This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft File: lzvsM65zjJiViBnGwTuzNe40q0w.mft (raw, json) Hash identifier: almeGaAh7dJRwxRnMSZPhBxPu4WN2fxrFzY2EhSZMfw= Subject key identifier: 43:07:45:0E:42:0A:3E:14:EE:83:B8:3E:53:FC:19:CD:7A:4E:8A:3B Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c Certificate serial: 019BF3BD9BC5F55F28F9E3058CE33AB82996 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft Manifest number: 0E8F Signing time: Sun 25 Jan 2026 06:00:48 +0000 Manifest this update: Sun 25 Jan 2026 06:00:48 +0000 Manifest next update: Mon 26 Jan 2026 06:00:48 +0000 Files and hashes: 1: C0AVe4iSzt1tLzO1z3J_8BFSSwQ.roa (hash: 1x0Uuntsxdx1mq0mpp7kC3SseRJDTb+Eb50/cVmhJPA=) 2: idAPicjfcAurqzPxNV2Y-GlWZVM.roa (hash: 9WnV/PIHV4CmrkZ1/Csc9lXw9Lt4fmaI0bw+OleKvs0=) 3: lzvsM65zjJiViBnGwTuzNe40q0w.crl (hash: ZH0/RhRPGTxVAg+X3P4GfDzctfsAIX0UJPjlX9lUfJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:9b:c5:f5:5f:28:f9:e3:05:8c:e3:3a:b8:29:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c Validity Not Before: Jan 25 06:00:48 2026 GMT Not After : Jan 26 06:00:48 2026 GMT Subject: CN=4307450e420a3e14ee83b83e53fc19cd7a4e8a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ef:4a:09:34:c2:53:c3:c6:a4:18:61:f1:12: e6:30:c9:aa:1f:8f:00:29:b5:f1:9e:aa:e4:47:3a: 2b:5e:4e:05:2d:d3:df:0d:9e:e2:92:1e:36:3c:00: 23:5e:e4:0f:51:90:50:33:40:21:70:89:b9:31:e2: 19:da:02:d5:9b:cd:9d:75:26:99:e9:b5:dc:87:08: 89:52:7c:3d:01:da:19:c4:ac:1a:8a:06:ac:30:51: d2:25:4b:6f:62:73:36:75:35:3b:69:8c:e4:9e:7f: 58:ad:fa:eb:7e:92:46:44:6e:e6:8f:74:8f:93:a0: 29:96:04:14:bc:3a:81:bd:fb:96:49:29:12:30:d0: 53:8e:d3:58:31:3b:76:12:06:2e:c8:35:f1:0c:0c: a7:db:de:5b:d1:02:03:d2:88:ab:dd:e1:a3:f8:15: c1:dc:bd:69:65:dd:a2:e2:d1:cd:9f:40:10:96:e4: 40:c5:54:1e:f5:63:90:af:41:56:69:ad:dc:16:bf: 5c:91:75:f8:b8:c3:b0:ac:0f:3b:04:12:cd:59:da: 1b:73:b4:4a:91:c0:48:47:3a:dc:fe:06:81:30:9b: 52:2b:42:b9:c7:fb:fd:7d:48:57:5a:f1:af:00:03: f3:e1:1b:2a:3d:41:35:0a:b8:bc:27:f6:bb:7a:f9: db:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:07:45:0E:42:0A:3E:14:EE:83:B8:3E:53:FC:19:CD:7A:4E:8A:3B X509v3 Authority Key Identifier: keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ff:cd:07:df:d3:ee:35:a6:04:16:cd:56:07:c9:4e:b5:97: 