This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft File: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft (raw, json) Hash identifier: 7E+b2KyUgxqKd2uOcV7hmNZ3OutcaUQubbyERm9VRg4= Subject key identifier: 04:A7:DD:D0:E7:F9:2A:A4:6A:EB:A9:BD:5D:34:94:13:16:FE:6C:7F Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 019BF318B0042940A5DB7F46ABC432CC2368 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft Manifest number: 095B Signing time: Sun 25 Jan 2026 03:00:39 +0000 Manifest this update: Sun 25 Jan 2026 03:00:39 +0000 Manifest next update: Mon 26 Jan 2026 03:00:39 +0000 Files and hashes: 1: EJUfJ6nXJxIlLWpFH5xkuj0oTj0.roa (hash: td45xoqPpbc6Gcv+omp/fWPWBTYjdFq1Rce3dc0yMFE=) 2: GFld6khnEFpi6gQW0hMwMmLlwl0.roa (hash: I//YiN+Se4j9l8lgpKjzKKrJJsrwrv0cFrGyIWJUOJM=) 3: Wn0l-oo4EvJ32y-A9Te_3Bo22rE.roa (hash: EJSmVb0JmOGritsgWS3ZtbKYPG2hsEELjPpmAJHyJCw=) 4: XPDlq-HeT_N_sHKNDPQmVFP0Ivw.roa (hash: kysYySEZmFj+8n7DlA09NetFDPPbrGWXcdcAS1Hu5j0=) 5: cUAPfDvh9ctdBxtYWpRtEO8lG-g.roa (hash: b7MFeinCWo8o8FGB9kNt+44ggK2LvY6c1Zj//B8xVDY=) 6: eQN4Vnnkm9ILLr1CQqtdqk8i4Cc.roa (hash: a793akF/TsnRIOMvjjqGG7ES5VGanrP8pXq6vUrCFVg=) 7: ix3G7JJ__thdkqzxBKhHSgEyUHQ.roa (hash: tqrv+mk7OqdSNSDsJu86ikaVD3U+743I3Wq1BdDs+CY=) 8: j9Izwu_hlbHgfdsrEekJ4AhyNxc.roa (hash: gQFSyERJDH6nAPPc5747gmPm78inz3QBTsIip7aNmlE=) 9: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl (hash: kktrX3NNr1D0N3ko6J4GdButMcTeUHmRZWvM8zAMLCY=) 10: tsos8eFPeooULoppkyeNfVcA8Jk.roa (hash: P1kvV9Q/5XqDoLtfOjAVY+r8AgKwUeqcSTXWYXo6SZk=) 11: ujxhGCIYEFST9j-DRoKisCQQu7c.roa (hash: AnXG8guwVLItbuN1JjYAFkgz+rL1QHqF7D8yDPRN/BY=) 12: wLzBl1TIo7EO7s1obxvC0i1YAfw.roa (hash: e/MgA8dzgW4G4QsjGyKgevc8bH2s9NTc1MsFkFjalAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:18:b0:04:29:40:a5:db:7f:46:ab:c4:32:cc:23:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Jan 25 03:00:39 2026 GMT Not After : Jan 26 03:00:39 2026 GMT Subject: CN=04a7ddd0e7f92aa46aeba9bd5d34941316fe6c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:00:d1:b7:9d:f3:a3:7a:55:69:d2:3f:d8:00: 3c:15:7f:4b:b3:3b:de:0d:aa:91:14:80:7a:e9:f3: c4:f1:97:c2:8b:25:0a:9b:e8:63:38:ee:34:24:4c: 1e:62:03:3f:52:3d:22:02:fa:34:bc:d8:e1:c5:60: 0c:6f:83:b2:93:cf:95:82:84:4b:b0:98:d5:c3:d2: 88:38:b4:03:e0:16:4b:ec:2b:7d:4e:f5:e4:da:8b: 9e:44:97:5b:0f:cf:e0:3c:8b:3c:d5:87:0c:5b:62: 26:93:70:d6:96:dc:35:6b:44:35:84:1b:85:03:1e: 21:db:70:c7:5a:89:94:98:f1:ab:88:8a:99:5b:1d: 92:e8:15:62:93:30:f2:d1:59:49:41:3d:5e:60:de: 