This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft File: lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft (raw, json) Hash identifier: Il9ECnBjLHeNNDhu+HmiM+7Y+1/iRsn6Om8EDls4sCI= Subject key identifier: 0D:D0:D5:0E:96:D9:AD:5C:94:1C:53:4F:C1:BB:BC:B0:7B:6D:7D:56 Authority key identifier: 95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16 Certificate issuer: /CN=952156c8847f24d09da60d5f5b10542b2ecf9016 Certificate serial: 019BF8AD02B70000A4C2AEA5593707D2014B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 05:00:46 +0000 Manifest this update: Mon 26 Jan 2026 05:00:46 +0000 Manifest next update: Tue 27 Jan 2026 05:00:46 +0000 Files and hashes: 1: geYG7jgB_IZyvx4sV17jbEgt41M.roa (hash: qoLpQdomqm+vqekuFSAQcJ4kiUnpRFshCLt0DR6rKD4=) 2: lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl (hash: MQ4uJ9KhMX+JQMud0msaYeuJp+/LBXuZ6Uf4LHhjZA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:02:b7:00:00:a4:c2:ae:a5:59:37:07:d2:01:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=952156c8847f24d09da60d5f5b10542b2ecf9016 Validity Not Before: Jan 26 05:00:46 2026 GMT Not After : Jan 27 05:00:46 2026 GMT Subject: CN=0dd0d50e96d9ad5c941c534fc1bbbcb07b6d7d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:09:24:73:33:a9:ce:d6:39:23:ff:0d:9a:d8: dd:ee:6c:7b:ad:6c:73:27:8e:8d:41:0b:ff:34:d5: 45:2e:23:7b:10:8a:fd:89:30:33:7f:e0:b9:d8:65: cb:9b:52:2c:09:31:c2:e8:83:7c:5b:7e:4a:3b:c8: e6:71:93:18:5b:d4:7b:2c:b5:23:c6:dd:d9:43:46: 7c:07:67:2b:29:4c:64:5a:c6:96:db:eb:cc:7c:cb: 95:3d:39:cd:72:30:d8:54:3a:2c:ea:32:1c:56:47: 6b:20:93:4f:5f:e3:47:e2:0e:81:2f:34:dc:97:e7: 23:3b:3e:56:b9:c3:b0:e1:2e:72:0f:aa:62:1d:d5: 16:f5:05:22:02:c1:54:28:33:9c:fa:41:90:cc:fc: 56:98:da:eb:e4:5f:d8:f4:6d:6b:af:25:53:4e:d7: e7:78:9a:22:dc:bd:21:c3:b1:d8:0b:7b:ba:2a:b7: f1:41:4f:66:ca:3f:74:0a:a2:4d:f8:70:d0:be:f2: 55:67:40:68:3d:e4:3b:32:9a:7d:01:a5:32:5a:a6: d3:96:47:e1:a3:1f:2e:86:3d:cc:0a:94:34:1a:d4: cd:6e:5d:0d:71:94:d7:a5:3c:5a:5a:8f:d0:2e:df: 84:62:68:b3:90:c4:ef:40:09:ac:fe:e5:3c:a3:ed: 61:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D0:D5:0E:96:D9:AD:5C:94:1C:53:4F:C1:BB:BC:B0:7B:6D:7D:56 X509v3 Authority Key Identifier: keyid:95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:fa:55:b9:ac:88:69:10:50:c7:a6:bc:c1:dd:c4:be:cb:07: be:06:73:7a:c6:c1:f5:e7:04:37:c6:e7:6c:c0:e8:8b:23:b5: