:2e:8d:46:95:0c:ca:6a:da:80:53:d8:5e:1c:92:25:e2: bb:0b:c8:be:0f:3d:c3:c5:45:d6:78:bd:31:52:2b:30:78:3c: 55:13:85:68:9c:e2:d2:e8:b9:59:30:79:5c:1e:63:72:fa:91: 74:57:9b:fe:fd:f2:59:80:ad:77:cc:24:c9:07:6c:d0:82:30: fd:39:aa:a4:16:94:6a:36:93:0d:69:42:9b:55:96:5e:f1:b3: 92:1b:f5:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YvUGXlNrPy8a07DpFuxeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkYzgxZDI0YzQ1ZGRhYTM0NWY5MDY0ZGUyOWZiY2E3YjEy OWE1MmMwHhcNMjYwMTI1MDkwMTI0WhcNMjYwMTI2MDkwMTI0WjAzMTEwLwYDVQQD EygxODZiNTk2YzVhOTE2YTlkODhmNzEyOTEyYjZhZjk2Y2QwYWU1MWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsydV5YtV4ZUVVsVG49umDpFEn/E NJ3ZBAkTRUXsDlw+H7aaFO0yh7czqwvufkIhVhDlRZtWSoc5TFqfcbwq9YDIDxgZ MHwnl0fH8pD0HhdcyWtp8GYhyJKSIX7SbKlmhuGWWuKD/FxY1hgkbh+AGrNDiKRY xXC0tiumbhCIS4ZFMwTsoIMS54pM4d04xPgbkPvQk8aaQ0ziDB5VpApq3yRLYwxf YwUIAV+pV2hvd39XV7N6O809X2zDonP5Un4HJZCU8cffVFr6+vmNbCmEG20zniNR HXvC9EcQMqe1Bj8MHyxEKbgdR7x2PlMHz1ToCfdtoL2INgvfKOpDuWltaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhrWWxakWqdiPcSkStq+WzQrlG+MB8GA1UdIwQY MBaAFC3IHSTEXdqjRfkGTeKfvKexKaUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGNnZEpNUmQycU5GLVFaTjRwLThwN0VwcFN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iZjNkYjUtYTMzZi00MzExLWFjZDkt MmZjYzBiNzQ5YjMyLzEvTGNnZEpNUmQycU5GLVFaTjRwLThwN0VwcFN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9iZjNkYjUtYTMzZi00MzExLWFjZDktMmZjYzBiNzQ5YjMy LzEvTGNnZEpNUmQycU5GLVFaTjRwLThwN0VwcFN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXLqlC9X /itPFN5cNT1lUohjfL/0LqMaWfAC5EroMfGsRy6KqmudGy9zJTwJdSgCAZVTFkql YX1f3yeYFbcsQdMdl38MgQSnSbVDGPhg5vEw2TpgnivYVhGOenntTuJJuXiGmpf8 hlvJaHXPI7dwcTLW3HbAsvFjL2MPvPWLX9MjcpU3ap2/ENmZNq5foj/56IAP6XYJ D2b68TQ1w2wvszqZtQYujUaVDMpq2oBT2F4ckiXiuwvIvg89w8VF1ni9MVIrMHg8 VROFaJzi0ui5WTB5XB5jcvqRdFeb/v3yWYCtd8wkyQds0IIw/TmqpBaUajaTDWlC m1WWXvGzkhv1iA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:44:39 2026 by rpki-client