This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft File: u-LMINabMN3hjsDQAs4vkUm_sG0.mft (raw, json) Hash identifier: 6aDoCbQaU2xDGPiQkLmad4jINI7o9PMh92xqwDwLJ1g= Subject key identifier: 13:D7:31:FE:EB:F7:88:52:3C:AB:3F:76:DB:ED:C5:E8:AF:1A:A0:48 Authority key identifier: BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D Certificate issuer: /CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d Certificate serial: 019BF5E37F88BDB0ACEDCE3DE052F7CF3478 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft Manifest number: 028A Signing time: Sun 25 Jan 2026 16:01:25 +0000 Manifest this update: Sun 25 Jan 2026 16:01:25 +0000 Manifest next update: Mon 26 Jan 2026 16:01:25 +0000 Files and hashes: 1: DXWKP3MB1lGDghFM-NJLvzILH4w.roa (hash: xZDooqBAiwnUkw67O91/SNOlEYAoGsWqbl+tv4wSxjk=) 2: IvYaWiyU4-mF6Hfr6yvUs-TfOx8.roa (hash: vzEeCN8mv8JAbDyh2EAs7UGT1vMJ7VBIlnfY4XE6ETA=) 3: iYgL9YAcXTZTdezPKH7kUPhkmN0.roa (hash: +UrmUxN9VwigyNaXGlHJ5mAa5ZCnHwM1WUcwK+R8j8E=) 4: u-LMINabMN3hjsDQAs4vkUm_sG0.crl (hash: Zuitc9Eyj4dguK6H233gFUS9RsC383DdloQuJ+QgtVk=) 5: yFDUf6JsuvyfXz0jEUOsaieGxCw.roa (hash: zP6gz/6pp44KQYvi0+M6T/CexJqf4xQ7LrlyWEsXUQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:7f:88:bd:b0:ac:ed:ce:3d:e0:52:f7:cf:34:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d Validity Not Before: Jan 25 16:01:25 2026 GMT Not After : Jan 26 16:01:25 2026 GMT Subject: CN=13d731feebf788523cab3f76dbedc5e8af1aa048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3a:90:af:7f:06:b9:a6:ff:b2:fb:1f:ee:26: e7:33:33:67:6e:01:94:57:5e:00:87:ab:d4:1b:96: 48:1d:8f:b8:8d:f2:13:ff:ff:d7:61:a1:fa:3e:a9: b7:f0:52:71:a3:67:92:5b:45:1e:65:4c:41:58:a3: 2c:38:06:a4:61:7d:57:2f:5b:05:60:8a:65:ac:f3: d3:ac:34:91:08:63:8e:34:50:f3:72:85:76:e9:74: 09:82:36:d1:f1:8b:43:d5:be:b4:eb:5f:b7:5c:65: 46:7d:b4:76:9f:1b:65:7d:8d:ce:66:a8:6e:0c:01: 69:67:83:78:80:43:a0:81:a2:5f:7e:a0:23:ca:4f: ec:63:53:10:4f:d4:67:98:44:16:3d:50:f6:80:b7: c7:e7:18:f5:f4:15:26:1a:4b:d0:e5:a8:12:62:9c: 00:a2:6e:4f:11:15:a1:08:b3:76:4a:52:a6:f1:b6: 14:ed:a2:13:78:3f:8a:40:53:a0:4a:d9:bc:9d:f1: f1:85:0a:9f:58:32:19:a5:16:4e:0b:ba:83:62:dc: e6:05:76:96:e0:6f:92:10:bf:25:65:10:67:7f:30: fc:f4:19:9c:a5:c8:e4:82:d7:aa:0a:4d:c3:8c:fd: 02:1f:7c:25:5c:34:92:71:3e:7f:9f:c8:d0:75:33: 44:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D7:31:FE:EB:F7:88:52:3C:AB:3F:76:DB:ED:C5:E8:AF:1A:A0:48 X509v3 Authority Key Identifier: