This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft File: Li9t2XmfpOoIT9VJ1xDGiW364pE.mft (raw, json) Hash identifier: qlvyB/jj0qyxd5mhfYeMwKh+UkI6QWIfjixxb8fo+7A= Subject key identifier: 24:3B:7F:F9:A3:38:E4:82:FE:3F:6A:51:9F:0E:C6:18:19:73:2E:7D Authority key identifier: 2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91 Certificate issuer: /CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291 Certificate serial: 019BF42B916B3A596FD8BEB5B602A4BE64FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft Manifest number: 0A34 Signing time: Sun 25 Jan 2026 08:00:54 +0000 Manifest this update: Sun 25 Jan 2026 08:00:54 +0000 Manifest next update: Mon 26 Jan 2026 08:00:54 +0000 Files and hashes: 1: Li9t2XmfpOoIT9VJ1xDGiW364pE.crl (hash: NT+FQY+mPjIaf9GXZLTPTFmn7QYnrV+ERmrd/hXTV94=) 2: tOuyhld-AUyG32ylyMah8UxZ7mE.roa (hash: YUhhR6mZGZf9IfQta0epFj+lmVDPTWRRkPjuKNf8QT8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:91:6b:3a:59:6f:d8:be:b5:b6:02:a4:be:64:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291 Validity Not Before: Jan 25 08:00:54 2026 GMT Not After : Jan 26 08:00:54 2026 GMT Subject: CN=243b7ff9a338e482fe3f6a519f0ec61819732e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:71:78:de:f8:c5:79:75:e4:1a:e2:60:be:f2: f1:2d:5f:e8:62:45:e4:ea:70:54:bd:fe:3f:a4:9c: 35:c2:7a:05:bc:47:25:ba:03:0a:f4:85:42:20:81: 8b:5a:99:42:3f:6d:57:f0:7b:7e:c6:a7:c0:40:cb: 7c:27:c3:39:24:cb:72:e5:b6:11:c7:da:74:13:50: a8:4d:7f:cd:6a:73:10:27:34:57:2d:9b:e2:52:aa: aa:00:ec:2c:88:a9:c6:88:2b:c7:e1:34:49:12:bb: e9:eb:08:1d:bb:6f:7c:1f:92:c8:1c:e0:cf:66:21: 9d:cb:5e:24:06:f4:32:0c:f1:4c:19:d7:9e:05:83: 08:29:ec:e8:9b:39:ba:37:d7:76:cc:22:ed:9f:d9: d9:0b:e6:38:a4:7b:41:8d:3d:6c:82:a4:dc:51:24: 9b:17:5e:75:46:35:d1:dd:d0:5f:60:dd:28:c6:83: 90:85:04:a2:58:39:23:9b:4e:58:ae:d6:83:ac:6c: b4:2c:22:16:c2:2e:97:3a:65:14:80:1b:41:ef:c0: 55:79:f9:7c:67:3b:7d:64:6e:84:16:f0:60:ab:97: 16:e5:47:fd:07:d4:09:e0:7b:dd:7d:4c:d7:77:65: dc:1a:04:bf:ee:74:af:94:e0:ca:70:cf:41:9b:f9: fb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3B:7F:F9:A3:38:E4:82:FE:3F:6A:51:9F:0E:C6:18:19:73:2E:7D X509v3 Authority Key Identifier: keyid:2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:40:d6:6a:4a:08:07:91:e8:80:76:17:ec:38:cf:f1:92:8e: 80:a0:8c:68:c3:37:c8:41:da:4a:b7:4d:df:20:58:23:55:e7: ad:24:93:c2:a7:50:69:6b:52:08:95:9c:16:bf:6b:e9:33:aa: ce:1c:25:65:c7:3d:35:60:02:db:56:ac:63:c8:0f:cf:fd:89: 29:82:99:e5:d1:25:64:0f:e8:97:7e:03:1c:66:a4:cf:85:f0: b1:45:26:f0:fc:52:39:b1:03:1f:e9:fa:bf:7b:22:be:9a:0e: 88:c9:a2:f6:39:d0:94:a7:9a:61:07:f9:0e:1c:a7:2e:5c:ea: 4f:6c:b4:ab:71:99:34:05:69:b7:89:35:78:4a:57:49:98:92: 97:78:22:6e:5d:54:fd:02:a8:e6:f7:17:04:bb:58:67:93:b2: 2a:e1:44:2e:e0:0a:b2:24:5c:14:c0:c2:1a:d1:f7:aa:73:e3: 32:9a:12:32:50:67:fc:0d:24:91:f5:34:92:4b:be:c3:8e:d0: 8b:1b:b4:2a:ad:1a:1a:dd:98:16:ec:78:1e:28:38:c6:a0:2d: cf:6a:b6:e5:4f:c5:33:a4:48:57:4f:ea:d3:50:63:e1:17:30: d2:ec:71:78:99:df:7c:35:27:a7:a3:c2:f4:88:6a:d8:20:81: b5:5a:e3:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K5FrOllv2L61tgKkvmT+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMmY2ZGQ5Nzk5ZmE0ZWEwODRmZDU0OWQ3MTBjNjg5NmRm YWUyOTEwHhcNMjYwMTI1MDgwMDU0WhcNMjYwMTI2MDgwMDU0WjAzMTEwLwYDVQQD EygyNDNiN2ZmOWEzMzhlNDgyZmUzZjZhNTE5ZjBlYzYxODE5NzMyZTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXF43vjFeXXkGuJgvvLxLV/oYkXk 6nBUvf4/pJw1wnoFvEclugMK9IVCIIGLWplCP21X8Ht+xqfAQMt8J8M5JMty5bYR x9p0E1CoTX/NanMQJzRXLZviUqqqAOwsiKnGiCvH4TRJErvp6wgdu298H5LIHODP ZiGdy14kBvQyDPFMGdeeBYMIKezomzm6N9d2zCLtn9nZC+Y4pHtBjT1sgqTcUSSb F151RjXR3dBfYN0oxoOQhQSiWDkjm05YrtaDrGy0LCIWwi6XOmUUgBtB78BVefl8 Zzt9ZG6EFvBgq5cW5Uf9B9QJ4HvdfUzXd2XcGgS/7nSvlODKcM9Bm/n7BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQ7f/mjOOSC/j9qUZ8OxhgZcy59MB8GA1UdIwQY MBaAFC4vbdl5n6TqCE/VSdcQxolt+uKRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGk5dDJYbWZwT29JVDlWSjF4REdpVzM2NHBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8xYTRjYzAtZGE5Mi00NTk2LWIxMjMt NTYxY2VkNWJiZjkyLzEvTGk5dDJYbWZwT29JVDlWSjF4REdpVzM2NHBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy8xYTRjYzAtZGE5Mi00NTk2LWIxMjMtNTYxY2VkNWJiZjky LzEvTGk5dDJYbWZwT29JVDlWSjF4REdpVzM2NHBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgEDWakoI B5HogHYX7DjP8ZKOgKCMaMM3yEHaSrdN3yBYI1XnrSSTwqdQaWtSCJWcFr9r6TOq zhwlZcc9NWAC21asY8gPz/2JKYKZ5dElZA/ol34DHGakz4XwsUUm8PxSObEDH+n6 v3sivpoOiMmi9jnQlKeaYQf5DhynLlzqT2y0q3GZNAVpt4k1eEpXSZiSl3gibl1U /QKo5vcXBLtYZ5OyKuFELuAKsiRcFMDCGtH3qnPjMpoSMlBn/A0kkfU0kku+w47Q ixu0Kq0aGt2YFux4Hig4xqAtz2q25U/FM6RIV0/q01Bj4Rcw0uxxeJnffDUnp6PC 9Ihq2CCBtVrjRQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:24:49 2026 by rpki-client