This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft File: LkJv6Qhstq8B85H_T2nACDZNbu0.mft (raw, json) Hash identifier: ZleyFg7Ndrx7wO/Azum/BOgGYlsSP+r4TAaTdO3iQJM= Subject key identifier: 5F:42:23:11:D2:0B:65:93:94:D3:A9:8B:CE:1B:3F:5F:CA:EB:90:FA Authority key identifier: 2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED Certificate issuer: /CN=2e426fe9086cb6af01f391ff4f69c008364d6eed Certificate serial: 019BF8088895BBE5A8AEDF614CBB3DB0F176 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft Manifest number: 177F Signing time: Mon 26 Jan 2026 02:01:07 +0000 Manifest this update: Mon 26 Jan 2026 02:01:07 +0000 Manifest next update: Tue 27 Jan 2026 02:01:07 +0000 Files and hashes: 1: LkJv6Qhstq8B85H_T2nACDZNbu0.crl (hash: qjRHBFIwpL33R8SD2gTKxwyf6JfWzWDwg8PCQNdZmYA=) 2: l_v0toEM3yMRI49WDNWj-qHlYqk.roa (hash: uFfF5zaJ+lbxDFdCJItNBEsaSDghQGS/Cx4dVGLdX4Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:88:95:bb:e5:a8:ae:df:61:4c:bb:3d:b0:f1:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e426fe9086cb6af01f391ff4f69c008364d6eed Validity Not Before: Jan 26 02:01:07 2026 GMT Not After : Jan 27 02:01:07 2026 GMT Subject: CN=5f422311d20b659394d3a98bce1b3f5fcaeb90fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:44:4e:62:32:13:54:48:08:1f:26:17:f9:49: 50:c5:23:a3:06:13:d8:b3:1d:80:9d:a4:0a:c0:f5: d5:32:99:77:31:d2:b9:b3:89:b2:c7:df:67:9f:ae: 4f:31:df:99:67:d9:10:bf:c7:4b:0c:98:8f:6c:a7: e0:17:4b:3e:3d:87:29:5d:ce:80:d6:b7:7c:d2:7d: bd:df:a6:c8:3e:78:4f:96:e8:fe:ef:bc:a7:3b:44: 0d:ac:b4:56:13:62:22:a1:9d:b2:8c:db:e7:56:91: 66:00:5e:3b:57:72:bb:ac:83:40:c4:21:b5:fe:fe: 0e:5e:53:08:44:63:0a:37:38:6b:af:df:f5:1e:a9: 5e:ff:f1:32:aa:10:96:94:2c:9f:fc:8f:19:63:47: d6:f8:5d:57:78:a4:01:ea:74:28:0c:4a:0d:9b:d9: 51:6f:a4:a1:f9:c8:e3:a9:aa:cc:3e:55:ad:02:db: 36:62:ea:05:5c:d2:62:4c:16:41:46:b7:7f:f1:2b: ae:20:19:70:fa:bd:a2:f3:57:7e:fe:b5:f0:0b:5f: c2:ae:9c:4d:fc:65:e3:93:81:06:1c:a1:21:d1:8e: be:d4:c8:46:8b:db:70:db:b0:3f:51:5e:a5:df:29: a2:bb:21:88:4c:63:33:8d:40:c1:03:01:de:bd:ad: 76:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:42:23:11:D2:0B:65:93:94:D3:A9:8B:CE:1B:3F:5F:CA:EB:90:FA X509v3 Authority Key Identifier: keyid:2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:eb:e4:ad:44:c4:95:f8:ac:17:3b:0a:e5:74:75:f8:8e:49: f7:29:e2:b9:dc:0b:39:0e:5b:cf:22:ae:dc:26:6c:81:26:cb: 