This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft File: LAzrgevOhZ9Qko6O0-HwqFERUts.mft (raw, json) Hash identifier: /v2ZqEfE0by+5Uq5jYEtlafD7sQ1LUXB5BiEyKrGeSY= Subject key identifier: 79:A4:0A:FB:11:6D:C7:09:2A:E6:FE:9B:59:CA:12:1F:07:AA:D7:52 Authority key identifier: 2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB Certificate issuer: /CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db Certificate serial: 019BF6F5F5DAFC03654A73B988E59F8D5021 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft Manifest number: 0BD2 Signing time: Sun 25 Jan 2026 21:01:12 +0000 Manifest this update: Sun 25 Jan 2026 21:01:12 +0000 Manifest next update: Mon 26 Jan 2026 21:01:12 +0000 Files and hashes: 1: 4xcAwvHt__8M4q7q6_P8GmcGdJ0.roa (hash: 4N+MVFoHn+t4XX6dy0VLE63oifYd03KKG5mUbwfZupw=) 2: LAzrgevOhZ9Qko6O0-HwqFERUts.crl (hash: t/PishWytniLq+jWwcRuxKUBYKRAFc+cwnCynGFAMQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:f5:da:fc:03:65:4a:73:b9:88:e5:9f:8d:50:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db Validity Not Before: Jan 25 21:01:12 2026 GMT Not After : Jan 26 21:01:12 2026 GMT Subject: CN=79a40afb116dc7092ae6fe9b59ca121f07aad752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ac:2a:7c:39:af:d3:fd:5d:5b:14:24:55:94: 36:fc:42:8b:8a:fa:66:95:cf:72:80:24:15:59:db: e9:be:54:4e:c1:17:55:2d:70:68:29:3c:66:13:2b: 3e:02:1e:a3:62:ea:a5:54:59:6a:97:1f:9e:17:54: ce:80:1a:3c:29:a7:1c:c2:c6:bd:96:4f:e6:17:47: 1b:03:02:d6:c3:9b:e2:25:d2:fd:48:4c:1e:2a:68: 49:45:69:57:9a:b1:b6:d3:39:fe:72:3f:e5:84:5b: 95:ea:92:d2:d4:16:04:8b:25:64:62:2e:4d:b4:9b: 84:23:5c:aa:13:90:24:3f:6b:89:fc:71:c8:5a:33: 86:cb:d6:90:41:36:d0:21:68:a3:7e:0f:10:be:db: 3c:ba:e6:5b:0c:13:78:73:bb:66:11:62:5e:16:ca: 2b:6d:89:3d:2b:e0:2d:ec:40:dc:f7:b2:d7:01:05: 2b:1b:aa:7e:8d:e1:01:48:a1:4d:1a:fa:83:bd:15: 4a:98:e5:f7:cb:d5:e1:04:ef:9f:43:5d:e0:1a:45: 9b:f5:71:9c:1c:45:c1:9c:e3:11:9e:8c:35:92:18: 9f:1f:a0:fc:51:60:0a:55:f3:50:5a:ac:4e:38:9b: 99:5f:1f:f5:a6:e0:5a:1e:ff:76:31:6c:35:cd:25: e6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A4:0A:FB:11:6D:C7:09:2A:E6:FE:9B:59:CA:12:1F:07:AA:D7:52 X509v3 Authority Key Identifier: keyid:2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:1d:28:52:ea:ea:0c:d5:64:78:05:5b:b6:b1:61:01:3c:98: 19:f8:a2:2b:d2:c7:59:e6:7a:f0:f7:e0:d1:3a:f9:fd:54:fb: b0:51:54:18:fd:9e:6c:92:d8:e8:1c:0f:1b:86:93:78:ac:a4: de:15:6b:96:5e:80:30:57:91:6c:0d:a3:06:f5:e4:cd:a2:f3: b8:74:3e:69:7d:7a:a0:fc:f1:7a:35:43:52:da:60:68:d8:79: a2:aa:e8:e8:d0:5c:80:8a:45:39:55:87:dc:4c:c1:f9:df:10: 8c:58:66:79:40:ba:99:71:7e:bf:c2:c8:36:45:7b:e8:b6:78: c7:19:c6:c6:ba:1b:4c:a2:c4:14:59:ba:0c:f3:90:f2:72:bc: 5d:5f:50:60:e2:b0:51:ce:95:a3:55:70:9c:d7:92:1a:2f:22: 36:52:41:53:77:aa:81:3e:fe:01:80:df:e6:42:66:6a:35:1e: 23:a8:1e:20:b5:38:7d:c3:68:7b:55:2a:56:d1:7d:b0:4c:ae: 33:73:6c:5a:ef:14:e8:15:b2:80:53:fe:bd:d3:28:a2:c2:cd: 3b:7e:03:5d:c6:5d:b3:e2:de:33:6c:49:1d:15:38:7a:41:ee: bc:5f:57:1f:40:23:2f:6f:6c:4f:9f:17:a4:04:5a:82:57:fe: 80:c0:a0:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29fXa/ANlSnO5iOWfjVAhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMGNlYjgxZWJjZTg1OWY1MDkyOGU4ZWQzZTFmMGE4NTEx MTUyZGIwHhcNMjYwMTI1MjEwMTEyWhcNMjYwMTI2MjEwMTEyWjAzMTEwLwYDVQQD Eyg3OWE0MGFmYjExNmRjNzA5MmFlNmZlOWI1OWNhMTIxZjA3YWFkNzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qwqfDmv0/1dWxQkVZQ2/EKLivpm lc9ygCQVWdvpvlROwRdVLXBoKTxmEys+Ah6jYuqlVFlqlx+eF1TOgBo8Kaccwsa9 lk/mF0cbAwLWw5viJdL9SEweKmhJRWlXmrG20zn+cj/lhFuV6pLS1BYEiyVkYi5N tJuEI1yqE5AkP2uJ/HHIWjOGy9aQQTbQIWijfg8Qvts8uuZbDBN4c7tmEWJeFsor bYk9K+At7EDc97LXAQUrG6p+jeEBSKFNGvqDvRVKmOX3y9XhBO+fQ13gGkWb9XGc HEXBnOMRnow1khifH6D8UWAKVfNQWqxOOJuZXx/1puBaHv92MWw1zSXmgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmkCvsRbccJKub+m1nKEh8HqtdSMB8GA1UdIwQY MBaAFCwM64HrzoWfUJKOjtPh8KhREVLbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEF6cmdldk9oWjlRa282TzAtSHdxRkVSVXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8wNDk4MmMtNWZmYy00MmE4LTk4Nzkt NmU4YjM0ZjE5NzZiLzEvTEF6cmdldk9oWjlRa282TzAtSHdxRkVSVXRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8wNDk4MmMtNWZmYy00MmE4LTk4NzktNmU4YjM0ZjE5NzZi LzEvTEF6cmdldk9oWjlRa282TzAtSHdxRkVSVXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbh0oUurq DNVkeAVbtrFhATyYGfiiK9LHWeZ68Pfg0Tr5/VT7sFFUGP2ebJLY6BwPG4aTeKyk 3hVrll6AMFeRbA2jBvXkzaLzuHQ+aX16oPzxejVDUtpgaNh5oqro6NBcgIpFOVWH 3EzB+d8QjFhmeUC6mXF+v8LINkV76LZ4xxnGxrobTKLEFFm6DPOQ8nK8XV9QYOKw Uc6Vo1VwnNeSGi8iNlJBU3eqgT7+AYDf5kJmajUeI6geILU4fcNoe1UqVtF9sEyu M3NsWu8U6BWygFP+vdMoosLNO34DXcZds+LeM2xJHRU4ekHuvF9XH0AjL29sT58X pARaglf+gMCgLw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:51:28 2026 by rpki-client