This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft File: LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft (raw, json) Hash identifier: frztdWsvAuadGFs30PHSozvhcv6B6KLYjcO324CX1Ic= Subject key identifier: CF:2D:4A:EA:B7:97:43:42:F2:3B:A7:8F:81:DB:00:2F:4A:08:03:81 Authority key identifier: 2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75 Certificate issuer: /CN=2cb035707202d4013a4479be5112d7fa227b7275 Certificate serial: 019BF4D08BC5E7FBDCC15B195C0272726357 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft Manifest number: 174E Signing time: Sun 25 Jan 2026 11:01:06 +0000 Manifest this update: Sun 25 Jan 2026 11:01:06 +0000 Manifest next update: Mon 26 Jan 2026 11:01:06 +0000 Files and hashes: 1: LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl (hash: CQ4/6tyUdfsEYBwdXhXwRBy7biQDQ7q5CrzwBUnXGhg=) 2: V9Cc-uR-zIYJvjXve4ZyJUnQjsU.roa (hash: 2/BgI0CeVbMyKlBMczQ9BiDbSbqULeWjVwVtFX1ruVc=) 3: kL9jbHUoIoWWPmJDOjYutDKq9S4.roa (hash: vJG3x4EHXbeIpONFrJoAJLtr1KSHjKyEb3xfexUn52o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:8b:c5:e7:fb:dc:c1:5b:19:5c:02:72:72:63:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cb035707202d4013a4479be5112d7fa227b7275 Validity Not Before: Jan 25 11:01:06 2026 GMT Not After : Jan 26 11:01:06 2026 GMT Subject: CN=cf2d4aeab7974342f23ba78f81db002f4a080381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cf:5a:eb:1a:27:39:5b:86:cf:08:2b:96:7e: 1b:f3:6a:43:75:60:8b:a3:10:eb:70:47:7b:20:fd: 9f:ba:e6:00:56:65:e1:c0:c7:d6:de:3c:ff:03:db: 73:a2:11:d7:62:c3:b5:fc:b5:b1:41:20:91:7b:c4: 56:dd:89:95:d1:48:a1:61:82:47:f2:ab:32:4c:cb: 8a:6d:ad:c2:e6:fa:26:c4:d6:4b:ed:eb:94:c6:57: 14:29:71:a2:74:a6:81:8f:ac:46:30:ac:ef:0c:8a: ef:ff:f3:f6:76:3d:fb:f1:7f:a8:09:ce:5b:59:6d: 8b:04:eb:29:1c:2f:a6:4c:d1:2c:d1:2c:57:f1:8e: d5:1e:37:db:9f:bd:51:89:44:d8:4d:b1:4c:87:ce: 8a:e8:d7:8a:ab:2b:72:a7:ec:f6:1e:8a:62:49:79: be:09:3d:21:51:fc:30:b1:a2:83:b7:98:18:d0:15: 82:cc:cd:73:08:34:4b:dd:b8:53:16:29:ae:0e:4d: 4d:ba:49:e0:30:83:b4:45:c9:e8:3e:17:1a:9a:e5: 65:64:9b:d3:d8:f1:0e:2d:19:8f:1a:23:62:43:c0: 5c:f0:b1:4c:9b:e8:c0:68:03:fa:38:dd:b9:e5:19: 07:34:d1:26:ed:9b:c2:cd:ef:d2:57:24:e7:a5:a5: ac:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2D:4A:EA:B7:97:43:42:F2:3B:A7:8F:81:DB:00:2F:4A:08:03:81 X509v3 Authority Key Identifier: keyid:2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:9a:f1:4c:fa:0b:99:4d:10:d6:7d:96:00:7a:ea:b7:95:b8: 