This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft File: LpjFBqF0zyytnBpsW4HW6JiGNi0.mft (raw, json) Hash identifier: Xov+JnowqyQtCE4n7CbBltQHk/hbs3JlGx8xsgw/3Ss= Subject key identifier: 87:39:4F:D4:0F:B0:AA:B3:19:12:B7:0C:37:BF:46:18:3F:EE:45:1E Authority key identifier: 2E:98:C5:06:A1:74:CF:2C:AD:9C:1A:6C:5B:81:D6:E8:98:86:36:2D Certificate issuer: /CN=2e98c506a174cf2cad9c1a6c5b81d6e89886362d Certificate serial: 019BF8ADAE06E9024CD20A6EED0C0F1199E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft Manifest number: 15FD Signing time: Mon 26 Jan 2026 05:01:30 +0000 Manifest this update: Mon 26 Jan 2026 05:01:30 +0000 Manifest next update: Tue 27 Jan 2026 05:01:30 +0000 Files and hashes: 1: Du6kGTRHXI4yfntbUGKdYnjPgko.roa (hash: 1oJFFLp85i5EIPDvvQ2y+xVdVmVO4zl8WcaNvzV96iI=) 2: LpjFBqF0zyytnBpsW4HW6JiGNi0.crl (hash: /JyYx/nur+6VJweUIJ0TQRyni1VQsyWnMjbbWWVNiM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:ae:06:e9:02:4c:d2:0a:6e:ed:0c:0f:11:99:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e98c506a174cf2cad9c1a6c5b81d6e89886362d Validity Not Before: Jan 26 05:01:30 2026 GMT Not After : Jan 27 05:01:30 2026 GMT Subject: CN=87394fd40fb0aab31912b70c37bf46183fee451e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5b:20:d9:47:f9:f4:6e:b7:24:2a:d9:df:e0: 00:ad:e5:ee:83:00:95:3a:8f:7d:e8:48:6e:5f:d2: c5:71:19:e0:14:34:69:b2:48:78:04:f7:8a:d2:24: 5c:d2:e7:14:a5:f3:d6:2c:aa:5b:ce:6e:c7:d8:3c: 86:a2:77:89:2c:92:7b:18:8f:19:ad:68:9d:56:04: e6:4e:36:a1:f5:c4:41:f6:55:af:99:a9:d6:22:ee: d5:8d:f5:9d:fe:db:f8:43:85:17:96:34:4a:4e:bb: ee:25:1e:4f:e6:11:bb:83:91:16:fe:0e:17:f0:ff: aa:68:76:07:15:5c:d7:56:1c:fa:c1:73:15:46:20: 91:25:96:0d:3c:17:be:77:1f:4e:b5:10:de:4f:ec: ce:35:c7:83:42:ee:e0:47:ea:81:04:02:6a:50:8f: 6d:9f:6b:19:06:27:88:3b:50:a4:4a:c1:1c:8d:55: 18:8b:8d:a4:1d:d4:51:f8:d8:8b:d4:0b:c4:cf:ab: f9:62:41:87:eb:36:53:4b:a1:91:ad:6d:44:ea:8e: 2b:73:68:04:4d:55:04:ec:7c:a0:32:1a:21:38:b0: 05:88:5f:8c:c1:55:4e:75:17:66:3a:65:c7:4b:b0: 06:96:3a:de:d3:46:58:83:bd:62:e1:a1:f6:a4:3e: 35:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:39:4F:D4:0F:B0:AA:B3:19:12:B7:0C:37:BF:46:18:3F:EE:45:1E X509v3 Authority Key Identifier: keyid:2E:98:C5:06:A1:74:CF:2C:AD:9C:1A:6C:5B:81:D6:E8:98:86:36:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:3b:4e:3c:11:21:0c:72:84:d1:4c:46:a4:26:9c:a7:91:83: 