This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft File: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft (raw, json) Hash identifier: YD/VlCxiBpwGEpfJcXesVSBoNOxLM+RSoRtQn6uKUyI= Subject key identifier: 40:AF:31:72:4A:06:EB:C1:29:7D:2C:E4:E7:F5:46:24:F1:2B:F0:ED Authority key identifier: 96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5 Certificate issuer: /CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5 Certificate serial: 019BF72D5A3590B34A88634FFEE928BE63B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft Manifest number: 177B Signing time: Sun 25 Jan 2026 22:01:43 +0000 Manifest this update: Sun 25 Jan 2026 22:01:43 +0000 Manifest next update: Mon 26 Jan 2026 22:01:43 +0000 Files and hashes: 1: 8Lq3lIQ57V2x5XRAthwXhjdfPZ0.roa (hash: 11Z2xFuTQAhf/AKwmMmwrf1P3F5XfEX9AMFlRSFk2p4=) 2: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl (hash: ImEim6NLeF/G0Uad+UtHCI2EdoE6AcLjLzq/xb7vLjA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:5a:35:90:b3:4a:88:63:4f:fe:e9:28:be:63:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5 Validity Not Before: Jan 25 22:01:43 2026 GMT Not After : Jan 26 22:01:43 2026 GMT Subject: CN=40af31724a06ebc1297d2ce4e7f54624f12bf0ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:be:85:0b:75:34:64:0c:a2:90:ae:13:39:2e: 77:39:b2:40:17:19:ce:c4:c6:9e:6f:f1:7a:32:e2: 55:38:68:9b:5f:f4:26:69:e2:24:d4:ce:ce:1f:3b: 99:8b:64:91:60:63:c0:07:3f:c0:43:5f:26:91:9b: 16:39:aa:34:17:b3:e9:fc:91:46:11:5c:7d:73:5b: a1:7b:f1:86:1a:6b:a7:8a:88:5e:b4:f7:12:f1:1f: b3:af:0f:27:76:96:41:7a:ba:01:76:63:16:97:30: b1:7d:6d:37:1f:d4:04:df:8f:12:c4:ab:5a:66:be: ba:c4:af:9c:c6:3a:2b:18:42:d0:da:2c:62:e0:76: 98:64:68:36:78:2b:74:78:92:13:a8:ff:11:e7:40: 11:cd:b7:93:1f:df:12:d5:11:e8:ae:c2:24:e4:04: 7a:36:48:e2:27:37:06:be:19:89:98:29:b8:5b:99: 3d:b2:79:e0:19:ca:f7:5c:2c:c1:7e:5b:4e:28:c9: 52:69:a7:b4:29:66:fc:b8:ba:28:70:cf:7a:80:68: 5a:2e:89:8d:97:1f:67:96:72:bb:d7:50:6d:2d:47: ae:87:f3:47:86:5e:4a:4d:b4:28:83:9c:ce:b9:8a: 5d:4f:6b:b6:00:0c:b4:11:8c:0b:38:0e:13:08:7b: ac:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AF:31:72:4A:06:EB:C1:29:7D:2C:E4:E7:F5:46:24:F1:2B:F0:ED X509v3 Authority Key Identifier: keyid:96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:31:ed:6b:6a:b6:57:26:b7:bd:c1:cc:e7:d3:cc:c5:1f:11: 85:92:5b:28:de:e7:3c:70:51:88:73:fd:7f:98:da:6d:cd:7b: 