This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft File: lV2-u8EHC5nk-zchF98mIAOGA-k.mft (raw, json) Hash identifier: 6lgnPCp7NIdbK02CZwkyPjrxnnueJXHA2w7uHYKyuD8= Subject key identifier: B2:35:28:D7:A4:F4:19:46:87:B8:06:95:B2:0A:58:5F:19:73:24:73 Authority key identifier: 95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9 Certificate issuer: /CN=955dbebbc1070b99e4fb372117df2620038603e9 Certificate serial: 019BF5E3EE147827E74ABB82B6AB2E164152 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 16:01:54 +0000 Manifest this update: Sun 25 Jan 2026 16:01:54 +0000 Manifest next update: Mon 26 Jan 2026 16:01:54 +0000 Files and hashes: 1: 4QLQLdRNistD58V4Gobwba2l7ak.roa (hash: rdeifE6ly74qVEIujDihCPvAKVfy9CBgE4V+s0Ryjsg=) 2: LQXI2pdJJ5uldiP_ZMTBHsyj0zc.roa (hash: p9xq3q/MMRkwXX0B1rVTdYY5jk1Jby2fa+eubc67Btw=) 3: lV2-u8EHC5nk-zchF98mIAOGA-k.crl (hash: Lsd2hlNMr9YrAGCqXo+oVYrQeSD3bZFAFMsWAV9KhCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:ee:14:78:27:e7:4a:bb:82:b6:ab:2e:16:41:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=955dbebbc1070b99e4fb372117df2620038603e9 Validity Not Before: Jan 25 16:01:54 2026 GMT Not After : Jan 26 16:01:54 2026 GMT Subject: CN=b23528d7a4f4194687b80695b20a585f19732473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e7:02:e5:2a:3e:cf:b6:27:be:36:0c:00:d3: fe:fc:6d:44:2a:b8:2a:9c:79:0c:e2:56:39:73:d6: b3:50:08:9c:cf:26:bd:f6:ec:dc:79:ce:18:6f:08: 45:b2:52:4a:04:47:cb:9f:59:84:7b:b9:08:b7:23: 0a:db:09:36:0c:20:3c:c0:32:53:cc:63:85:ad:e0: 95:b1:52:97:e5:ad:12:d7:14:d0:61:20:86:60:f0: 94:c4:ce:6f:50:47:25:3e:04:9c:fc:9b:f1:d4:df: 63:53:51:9f:89:45:9e:b5:80:a8:74:ac:1a:2d:93: c6:c8:c2:85:3e:90:31:84:6c:ad:df:e2:05:a4:c0: ef:03:2a:6d:fb:69:0b:a1:6f:06:34:57:06:fd:db: 3b:88:e4:3a:07:92:3e:30:37:21:64:ff:5c:73:29: 95:9c:09:55:cd:85:08:aa:4a:bf:66:c7:1d:ba:06: aa:a5:e5:8d:a5:67:2f:bd:3c:83:0e:96:d8:74:81: e0:f8:c3:0e:93:3d:48:df:28:31:b6:8f:95:d2:59: 9f:8a:96:00:75:a4:5f:4e:5d:b5:d7:62:e0:d4:12: 90:14:fd:11:de:7a:6d:95:50:dd:06:f5:65:6c:5d: 75:52:da:24:ce:c1:09:0f:7b:a1:c2:23:17:24:4d: 26:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:35:28:D7:A4:F4:19:46:87:B8:06:95:B2:0A:58:5F:19:73:24:73 X509v3 Authority Key Identifier: keyid:95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:78:16:f1:f5:72:aa:dc:20:47:12:62:29:fa:17:2e:cc:84: 