This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft File: lQCCqFlGcix_wchk8PvYDcVNzSk.mft (raw, json) Hash identifier: KugEsZwu3I6HwLILW4bbNkhke+piT3qbIFqySOYhb0Y= Subject key identifier: 67:7D:80:35:BA:86:46:AC:80:5B:4E:41:5E:F1:51:1E:D2:FE:A8:92 Authority key identifier: 95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29 Certificate issuer: /CN=950082a85946722c7fc1c864f0fbd80dc54dcd29 Certificate serial: 019BF2AAF4AB573083CE3C5ACD13A221C493 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft Manifest number: 0A27 Signing time: Sun 25 Jan 2026 01:00:48 +0000 Manifest this update: Sun 25 Jan 2026 01:00:48 +0000 Manifest next update: Mon 26 Jan 2026 01:00:48 +0000 Files and hashes: 1: 6Q3hJK7l5gtN_Lr_bBxFEB7LRps.roa (hash: iw8Ogmc/LXNOPuyk5RisCNNGw5P8+o4St4o7kNLdmFM=) 2: UcrjdhQUtMyXZBZ14yoz47DP1KQ.roa (hash: pwlq/+c8DXzCaRg9hbORmAoeOdAKmI0H3fOLHE09GyY=) 3: lQCCqFlGcix_wchk8PvYDcVNzSk.crl (hash: RJNsP69nX6NQCZ1RpBxW8CioDOak5dc/+JsaC4cAh3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:aa:f4:ab:57:30:83:ce:3c:5a:cd:13:a2:21:c4:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=950082a85946722c7fc1c864f0fbd80dc54dcd29 Validity Not Before: Jan 25 01:00:48 2026 GMT Not After : Jan 26 01:00:48 2026 GMT Subject: CN=677d8035ba8646ac805b4e415ef1511ed2fea892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:65:c1:df:99:f1:c8:8c:4b:1e:39:e4:3d:f1: 9d:44:97:cb:58:58:65:3d:d4:d2:15:d4:d9:b0:79: cd:f7:46:5b:94:1b:11:66:b5:06:9c:0d:35:a5:a3: 5e:0c:41:d8:e9:91:d2:af:03:9a:ea:b0:71:3f:5d: b4:cd:e1:47:fa:ac:54:ad:a6:74:c2:6f:1e:9d:38: 28:24:27:52:24:40:f6:a6:36:cb:c7:8c:fa:16:20: 67:8b:26:71:56:8f:0a:fc:78:f9:bd:a7:1b:66:3b: 35:4c:dc:78:eb:b4:cb:51:9a:03:2a:77:81:63:ad: 7a:1a:f5:2d:3c:79:87:72:05:b1:a6:69:37:06:4d: 8c:eb:9d:db:a0:1c:10:e6:22:8c:63:12:18:67:e9: 6f:92:ee:57:61:38:d0:da:80:74:ef:25:eb:de:07: e7:28:ff:2b:a3:4d:4c:90:2d:73:da:c3:4d:0b:7d: e4:18:77:05:54:f0:7c:b1:21:d5:1f:69:50:c0:aa: 91:ec:d3:45:4a:58:b1:1e:6a:62:5f:e5:34:a0:f9: 29:15:1c:36:c3:d4:de:e3:d9:3b:b5:94:8d:1d:b4: d4:2f:03:5a:ad:3d:b0:f7:10:ac:6d:65:da:0e:07: 7b:e1:6e:1c:5a:57:a7:c7:17:44:e1:ae:2a:25:fe: 8f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7D:80:35:BA:86:46:AC:80:5B:4E:41:5E:F1:51:1E:D2:FE:A8:92 X509v3 Authority Key Identifier: keyid:95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:bf:7b:41:ea:47:9c:75:12:d7:c9:17:0d:fb:40:92:f4:84: 