4a:93:67:bd:a1:1a:2d:0c:ef:de:53:3f:d5:f3:06:45:05:34: f9:9e:7d:b4:81:31:b7:69:5a:ae:b3:cf:96:ee:1d:5a:4f:d2: fa:47:fb:d1:0e:3e:ec:28:c8:25:3d:7f:34:3e:9f:43:2e:95: aa:4d:7d:51:2a:eb:7f:4e:00:68:43:bf:49:ba:8b:66:ae:47: 0f:5a:a1:7f:72:63:fd:3c:37:a1:b2:ee:72:2d:0a:8d:79:b4: 56:05:be:a6:a8:79:d5:e7:96:61:ee:0c:07:44:6d:e5:4d:11: 35:9e:e1:9f:87:04:0b:f1:5c:84:62:55:8e:60:af:16:0c:b9: 3f:6b:ed:16:02:9c:b6:06:71:2e:36:43:66:cf:83:65:12:52: 6f:1e:51:6a:c8:d2:41:3e:33:e5:d1:36:9f:ec:74:87:22:72: fe:7a:b3:63:39:c1:51:89:a3:f9:af:7b:4e:4f:d4:e1:7e:dc: 68:53:7d:f4:ce:68:2a:e8:6a:95:94:eb:fd:3f:51:16:cd:1e: 72:34:07:22:a0:3e:c3:4e:a6:04:05:e4:21:66:6b:75:b8:96: ab:29:61:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LVo1kLNKiGNP/ukovmO1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MTEyNjRiYjllNGU2ZmE5OTQ0OWVlNDU2YzVkMDUzZjNh ZDAxYzUwHhcNMjYwMTI1MjIwMTQzWhcNMjYwMTI2MjIwMTQzWjAzMTEwLwYDVQQD Eyg0MGFmMzE3MjRhMDZlYmMxMjk3ZDJjZTRlN2Y1NDYyNGYxMmJmMGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL6FC3U0ZAyikK4TOS53ObJAFxnO xMaeb/F6MuJVOGibX/QmaeIk1M7OHzuZi2SRYGPABz/AQ18mkZsWOao0F7Pp/JFG EVx9c1uhe/GGGmuniohetPcS8R+zrw8ndpZBeroBdmMWlzCxfW03H9QE348SxKta Zr66xK+cxjorGELQ2ixi4HaYZGg2eCt0eJITqP8R50ARzbeTH98S1RHorsIk5AR6 NkjiJzcGvhmJmCm4W5k9snngGcr3XCzBfltOKMlSaae0KWb8uLoocM96gGhaLomN lx9nlnK711BtLUeuh/NHhl5KTbQog5zOuYpdT2u2AAy0EYwLOA4TCHusBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECvMXJKBuvBKX0s5Of1RiTxK/DtMB8GA1UdIwQY MBaAFJYRJku55Ob6mUSe5FbF0FPzrQHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGhFbVM3bms1dnFaUko3a1ZzWFFVX090QWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82MGU5YTAtYzljMS00MWU5LTg5ZmMt MjRiNjc2YjU2NzgzLzEvbGhFbVM3bms1dnFaUko3a1ZzWFFVX090QWNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS82MGU5YTAtYzljMS00MWU5LTg5ZmMtMjRiNjc2YjU2Nzgz LzEvbGhFbVM3bms1dnFaUko3a1ZzWFFVX090QWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAjHta2q2 Vya3vcHM59PMxR8RhZJbKN7nPHBRiHP9f5jabc17SpNnvaEaLQzv3lM/1fMGRQU0 +Z59tIExt2larrPPlu4dWk/S+kf70Q4+7CjIJT1/ND6fQy6Vqk19USrrf04AaEO/ SbqLZq5HD1qhf3Jj/Tw3obLuci0KjXm0VgW+pqh51eeWYe4MB0Rt5U0RNZ7hn4cE C/FchGJVjmCvFgy5P2vtFgKctgZxLjZDZs+DZRJSbx5RasjSQT4z5dE2n+x0hyJy /nqzYznBUYmj+a97Tk/U4X7caFN99M5oKuhqlZTr/T9RFs0ecjQHIqA+w06mBAXk IWZrdbiWqylh3g== -----END CERTIFICATE-----Generated at Sun Jan 25 23:55:34 2026 by rpki-client