87:fe:df:03:99:0c:b3:20:5c:1f:f8:d8:d4:f0:f2:a3:02:3e: 61:35:5e:a1:29:59:a5:82:26:2f:0e:fd:b4:09:6b:48:13:ba: 2d:f5:c4:07:db:13:b2:47:34:e7:6c:d7:f0:97:4b:5e:b6:63: 06:93:8b:5c:fa:a8:ad:63:3e:c9:49:f6:d8:ce:dc:b5:7c:73: 00:25:cc:bc:11:53:63:02:d6:54:6d:33:1e:92:d9:71:a4:37: 97:47:e9:e1:78:b5:1e:94:a2:76:6b:2c:73:16:4f:ce:aa:f6: ba:ae:92:3f:d2:89:8c:1a:82:a1:69:62:bd:c7:7c:c1:22:6a: 82:e2:d5:7a:1c:4d:0c:13:67:08:ca:fa:49:b4:87:89:94:8d: 14:b0:50:be:9b:4c:3b:f5:dc:96:11:13:ea:07:f9:4d:01:0f: e5:cd:60:21:89:91:62:38:31:89:f1:f3:e5:01:dd:cc:22:9a: ae:27:19:30:4a:fc:01:00:30:e0:22:10:45:a0:5a:b3:62:97: 51:73:38:22:c7:d8:53:6d:44:02:11:93:3b:2f:5d:96:6f:f9: 30:b3:ae:ca:f8:de:f7:d5:64:64:46:1d:ff:24:0c:3a:47:75: 84:a9:36:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14+4UeCfnSruCtqsuFkFSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NWRiZWJiYzEwNzBiOTllNGZiMzcyMTE3ZGYyNjIwMDM4 NjAzZTkwHhcNMjYwMTI1MTYwMTU0WhcNMjYwMTI2MTYwMTU0WjAzMTEwLwYDVQQD EyhiMjM1MjhkN2E0ZjQxOTQ2ODdiODA2OTViMjBhNTg1ZjE5NzMyNDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOcC5So+z7YnvjYMANP+/G1EKrgq nHkM4lY5c9azUAiczya99uzcec4YbwhFslJKBEfLn1mEe7kItyMK2wk2DCA8wDJT zGOFreCVsVKX5a0S1xTQYSCGYPCUxM5vUEclPgSc/Jvx1N9jU1GfiUWetYCodKwa LZPGyMKFPpAxhGyt3+IFpMDvAypt+2kLoW8GNFcG/ds7iOQ6B5I+MDchZP9ccymV nAlVzYUIqkq/ZscdugaqpeWNpWcvvTyDDpbYdIHg+MMOkz1I3ygxto+V0lmfipYA daRfTl2112Lg1BKQFP0R3nptlVDdBvVlbF11UtokzsEJD3uhwiMXJE0mbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLI1KNek9BlGh7gGlbIKWF8ZcyRzMB8GA1UdIwQY MBaAFJVdvrvBBwuZ5Ps3IRffJiADhgPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFYyLXU4RUhDNW5rLXpjaEY5OG1JQU9HQS1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kZGFjMTEtMmU2My00YWFlLTk0MGYt MDIzMjAzOTQ3ZDlkLzEvbFYyLXU4RUhDNW5rLXpjaEY5OG1JQU9HQS1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9kZGFjMTEtMmU2My00YWFlLTk0MGYtMDIzMjAzOTQ3ZDlk LzEvbFYyLXU4RUhDNW5rLXpjaEY5OG1JQU9HQS1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXgW8fVy qtwgRxJiKfoXLsyEh/7fA5kMsyBcH/jY1PDyowI+YTVeoSlZpYImLw79tAlrSBO6 LfXEB9sTskc052zX8JdLXrZjBpOLXPqorWM+yUn22M7ctXxzACXMvBFTYwLWVG0z HpLZcaQ3l0fp4Xi1HpSidmsscxZPzqr2uq6SP9KJjBqCoWlivcd8wSJqguLVehxN DBNnCMr6SbSHiZSNFLBQvptMO/XclhET6gf5TQEP5c1gIYmRYjgxifHz5QHdzCKa ricZMEr8AQAw4CIQRaBas2KXUXM4IsfYU21EAhGTOy9dlm/5MLOuyvje99VkZEYd /yQMOkd1hKk2cg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:35 2026 by rpki-client