This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft File: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft (raw, json) Hash identifier: cF6TqViQoXpTHApjTSghmJcnac9tvkWZHhpUD/3bH88= Subject key identifier: F6:19:DA:38:94:69:F4:46:A7:97:3B:AD:0C:1B:5C:5C:CF:14:E0:60 Authority key identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC Certificate issuer: /CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc Certificate serial: 019BF650C38D668611B80BBBD892A8FB19A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft Manifest number: 17E2 Signing time: Sun 25 Jan 2026 18:00:46 +0000 Manifest this update: Sun 25 Jan 2026 18:00:46 +0000 Manifest next update: Mon 26 Jan 2026 18:00:46 +0000 Files and hashes: 1: 9UXsLKG5ISnWSEO-TCG0hlAjiEY.roa (hash: SyhzNR0OFmBqX9d1/jz00jh2vv/1QKU6100ZrfZ9Ouk=) 2: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl (hash: RdeNv9bCvJQjNOtwk8JYWkGAMD684qZZfN/Sw/0ev3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:c3:8d:66:86:11:b8:0b:bb:d8:92:a8:fb:19:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc Validity Not Before: Jan 25 18:00:46 2026 GMT Not After : Jan 26 18:00:46 2026 GMT Subject: CN=f619da389469f446a7973bad0c1b5c5ccf14e060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d6:1a:85:84:fb:ef:ee:82:42:bf:b6:f8:7b: 7f:1d:a2:5a:5e:88:74:32:c0:49:3f:ab:6b:f1:4b: 26:ef:ac:ba:ed:4b:22:a2:33:23:10:64:91:52:28: 3d:24:f8:5d:a3:27:98:3c:58:a0:27:5a:56:ce:6d: 9a:83:1f:30:75:28:e0:92:74:46:ee:62:73:2c:84: 07:03:a2:99:44:ce:d9:d2:2e:32:f9:e8:20:75:9d: 04:59:ab:5d:df:09:ab:c4:56:44:ea:30:27:a4:92: a1:26:f2:69:e5:8d:41:06:c0:e5:d9:42:02:9a:7e: 9e:2b:46:85:40:66:f2:d8:6a:3c:78:de:d1:1f:3d: bc:23:8b:3c:04:58:d1:87:0c:5c:dc:e7:20:34:d1: 4b:9d:7d:dd:19:7d:42:ef:2a:76:1c:0c:c1:05:19: a1:b1:4e:95:65:de:08:ab:09:bb:cb:de:d9:3d:86: e5:8e:f1:c8:1f:52:79:c3:2f:1e:76:fa:1c:87:35: e7:ee:6e:07:12:9b:8e:94:0d:4e:52:8f:1b:bd:9c: 01:14:c7:50:f0:e9:b2:30:7c:74:d4:46:77:ec:d9: 5f:96:90:35:bd:bd:9b:f5:51:b6:e3:f3:be:59:77: ac:df:f2:8a:d9:6a:8c:d9:29:2e:40:82:40:94:19: 89:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:19:DA:38:94:69:F4:46:A7:97:3B:AD:0C:1B:5C:5C:CF:14:E0:60 X509v3 Authority Key Identifier: keyid:2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:c5:e3:e1:5b:6a:47:ef:90:8a:80:3c:d5:bd:c8:bd:44:0d: d5:d3:cd:72:58:4b:2d:5c:ac:77:72:9f:d4:7b:a2:1a:f7:50: a9:5d:35:8b:93:0f:64:3d:43:17:7c:48:92:30:05:12:c2:4a: 34:44:55:a1:77:25:f6:84:68:1f:d4:ac:7c:89:6a:78:eb:45: d1:91:92:91:25:f1:2a:33:66:cf:d5:ff:ab:14:5d:b3:0e:f6: d5:30:a3:5d:10:8e:02:44:7f:85:71:d8:90:b2:76:d5:02:13: 80:f6:63:36:d4:99:43:cb:1a:04:16:97:8c:aa:2b:88:be:4e: 1b:7b:41:b6:0f:86:35:36:f3:6e:ae:58:9f:2e:d8:2e:0d:30: 27:dd:11:b6:89:0c:f0:5a:ff:a7:93:92:1f:bb:41:ab:db:d7: 06:73:d7:af:83:7b:7a:2e:07:4a:86:aa:69:7d:63:e4:dd:69: 44:0b:5c:a9:1e:d5:0f:1e:e0:00:7a:c3:c9:4d:84:d0:c4:c0: 69:a0:4f:3c:2d:f7:d9:86:bb:07:8c:da:59:59:35:1f:09:dc: 58:cf:90:ea:e6:2d:7e:1c:b2:4e:b8:98:62:c8:3f:07:7f:76: 7f:49:f3:53:f1:70:a8:d9:75:db:d5:1e:83:cc:76:43:29:75: 7a:f0:ae:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UMONZoYRuAu72JKo+xmoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZDQxYmNjM2NkNzNlMGRjN2Y3ZTk1YjVkMGRjYTZkNjg1 N2JlZGMwHhcNMjYwMTI1MTgwMDQ2WhcNMjYwMTI2MTgwMDQ2WjAzMTEwLwYDVQQD EyhmNjE5ZGEzODk0NjlmNDQ2YTc5NzNiYWQwYzFiNWM1Y2NmMTRlMDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dYahYT77+6CQr+2+Ht/HaJaXoh0 MsBJP6tr8Usm76y67UsiojMjEGSRUig9JPhdoyeYPFigJ1pWzm2agx8wdSjgknRG 7mJzLIQHA6KZRM7Z0i4y+eggdZ0EWatd3wmrxFZE6jAnpJKhJvJp5Y1BBsDl2UIC mn6eK0aFQGby2Go8eN7RHz28I4s8BFjRhwxc3OcgNNFLnX3dGX1C7yp2HAzBBRmh sU6VZd4Iqwm7y97ZPYbljvHIH1J5wy8edvochzXn7m4HEpuOlA1OUo8bvZwBFMdQ 8OmyMHx01EZ37NlflpA1vb2b9VG24/O+WXes3/KK2WqM2SkuQIJAlBmJkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPYZ2jiUafRGp5c7rQwbXFzPFOBgMB8GA1UdIwQY MBaAFCzUG8w81z4Nx/fpW10Nym1oV77cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE5RYnpEelhQZzNIOS1sYlhRM0tiV2hYdnR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8xYWQ5YmYtMDMyMi00NTM0LWIwMDkt ZTZlOTFiZjA1MmZlLzEvTE5RYnpEelhQZzNIOS1sYlhRM0tiV2hYdnR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8xYWQ5YmYtMDMyMi00NTM0LWIwMDktZTZlOTFiZjA1MmZl LzEvTE5RYnpEelhQZzNIOS1sYlhRM0tiV2hYdnR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM8Xj4Vtq R++QioA81b3IvUQN1dPNclhLLVysd3Kf1HuiGvdQqV01i5MPZD1DF3xIkjAFEsJK NERVoXcl9oRoH9SsfIlqeOtF0ZGSkSXxKjNmz9X/qxRdsw721TCjXRCOAkR/hXHY kLJ21QITgPZjNtSZQ8saBBaXjKoriL5OG3tBtg+GNTbzbq5Yny7YLg0wJ90RtokM 8Fr/p5OSH7tBq9vXBnPXr4N7ei4HSoaqaX1j5N1pRAtcqR7VDx7gAHrDyU2E0MTA aaBPPC332Ya7B4zaWVk1HwncWM+Q6uYtfhyyTriYYsg/B392f0nzU/FwqNl129Ue g8x2Qyl1evCuRA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:45 2026 by rpki-client