This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft File: LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft (raw, json) Hash identifier: wljvNUfORDosiBp3KAfGgpIRSjwrv7DoEltEu0AuTSw= Subject key identifier: 54:84:83:7E:BB:C6:4C:D4:B2:DE:9E:1D:2B:71:9A:BA:1B:51:CB:25 Authority key identifier: 2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28 Certificate issuer: /CN=2ca37da970c466457583bbe02b2a0e72fbdc6328 Certificate serial: 019BF4631BA39664F7722E314442F8ECC938 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft Manifest number: 02E3 Signing time: Sun 25 Jan 2026 09:01:34 +0000 Manifest this update: Sun 25 Jan 2026 09:01:34 +0000 Manifest next update: Mon 26 Jan 2026 09:01:34 +0000 Files and hashes: 1: 8nh2nz59r4IDN5IE02ZK_JnePnU.roa (hash: EoqGd1iJrSXTEZ94UblIUe3hHKZv1dQEjjg+tiyKHkY=) 2: CrT-FIs9ETIARmODyPGo6Texbms.roa (hash: VHPhzwyP7ZJaAZF/RLchX9QehGLwEz/Nhb9bbKVLnBE=) 3: LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl (hash: TQH/wshaRdHPgg/oFRSPMvsC2Azgede+9g5PboL1Lnc=) 4: M1lzEwcwplQSzJYIKHVS3CPULtM.roa (hash: CbzM5ppQIFt899x5QRVS7mcpi5adykj4B/FuVFp7z1c=) 5: PGCypFT7PpbRYHnbnL53seEehQY.roa (hash: uikj8M8pga201KYBaCnBW484YRpO24WaVAwTT3xgXLA=) 6: gpcRZMvvAarNXGnEQk69CRu1kTw.roa (hash: vDgS5AGwOlvvwcg7ps4GbXeY48BReojyPRTXSF9XHHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:63:1b:a3:96:64:f7:72:2e:31:44:42:f8:ec:c9:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ca37da970c466457583bbe02b2a0e72fbdc6328 Validity Not Before: Jan 25 09:01:34 2026 GMT Not After : Jan 26 09:01:34 2026 GMT Subject: CN=5484837ebbc64cd4b2de9e1d2b719aba1b51cb25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:48:b0:d8:bb:4f:d4:b0:d6:42:71:bb:94:56: 50:bd:1e:11:34:f4:03:39:8e:68:36:fd:7d:c3:04: 19:29:e2:18:9e:d2:61:f7:24:2d:7c:ad:3e:9a:e0: c9:39:bd:6e:e2:a7:6f:58:ad:5a:29:cf:c7:19:6a: 3d:f2:f3:06:25:25:a1:3b:7f:f7:39:58:e6:4f:2f: 21:25:f6:8a:9a:4a:df:b5:a7:85:5b:c8:6d:6b:bf: cc:50:4c:80:dd:be:9f:e8:b6:e3:0d:42:82:b2:16: 23:66:04:90:97:6a:7e:57:d5:46:66:de:02:bc:f2: e9:57:0c:29:44:79:53:78:31:69:85:1b:2e:cf:26: 70:98:dd:46:24:63:85:ff:75:35:64:67:d5:87:1c: c6:c0:ad:11:62:f6:85:74:49:2c:b7:41:19:40:28: 3a:42:d3:33:d9:9f:f6:8a:14:a4:c1:19:08:c6:c5: c6:6f:74:fe:37:9d:90:64:45:a8:19:6d:17:b7:09: d1:d4:4b:e3:5c:af:64:04:e3:a6:c2:f7:d6:0a:ed: 50:26:17:55:9a:52:96:a8:58:41:ed:4a:6d:01:6a: 04:d1:cd:2e:ad:e0:00:3a:ca:1a:82:6f:bb:77:d3: 6a:71:33:b7:39:f3:35:aa:39:e1:8b:81:23:dd:1d: ce:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:84:83:7E:BB:C6:4C:D4:B2:DE:9E:1D:2B:71:9A:BA:1B:51:CB:25 