81:42:ce:02:c4:f2:a9:c5:56:8f:56:be:08:9c:a5: da:1a:75:3e:d0:9c:b5:10:b0:3b:66:e1:9e:e7:9e: 5e:ea:f4:a2:ff:b7:cf:4a:20:b8:d8:61:d1:83:0c: 79:28:cf:4b:fd:50:18:0a:04:db:0f:62:a1:69:97: 7f:dd:0e:ae:55:18:7a:fd:1d:11:24:17:17:3c:db: 50:71:0f:0a:18:b6:68:2a:7b:c4:b0:0a:4a:28:2c: 77:98:a8:2d:8f:c9:58:99:1f:61:70:35:99:85:b7: cb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A7:DD:D0:E7:F9:2A:A4:6A:EB:A9:BD:5D:34:94:13:16:FE:6C:7F X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:7c:ff:11:e8:3d:9d:d4:7e:54:29:65:7c:c7:ea:0a:d3:7a: a3:a5:11:c0:2e:18:c7:82:12:30:b0:d7:ea:f3:1a:1e:e7:b7: de:91:5d:ba:e5:8d:0b:6c:d6:b0:8e:59:89:1e:1b:8d:dd:82: 24:57:cc:07:e5:e0:99:ea:ac:a7:23:54:6b:9f:5a:75:92:28: 43:df:7c:b0:1a:c6:e8:18:fe:eb:7e:13:b2:2f:58:50:26:79: 8e:cd:ac:0d:f5:b5:e2:76:e8:51:55:67:14:11:5f:f3:7e:42: b2:62:d2:7e:a4:ee:08:16:0b:62:06:f1:18:41:db:43:8e:92: ae:eb:9d:30:fc:d5:b7:3a:4b:a9:a4:3a:d8:37:af:4e:0d:74: 88:da:37:00:d0:c9:d3:d7:35:c0:9f:3c:38:61:76:bd:2d:a2: 77:e8:47:8b:0f:ab:49:64:b3:26:fa:95:72:67:fc:f7:c0:25: e7:0d:dc:40:28:92:9b:d4:96:f3:fe:ac:9b:b5:cf:e4:61:d0: 0d:77:48:3b:60:5f:25:9c:17:a2:da:ec:7d:44:4d:6e:3c:df: 6a:34:5e:86:81:d1:5d:0b:63:af:f3:86:5b:af:69:61:e7:63: 58:1b:39:8e:81:44:81:ea:2a:e6:64:82:de:b7:ba:74:07:bd: 57:80:04:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGLAEKUCl239Gq8QyzCNoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjYwMTI1MDMwMDM5WhcNMjYwMTI2MDMwMDM5WjAzMTEwLwYDVQQD EygwNGE3ZGRkMGU3ZjkyYWE0NmFlYmE5YmQ1ZDM0OTQxMzE2ZmU2YzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QDRt53zo3pVadI/2AA8FX9Lszve DaqRFIB66fPE8ZfCiyUKm+hjOO40JEweYgM/Uj0iAvo0vNjhxWAMb4Oyk8+VgoRL sJjVw9KIOLQD4BZL7Ct9TvXk2oueRJdbD8/gPIs81YcMW2Imk3DWltw1a0Q1hBuF Ax4h23DHWomUmPGriIqZWx2S6BVikzDy0VlJQT1eYN6BQs4CxPKpxVaPVr4InKXa GnU+0Jy1ELA7ZuGe555e6vSi/7fPSiC42GHRgwx5KM9L/VAYCgTbD2KhaZd/3Q6u VRh6/R0RJBcXPNtQcQ8KGLZoKnvEsApKKCx3mKgtj8lYmR9hcDWZhbfLMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASn3dDn+SqkauupvV00lBMW/mx/MB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoXz/Eeg9 ndR+VCllfMfqCtN6o6URwC4Yx4ISMLDX6vMaHue33pFduuWNC2zWsI5ZiR4bjd2C JFfMB+XgmeqspyNUa59adZIoQ998sBrG6Bj+634Tsi9YUCZ5js2sDfW14nboUVVn FBFf835CsmLSfqTuCBYLYgbxGEHbQ46SruudMPzVtzpLqaQ62DevTg10iNo3ANDJ 09c1wJ88OGF2vS2id+hHiw+rSWSzJvqVcmf898Al5w3cQCiSm9SW8/6sm7XP5GHQ DXdIO2BfJZwXotrsfURNbjzfajRehoHRXQtjr/OGW69pYedjWBs5joFEgeoq5mSC 3re6dAe9V4AEyw== -----END CERTIFICATE-----Generated at Sun Jan 25 10:41:40 2026 by rpki-client