This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft File: lkM1Vj2bb54-KN42jYWYi8FBNx4.mft (raw, json) Hash identifier: YVph57BiQ7jp95g/ZHCteq1xnksIYK9pMYy7LQB3GI8= Subject key identifier: 7E:B6:D4:89:F0:EC:07:D1:CA:61:87:FC:7E:35:D6:8A:26:48:B3:0A Authority key identifier: 96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E Certificate issuer: /CN=964335563d9b6f9e3e28de368d85988bc141371e Certificate serial: 019BF61A54F2959012F4D8DC176A9C5F9E4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft Manifest number: 1630 Signing time: Sun 25 Jan 2026 17:01:19 +0000 Manifest this update: Sun 25 Jan 2026 17:01:19 +0000 Manifest next update: Mon 26 Jan 2026 17:01:19 +0000 Files and hashes: 1: 3j-9iaSKXJ2L7jlRSEs0qAlyRzk.roa (hash: kn2dNNNAcDT9/tnxgSN6E9lAiJiIXAqVGnn+Z6zefmM=) 2: WxK98FtTbTtBWK0NDqa7PLSHh-4.roa (hash: 6Do9u90Y5TD8a3hd4jqlXjVJP1K6MfYLEiK3okcKW40=) 3: lkM1Vj2bb54-KN42jYWYi8FBNx4.crl (hash: P+Ky+x8pOwg6e+gx2mmBC4GmDJXAYCqlmHIIQzQq7as=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:54:f2:95:90:12:f4:d8:dc:17:6a:9c:5f:9e:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=964335563d9b6f9e3e28de368d85988bc141371e Validity Not Before: Jan 25 17:01:19 2026 GMT Not After : Jan 26 17:01:19 2026 GMT Subject: CN=7eb6d489f0ec07d1ca6187fc7e35d68a2648b30a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8d:73:81:f1:e5:29:ed:68:a7:fe:a0:d5:9f: 3b:91:f7:12:67:d6:f9:f8:94:6e:7e:5b:ee:90:b0: 07:4e:14:11:d8:55:3b:22:47:67:b0:78:07:ef:cc: fb:56:bc:3f:ed:c9:9d:25:8a:dc:d6:e0:a4:c2:90: 92:af:13:85:37:af:28:de:11:5d:af:38:6c:26:d5: 45:c9:57:1f:78:1a:ec:12:ea:97:ee:d8:8f:67:16: 59:5c:28:4f:a0:d2:96:eb:2b:df:f1:10:3f:eb:bf: 9d:00:fb:bf:7e:eb:2e:7c:fe:50:d7:a5:e6:e0:4b: f1:3f:3d:5a:86:60:96:9c:ea:af:05:98:c1:ab:16: 79:3d:40:54:ca:e3:36:99:01:a9:69:b5:a7:02:33: 1e:50:60:65:a6:c8:a5:ff:e9:4b:08:f6:ab:18:17: c0:9a:92:d5:52:b7:78:51:7f:d3:ab:93:bc:c5:db: 2d:7b:3f:54:a7:71:be:b7:f7:e2:a0:a5:14:e9:eb: 1c:63:4e:c1:47:fb:6e:8f:15:f9:2d:04:bb:f5:a7: 87:6a:b2:aa:b8:37:c2:da:68:7c:3a:fe:9c:9d:4e: 5e:5d:8e:64:b3:a4:8d:7f:b0:d8:d1:41:6e:4d:58: e5:33:62:34:b6:83:eb:6b:41:7c:23:99:6a:77:bb: 67:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B6:D4:89:F0:EC:07:D1:CA:61:87:FC:7E:35:D6:8A:26:48:B3:0A X509v3 Authority Key Identifier: keyid:96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:5d:4a:61:ca:20:88:a8:ca:4d:28:4c:a6:91:ad:43:b0:a4: 