X509v3 Authority Key Identifier: keyid:2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ac:a6:a8:11:41:a0:33:11:e5:ef:24:87:e1:07:76:59:45: 6d:9b:ae:fb:46:54:a7:7d:4f:0c:cf:71:f5:60:f7:50:84:94: 70:f6:41:8c:f2:e6:37:2e:27:02:36:ce:03:e2:1d:24:c8:71: 70:38:f8:5b:0b:fb:74:25:4b:26:da:c4:4d:5b:2a:70:24:08: 8b:71:92:ab:98:17:4c:0e:ac:9d:01:24:e6:2a:d9:d9:41:3a: c2:62:61:d0:0b:ca:43:a0:56:4e:20:67:6f:93:cc:0c:ae:81: a6:08:53:e2:ab:49:10:89:2e:a7:d5:e7:66:fe:43:b7:91:e1: e9:dc:e9:17:84:71:53:9d:94:97:20:70:e8:8b:e6:16:2c:b4: 78:2a:02:c9:ac:0a:a6:b3:4a:ec:03:e5:00:fe:1f:66:61:80: e9:b8:a7:f0:e8:e5:a2:93:b6:f1:6a:bb:50:ff:53:e9:b8:49: 56:ad:af:eb:b3:70:11:34:8b:0b:77:e9:f0:f5:77:58:3e:96: e4:63:e1:d9:13:12:d2:b7:9e:2e:08:bc:3f:e0:7d:87:29:5c: c0:5b:fd:6e:ef:33:c5:7c:16:30:a5:fc:09:54:81:81:cb:9e: 82:af:fa:e8:88:7d:e1:36:eb:86:9c:19:0c:26:ae:80:5b:b9: 6f:e2:53:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YxujlmT3ci4xREL47Mk4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYTM3ZGE5NzBjNDY2NDU3NTgzYmJlMDJiMmEwZTcyZmJk YzYzMjgwHhcNMjYwMTI1MDkwMTM0WhcNMjYwMTI2MDkwMTM0WjAzMTEwLwYDVQQD Eyg1NDg0ODM3ZWJiYzY0Y2Q0YjJkZTllMWQyYjcxOWFiYTFiNTFjYjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkiw2LtP1LDWQnG7lFZQvR4RNPQD OY5oNv19wwQZKeIYntJh9yQtfK0+muDJOb1u4qdvWK1aKc/HGWo98vMGJSWhO3/3 OVjmTy8hJfaKmkrftaeFW8hta7/MUEyA3b6f6LbjDUKCshYjZgSQl2p+V9VGZt4C vPLpVwwpRHlTeDFphRsuzyZwmN1GJGOF/3U1ZGfVhxzGwK0RYvaFdEkst0EZQCg6 QtMz2Z/2ihSkwRkIxsXGb3T+N52QZEWoGW0XtwnR1EvjXK9kBOOmwvfWCu1QJhdV mlKWqFhB7UptAWoE0c0ureAAOsoagm+7d9NqcTO3OfM1qjnhi4Ej3R3OkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSEg367xkzUst6eHStxmrobUcslMB8GA1UdIwQY MBaAFCyjfalwxGZFdYO74CsqDnL73GMoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEtOOXFYREVaa1YxZzd2Z0t5b09jdnZjWXlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yNDkyZmQtNmUzNy00NTgyLTg0ZTgt OGNhMjVmNDg4ZWJmLzEvTEtOOXFYREVaa1YxZzd2Z0t5b09jdnZjWXlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yNDkyZmQtNmUzNy00NTgyLTg0ZTgtOGNhMjVmNDg4ZWJm LzEvTEtOOXFYREVaa1YxZzd2Z0t5b09jdnZjWXlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj6ymqBFB oDMR5e8kh+EHdllFbZuu+0ZUp31PDM9x9WD3UISUcPZBjPLmNy4nAjbOA+IdJMhx cDj4Wwv7dCVLJtrETVsqcCQIi3GSq5gXTA6snQEk5irZ2UE6wmJh0AvKQ6BWTiBn b5PMDK6BpghT4qtJEIkup9XnZv5Dt5Hh6dzpF4RxU52UlyBw6IvmFiy0eCoCyawK prNK7APlAP4fZmGA6bin8OjlopO28Wq7UP9T6bhJVq2v67NwETSLC3fp8PV3WD6W 5GPh2RMS0reeLgi8P+B9hylcwFv9bu8zxXwWMKX8CVSBgcuegq/66Ih94TbrhpwZ DCaugFu5b+JTFg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:44:27 2026 by rpki-client