30:1a:00:27:58:9f:19:97:82:c7:62:bd:f4:0e:43:9f:8f:26: d6:45:6b:67:ff:29:a1:43:5f:ef:fe:d1:c7:f7:a9:d0:32:cd: 67:10:2d:40:41:54:40:7f:5b:43:06:6e:58:33:5f:82:a4:c9: 65:5e:e0:7a:14:fd:e0:07:59:65:38:c7:34:61:c8:02:31:4a: 26:d0:76:ae:72:a4:e3:9b:93:1a:94:e2:6e:5e:ab:34:f5:81: 73:23:bb:9d:1e:4a:f0:70:72:1d:02:4b:af:1b:c1:fd:26:c3: a1:bc:5a:8f:13:3a:a6:e2:d9:40:bb:54:34:20:60:0b:a2:db: f7:40:2a:a2:42:ec:bc:ee:cc:51:88:97:2e:ad:fb:2f:3f:40: c2:4f:0f:18:d2:63:b3:20:49:62:78:cd:94:e1:b4:df:65:74: 03:2c:cd:6d:6b:06:8a:9c:d5:51:46:a9:fa:69:ef:77:44:d0: 8d:de:c6:9f:85:1f:1b:6a:d6:60:56:04:ce:87:c1:27:ed:03: 37:b0:28:44:0b:74:62:23:40:c0:65:0e:32:00:45:55:4a:39: e6:71:43:ac:0d:49:94:b2:5b:56:65:a4:cb:40:2c:e1:bd:0a: b0:a9:c7:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvZvF9V8o+eMFjOM6uCmWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3M2JlYzMzYWU3MzhjOTg5NTg4MTljNmMxM2JiMzM1ZWUz NGFiNGMwHhcNMjYwMTI1MDYwMDQ4WhcNMjYwMTI2MDYwMDQ4WjAzMTEwLwYDVQQD Eyg0MzA3NDUwZTQyMGEzZTE0ZWU4M2I4M2U1M2ZjMTljZDdhNGU4YTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzO9KCTTCU8PGpBhh8RLmMMmqH48A KbXxnqrkRzorXk4FLdPfDZ7ikh42PAAjXuQPUZBQM0AhcIm5MeIZ2gLVm82ddSaZ 6bXchwiJUnw9AdoZxKwaigasMFHSJUtvYnM2dTU7aYzknn9YrfrrfpJGRG7mj3SP k6AplgQUvDqBvfuWSSkSMNBTjtNYMTt2EgYuyDXxDAyn295b0QID0oir3eGj+BXB 3L1pZd2i4tHNn0AQluRAxVQe9WOQr0FWaa3cFr9ckXX4uMOwrA87BBLNWdobc7RK kcBIRzrc/gaBMJtSK0K5x/v9fUhXWvGvAAPz4RsqPUE1Cri8J/a7evnbGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMHRQ5CCj4U7oO4PlP8Gc16Too7MB8GA1UdIwQY MBaAFJc77DOuc4yYlYgZxsE7szXuNKtMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yZjQ2MDUtMzU2YS00YWY2LWIxNWQt YzQyZjlhYmYxNDc3LzEvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8yZjQ2MDUtMzU2YS00YWY2LWIxNWQtYzQyZjlhYmYxNDc3 LzEvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG//NB9/T 7jWmBBbNVgfJTrWXMBoAJ1ifGZeCx2K99A5Dn48m1kVrZ/8poUNf7/7Rx/ep0DLN ZxAtQEFUQH9bQwZuWDNfgqTJZV7gehT94AdZZTjHNGHIAjFKJtB2rnKk45uTGpTi bl6rNPWBcyO7nR5K8HByHQJLrxvB/SbDobxajxM6puLZQLtUNCBgC6Lb90AqokLs vO7MUYiXLq37Lz9Awk8PGNJjsyBJYnjNlOG032V0AyzNbWsGipzVUUap+mnvd0TQ jd7Gn4UfG2rWYFYEzofBJ+0DN7AoRAt0YiNAwGUOMgBFVUo55nFDrA1JlLJbVmWk y0As4b0KsKnH+A== -----END CERTIFICATE-----Generated at Sun Jan 25 16:24:44 2026 by rpki-client