This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft File: Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft (raw, json) Hash identifier: 1KiHmsK1KXg76S5I+14B3RoymVl14m0gwTW2ZT8A2V4= Subject key identifier: E4:93:61:F3:A0:4F:58:C6:73:89:BB:62:44:73:22:3A:A6:F6:49:BA Authority key identifier: 2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E Certificate issuer: /CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e Certificate serial: 019BF6F5D44983C9FFFFEA78B59C7BB9D870 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 21:01:04 +0000 Manifest this update: Sun 25 Jan 2026 21:01:04 +0000 Manifest next update: Mon 26 Jan 2026 21:01:04 +0000 Files and hashes: 1: Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl (hash: yTQ3PxYSLW5qrFtbCcggkWH0QXcogReJkywZNuE6+vU=) 2: SdYBPf9hyZeCBZ0CXzRVluMGnGU.roa (hash: hgdsfyjTVsGnv4VajpzC0ZJUGOBghoLM7l+xd5EQZGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:d4:49:83:c9:ff:ff:ea:78:b5:9c:7b:b9:d8:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e Validity Not Before: Jan 25 21:01:04 2026 GMT Not After : Jan 26 21:01:04 2026 GMT Subject: CN=e49361f3a04f58c67389bb624473223aa6f649ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cf:d9:46:73:60:89:59:a7:33:7f:b2:36:f2: 3e:dc:b9:1e:9f:67:4e:4f:00:71:ad:9f:fe:47:eb: 5f:a1:ca:10:9f:65:7b:ad:9c:13:23:51:09:da:2e: 71:29:62:bf:75:fd:43:d1:ff:3a:d9:d3:d7:7a:09: bb:96:3b:0b:f2:77:96:7b:b3:29:e6:a9:22:7f:b8: dd:43:3e:96:56:fb:88:28:cf:32:a0:2d:b0:86:9c: 22:4d:30:c7:f3:4a:31:13:7b:bb:b4:a1:03:53:6e: 37:3f:ee:27:2b:9c:06:6d:7e:04:20:9f:4e:54:5c: 53:49:ce:66:a7:03:26:70:16:af:f2:9e:7e:da:d4: 57:51:40:43:cb:da:12:01:ae:f8:e9:23:62:46:13: 9a:70:b2:41:44:82:9f:85:8b:84:7b:83:f5:54:dd: 83:51:18:2a:25:5f:b5:6d:2b:00:8e:a8:6f:e8:91: a7:c1:fc:c7:f5:06:37:9d:c6:df:59:3a:ef:35:76: 62:10:30:12:c7:45:08:f2:0f:b1:e0:40:89:19:b6: 3b:93:19:91:4c:a4:c7:c7:5a:33:47:19:05:2c:6d: b1:b5:e9:d8:db:1b:a2:94:68:d6:ac:ef:85:63:0a: 42:74:86:b9:50:6f:5a:50:ba:7b:6c:fa:85:49:c0: dd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:93:61:F3:A0:4F:58:C6:73:89:BB:62:44:73:22:3A:A6:F6:49:BA X509v3 Authority Key Identifier: keyid:2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:bf:f4:eb:54:c3:52:4f:10:8f:76:eb:05:91:28:75:73:7f: f7:63:97:ca:42:84:04:d7:6b:8b:32:24:85:56:42:c5:ab:a6: e3:8b:2d:8e:81:5c:39:f5:a6:7e:e4:26:ea:c7:39:1e:8f:40: 5d:60:35:81:15:dd:83:d8:26:98:00:fb:71:ce:e3:63:0b:b2: 77:0b:89:77:cf:50:5a:b4:99:15:68:c6:6b:50:2f:fd:0e:16: eb:09:f7:18:60:7d:14:32:bb:f3:9e:75:fc:0f:bc:73:cd:a3: a5:f4:67:32:ff:ff:05:9e:ef:bd:1a:b1:51:02:5a:55:e1:8a: 1f:53:da:a5:52:e2:85:3e:b0:c9:3a:97:c0:ca:71:9e:33:62: ea:e4:a0:ca:59:2e:e2:f7:ff:16:61:59:fa:02:d0:d0:a7:8f: c4:27:d4:9e:6d:eb:ae:22:07:54:54:c5:73:c6:fc:16:d0:42: 30:69:c4:0a:51:18:a3:89:cc:5d:e4:4e:94:ab:40:1f:a0:17: 2d:29:9f:60:b6:7c:3f:e4:ab:e8:b5:97:b9:53:8d:15:37:f6: d5:de:bc:05:b4:72:4b:b0:10:d4:d4:f7:b2:7f:f0:ec:e2:7a: 9a:bb:d8:51:c7:51:57:94:09:07:b9:c2:f6:0d:98:19:ca:32: 1a:e3:7d:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29dRJg8n//+p4tZx7udhwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZjg3NzlhM2M4MmYwMGZjMTQ0MzVlZTdkOGQwYjhkNmRk ODIwNGUwHhcNMjYwMTI1MjEwMTA0WhcNMjYwMTI2MjEwMTA0WjAzMTEwLwYDVQQD EyhlNDkzNjFmM2EwNGY1OGM2NzM4OWJiNjI0NDczMjIzYWE2ZjY0OWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM/ZRnNgiVmnM3+yNvI+3Lken2dO TwBxrZ/+R+tfocoQn2V7rZwTI1EJ2i5xKWK/df1D0f862dPXegm7ljsL8neWe7Mp 5qkif7jdQz6WVvuIKM8yoC2whpwiTTDH80oxE3u7tKEDU243P+4nK5wGbX4EIJ9O VFxTSc5mpwMmcBav8p5+2tRXUUBDy9oSAa746SNiRhOacLJBRIKfhYuEe4P1VN2D URgqJV+1bSsAjqhv6JGnwfzH9QY3ncbfWTrvNXZiEDASx0UI8g+x4ECJGbY7kxmR TKTHx1ozRxkFLG2xtenY2xuilGjWrO+FYwpCdIa5UG9aULp7bPqFScDdrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSTYfOgT1jGc4m7YkRzIjqm9km6MB8GA1UdIwQY MBaAFC34d5o8gvAPwUQ17n2NC41t2CBOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGZoM21qeUM4QV9CUkRYdWZZMExqVzNZSUU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9jY2Q5NmUtMTMzZS00NWI3LTg4Yjct ZTJhZTA1NWVjZWQxLzEvTGZoM21qeUM4QV9CUkRYdWZZMExqVzNZSUU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9jY2Q5NmUtMTMzZS00NWI3LTg4YjctZTJhZTA1NWVjZWQx LzEvTGZoM21qeUM4QV9CUkRYdWZZMExqVzNZSUU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0b/061TD Uk8Qj3brBZEodXN/92OXykKEBNdrizIkhVZCxaum44stjoFcOfWmfuQm6sc5Ho9A XWA1gRXdg9gmmAD7cc7jYwuydwuJd89QWrSZFWjGa1Av/Q4W6wn3GGB9FDK78551 /A+8c82jpfRnMv//BZ7vvRqxUQJaVeGKH1PapVLihT6wyTqXwMpxnjNi6uSgylku 4vf/FmFZ+gLQ0KePxCfUnm3rriIHVFTFc8b8FtBCMGnEClEYo4nMXeROlKtAH6AX LSmfYLZ8P+Sr6LWXuVONFTf21d68BbRyS7AQ1NT3sn/w7OJ6mrvYUcdRV5QJB7nC 9g2YGcoyGuN97Q== -----END CERTIFICATE-----Generated at Mon Jan 26 05:08:59 2026 by rpki-client