keyid:BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:99:37:2a:18:42:b1:0e:f6:cf:9d:55:3f:1f:31:c4:0c:7b: d3:80:55:80:26:fa:ce:d8:a9:a0:ed:d3:12:3b:48:60:4d:7a: 61:b2:06:a4:e9:10:33:f7:10:18:93:e3:41:20:9d:d2:6f:2c: 35:94:81:af:6d:3a:5f:c4:67:e0:17:d4:fe:1b:00:53:f5:6b: 2f:7e:64:4e:2e:c7:21:8b:4b:79:34:cd:5c:65:64:a2:8c:7f: 84:84:ef:57:d4:6f:6c:93:f1:a1:eb:0c:97:df:1c:87:75:0d: 2f:1d:67:db:bd:de:1b:4b:ff:8e:93:2e:75:cc:b8:31:5c:b0: 3c:42:0b:31:6c:dc:91:d8:55:09:9d:b1:58:57:1f:e9:58:95: 00:70:d6:d7:f7:fc:37:e1:27:dc:14:08:f5:cd:8b:01:cd:d3: 18:5f:e1:8e:4f:ed:73:02:29:cf:8b:06:6c:7e:a9:cc:bb:70: 71:7b:24:eb:b5:db:6b:9e:b7:73:ae:5b:bc:c1:58:72:b8:cf: 13:c3:00:d3:e8:e0:6d:9e:0b:a6:92:eb:79:c7:28:77:32:2c: 23:7c:6c:55:67:9b:5d:15:88:51:a5:1a:cd:e1:f7:dc:f9:2d: 70:6e:85:a2:c9:41:79:1f:a2:96:b6:97:51:2a:f3:d5:8d:41: 98:fe:39:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv143+IvbCs7c494FL3zzR4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZTJjYzIwZDY5YjMwZGRlMThlYzBkMDAyY2UyZjkxNDli ZmIwNmQwHhcNMjYwMTI1MTYwMTI1WhcNMjYwMTI2MTYwMTI1WjAzMTEwLwYDVQQD EygxM2Q3MzFmZWViZjc4ODUyM2NhYjNmNzZkYmVkYzVlOGFmMWFhMDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzqQr38Guab/svsf7ibnMzNnbgGU V14Ah6vUG5ZIHY+4jfIT///XYaH6Pqm38FJxo2eSW0UeZUxBWKMsOAakYX1XL1sF YIplrPPTrDSRCGOONFDzcoV26XQJgjbR8YtD1b6061+3XGVGfbR2nxtlfY3OZqhu DAFpZ4N4gEOggaJffqAjyk/sY1MQT9RnmEQWPVD2gLfH5xj19BUmGkvQ5agSYpwA om5PERWhCLN2SlKm8bYU7aITeD+KQFOgStm8nfHxhQqfWDIZpRZOC7qDYtzmBXaW 4G+SEL8lZRBnfzD89BmcpcjkgteqCk3DjP0CH3wlXDSScT5/n8jQdTNEIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPXMf7r94hSPKs/dtvtxeivGqBIMB8GA1UdIwQY MBaAFLvizCDWmzDd4Y7A0ALOL5FJv7BtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdS1MTUlOYWJNTjNoanNEUUFzNHZrVW1fc0cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84YjRiMWEtZWE0Zi00MmUxLWI5NDIt YjExOWMyNThjZmFkLzEvdS1MTUlOYWJNTjNoanNEUUFzNHZrVW1fc0cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi84YjRiMWEtZWE0Zi00MmUxLWI5NDItYjExOWMyNThjZmFk LzEvdS1MTUlOYWJNTjNoanNEUUFzNHZrVW1fc0cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJk3KhhC sQ72z51VPx8xxAx704BVgCb6ztipoO3TEjtIYE16YbIGpOkQM/cQGJPjQSCd0m8s NZSBr206X8Rn4BfU/hsAU/VrL35kTi7HIYtLeTTNXGVkoox/hITvV9RvbJPxoesM l98ch3UNLx1n273eG0v/jpMudcy4MVywPEILMWzckdhVCZ2xWFcf6ViVAHDW1/f8 N+En3BQI9c2LAc3TGF/hjk/tcwIpz4sGbH6pzLtwcXsk67Xba563c65bvMFYcrjP E8MA0+jgbZ4LppLreccodzIsI3xsVWebXRWIUaUazeH33PktcG6FoslBeR+ilraX USrz1Y1BmP45Pw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:13:47 2026 by rpki-client