82:d4:9b:4b:fc:6e:e1:53:3d:7a:5f:b3:73:1e:d8:c6:ac:9c: c3:cc:0e:26:71:1d:ae:cc:1d:14:30:1a:fd:9c:ff:72:45:1e: 84:64:8b:b4:94:4e:bc:c3:26:b8:89:88:09:fe:18:63:46:21: df:6f:b1:3c:ed:42:c9:79:f4:bc:bf:14:a3:2d:2f:36:cb:c5: c2:1b:00:34:5c:71:4c:7e:06:2f:a6:6a:c5:e8:b5:58:37:eb: 0a:39:48:f0:4a:bf:aa:1d:41:d4:7d:2d:3d:35:75:70:63:c4: b1:34:db:d8:5f:c8:68:9c:78:5b:32:8c:6e:37:a3:a4:99:43: a8:34:da:d7:4b:09:20:64:93:95:02:bb:e8:0a:58:2b:0f:d3: 01:fe:c4:dc:8b:c9:12:d0:3e:ba:6b:9d:10:40:b6:19:4d:21: 26:0a:93:db:11:f9:26:bc:a1:4a:9e:c0:db:e6:21:4a:b7:99: 8b:9c:d4:53:0e:05:0b:fa:8e:76:d7:31:1f:b0:f7:80:04:eb: bf:c3:3a:93:f7:e7:42:83:d0:2c:3c:5e:97:d9:d8:a4:9f:f8: fb:ac:7e:f9:10:40:99:b1:f9:e4:a9:95:cd:39:4c:88:42:56: ee:29:0e:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GlTylZAS9NjcF2qcX55MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NDMzNTU2M2Q5YjZmOWUzZTI4ZGUzNjhkODU5ODhiYzE0 MTM3MWUwHhcNMjYwMTI1MTcwMTE5WhcNMjYwMTI2MTcwMTE5WjAzMTEwLwYDVQQD Eyg3ZWI2ZDQ4OWYwZWMwN2QxY2E2MTg3ZmM3ZTM1ZDY4YTI2NDhiMzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso1zgfHlKe1op/6g1Z87kfcSZ9b5 +JRuflvukLAHThQR2FU7IkdnsHgH78z7Vrw/7cmdJYrc1uCkwpCSrxOFN68o3hFd rzhsJtVFyVcfeBrsEuqX7tiPZxZZXChPoNKW6yvf8RA/67+dAPu/fusufP5Q16Xm 4EvxPz1ahmCWnOqvBZjBqxZ5PUBUyuM2mQGpabWnAjMeUGBlpsil/+lLCParGBfA mpLVUrd4UX/Tq5O8xdstez9Up3G+t/fioKUU6escY07BR/tujxX5LQS79aeHarKq uDfC2mh8Ov6cnU5eXY5ks6SNf7DY0UFuTVjlM2I0toPra0F8I5lqd7tnrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH621Inw7AfRymGH/H411oomSLMKMB8GA1UdIwQY MBaAFJZDNVY9m2+ePijeNo2FmIvBQTceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGtNMVZqMmJiNTQtS040MmpZV1lpOEZCTng0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8xODZhOTMtOGU5My00NjUyLTkyODkt N2VkNTFjYTVhZjUxLzEvbGtNMVZqMmJiNTQtS040MmpZV1lpOEZCTng0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8xODZhOTMtOGU5My00NjUyLTkyODktN2VkNTFjYTVhZjUx LzEvbGtNMVZqMmJiNTQtS040MmpZV1lpOEZCTng0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH11KYcog iKjKTShMppGtQ7CkgtSbS/xu4VM9el+zcx7Yxqycw8wOJnEdrswdFDAa/Zz/ckUe hGSLtJROvMMmuImICf4YY0Yh32+xPO1CyXn0vL8Uoy0vNsvFwhsANFxxTH4GL6Zq xei1WDfrCjlI8Eq/qh1B1H0tPTV1cGPEsTTb2F/IaJx4WzKMbjejpJlDqDTa10sJ IGSTlQK76ApYKw/TAf7E3IvJEtA+umudEEC2GU0hJgqT2xH5JryhSp7A2+YhSreZ i5zUUw4FC/qOdtcxH7D3gATrv8M6k/fnQoPQLDxel9nYpJ/4+6x++RBAmbH55KmV zTlMiEJW7ikOiQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:45:56 2026 by rpki-client