This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft File: lvgJYTh33quHSpQB0VbbFP9NKBQ.mft (raw, json) Hash identifier: pCdUoDp6g/LEC7nEBeWw5UgHWeD3HxZ3mtBgmuNYLwA= Subject key identifier: 91:F9:38:4B:49:59:2F:6E:64:5B:CF:72:9D:FD:AE:3F:0F:61:06:7B Authority key identifier: 96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14 Certificate issuer: /CN=96f809613877deab874a9401d156db14ff4d2814 Certificate serial: 019BF5E368D76611F54078E0EB836853F931 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft Manifest number: 1381 Signing time: Sun 25 Jan 2026 16:01:19 +0000 Manifest this update: Sun 25 Jan 2026 16:01:19 +0000 Manifest next update: Mon 26 Jan 2026 16:01:19 +0000 Files and hashes: 1: VYI9qa8JCE6VkIqD0V54pQu3Jdo.roa (hash: pJTrpDe7OIckvsF3AmZnqqPmgPvtyMz/7jk3tJQykek=) 2: lvgJYTh33quHSpQB0VbbFP9NKBQ.crl (hash: PZOf/pOvU5eojAGV0im11KNzkp/Xi0/H4ypB431gOI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:68:d7:66:11:f5:40:78:e0:eb:83:68:53:f9:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96f809613877deab874a9401d156db14ff4d2814 Validity Not Before: Jan 25 16:01:19 2026 GMT Not After : Jan 26 16:01:19 2026 GMT Subject: CN=91f9384b49592f6e645bcf729dfdae3f0f61067b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:19:10:1a:ab:96:22:3b:48:e1:e1:1f:e4:a4: ca:f6:38:70:6f:5f:ff:fc:32:bb:db:4a:e7:47:7b: 83:d2:13:d6:36:62:1b:16:17:69:28:49:cc:c1:2b: 7f:4c:96:30:d9:5e:03:cd:2f:fb:94:9d:cc:50:ff: 35:97:e4:c5:a2:75:98:01:52:a0:9e:bf:ba:4b:c1: 06:bd:c7:7b:d0:74:53:e3:14:f7:6e:88:36:cb:63: b9:d8:24:60:76:11:8e:ff:ca:08:56:05:f0:df:07: f8:48:9c:d5:d6:6e:72:6d:74:43:ab:bc:47:e1:58: 0b:16:c4:5a:36:a6:a1:7e:07:62:f2:eb:4e:73:7e: a7:e4:29:f4:04:48:67:e8:ac:ef:30:4b:1c:b6:e9: 80:2d:1d:5c:f9:4d:c3:57:45:ca:ee:8f:39:1c:16: e5:03:47:ba:bf:a6:2e:ea:0a:fa:35:07:28:d3:a3: 9e:cf:1a:30:da:94:ff:05:21:1a:1b:b0:1f:f9:0c: 7e:db:76:6f:e7:c5:ca:68:d0:a6:ee:cb:ca:f5:40: 86:f4:1a:ba:72:65:52:b0:e2:17:f2:ac:21:92:58: 49:8b:40:5a:8b:0d:81:53:9f:b8:7a:1d:ea:9c:4b: 47:3c:6d:4a:01:1c:2e:ea:27:43:9e:b6:63:4d:0d: f9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F9:38:4B:49:59:2F:6E:64:5B:CF:72:9D:FD:AE:3F:0F:61:06:7B X509v3 Authority Key Identifier: keyid:96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:b5:0c:86:fa:1c:51:6d:60:c6:a1:d0:c1:59:69:d0:af:30: b7:82:c1:4a:bf:a8:e4:8f:61:5b:82:19:c7:05:b6:26:a5:d2: f7:03:17:e4:fd:8e:de:9f:30:5b:be:f4:4c:48:d0:75:c1:1d: 8d:5b:a3:5b:8e:c2:38:25:91:4c:6e:87:55:6f:59:4d:f6:6b: 2c:65:e2:fb:d4:3b:8e:6d:1c:15:f9:40:7c:b4:2c:ef:84:65: 7d:1c:f4:65:6d:47:d1:c3:e5:08:28:d3:9f:81:48:a5:27:13: 3d:62:8b:26:6f:f3:75:16:58:65:90:67:48:1a:96:23:02:e7: 31:f7:65:d7:77:4c:76:90:1b:73:c2:47:9b:df:52:ce:a4:59: 84:52:ed:df:71:b4:1f:76:e2:88:a8:da:3a:79:ed:94:2d:5a: cf:c2:06:83:03:72:48:98:51:56:99:17:0e:1e:97:d4:e0:64: e5:2b:01:50:01:55:f5:03:43:72:b6:77:93:22:29:09:4a:cf: 6b:07:9f:f5:f5:f3:15:07:d1:a9:c3:b5:79:31:2c:31:5d:c6: 46:43:0b:b8:4e:21:57:6f:2f:a1:60:d8:59:0a:6f:07:23:cf: 5b:f9:b1:0b:ee:39:ff:46:b6:0e:46:4d:ec:0f:e0:f7:29:20: 5d:87:82:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv142jXZhH1QHjg64NoU/kxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZjgwOTYxMzg3N2RlYWI4NzRhOTQwMWQxNTZkYjE0ZmY0 ZDI4MTQwHhcNMjYwMTI1MTYwMTE5WhcNMjYwMTI2MTYwMTE5WjAzMTEwLwYDVQQD Eyg5MWY5Mzg0YjQ5NTkyZjZlNjQ1YmNmNzI5ZGZkYWUzZjBmNjEwNjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hkQGquWIjtI4eEf5KTK9jhwb1// /DK720rnR3uD0hPWNmIbFhdpKEnMwSt/TJYw2V4DzS/7lJ3MUP81l+TFonWYAVKg nr+6S8EGvcd70HRT4xT3bog2y2O52CRgdhGO/8oIVgXw3wf4SJzV1m5ybXRDq7xH 4VgLFsRaNqahfgdi8utOc36n5Cn0BEhn6KzvMEsctumALR1c+U3DV0XK7o85HBbl A0e6v6Yu6gr6NQco06Oezxow2pT/BSEaG7Af+Qx+23Zv58XKaNCm7svK9UCG9Bq6 cmVSsOIX8qwhklhJi0Baiw2BU5+4eh3qnEtHPG1KARwu6idDnrZjTQ35NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJH5OEtJWS9uZFvPcp39rj8PYQZ7MB8GA1UdIwQY MBaAFJb4CWE4d96rh0qUAdFW2xT/TSgUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHZnSllUaDMzcXVIU3BRQjBWYmJGUDlOS0JRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hZDI3ODItZjUzYS00YmI0LWI4ZDct NjQ2NmQ0ODM0NTljLzEvbHZnSllUaDMzcXVIU3BRQjBWYmJGUDlOS0JRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hZDI3ODItZjUzYS00YmI0LWI4ZDctNjQ2NmQ0ODM0NTlj LzEvbHZnSllUaDMzcXVIU3BRQjBWYmJGUDlOS0JRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7UMhvoc UW1gxqHQwVlp0K8wt4LBSr+o5I9hW4IZxwW2JqXS9wMX5P2O3p8wW770TEjQdcEd jVujW47COCWRTG6HVW9ZTfZrLGXi+9Q7jm0cFflAfLQs74RlfRz0ZW1H0cPlCCjT n4FIpScTPWKLJm/zdRZYZZBnSBqWIwLnMfdl13dMdpAbc8JHm99SzqRZhFLt33G0 H3biiKjaOnntlC1az8IGgwNySJhRVpkXDh6X1OBk5SsBUAFV9QNDcrZ3kyIpCUrP awef9fXzFQfRqcO1eTEsMV3GRkMLuE4hV28voWDYWQpvByPPW/mxC+45/0a2DkZN 7A/g9ykgXYeCmA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:31:55 2026 by rpki-client