This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft File: LkFFfaHqbHmxtr6lLGSnobXylkg.mft (raw, json) Hash identifier: pjp3E5qbimnti3fLJJKGYIFoUKvou13tGFh0Zd/ddxQ= Subject key identifier: 6B:06:BF:4B:FB:1E:C0:14:F1:97:66:2B:70:53:97:AC:DA:04:D3:5D Authority key identifier: 2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48 Certificate issuer: /CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648 Certificate serial: 019BF952460A80F98BB020CC6ABD2D584BA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 08:01:17 +0000 Manifest this update: Mon 26 Jan 2026 08:01:17 +0000 Manifest next update: Tue 27 Jan 2026 08:01:17 +0000 Files and hashes: 1: 41BadyilkbxexUsN9_QCLE-lN9U.roa (hash: mKipKbsOuZUI5PBjgwAvlkxPu0eVLjnhl1jdP6GuFz8=) 2: LkFFfaHqbHmxtr6lLGSnobXylkg.crl (hash: mR6T6tZQe2kxVptchqJXep/FIGGlZ0szUmlO2mxg+OU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:52:46:0a:80:f9:8b:b0:20:cc:6a:bd:2d:58:4b:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648 Validity Not Before: Jan 26 08:01:17 2026 GMT Not After : Jan 27 08:01:17 2026 GMT Subject: CN=6b06bf4bfb1ec014f197662b705397acda04d35d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2f:47:e4:82:c9:d5:1a:07:7e:9b:2c:90:b1: 81:8b:76:8c:1c:a3:eb:9e:aa:af:58:c3:99:af:5e: 9b:af:4b:3b:36:0f:53:60:a1:0d:83:00:ee:35:29: 26:16:15:5d:72:bb:e6:02:51:98:12:3a:d8:8b:a5: d6:35:6c:af:fd:bb:b5:2c:74:96:a2:c0:68:44:53: ee:9a:a4:12:82:a6:89:86:93:61:e2:65:29:5d:b0: 70:67:71:d5:2e:40:09:b5:7a:c1:b8:2d:a0:74:c4: 32:e8:b1:1d:d4:e9:58:73:7f:05:b0:65:2c:db:c0: e4:af:21:a4:e8:ca:41:9f:ba:3d:fc:e4:31:9b:68: 44:20:82:e6:ca:93:d5:7a:c1:31:be:d6:b1:90:7e: 63:e5:57:80:e3:3b:4d:d7:c6:16:66:95:1d:88:73: eb:77:06:9b:b6:05:f6:cd:63:b1:fd:e8:a3:f9:b8: bf:05:3a:a9:53:6a:59:5a:40:f3:1b:78:e9:86:19: 06:9b:8b:6f:13:37:cc:f4:ae:50:f2:81:df:7d:25: 31:39:b4:cf:ee:5d:4a:91:1e:83:29:1d:0d:22:6c: 7c:d9:a7:d4:0f:67:8d:08:c4:c1:e7:6e:01:0b:92: 20:98:e4:59:b5:77:ee:1e:e7:e5:6c:24:bd:74:24: d1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:06:BF:4B:FB:1E:C0:14:F1:97:66:2B:70:53:97:AC:DA:04:D3:5D X509v3 Authority Key Identifier: keyid:2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:f5:bd:ce:98:72:68:2e:c1:64:79:dc:23:6d:ac:cc:5e:d6: 25:e7:09:60:d6:2d:65:9d:91:37:42:85:9f:57:08:04:21:b0: 72:ce:ac:50:ea:26:96:dc:82:35:73:dc:0d:f7:90:80:27:ce: 