This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft File: lTXl04RZIbnV_fI2N8WYEbg4Y08.mft (raw, json) Hash identifier: 5y6a6dyFZU7CrGUkJdeKwBG0YCoD50RuF2MAd6dt0vM= Subject key identifier: B5:DB:F3:C6:F7:9B:D3:24:09:9A:5D:F1:52:20:A4:B0:87:3A:5E:E0 Authority key identifier: 95:35:E5:D3:84:59:21:B9:D5:FD:F2:36:37:C5:98:11:B8:38:63:4F Certificate issuer: /CN=9535e5d3845921b9d5fdf23637c59811b838634f Certificate serial: 019BF7D26FAD83EDE6A8A37BBEBDE9B5CAF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft Manifest number: 01D4 Signing time: Mon 26 Jan 2026 01:02:01 +0000 Manifest this update: Mon 26 Jan 2026 01:02:01 +0000 Manifest next update: Tue 27 Jan 2026 01:02:01 +0000 Files and hashes: 1: S0T2kL_9PWLHXGxcH-DefO6iYPU.roa (hash: Pu+0PGdxODxmEsVaBVFzUtH5CFGWNyj6dWAHyNzOXw4=) 2: lTXl04RZIbnV_fI2N8WYEbg4Y08.crl (hash: fKC+Iia4pQb4tl/RQY/54qzfSq2mOccuTuI8h9ZdmR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:6f:ad:83:ed:e6:a8:a3:7b:be:bd:e9:b5:ca:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9535e5d3845921b9d5fdf23637c59811b838634f Validity Not Before: Jan 26 01:02:01 2026 GMT Not After : Jan 27 01:02:01 2026 GMT Subject: CN=b5dbf3c6f79bd324099a5df15220a4b0873a5ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0e:1f:87:0f:33:cf:58:ff:5b:a4:65:cd:10: 9d:7d:35:87:4e:05:2a:6c:6c:cb:71:20:74:77:b3: d3:e0:e0:57:9b:b7:f4:dc:d9:6a:be:a2:a4:eb:a2: 5b:99:77:13:e8:82:2f:3c:6e:05:78:91:aa:d9:73: 21:1f:ee:cf:46:22:27:d4:4f:a5:ba:a7:47:28:8d: 1d:4b:bf:53:52:39:3c:ba:28:f8:3f:b8:e5:5a:13: ed:64:68:38:73:49:4a:18:79:b4:26:15:4f:2b:64: f1:50:34:4e:21:d1:c8:11:b4:f6:0b:34:cf:24:43: 59:3c:1a:0b:7f:4c:6f:b4:22:b4:eb:26:2b:c1:e8: ef:bb:26:69:43:c9:0a:25:30:7d:37:ba:2c:78:33: 11:9c:f9:b7:ba:ff:71:68:3e:e6:4d:80:50:18:5b: ee:e6:d2:ed:0f:c6:d3:60:d0:d4:77:1a:48:0f:ce: 12:e6:86:49:2a:7e:b8:46:d7:6a:f3:17:18:b9:43: e2:b2:cb:f1:df:c6:08:4c:7c:81:23:b0:e6:09:8f: 85:33:b5:27:68:14:75:2d:b9:45:02:7b:83:7d:72: 05:df:bc:09:66:74:2e:ba:36:48:73:ce:ce:3a:e9: 61:da:b0:63:cc:9e:26:b8:ea:ae:c3:14:f5:b5:e3: 21:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DB:F3:C6:F7:9B:D3:24:09:9A:5D:F1:52:20:A4:B0:87:3A:5E:E0 X509v3 Authority Key Identifier: keyid:95:35:E5:D3:84:59:21:B9:D5:FD:F2:36:37:C5:98:11:B8:38:63:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:c5:9e:51:7d:e5:30:12:15:6a:9b:ec:11:e5:8c:0f:70:01: c1:78:8b:9f:29:57:55:60:2c:1f:78:42:b1:56:37:af:c6:b6: 15:11:a6:e8:85:01:6d:3f:ed:29:d4:1b:35:e9:59:16:f9:ff: 29:16:33:61:a6:95:d6:b4:ab:c3:2e:b3:07:42:53:a1:6c:39: be:9a:97:53:e1:f0:38:2b:a5:4d:dd:f9:dc:b4:5c:02:a5:b9: b0:75:36:bc:cb:8a:d7:71:87:8d:28:0d:fb:3d:f9:c2:4e:05: 38:b9:1c:3c:6e:3a:5b:a8:80:d3:3f:a9:46:a9:2c:cc:fd:c0: b4:72:3b:49:a1:5d:60:3d:58:7d:4b:ee:8e:eb:98:bb:53:ef: 83:a3:bb:29:d1:ef:ca:b9:84:f3:e9:f3:4c:6d:bc:99:86:72: 26:93:be:09:d5:4c:ec:12:16:14:73:02:25:3a:bf:3c:08:3f: e1:34:5f:c6:33:c5:1e:82:7b:00:55:ca:bc:f4:3b:f1:26:a1: d1:a6:2b:05:22:a6:f5:fb:55:60:dc:45:a1:0c:35:11:75:e8: fa:c5:02:e1:ab:e0:86:75:a4:1b:0c:0c:c3:0d:e5:73:28:6c: b5:89:98:fd:e4:8c:bf:08:d9:8d:26:01:4e:c0:75:bb:a2:5d: 7a:5a:d9:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30m+tg+3mqKN7vr3ptcr3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MzVlNWQzODQ1OTIxYjlkNWZkZjIzNjM3YzU5ODExYjgz ODYzNGYwHhcNMjYwMTI2MDEwMjAxWhcNMjYwMTI3MDEwMjAxWjAzMTEwLwYDVQQD EyhiNWRiZjNjNmY3OWJkMzI0MDk5YTVkZjE1MjIwYTRiMDg3M2E1ZWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA4fhw8zz1j/W6RlzRCdfTWHTgUq bGzLcSB0d7PT4OBXm7f03NlqvqKk66JbmXcT6IIvPG4FeJGq2XMhH+7PRiIn1E+l uqdHKI0dS79TUjk8uij4P7jlWhPtZGg4c0lKGHm0JhVPK2TxUDROIdHIEbT2CzTP JENZPBoLf0xvtCK06yYrwejvuyZpQ8kKJTB9N7oseDMRnPm3uv9xaD7mTYBQGFvu 5tLtD8bTYNDUdxpID84S5oZJKn64Rtdq8xcYuUPissvx38YITHyBI7DmCY+FM7Un aBR1LblFAnuDfXIF37wJZnQuujZIc87OOulh2rBjzJ4muOquwxT1teMhPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXb88b3m9MkCZpd8VIgpLCHOl7gMB8GA1UdIwQY MBaAFJU15dOEWSG51f3yNjfFmBG4OGNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFRYbDA0UlpJYm5WX2ZJMk44V1lFYmc0WTA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mZGQyNTUtZDYxZS00MGI2LWE3OGYt OWNlZjkxN2I4ZTM3LzEvbFRYbDA0UlpJYm5WX2ZJMk44V1lFYmc0WTA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9mZGQyNTUtZDYxZS00MGI2LWE3OGYtOWNlZjkxN2I4ZTM3 LzEvbFRYbDA0UlpJYm5WX2ZJMk44V1lFYmc0WTA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMWeUX3l MBIVapvsEeWMD3ABwXiLnylXVWAsH3hCsVY3r8a2FRGm6IUBbT/tKdQbNelZFvn/ KRYzYaaV1rSrwy6zB0JToWw5vpqXU+HwOCulTd353LRcAqW5sHU2vMuK13GHjSgN +z35wk4FOLkcPG46W6iA0z+pRqkszP3AtHI7SaFdYD1YfUvujuuYu1Pvg6O7KdHv yrmE8+nzTG28mYZyJpO+CdVM7BIWFHMCJTq/PAg/4TRfxjPFHoJ7AFXKvPQ78Sah 0aYrBSKm9ftVYNxFoQw1EXXo+sUC4avghnWkGwwMww3lcyhstYmY/eSMvwjZjSYB TsB1u6JdelrZAw== -----END CERTIFICATE-----Generated at Mon Jan 26 08:42:00 2026 by rpki-client