0d:4c:d0:27:f1:47:2c:b6:dc:f1:31:d3:c4:f1:d8:e8:2f:16: 09:06:19:f5:17:75:8a:5f:ab:71:e7:4b:67:bb:1f:f5:e0:04: dd:82:82:fc:33:6f:98:50:21:76:e0:d7:97:10:2b:dc:71:ed: a6:0a:3f:70:ff:90:67:f8:5f:40:26:02:a3:12:5b:e3:35:b8: 00:50:d4:8c:43:8a:70:0c:91:31:b2:49:04:1d:ea:a5:db:08: c9:4f:64:5f:84:3e:c5:59:ed:97:2d:86:bd:2c:4e:7e:a3:e1: a6:5f:32:97:9c:e8:90:62:03:65:bd:b8:1f:d5:51:7f:f0:f9: 2c:a3:2f:51:b6:9f:5f:13:d1:5e:2d:ad:f5:62:08:6e:ee:7b: 51:e6:52:7b:00:98:f2:d0:1a:4c:b3:ac:b8:7d:93:4d:35:c5: ed:db:85:40:ca:85:0f:44:27:f4:2c:d8:02:0f:44:57:0f:7c: 7e:57:d1:d4:d1:a9:94:a5:8d:30:66:72:fa:3e:b0:83:4b:d5: c8:37:c7:7f:19:ec:a3:38:ba:c8:38:42:72:97:b2:78:dc:69: de:65:f0:34:41:96:10:5d:db:95:f8:b1:31:0e:7c:45:99:23: 03:9f:87:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyqvSrVzCDzjxazROiIcSTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MDA4MmE4NTk0NjcyMmM3ZmMxYzg2NGYwZmJkODBkYzU0 ZGNkMjkwHhcNMjYwMTI1MDEwMDQ4WhcNMjYwMTI2MDEwMDQ4WjAzMTEwLwYDVQQD Eyg2NzdkODAzNWJhODY0NmFjODA1YjRlNDE1ZWYxNTExZWQyZmVhODkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmXB35nxyIxLHjnkPfGdRJfLWFhl PdTSFdTZsHnN90ZblBsRZrUGnA01paNeDEHY6ZHSrwOa6rBxP120zeFH+qxUraZ0 wm8enTgoJCdSJED2pjbLx4z6FiBniyZxVo8K/Hj5vacbZjs1TNx467TLUZoDKneB Y616GvUtPHmHcgWxpmk3Bk2M653boBwQ5iKMYxIYZ+lvku5XYTjQ2oB07yXr3gfn KP8ro01MkC1z2sNNC33kGHcFVPB8sSHVH2lQwKqR7NNFSlixHmpiX+U0oPkpFRw2 w9Te49k7tZSNHbTULwNarT2w9xCsbWXaDgd74W4cWlenxxdE4a4qJf6PCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGd9gDW6hkasgFtOQV7xUR7S/qiSMB8GA1UdIwQY MBaAFJUAgqhZRnIsf8HIZPD72A3FTc0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFFDQ3FGbEdjaXhfd2NoazhQdllEY1ZOelNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zNGU0MGYtZTFkMi00ZDI5LTg5YzUt YzY5YTdmMDNlMThmLzEvbFFDQ3FGbEdjaXhfd2NoazhQdllEY1ZOelNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8zNGU0MGYtZTFkMi00ZDI5LTg5YzUtYzY5YTdmMDNlMThm LzEvbFFDQ3FGbEdjaXhfd2NoazhQdllEY1ZOelNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABL97QepH nHUS18kXDftAkvSEDUzQJ/FHLLbc8THTxPHY6C8WCQYZ9Rd1il+rcedLZ7sf9eAE 3YKC/DNvmFAhduDXlxAr3HHtpgo/cP+QZ/hfQCYCoxJb4zW4AFDUjEOKcAyRMbJJ BB3qpdsIyU9kX4Q+xVntly2GvSxOfqPhpl8yl5zokGIDZb24H9VRf/D5LKMvUbaf XxPRXi2t9WIIbu57UeZSewCY8tAaTLOsuH2TTTXF7duFQMqFD0Qn9CzYAg9EVw98 flfR1NGplKWNMGZy+j6wg0vVyDfHfxnsozi6yDhCcpeyeNxp3mXwNEGWEF3blfix MQ58RZkjA5+HZA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:06:18 2026 by rpki-client