This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft File: LYFCGstXhBVGXs3sRYHoleu_vH8.mft (raw, json) Hash identifier: 9Ekz/Zw00lR/zI54sUjQgmGuI0nfZ3JTBS+KAGPyob8= Subject key identifier: 0F:CA:85:5A:54:0B:C7:24:42:50:95:20:F3:D4:B0:70:DF:61:93:6D Authority key identifier: 2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F Certificate issuer: /CN=2d81421acb578415465ecdec4581e895ebbfbc7f Certificate serial: 019BF575231694F9A3245653ABBAAFDD9A25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft Manifest number: 0246 Signing time: Sun 25 Jan 2026 14:00:53 +0000 Manifest this update: Sun 25 Jan 2026 14:00:53 +0000 Manifest next update: Mon 26 Jan 2026 14:00:53 +0000 Files and hashes: 1: LYFCGstXhBVGXs3sRYHoleu_vH8.crl (hash: R6RVwAcwo1MC4EYjClZiyuYjSiXu5hfJPpaSCOJ9ATY=) 2: RML1TmbAZYHpyU26wWj03FjR3yY.roa (hash: PPBAB3g4x0UYNx5LUtlXQ+fhrj8l5E6PaVsjyetSSNY=) 3: v-yW23PUKxeOnQqPJF0a9ieiqkY.roa (hash: QA7GggYLqUF36MqITz5Sp/J8Iu+lSl6lGyrVjXlucb8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:23:16:94:f9:a3:24:56:53:ab:ba:af:dd:9a:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d81421acb578415465ecdec4581e895ebbfbc7f Validity Not Before: Jan 25 14:00:53 2026 GMT Not After : Jan 26 14:00:53 2026 GMT Subject: CN=0fca855a540bc72442509520f3d4b070df61936d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:74:a1:c4:a8:d7:b0:aa:d8:67:7e:7b:9a:c0: 44:8f:75:7d:c5:cd:0c:f8:94:ad:70:1f:1b:b3:68: 21:62:da:54:84:bb:3d:7d:4b:bb:51:8a:83:9c:57: 13:47:74:45:8a:c8:ba:bf:95:b5:a5:f6:60:c9:30: 85:a9:3b:c4:36:a9:76:fe:9d:60:92:44:33:63:d7: 2b:3a:df:98:6f:81:ed:3c:1c:e5:cf:83:bf:0f:5f: 37:ab:76:0c:a9:0f:21:cd:11:77:e7:37:ea:5f:50: 1b:ef:c4:ba:a9:de:79:fc:70:c7:cb:c8:4a:8d:c9: 48:92:d5:b3:c9:fc:eb:c9:5e:44:20:df:19:65:ad: 05:da:c3:53:cc:3c:c3:27:80:33:6c:83:38:21:bd: b1:5c:76:7a:ab:8b:fa:92:19:4c:d6:97:6a:51:15: f3:f9:b6:c8:fb:44:32:89:f7:4d:46:bb:b7:03:3c: f4:54:62:d6:ed:62:f0:c6:3d:ea:27:6c:b3:88:c1: d1:35:6f:e9:2a:5e:c1:11:d7:af:e5:3c:a2:f8:7b: 3e:a7:eb:74:5d:cf:43:a1:9a:32:b7:83:46:28:8f: 64:be:a4:25:c1:b7:f5:ff:98:4d:71:35:43:da:35: 67:0c:0f:f9:10:72:9c:04:4c:4d:4a:81:b6:6b:e6: d6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CA:85:5A:54:0B:C7:24:42:50:95:20:F3:D4:B0:70:DF:61:93:6D X509v3 Authority Key Identifier: keyid:2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:4d:7f:4e:27:47:cf:f4:f5:51:19:c9:c7:46:aa:6a:59:9a: 