This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft File: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft (raw, json) Hash identifier: 4ingLk43RJkfcY6uXHpzxoU5qUWWL0W0RoYpYhGtBoI= Subject key identifier: BD:EC:DD:CA:A2:07:6D:A1:76:29:C9:CC:5D:3C:B6:21:AD:15:21:38 Authority key identifier: 96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE Certificate issuer: /CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae Certificate serial: 019BF53E0EA081806AAED68DB4DF653605B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft Manifest number: 0B51 Signing time: Sun 25 Jan 2026 13:00:43 +0000 Manifest this update: Sun 25 Jan 2026 13:00:43 +0000 Manifest next update: Mon 26 Jan 2026 13:00:43 +0000 Files and hashes: 1: MMY-RTsxhEKbZHNhhj0KSwNZMxE.roa (hash: Ef0KimqUfcjmjAh99qPeo3PT6AwZiNEjh0UvdcbEniQ=) 2: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl (hash: G7JQkevNStxUHcaacQtkH4UTX5yCXMUKk56Ebmb7q4U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:0e:a0:81:80:6a:ae:d6:8d:b4:df:65:36:05:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae Validity Not Before: Jan 25 13:00:43 2026 GMT Not After : Jan 26 13:00:43 2026 GMT Subject: CN=bdecddcaa2076da17629c9cc5d3cb621ad152138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:39:de:d5:27:86:68:5f:9b:a1:d1:e1:34:c2: 41:3a:38:fd:80:53:dc:b4:7c:07:fa:f9:56:08:6d: ed:36:a4:63:f2:e6:b6:88:ca:12:90:11:06:3a:41: ef:9f:8a:f7:1d:e0:63:c3:bb:41:19:d0:6f:53:96: 97:89:f5:8a:ab:d5:7f:7f:7f:cd:60:c8:ef:02:70: 6e:1b:07:d1:5c:04:1b:86:00:56:51:a6:e5:e2:cf: 65:af:a1:4a:5f:cf:e5:1c:5b:5b:a8:be:d7:aa:e9: c1:b3:7e:4c:3b:ed:df:59:d2:3f:b9:da:f4:80:d0: 55:9f:c6:ad:8f:95:81:08:52:f8:bd:78:b1:06:86: c1:3d:af:6e:f0:aa:c5:87:5b:1d:02:8f:76:65:c0: 7b:ae:86:66:6b:df:3e:4f:01:9f:b6:0c:9b:fd:ea: 41:64:ba:71:48:81:14:7c:e5:bb:18:41:8c:0d:8b: 16:c0:68:e3:74:e4:7c:48:57:81:bb:1d:e8:97:8d: 7c:d1:b6:a1:02:f6:8c:03:dc:fa:c8:14:c0:f5:b8: 7c:22:d3:e2:ae:2a:bf:9f:fc:a0:b6:33:78:7a:04: 30:6f:06:76:d1:b5:2f:27:89:52:ff:84:6a:70:bd: ff:7a:55:1e:4c:3e:0e:e2:96:ba:8c:a4:45:13:5a: 99:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:EC:DD:CA:A2:07:6D:A1:76:29:C9:CC:5D:3C:B6:21:AD:15:21:38 X509v3 Authority Key Identifier: keyid:96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:87:34:e9:3b:28:bd:02:c9:61:98:77:8d:72:d4:fb:91:a2: e2:bf:57:01:0a:c6:1e:91:a5:1c:d3:06:30:0f:8f:44:dc:5f: dd:49:7e:6c:79:78:7c:8b:50:9d:e8:73:69:67:ea:04:c6:e8: a8:7f:07:a0:31:b0:10:fc:ad:24:34:84:b3:22:2c:5e:cc:a7: e0:4e:37:eb:6c:2b:34:14:c6:0e:10:10:2e:bd:da:cc:87:28: 65:48:67:b9:ee:1f:a9:b2:ba:2c:73:5a:2e:17:8a:c7:a4:13: 73:9a:da:ef:ec:9f:7a:df:e0:7c:3c:be:70:40:d0:4e:78:11: 18:6b:f3:50:c6:fa:56:83:e0:d8:3e:89:94:5b:e1:f9:76:bd: e6:6e:c2:40:63:b6:d9:37:22:a4:3b:ca:9f:1d:7e:1e:fd:99: 46:0d:2a:e5:22:e2:4a:57:b7:a4:ab:f1:b9:e6:a4:34:63:e1: f9:05:57:d1:f4:4a:14:ff:37:20:f0:11:76:53:bc:85:97:6c: 69:cc:a5:c5:2c:e1:46:18:81:56:ae:59:4a:90:e2:ff:16:33: 3a:22:33:c8:4c:2c:6c:3b:30:7f:4a:23:0d:6d:5b:8b:b9:68: 19:ff:92:ab:16:46:fd:24:69:14:02:c8:e5:18:05:a4:8a:4c: f7:f2:0e:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Pg6ggYBqrtaNtN9lNgW3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZDk1ZmUyZDkwOTQzYzkyZjZjMjhmM2IzMjlmODIwMTVj ZDkyYWUwHhcNMjYwMTI1MTMwMDQzWhcNMjYwMTI2MTMwMDQzWjAzMTEwLwYDVQQD EyhiZGVjZGRjYWEyMDc2ZGExNzYyOWM5Y2M1ZDNjYjYyMWFkMTUyMTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jne1SeGaF+bodHhNMJBOjj9gFPc tHwH+vlWCG3tNqRj8ua2iMoSkBEGOkHvn4r3HeBjw7tBGdBvU5aXifWKq9V/f3/N YMjvAnBuGwfRXAQbhgBWUabl4s9lr6FKX8/lHFtbqL7XqunBs35MO+3fWdI/udr0 gNBVn8atj5WBCFL4vXixBobBPa9u8KrFh1sdAo92ZcB7roZma98+TwGftgyb/epB ZLpxSIEUfOW7GEGMDYsWwGjjdOR8SFeBux3ol4180bahAvaMA9z6yBTA9bh8ItPi riq/n/ygtjN4egQwbwZ20bUvJ4lS/4RqcL3/elUeTD4O4pa6jKRFE1qZdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3s3cqiB22hdinJzF08tiGtFSE4MB8GA1UdIwQY MBaAFJbZX+LZCUPJL2wo87Mp+CAVzZKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHRsZjR0a0pROGt2YkNqenN5bjRJQlhOa3E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zMmNjMjctOTQ0OC00MzdiLTk3MjIt ZGM5YjljNjAxM2Y2LzEvbHRsZjR0a0pROGt2YkNqenN5bjRJQlhOa3E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zMmNjMjctOTQ0OC00MzdiLTk3MjItZGM5YjljNjAxM2Y2 LzEvbHRsZjR0a0pROGt2YkNqenN5bjRJQlhOa3E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqIc06Tso vQLJYZh3jXLU+5Gi4r9XAQrGHpGlHNMGMA+PRNxf3Ul+bHl4fItQnehzaWfqBMbo qH8HoDGwEPytJDSEsyIsXsyn4E4362wrNBTGDhAQLr3azIcoZUhnue4fqbK6LHNa LheKx6QTc5ra7+yfet/gfDy+cEDQTngRGGvzUMb6VoPg2D6JlFvh+Xa95m7CQGO2 2TcipDvKnx1+Hv2ZRg0q5SLiSle3pKvxueakNGPh+QVX0fRKFP83IPARdlO8hZds acylxSzhRhiBVq5ZSpDi/xYzOiIzyEwsbDswf0ojDW1bi7loGf+SqxZG/SRpFALI 5RgFpIpM9/IOJA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:52:51 2026 by rpki-client