This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft File: LWmLr5_z7uvmYoSIn79onU5oPIE.mft (raw, json) Hash identifier: qtbn9TgHEq2GD5XFw4d9Ua6Enc6MJGx4WgX7hkYMoeE= Subject key identifier: 93:92:4C:C0:91:34:00:70:8C:01:69:4D:A7:4D:C3:52:3E:0A:BC:E2 Authority key identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81 Certificate issuer: /CN=2d698baf9ff3eeebe66284889fbf689d4e683c81 Certificate serial: 019BF53EEB06D5CDB5EEDCA1C0A7C40A8A8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft Manifest number: 1071 Signing time: Sun 25 Jan 2026 13:01:39 +0000 Manifest this update: Sun 25 Jan 2026 13:01:39 +0000 Manifest next update: Mon 26 Jan 2026 13:01:39 +0000 Files and hashes: 1: KhWNkr5gAw1c6ddmTPeSiEEfFWg.roa (hash: BfC/J8Ikas8k6I01UNkrtdj0AZZqj/UTxvhIrki0FuQ=) 2: LWmLr5_z7uvmYoSIn79onU5oPIE.crl (hash: pGwEDrZ3gAWLePBH7FLupF6Gy6Q4+Y6a/HZZA24j6Pw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:eb:06:d5:cd:b5:ee:dc:a1:c0:a7:c4:0a:8a:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d698baf9ff3eeebe66284889fbf689d4e683c81 Validity Not Before: Jan 25 13:01:39 2026 GMT Not After : Jan 26 13:01:39 2026 GMT Subject: CN=93924cc0913400708c01694da74dc3523e0abce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9f:de:42:be:46:f8:8f:c0:56:70:3a:9d:3c: cd:15:32:a5:36:9f:31:d8:71:8b:b6:5f:f0:eb:82: 73:ca:3c:0e:bb:4d:51:6e:dc:17:1e:f5:ea:92:c3: 9a:d1:47:12:e4:b2:98:d8:64:95:17:02:d7:e8:ea: 67:08:ce:69:be:b7:24:07:3e:00:b8:6b:7e:72:38: d4:bd:db:90:1a:a0:27:64:b1:8e:36:73:90:5f:f1: 67:cb:d8:8d:bb:d8:00:87:1f:08:bd:af:5f:85:cd: 98:8b:34:cc:e5:96:a7:fe:1c:f0:86:2e:ea:c5:c8: 96:4e:66:db:7b:d7:15:57:86:07:46:41:88:a6:ad: be:d5:3c:2b:30:f5:e3:9f:24:23:67:91:42:14:1e: 8c:c7:58:fb:e4:fa:7c:a6:a6:f7:11:72:d0:7d:36: eb:ec:f8:f9:7d:fa:dc:8b:ad:1a:93:86:c2:65:3d: 3a:bc:be:42:e1:8c:33:0f:43:33:6c:50:a6:1e:b6: dc:c6:7c:b7:69:3e:19:eb:dc:67:af:18:3f:79:ad: b5:3b:e8:a8:d1:4d:f6:e6:10:2e:e4:81:e1:c4:25: ce:32:62:57:8a:89:de:73:5b:12:15:9e:a8:02:6f: 28:e0:76:61:f5:13:22:27:b4:c3:ac:c7:e8:04:d2: 69:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:92:4C:C0:91:34:00:70:8C:01:69:4D:A7:4D:C3:52:3E:0A:BC:E2 X509v3 Authority Key Identifier: keyid:2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:df:5d:b4:7e:fb:ca:17:25:07:da:c9:f4:b2:a7:85:53:bb: e8:be:05:bf:f2:f7:8a:56:72:dd:cc:58:47:69:aa:10:ed:d8: f3:1f:9f:cd:cc:3e:b1:50:36:b9:51:38:26:f6:51:bc:a7:68: 16:c0:a1:ff:c7:0e:5b:5b:65:1b:89:1c:49:30:de:15:43:ac: 0e:f5:ce:e1:d3:33:a0:12:25:ec:5b:98:13:ba:e1:9e:bb:7d: 0a:ee:61:2a:24:dd:0e:3a:2b:d8:2b:ad:2a:83:7b:de:2b:0c: 51:de:43:4d:37:7e:ec:d1:78:f9:37:d0:7e:8c:ec:2d:ee:f1: 4e:34:21:2e:b4:10:7b:e9:d4:e6:5b:61:ad:51:49:7c:68:df: a2:fb:e9:49:bf:44:8e:5f:60:31:2a:89:9f:34:a0:18:28:23: f3:01:c4:4a:76:3f:8e:ea:9f:bf:d4:3c:1e:e3:fa:0c:4c:16: e3:39:b7:b6:82:e8:e9:73:f1:76:a5:94:46:7a:93:8b:a4:f4: b6:be:02:5e:11:81:bc:4f:76:a5:bc:bc:10:84:a0:b8:a5:36: fe:51:d9:19:10:e6:2c:a2:10:f0:63:77:2b:17:ea:fd:17:14: a9:b0:c3:5a:6e:b0:53:b2:2b:51:99:d7:1b:f5:29:3f:48:6f: 47:a1:8f:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PusG1c217tyhwKfECoqLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNjk4YmFmOWZmM2VlZWJlNjYyODQ4ODlmYmY2ODlkNGU2 ODNjODEwHhcNMjYwMTI1MTMwMTM5WhcNMjYwMTI2MTMwMTM5WjAzMTEwLwYDVQQD Eyg5MzkyNGNjMDkxMzQwMDcwOGMwMTY5NGRhNzRkYzM1MjNlMGFiY2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5/eQr5G+I/AVnA6nTzNFTKlNp8x 2HGLtl/w64JzyjwOu01RbtwXHvXqksOa0UcS5LKY2GSVFwLX6OpnCM5pvrckBz4A uGt+cjjUvduQGqAnZLGONnOQX/Fny9iNu9gAhx8Iva9fhc2YizTM5Zan/hzwhi7q xciWTmbbe9cVV4YHRkGIpq2+1TwrMPXjnyQjZ5FCFB6Mx1j75Pp8pqb3EXLQfTbr 7Pj5ffrci60ak4bCZT06vL5C4YwzD0MzbFCmHrbcxny3aT4Z69xnrxg/ea21O+io 0U325hAu5IHhxCXOMmJXionec1sSFZ6oAm8o4HZh9RMiJ7TDrMfoBNJp8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOSTMCRNABwjAFpTadNw1I+CrziMB8GA1UdIwQY MBaAFC1pi6+f8+7r5mKEiJ+/aJ1OaDyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81NzJhOTgtM2JiNy00Mjc2LTlkMzkt ZGZmNWEwOWE4MmNiLzEvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS81NzJhOTgtM2JiNy00Mjc2LTlkMzktZGZmNWEwOWE4MmNi LzEvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUd9dtH77 yhclB9rJ9LKnhVO76L4Fv/L3ilZy3cxYR2mqEO3Y8x+fzcw+sVA2uVE4JvZRvKdo FsCh/8cOW1tlG4kcSTDeFUOsDvXO4dMzoBIl7FuYE7rhnrt9Cu5hKiTdDjor2Cut KoN73isMUd5DTTd+7NF4+TfQfozsLe7xTjQhLrQQe+nU5lthrVFJfGjfovvpSb9E jl9gMSqJnzSgGCgj8wHESnY/juqfv9Q8HuP6DEwW4zm3toLo6XPxdqWURnqTi6T0 tr4CXhGBvE92pby8EISguKU2/lHZGRDmLKIQ8GN3Kxfq/RcUqbDDWm6wU7IrUZnX G/UpP0hvR6GPLQ== -----END CERTIFICATE-----Generated at Sun Jan 25 18:14:15 2026 by rpki-client