This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json) Hash identifier: F1MPN/0dZpZ3KpeqFbIEy/uyOOTx0OAo18+SJKL2zXw= Subject key identifier: 05:9B:E4:5A:51:A8:DF:7D:CB:5A:D3:0C:4C:23:62:C7:94:DD:54:9D Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2 Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2 Certificate serial: 019BF8E41584D50C0E354769DD9B67DF08B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 06:00:55 +0000 Manifest this update: Mon 26 Jan 2026 06:00:55 +0000 Manifest next update: Tue 27 Jan 2026 06:00:55 +0000 Files and hashes: 1: 6Mja1Kkr9GW9nSjfLktFZvjb8tQ.roa (hash: 2v6i6DyCwIoGzawIkRiOLOO2gDlNZ1VrxtK0YOdX6VQ=) 2: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: SmzLrO9JYU5/yaJr1wsW1DWdzdhlmOTVQZHrreeukCw=) 3: XuqQTM0aF54a9hx-ueF2HWLrabk.roa (hash: wN4KP+y77ZPZCCM7VwS+2LrXtEFFZe4vww8wUUDTHBM=) 4: nX-XyGaaTNjgiOfcU3tTU4Pz3Lc.roa (hash: IB573lPQRdVbyJwU+WH+Cby6UU3ObEQSuXT0TN8PBEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:15:84:d5:0c:0e:35:47:69:dd:9b:67:df:08:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2 Validity Not Before: Jan 26 06:00:55 2026 GMT Not After : Jan 27 06:00:55 2026 GMT Subject: CN=059be45a51a8df7dcb5ad30c4c2362c794dd549d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:63:e5:9a:fa:9f:28:ef:f2:74:41:2d:25:59: e9:36:e4:3c:0a:d6:f3:2c:45:15:7b:30:ed:d2:45: 04:41:67:8f:13:c5:87:22:35:57:a0:3a:0f:b0:18: 7c:97:84:17:ce:2e:12:36:c5:68:e8:9c:78:27:c8: 5e:98:99:90:d3:6d:c0:25:3f:4f:07:7b:17:fa:b6: 8a:1d:48:49:0d:f4:4f:4a:b5:bb:05:f9:b4:99:59: 77:bd:4f:c2:60:5f:27:a5:2b:27:92:17:3a:2f:d0: ff:e1:a5:4e:51:25:b4:64:80:11:b8:99:db:d4:ca: fe:68:a1:41:a1:44:95:f3:00:e7:6d:95:1c:3c:59: 63:2e:f8:7a:9b:93:b1:5c:16:89:7a:fb:a7:8a:f9: d2:07:39:87:74:9c:e8:4a:73:44:e3:85:d5:2d:1b: aa:af:12:2f:18:07:09:6e:d0:d5:c7:df:31:fc:bc: 18:ad:25:5f:72:83:88:53:dd:b7:78:06:d6:fe:dc: 6c:40:35:f6:a2:f6:84:ce:68:43:36:6c:d8:89:23: bc:12:d5:06:30:b3:b2:6e:49:a8:15:3c:98:92:cb: 9b:e9:50:d7:5a:8b:61:77:3c:f0:8d:23:11:a3:ee: 4d:84:a2:81:66:05:7b:dc:9f:e0:2d:83:9b:bf:ed: b9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:9B:E4:5A:51:A8:DF:7D:CB:5A:D3:0C:4C:23:62:C7:94:DD:54:9D X509v3 Authority Key Identifier: keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:5d:66:a5:1d:3e:ad:af:26:a0:7e:30:07:b1:c6:3e:18:a9: 5a:35:e0:79:39:98:97:19:25:2d:88:ea:e9:ee:98:83:13:71: e6:18:37:b3:69:55:b2:5c:ec:19:03:9f:fb:78:09:ad:0c:e7: f9:48:c7:79:b4:f2:c0:81:02:cd:6f:ab:4c:bb:3c:5a:40:66: 89:32:91:67:2f:bd:d4:94:2d:87:ab:10:36:77:53:d7:0d:17: fe:f3:6d:ef:7a:b4:f8:7d:79:de:0d:8e:ba:1a:c8:cd:92:a7: b4:af:e9:bc:52:cb:f8:d4:f6:a1:40:8c:02:2f:b5:87:5a:b7: 39:4d:94:b5:64:96:2d:bc:ad:bf:94:7c:9c:48:a6:f8:c8:be: 76:cd:fa:f5:e3:3d:99:04:a8:08:b3:9f:ff:f8:cc:fa:2b:9d: f9:50:51:12:2a:8f:f1:44:7c:9e:31:88:76:70:c9:42:98:0f: 6d:3b:3a:f4:61:e5:fb:02:bd:b7:10:19:1f:2d:9b:e7:85:a3: 17:a1:6f:cd:6e:4e:78:b7:a1:cf:a4:1b:49:23:49:fb:c3:13: e9:66:57:9e:13:72:e1:9a:02:4b:21:07:c7:e7:79:e4:54:22: 87:8a:ec:f8:08:ca:63:c4:e1:ca:3b:d8:80:45:6e:91:9e:9d: 98:5a:43:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45BWE1QwONUdp3Ztn3wi1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYmIzNjI0YjgyZjBlMWU1MzhiMDA5MTlmNDQyZDIwMGM3 ZTNjZDIwHhcNMjYwMTI2MDYwMDU1WhcNMjYwMTI3MDYwMDU1WjAzMTEwLwYDVQQD EygwNTliZTQ1YTUxYThkZjdkY2I1YWQzMGM0YzIzNjJjNzk0ZGQ1NDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmPlmvqfKO/ydEEtJVnpNuQ8Ctbz LEUVezDt0kUEQWePE8WHIjVXoDoPsBh8l4QXzi4SNsVo6Jx4J8hemJmQ023AJT9P B3sX+raKHUhJDfRPSrW7Bfm0mVl3vU/CYF8npSsnkhc6L9D/4aVOUSW0ZIARuJnb 1Mr+aKFBoUSV8wDnbZUcPFljLvh6m5OxXBaJevunivnSBzmHdJzoSnNE44XVLRuq rxIvGAcJbtDVx98x/LwYrSVfcoOIU923eAbW/txsQDX2ovaEzmhDNmzYiSO8EtUG MLOybkmoFTyYksub6VDXWothdzzwjSMRo+5NhKKBZgV73J/gLYObv+25mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWb5FpRqN99y1rTDEwjYseU3VSdMB8GA1UdIwQY MBaAFC67NiS4Lw4eU4sAkZ9ELSAMfjzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80OWJlZjEtNDAxYS00OGQyLTg3NDYt MjY3Mjc1ZTkyNTcwLzEvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC80OWJlZjEtNDAxYS00OGQyLTg3NDYtMjY3Mjc1ZTkyNTcw LzEvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQV1mpR0+ ra8moH4wB7HGPhipWjXgeTmYlxklLYjq6e6YgxNx5hg3s2lVslzsGQOf+3gJrQzn +UjHebTywIECzW+rTLs8WkBmiTKRZy+91JQth6sQNndT1w0X/vNt73q0+H153g2O uhrIzZKntK/pvFLL+NT2oUCMAi+1h1q3OU2UtWSWLbytv5R8nEim+Mi+ds369eM9 mQSoCLOf//jM+iud+VBREiqP8UR8njGIdnDJQpgPbTs69GHl+wK9txAZHy2b54Wj F6FvzW5OeLehz6QbSSNJ+8MT6WZXnhNy4ZoCSyEHx+d55FQih4rs+AjKY8ThyjvY gEVukZ6dmFpDCA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:55:08 2026 by rpki-client