7f:8c:9c:e5:89:dc:17:6d:ee:d4:ff:81:17:5f:15:ff:06:c2: 35:7c:52:8c:90:35:24:87:2d:9c:bb:24:7f:11:df:3c:64:e0: 4b:83:74:f4:d9:29:ba:b2:56:50:f7:c7:49:ca:a3:13:ce:04: 78:00:7e:e7:b2:32:40:dc:c1:cd:2d:f5:d3:8c:88:c9:26:f8: 22:ca:a7:cc:5b:c9:24:1a:ba:75:69:43:8e:a3:b9:23:36:2f: 57:af:a7:2b:d8:21:4c:00:63:dc:3c:34:2d:78:8c:a3:f2:fc: e0:04:6b:44:54:c3:38:12:d9:b6:3b:68:2b:ac:d0:e5:c7:15: b1:46:a4:47:c0:b2:a8:c9:16:c9:f5:f3:cf:74:1f:08:bf:6d: ae:c1:94:a2:64:e7:b6:85:04:e9:c4:b3:26:a2:bb:a0:11:8d: 31:83:9c:01:ce:a5:8e:fa:6c:a2:21:dd:49:5b:d7:a2:59:18: c6:3e:7a:95:23:e0:0f:b3:ad:e7:aa:01:75:22:1a:68:11:ab: 75:60:8c:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UkYKgPmLsCDMar0tWEukMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNDE0NTdkYTFlYTZjNzliMWI2YmVhNTJjNjRhN2ExYjVm Mjk2NDgwHhcNMjYwMTI2MDgwMTE3WhcNMjYwMTI3MDgwMTE3WjAzMTEwLwYDVQQD Eyg2YjA2YmY0YmZiMWVjMDE0ZjE5NzY2MmI3MDUzOTdhY2RhMDRkMzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC9H5ILJ1RoHfpsskLGBi3aMHKPr nqqvWMOZr16br0s7Ng9TYKENgwDuNSkmFhVdcrvmAlGYEjrYi6XWNWyv/bu1LHSW osBoRFPumqQSgqaJhpNh4mUpXbBwZ3HVLkAJtXrBuC2gdMQy6LEd1OlYc38FsGUs 28DkryGk6MpBn7o9/OQxm2hEIILmypPVesExvtaxkH5j5VeA4ztN18YWZpUdiHPr dwabtgX2zWOx/eij+bi/BTqpU2pZWkDzG3jphhkGm4tvEzfM9K5Q8oHffSUxObTP 7l1KkR6DKR0NImx82afUD2eNCMTB524BC5IgmORZtXfuHuflbCS9dCTRtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsGv0v7HsAU8ZdmK3BTl6zaBNNdMB8GA1UdIwQY MBaAFC5BRX2h6mx5sba+pSxkp6G18pZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGtGRmZhSHFiSG14dHI2bExHU25vYlh5bGtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84ZmFkOGItYTAzMy00NDg0LTg4NWUt ZTAyODcyZDFkYjAxLzEvTGtGRmZhSHFiSG14dHI2bExHU25vYlh5bGtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84ZmFkOGItYTAzMy00NDg0LTg4NWUtZTAyODcyZDFkYjAx LzEvTGtGRmZhSHFiSG14dHI2bExHU25vYlh5bGtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfW9zphy aC7BZHncI22szF7WJecJYNYtZZ2RN0KFn1cIBCGwcs6sUOomltyCNXPcDfeQgCfO f4yc5YncF23u1P+BF18V/wbCNXxSjJA1JIctnLskfxHfPGTgS4N09NkpurJWUPfH ScqjE84EeAB+57IyQNzBzS3104yIySb4IsqnzFvJJBq6dWlDjqO5IzYvV6+nK9gh TABj3Dw0LXiMo/L84ARrRFTDOBLZtjtoK6zQ5ccVsUakR8CyqMkWyfXzz3QfCL9t rsGUomTntoUE6cSzJqK7oBGNMYOcAc6ljvpsoiHdSVvXolkYxj56lSPgD7Ot56oB dSIaaBGrdWCMuw== -----END CERTIFICATE-----Generated at Mon Jan 26 11:10:02 2026 by rpki-client