e0:1f:9b:69:d3:62:87:ba:ce:0d:16:f8:db:b2:94:b9:da:4f: 06:5b:87:28:56:65:3e:2c:ae:73:e1:04:93:a5:2a:95:e8:34: 74:fc:78:99:5f:dc:a1:29:6c:11:1f:b9:9e:49:c4:5e:24:63: 0f:0e:ea:0d:3d:09:f3:aa:6e:8a:69:ec:25:bf:e2:92:4e:d3: 7d:59:f3:4a:2e:0d:c8:7a:85:e6:f8:bc:4d:d9:8d:74:ee:ee: cd:9b:f3:68:4d:8a:7d:21:cc:b5:02:3a:88:5e:e0:07:10:53: ba:5c:c7:53:47:1c:a3:8e:6b:38:4e:c7:43:93:69:eb:bb:f5: 0d:2d:9a:41:98:64:b0:bf:32:47:b0:bf:da:e6:5a:0c:6f:27: 3c:be:33:28:5d:45:d2:80:d0:92:40:63:0e:bd:25:13:22:46: a5:5d:56:b3:3b:33:0c:aa:99:d5:b1:52:1d:39:8f:0f:35:6a: 6a:5c:34:be:1e:9d:6d:30:3e:fe:b3:d1:a4:2f:56:7d:49:62: 94:99:da:a4:3c:3f:8e:f5:fb:80:cd:f3:fa:dd:7e:b6:41:d8: 4b:a5:e4:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rQK3AACkwq6lWTcH0gFLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjE1NmM4ODQ3ZjI0ZDA5ZGE2MGQ1ZjViMTA1NDJiMmVj ZjkwMTYwHhcNMjYwMTI2MDUwMDQ2WhcNMjYwMTI3MDUwMDQ2WjAzMTEwLwYDVQQD EygwZGQwZDUwZTk2ZDlhZDVjOTQxYzUzNGZjMWJiYmNiMDdiNmQ3ZDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQkkczOpztY5I/8Nmtjd7mx7rWxz J46NQQv/NNVFLiN7EIr9iTAzf+C52GXLm1IsCTHC6IN8W35KO8jmcZMYW9R7LLUj xt3ZQ0Z8B2crKUxkWsaW2+vMfMuVPTnNcjDYVDos6jIcVkdrIJNPX+NH4g6BLzTc l+cjOz5WucOw4S5yD6piHdUW9QUiAsFUKDOc+kGQzPxWmNrr5F/Y9G1rryVTTtfn eJoi3L0hw7HYC3u6KrfxQU9myj90CqJN+HDQvvJVZ0BoPeQ7Mpp9AaUyWqbTlkfh ox8uhj3MCpQ0GtTNbl0NcZTXpTxaWo/QLt+EYmizkMTvQAms/uU8o+1hxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3Q1Q6W2a1clBxTT8G7vLB7bX1WMB8GA1UdIwQY MBaAFJUhVsiEfyTQnaYNX1sQVCsuz5AWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNGV3lJUl9KTkNkcGcxZld4QlVLeTdQa0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jNDNkNGYtZjUyYy00Mzg3LTkzNjIt YjNjMDFkMWE2Yzg1LzEvbFNGV3lJUl9KTkNkcGcxZld4QlVLeTdQa0JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9jNDNkNGYtZjUyYy00Mzg3LTkzNjItYjNjMDFkMWE2Yzg1 LzEvbFNGV3lJUl9KTkNkcGcxZld4QlVLeTdQa0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAovpVuayI aRBQx6a8wd3EvssHvgZzesbB9ecEN8bnbMDoiyO14B+badNih7rODRb427KUudpP BluHKFZlPiyuc+EEk6Uqleg0dPx4mV/coSlsER+5nknEXiRjDw7qDT0J86puimns Jb/ikk7TfVnzSi4NyHqF5vi8TdmNdO7uzZvzaE2KfSHMtQI6iF7gBxBTulzHU0cc o45rOE7HQ5Np67v1DS2aQZhksL8yR7C/2uZaDG8nPL4zKF1F0oDQkkBjDr0lEyJG pV1WszszDKqZ1bFSHTmPDzVqalw0vh6dbTA+/rPRpC9WfUlilJnapDw/jvX7gM3z +t1+tkHYS6XklA== -----END CERTIFICATE-----Generated at Mon Jan 26 10:58:09 2026 by rpki-client