38:5b:b8:af:97:8a:e3:11:28:ac:3d:e6:c2:42:15:23:1e:1d: c9:a4:25:d5:04:89:cc:78:03:2c:55:33:e3:0c:19:66:e7:70: 2c:fe:b3:9a:bc:24:65:2f:20:3e:1f:49:b1:9d:2d:52:90:63: c0:c4:a7:53:52:82:3a:b2:3e:69:9b:73:68:52:b9:f2:4d:cb: 3e:79:b1:d5:98:0c:28:3b:dc:95:00:09:77:14:44:bd:3e:57: 23:7c:b2:87:da:e4:74:98:74:0e:06:59:10:a2:4f:2c:c3:56: 2e:24:3c:3c:51:6c:d3:2b:57:83:f3:70:1a:73:32:7a:9f:03: 7e:14:8c:b9:ce:3b:b4:cd:4e:89:22:b7:e6:5e:cb:71:84:c0: 8d:b5:e0:33:5a:7b:ba:43:fe:3c:2f:da:5a:a0:62:f1:5b:34: 32:29:6b:b9:a8:d6:81:13:77:10:db:81:d4:89:5b:7d:7e:a5: cc:c3:7c:72:9e:41:5d:84:3c:5e:39:9d:b1:95:4d:db:94:fa: b6:ee:45:53:cc:95:b5:52:7b:da:23:ad:7b:36:05:43:1c:e0: 54:a6:b5:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CIiVu+Wort9hTLs9sPF2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNDI2ZmU5MDg2Y2I2YWYwMWYzOTFmZjRmNjljMDA4MzY0 ZDZlZWQwHhcNMjYwMTI2MDIwMTA3WhcNMjYwMTI3MDIwMTA3WjAzMTEwLwYDVQQD Eyg1ZjQyMjMxMWQyMGI2NTkzOTRkM2E5OGJjZTFiM2Y1ZmNhZWI5MGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUROYjITVEgIHyYX+UlQxSOjBhPY sx2AnaQKwPXVMpl3MdK5s4myx99nn65PMd+ZZ9kQv8dLDJiPbKfgF0s+PYcpXc6A 1rd80n2936bIPnhPluj+77ynO0QNrLRWE2IioZ2yjNvnVpFmAF47V3K7rINAxCG1 /v4OXlMIRGMKNzhrr9/1Hqle//EyqhCWlCyf/I8ZY0fW+F1XeKQB6nQoDEoNm9lR b6Sh+cjjqarMPlWtAts2YuoFXNJiTBZBRrd/8SuuIBlw+r2i81d+/rXwC1/CrpxN /GXjk4EGHKEh0Y6+1MhGi9tw27A/UV6l3ymiuyGITGMzjUDBAwHeva12CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9CIxHSC2WTlNOpi84bP1/K65D6MB8GA1UdIwQY MBaAFC5Cb+kIbLavAfOR/09pwAg2TW7tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGtKdjZRaHN0cThCODVIX1QybkFDRFpOYnUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hZTcxMDEtZTRmYS00NTBjLWEzMDEt NjhhZDNiZGJkMzliLzEvTGtKdjZRaHN0cThCODVIX1QybkFDRFpOYnUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hZTcxMDEtZTRmYS00NTBjLWEzMDEtNjhhZDNiZGJkMzli LzEvTGtKdjZRaHN0cThCODVIX1QybkFDRFpOYnUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+vkrUTE lfisFzsK5XR1+I5J9yniudwLOQ5bzyKu3CZsgSbLOFu4r5eK4xEorD3mwkIVIx4d yaQl1QSJzHgDLFUz4wwZZudwLP6zmrwkZS8gPh9JsZ0tUpBjwMSnU1KCOrI+aZtz aFK58k3LPnmx1ZgMKDvclQAJdxREvT5XI3yyh9rkdJh0DgZZEKJPLMNWLiQ8PFFs 0ytXg/NwGnMyep8DfhSMuc47tM1OiSK35l7LcYTAjbXgM1p7ukP+PC/aWqBi8Vs0 MilruajWgRN3ENuB1IlbfX6lzMN8cp5BXYQ8XjmdsZVN25T6tu5FU8yVtVJ72iOt ezYFQxzgVKa1yA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:53:22 2026 by rpki-client