28:46:63:5a:15:81:2e:58:c4:0b:4f:75:e4:59:67:87:d4:41: a5:5d:83:b6:06:ac:1a:b1:3d:21:87:f0:c6:5c:0a:e5:0e:7b: aa:9c:fe:d6:55:47:65:85:1e:b4:1f:83:3a:a7:a5:8c:98:56: 75:bc:51:8f:87:bd:8d:68:ec:19:73:06:e2:45:2d:24:b5:db: 08:97:b1:c5:77:ae:06:12:30:60:f0:a4:0f:b6:43:6d:7d:58: b6:f0:c0:c4:53:74:04:f7:7b:39:1e:c9:1f:6c:6a:78:55:76: 95:71:80:63:4a:40:22:dd:97:18:be:20:f9:55:4e:7c:b4:08: a6:55:87:2c:82:b5:44:86:c4:0d:2e:2e:4e:1d:78:14:0a:6e: bd:b3:57:45:7b:9f:1a:ee:7d:cb:d1:ca:16:38:ae:b7:3b:6f: be:ca:24:95:e7:11:b9:dd:1f:b1:48:75:40:1c:da:2f:4f:ce: a7:31:82:2f:10:7f:83:ed:47:81:be:5f:db:8f:a1:84:88:a6: f0:76:51:b4:9a:97:c2:b1:9b:c9:d8:61:c1:71:9d:0e:ee:09: 54:3d:a9:27:40:83:9d:d3:1f:e7:2f:83:6b:8f:d4:58:3a:51: f2:a3:81:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00IvF5/vcwVsZXAJycmNXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYjAzNTcwNzIwMmQ0MDEzYTQ0NzliZTUxMTJkN2ZhMjI3 YjcyNzUwHhcNMjYwMTI1MTEwMTA2WhcNMjYwMTI2MTEwMTA2WjAzMTEwLwYDVQQD EyhjZjJkNGFlYWI3OTc0MzQyZjIzYmE3OGY4MWRiMDAyZjRhMDgwMzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiM9a6xonOVuGzwgrln4b82pDdWCL oxDrcEd7IP2fuuYAVmXhwMfW3jz/A9tzohHXYsO1/LWxQSCRe8RW3YmV0UihYYJH 8qsyTMuKba3C5vomxNZL7euUxlcUKXGidKaBj6xGMKzvDIrv//P2dj378X+oCc5b WW2LBOspHC+mTNEs0SxX8Y7VHjfbn71RiUTYTbFMh86K6NeKqytyp+z2HopiSXm+ CT0hUfwwsaKDt5gY0BWCzM1zCDRL3bhTFimuDk1NukngMIO0RcnoPhcamuVlZJvT 2PEOLRmPGiNiQ8Bc8LFMm+jAaAP6ON255RkHNNEm7ZvCze/SVyTnpaWssQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8tSuq3l0NC8junj4HbAC9KCAOBMB8GA1UdIwQY MBaAFCywNXByAtQBOkR5vlES1/oie3J1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTExBMWNISUMxQUU2UkhtLVVSTFgtaUo3Y25VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84YzEzMjMtYWZjYy00YjQ0LTk4ODEt MDYzMDhhNDQ4NTZkLzEvTExBMWNISUMxQUU2UkhtLVVSTFgtaUo3Y25VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS84YzEzMjMtYWZjYy00YjQ0LTk4ODEtMDYzMDhhNDQ4NTZk LzEvTExBMWNISUMxQUU2UkhtLVVSTFgtaUo3Y25VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoJrxTPoL mU0Q1n2WAHrqt5W4KEZjWhWBLljEC0915Flnh9RBpV2DtgasGrE9IYfwxlwK5Q57 qpz+1lVHZYUetB+DOqeljJhWdbxRj4e9jWjsGXMG4kUtJLXbCJexxXeuBhIwYPCk D7ZDbX1YtvDAxFN0BPd7OR7JH2xqeFV2lXGAY0pAIt2XGL4g+VVOfLQIplWHLIK1 RIbEDS4uTh14FApuvbNXRXufGu59y9HKFjiutztvvsoklecRud0fsUh1QBzaL0/O pzGCLxB/g+1Hgb5f24+hhIim8HZRtJqXwrGbydhhwXGdDu4JVD2pJ0CDndMf5y+D a4/UWDpR8qOBSg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:34 2026 by rpki-client