This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft File: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft (raw, json) Hash identifier: kwpWtgYmTSOSzE5evMEVz/2pJWeMp2gDHnaN7BmSD+8= Subject key identifier: 29:72:AE:98:3D:A2:4E:B9:62:BA:EF:5D:E8:26:14:5A:EF:56:B0:C8 Authority key identifier: 95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44 Certificate issuer: /CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044 Certificate serial: 019BF6508F780E5ADE45B4DBEE47ED143F6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft Manifest number: 0501 Signing time: Sun 25 Jan 2026 18:00:33 +0000 Manifest this update: Sun 25 Jan 2026 18:00:33 +0000 Manifest next update: Mon 26 Jan 2026 18:00:33 +0000 Files and hashes: 1: 1teBGWyrdeMcfN_5PnazQXWLD1E.roa (hash: WrL5v9AFdVY6509NouX1fyjcl0G8QjZ4sA1Zzo1jtEc=) 2: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl (hash: 3rL0Yztpl+KVkgZLPXxKDVsEkP8sHXDhBUshrTFP4rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:8f:78:0e:5a:de:45:b4:db:ee:47:ed:14:3f:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044 Validity Not Before: Jan 25 18:00:33 2026 GMT Not After : Jan 26 18:00:33 2026 GMT Subject: CN=2972ae983da24eb962baef5de826145aef56b0c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:08:c8:d7:d9:a9:90:81:d0:2e:bd:49:14:7e: 79:54:d9:aa:5b:4a:43:36:d1:a0:01:cd:45:4b:d3: a4:a6:d3:5e:48:fb:e6:09:fb:8b:f6:2e:fc:14:7b: bf:5a:f2:39:31:34:c3:cd:89:28:85:5e:0c:fd:de: 2f:40:34:11:1e:dc:a5:5c:54:2a:d9:e0:b4:38:fd: 00:c2:c4:c9:2d:c8:12:79:78:85:25:20:0a:e5:22: 0e:36:b1:d3:f2:e1:d5:72:46:0d:ae:3e:6b:d0:bb: 26:4b:55:e5:93:66:02:0d:88:dd:9e:44:61:8a:45: 35:5c:f3:71:07:c9:cf:fe:c6:93:b7:b8:70:c3:4b: 07:c4:84:ec:05:77:2c:45:e4:7c:45:29:66:af:5a: 28:70:98:82:a2:f8:49:7a:9a:3d:81:a8:da:f7:59: c0:64:6d:82:75:9e:bd:3b:2a:0c:42:82:75:a2:c7: ba:83:14:5b:dd:4c:8f:7f:c4:eb:1d:fa:48:3f:0a: df:76:60:1b:39:5c:2a:97:f8:e1:4d:55:4c:3f:c9: 72:43:3b:87:18:29:2c:8e:85:41:cc:30:65:f8:ac: ea:93:ee:a4:b1:86:25:d6:c9:da:46:99:f7:b0:2a: e3:58:c2:d5:50:6e:d0:ee:aa:5c:2d:14:ca:1d:31: c6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:72:AE:98:3D:A2:4E:B9:62:BA:EF:5D:E8:26:14:5A:EF:56:B0:C8 X509v3 Authority Key Identifier: keyid:95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b2:c7:50:79:2d:6f:ab:b9:01:3d:8f:3e:4c:de:28:74:11: 8d:05:3b:f7:92:b4:4d:07:da:d7:9d:f9:3e:5d:fa:4f:cd:54: cb:e8:02:12:e7:49:3d:e9:68:28:df:8c:de:09:65:8c:aa:6d: 15:9c:3a:57:4f:71:48:e7:b2:72:a8:66:89:ac:b0:e2:e0:97: 5e:21:97:4e:5e:4b:ca:54:88:f1:b2:08:63:63:80:1f:d6:64: 6c:b0:8d:68:d5:5b:53:d8:0e:d8:58:e2:e0:6e:b5:c4:1f:ed: fd:8d:92:a8:8c:01:ed:8b:3a:d8:43:34:5e:b2:d7:50:ee:4e: fd:0b:99:25:88:d8:9e:e1:c4:f6:4f:8c:ff:18:30:d0:ae:b9: ce:d1:bf:62:a3:00:09:7c:13:98:56:38:2e:4e:b9:8f:80:0a: 8d:52:fb:b4:c3:c1:83:78:0c:f4:ff:67:03:1c:18:0b:24:25: ae:a1:b6:cd:f7:01:6f:28:31:7c:65:dc:95:1c:7d:27:53:48: 41:53:7d:ba:c9:e5:c8:ff:38:70:f2:60:e0:7d:36:86:53:cb: 17:fd:26:99:9b:c8:3c:61:12:4b:c5:1b:26:f5:99:f5:93:11: 29:22:b1:b3:dd:df:79:73:8d:9e:20:d7:d5:00:bb:16:ac:ad: b6:63:f1:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UI94DlreRbTb7kftFD9sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1Y2IxOGM3ZWNlNmJkZGM5NTcwZjM3ZmY3ODY2MGI1OGU2 YzIwNDQwHhcNMjYwMTI1MTgwMDMzWhcNMjYwMTI2MTgwMDMzWjAzMTEwLwYDVQQD EygyOTcyYWU5ODNkYTI0ZWI5NjJiYWVmNWRlODI2MTQ1YWVmNTZiMGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAjI19mpkIHQLr1JFH55VNmqW0pD NtGgAc1FS9OkptNeSPvmCfuL9i78FHu/WvI5MTTDzYkohV4M/d4vQDQRHtylXFQq 2eC0OP0AwsTJLcgSeXiFJSAK5SIONrHT8uHVckYNrj5r0LsmS1Xlk2YCDYjdnkRh ikU1XPNxB8nP/saTt7hww0sHxITsBXcsReR8RSlmr1oocJiCovhJepo9gaja91nA ZG2CdZ69OyoMQoJ1ose6gxRb3UyPf8TrHfpIPwrfdmAbOVwql/jhTVVMP8lyQzuH GCksjoVBzDBl+Kzqk+6ksYYl1snaRpn3sCrjWMLVUG7Q7qpcLRTKHTHGiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClyrpg9ok65YrrvXegmFFrvVrDIMB8GA1UdIwQY MBaAFJXLGMfs5r3clXDzf/eGYLWObCBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGNzWXgtem12ZHlWY1BOXzk0Wmd0WTVzSUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84ZjRhMmItNDkyYy00MzMxLTg0Zjgt MDI2ZTBhNGNjYWFhLzEvbGNzWXgtem12ZHlWY1BOXzk0Wmd0WTVzSUVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi84ZjRhMmItNDkyYy00MzMxLTg0ZjgtMDI2ZTBhNGNjYWFh LzEvbGNzWXgtem12ZHlWY1BOXzk0Wmd0WTVzSUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirLHUHkt b6u5AT2PPkzeKHQRjQU795K0TQfa1535Pl36T81Uy+gCEudJPeloKN+M3glljKpt FZw6V09xSOeycqhmiayw4uCXXiGXTl5LylSI8bIIY2OAH9ZkbLCNaNVbU9gO2Fji 4G61xB/t/Y2SqIwB7Ys62EM0XrLXUO5O/QuZJYjYnuHE9k+M/xgw0K65ztG/YqMA CXwTmFY4Lk65j4AKjVL7tMPBg3gM9P9nAxwYCyQlrqG2zfcBbygxfGXclRx9J1NI QVN9usnlyP84cPJg4H02hlPLF/0mmZvIPGESS8UbJvWZ9ZMRKSKxs93feXONniDX 1QC7FqyttmPxww== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:32 2026 by rpki-client