71:da:59:12:98:9f:17:8d:cf:9c:5e:41:03:e8:39:33:4c:ce: 3d:3d:45:29:b9:3b:5c:03:8d:6b:fd:7a:43:3b:f4:f8:50:e8: 77:66:a3:7b:e5:c6:16:ac:8e:b0:ed:00:6e:a4:bd:bd:ca:75: 51:99:eb:dd:f0:d4:b9:06:a6:4d:98:a8:e5:15:78:9f:80:ac: 80:5a:57:a9:c3:46:06:21:e0:ad:ea:72:4f:14:12:70:63:c9: 6e:56:d7:45:43:90:01:da:53:9b:58:6a:ff:72:17:ef:cd:88: e0:42:30:bb:a0:94:6b:34:e4:7a:f0:e8:ef:bc:11:64:45:05: fe:a2:e6:a3:7e:c4:bb:9c:8a:7b:31:25:59:2e:0a:85:f9:2f: 09:fd:45:8c:f0:34:39:93:ce:c9:31:a5:9d:d8:f8:82:95:01: 36:0b:72:ee:24:bb:c2:f1:a5:46:33:c6:90:1c:2b:bf:4f:43: fa:2f:a0:7a:ef:82:b4:f9:90:ad:6e:60:67:35:26:85:d5:8e: ed:ec:c8:07:94:14:16:40:19:a3:50:39:02:74:9e:1c:94:2c: 27:05:d3:e9:85:59:b0:c5:09:ca:4d:6e:a0:ff:42:c2:07:f3: 7f:c7:5a:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dSMWlPmjJFZTq7qv3ZolMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkODE0MjFhY2I1Nzg0MTU0NjVlY2RlYzQ1ODFlODk1ZWJi ZmJjN2YwHhcNMjYwMTI1MTQwMDUzWhcNMjYwMTI2MTQwMDUzWjAzMTEwLwYDVQQD EygwZmNhODU1YTU0MGJjNzI0NDI1MDk1MjBmM2Q0YjA3MGRmNjE5MzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03ShxKjXsKrYZ357msBEj3V9xc0M +JStcB8bs2ghYtpUhLs9fUu7UYqDnFcTR3RFisi6v5W1pfZgyTCFqTvENql2/p1g kkQzY9crOt+Yb4HtPBzlz4O/D183q3YMqQ8hzRF35zfqX1Ab78S6qd55/HDHy8hK jclIktWzyfzryV5EIN8ZZa0F2sNTzDzDJ4AzbIM4Ib2xXHZ6q4v6khlM1pdqURXz +bbI+0QyifdNRru3Azz0VGLW7WLwxj3qJ2yziMHRNW/pKl7BEdev5Tyi+Hs+p+t0 Xc9DoZoyt4NGKI9kvqQlwbf1/5hNcTVD2jVnDA/5EHKcBExNSoG2a+bWuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/KhVpUC8ckQlCVIPPUsHDfYZNtMB8GA1UdIwQY MBaAFC2BQhrLV4QVRl7N7EWB6JXrv7x/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFlGQ0dzdFhoQlZHWHMzc1JZSG9sZXVfdkg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zYjFkNWEtZmNjNi00YWUzLWEyYzgt OTg0ZWVjM2Y3YTNlLzEvTFlGQ0dzdFhoQlZHWHMzc1JZSG9sZXVfdkg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zYjFkNWEtZmNjNi00YWUzLWEyYzgtOTg0ZWVjM2Y3YTNl LzEvTFlGQ0dzdFhoQlZHWHMzc1JZSG9sZXVfdkg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApE1/TidH z/T1URnJx0aqalmacdpZEpifF43PnF5BA+g5M0zOPT1FKbk7XAONa/16Qzv0+FDo d2aje+XGFqyOsO0AbqS9vcp1UZnr3fDUuQamTZio5RV4n4CsgFpXqcNGBiHgrepy TxQScGPJblbXRUOQAdpTm1hq/3IX782I4EIwu6CUazTkevDo77wRZEUF/qLmo37E u5yKezElWS4KhfkvCf1FjPA0OZPOyTGlndj4gpUBNgty7iS7wvGlRjPGkBwrv09D +i+geu+CtPmQrW5gZzUmhdWO7ezIB5QUFkAZo1A5AnSeHJQsJwXT6YVZsMUJyk1u oP9Cwgfzf8daMA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:46 2026 by rpki-client