This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft File: lKOAb3QqvNXbEgT1KPTKbd6x6do.mft (raw, json) Hash identifier: 6+Q+w0qTeg/LQR9Bl6Gmkt9l1OroLaiPa3NS5nNmGyU= Subject key identifier: B2:B5:99:13:46:83:DF:DC:C5:09:A0:5C:C7:14:F0:40:7F:7A:09:F7 Authority key identifier: 94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA Certificate issuer: /CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da Certificate serial: 019BF72D512C20768B1811309058BB464573 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft Manifest number: 0F2E Signing time: Sun 25 Jan 2026 22:01:40 +0000 Manifest this update: Sun 25 Jan 2026 22:01:40 +0000 Manifest next update: Mon 26 Jan 2026 22:01:40 +0000 Files and hashes: 1: lKOAb3QqvNXbEgT1KPTKbd6x6do.crl (hash: krMbxIBbSgiwa5B50N8HnHMNyZhYVOzOhTIvpBIwKHY=) 2: yA5GH7gLA1HVBnxPLthwZlHoljY.roa (hash: ZrNoguXr/VbPxJyma5te3bY/LH0TrJlliompzvOOHkA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:51:2c:20:76:8b:18:11:30:90:58:bb:46:45:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da Validity Not Before: Jan 25 22:01:40 2026 GMT Not After : Jan 26 22:01:40 2026 GMT Subject: CN=b2b599134683dfdcc509a05cc714f0407f7a09f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1a:0d:b5:6e:dd:f7:7a:80:96:ee:2d:af:98: 5a:a4:8f:ae:37:11:63:76:74:75:6c:7c:fa:dc:5c: 6c:b4:77:10:75:95:13:27:32:0b:ba:43:9a:00:a0: 8a:ee:ad:cc:78:3d:43:b9:f1:54:2c:55:c2:ba:8e: d2:42:84:25:26:c7:69:56:1c:70:f1:c3:80:c0:42: 3d:83:aa:b7:13:dc:1e:3a:62:92:34:15:b9:75:6b: 62:0a:e1:b9:16:8d:9b:1d:07:ad:65:e0:f2:13:f9: fa:5f:bf:87:e4:52:37:68:e2:6c:2d:ae:5e:42:a8: 95:82:1f:5d:f0:57:28:38:76:dd:f7:79:5d:27:e9: f3:5d:de:2f:18:9f:17:a6:fe:de:b5:e0:7b:28:57: 8c:a2:c5:81:a9:d4:a9:96:9c:9a:0f:18:2e:8a:23: 1c:ab:f7:dc:7f:a0:9f:f1:0d:02:08:91:1b:14:86: a6:ef:02:e5:56:2a:dd:e8:0f:db:9b:5a:52:94:95: c0:ba:1f:11:d0:d2:03:76:d6:38:71:bb:6c:a7:13: 47:37:c2:12:2d:fb:3b:87:8b:75:77:c6:01:6f:b9: 4b:88:40:fd:26:5d:05:88:eb:58:be:35:87:ac:df: 67:4c:89:00:53:30:ae:51:93:17:54:a9:29:2a:d6: 2a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B5:99:13:46:83:DF:DC:C5:09:A0:5C:C7:14:F0:40:7F:7A:09:F7 X509v3 Authority Key Identifier: keyid:94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:a0:3a:58:72:2b:ed:92:48:e8:4d:5f:0e:52:33:e5:a7:42: 50:36:15:8b:9f:06:d0:80:dc:04:a8:3a:e9:e1:b1:cc:7b:ad: 45:38:f8:d0:51:d6:38:cc:3c:b9:0d:11:37:35:2d:44:60:e9: d6:9c:61:8e:6d:a9:58:13:9c:ff:e9:81:ee:f0:fc:68:79:db: d2:fd:78:db:e9:49:68:73:75:2c:9f:9a:57:84:f1:7c:23:16: 65:3f:12:58:60:e5:7d:5e:54:97:a8:c7:4b:b6:a5:87:6f:1a: ca:22:16:c2:01:45:a8:7a:69:8e:8c:4a:9c:eb:1e:8b:ac:05: d9:12:d6:45:94:e1:2e:9b:33:a4:e7:ec:f5:48:a4:7c:08:aa: 99:cd:f4:b8:5c:29:f0:0c:7b:92:ae:80:3c:8a:33:ad:51:8e: 72:8a:4e:47:44:f2:69:52:89:59:ca:1a:98:d7:75:f9:43:25: 8a:b4:f0:5c:d4:7a:9a:5b:42:5f:74:9f:36:70:ce:05:fc:79: 36:e9:0a:9d:e9:53:72:73:37:ad:70:e0:01:0e:51:04:7c:42: 07:53:4e:b9:69:c2:c5:55:36:d8:28:60:82:1d:c9:57:52:c4: 1c:72:6b:e6:14:be:71:48:31:62:89:33:0b:09:c7:b8:81:56: 7f:af:a4:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LVEsIHaLGBEwkFi7RkVzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0YTM4MDZmNzQyYWJjZDVkYjEyMDRmNTI4ZjRjYTZkZGVi MWU5ZGEwHhcNMjYwMTI1MjIwMTQwWhcNMjYwMTI2MjIwMTQwWjAzMTEwLwYDVQQD EyhiMmI1OTkxMzQ2ODNkZmRjYzUwOWEwNWNjNzE0ZjA0MDdmN2EwOWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxoNtW7d93qAlu4tr5hapI+uNxFj dnR1bHz63FxstHcQdZUTJzILukOaAKCK7q3MeD1DufFULFXCuo7SQoQlJsdpVhxw 8cOAwEI9g6q3E9weOmKSNBW5dWtiCuG5Fo2bHQetZeDyE/n6X7+H5FI3aOJsLa5e QqiVgh9d8FcoOHbd93ldJ+nzXd4vGJ8Xpv7eteB7KFeMosWBqdSplpyaDxguiiMc q/fcf6Cf8Q0CCJEbFIam7wLlVird6A/bm1pSlJXAuh8R0NIDdtY4cbtspxNHN8IS Lfs7h4t1d8YBb7lLiED9Jl0FiOtYvjWHrN9nTIkAUzCuUZMXVKkpKtYq8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLK1mRNGg9/cxQmgXMcU8EB/egn3MB8GA1UdIwQY MBaAFJSjgG90KrzV2xIE9Sj0ym3esenaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jN2I1MjQtYzRkOS00MWE0LTg4ZmEt ZDhiZjUyMWIyNmIwLzEvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9jN2I1MjQtYzRkOS00MWE0LTg4ZmEtZDhiZjUyMWIyNmIw LzEvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqaA6WHIr 7ZJI6E1fDlIz5adCUDYVi58G0IDcBKg66eGxzHutRTj40FHWOMw8uQ0RNzUtRGDp 1pxhjm2pWBOc/+mB7vD8aHnb0v142+lJaHN1LJ+aV4TxfCMWZT8SWGDlfV5Ul6jH S7alh28ayiIWwgFFqHppjoxKnOsei6wF2RLWRZThLpszpOfs9UikfAiqmc30uFwp 8Ax7kq6APIozrVGOcopOR0TyaVKJWcoamNd1+UMlirTwXNR6mltCX3SfNnDOBfx5 NukKnelTcnM3rXDgAQ5RBHxCB1NOuWnCxVU22Chggh3JV1LEHHJr5hS+cUgxYokz CwnHuIFWf6+kmg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:08:55 2026 by rpki-client