23:6c:13:27:8d:61:91:85:db:2e:94:87:9f:95:28:65:28:73: be:71:a6:c8:0f:7b:c1:79:82:2f:11:76:0c:97:b3:97:bc:16: f9:99:9f:9d:f6:37:62:a0:1a:cf:53:fc:0d:4b:17:ac:32:3b: 1a:44:be:55:e9:07:a4:56:b4:11:da:c9:95:58:a6:ce:68:65: 25:38:7a:dc:9c:54:32:57:89:18:73:cd:1a:3c:91:11:f0:37: 94:93:b6:cb:96:83:6b:e6:d5:03:4c:07:2e:c5:29:ef:28:2e: b3:10:fe:d6:98:69:47:a0:86:4c:7b:b1:32:22:28:c9:79:0f: e2:24:ac:9e:2d:4b:0f:29:6b:4f:a9:0f:8d:1f:49:54:26:f6: 00:aa:8d:d6:8c:73:fa:34:d2:16:d6:64:49:03:9a:69:92:50: 33:3e:00:fa:4c:34:9e:24:67:61:48:88:a3:d1:ca:ee:bd:91: 6f:c5:be:4f:82:38:d6:af:94:13:03:81:fd:7b:d3:06:06:b9: e5:19:da:2c:d1:5d:69:5d:9c:e3:96:29:1d:33:81:19:dc:06: f3:59:27:48:a5:e4:14:88:ee:29:e9:48:ae:31:53:91:66:af: 95:72:17:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4ra4G6QJM0gpu7QwPEZnlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlOThjNTA2YTE3NGNmMmNhZDljMWE2YzViODFkNmU4OTg4 NjM2MmQwHhcNMjYwMTI2MDUwMTMwWhcNMjYwMTI3MDUwMTMwWjAzMTEwLwYDVQQD Eyg4NzM5NGZkNDBmYjBhYWIzMTkxMmI3MGMzN2JmNDYxODNmZWU0NTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVsg2Uf59G63JCrZ3+AAreXugwCV Oo996EhuX9LFcRngFDRpskh4BPeK0iRc0ucUpfPWLKpbzm7H2DyGoneJLJJ7GI8Z rWidVgTmTjah9cRB9lWvmanWIu7VjfWd/tv4Q4UXljRKTrvuJR5P5hG7g5EW/g4X 8P+qaHYHFVzXVhz6wXMVRiCRJZYNPBe+dx9OtRDeT+zONceDQu7gR+qBBAJqUI9t n2sZBieIO1CkSsEcjVUYi42kHdRR+NiL1AvEz6v5YkGH6zZTS6GRrW1E6o4rc2gE TVUE7HygMhohOLAFiF+MwVVOdRdmOmXHS7AGljre00ZYg71i4aH2pD41lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIc5T9QPsKqzGRK3DDe/Rhg/7kUeMB8GA1UdIwQY MBaAFC6YxQahdM8srZwabFuB1uiYhjYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHBqRkJxRjB6eXl0bkJwc1c0SFc2SmlHTmkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hNjQyNWMtMGM3Yy00ZmRmLTg3YjIt NmJiYTdmYzMxNzI4LzEvTHBqRkJxRjB6eXl0bkJwc1c0SFc2SmlHTmkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hNjQyNWMtMGM3Yy00ZmRmLTg3YjItNmJiYTdmYzMxNzI4 LzEvTHBqRkJxRjB6eXl0bkJwc1c0SFc2SmlHTmkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANztOPBEh DHKE0UxGpCacp5GDI2wTJ41hkYXbLpSHn5UoZShzvnGmyA97wXmCLxF2DJezl7wW +ZmfnfY3YqAaz1P8DUsXrDI7GkS+VekHpFa0EdrJlVimzmhlJTh63JxUMleJGHPN GjyREfA3lJO2y5aDa+bVA0wHLsUp7ygusxD+1phpR6CGTHuxMiIoyXkP4iSsni1L DylrT6kPjR9JVCb2AKqN1oxz+jTSFtZkSQOaaZJQMz4A+kw0niRnYUiIo9HK7r2R b8W+T4I41q+UEwOB/XvTBga55RnaLNFdaV2c45YpHTOBGdwG81knSKXkFIjuKelI rjFTkWavlXIXhg== -----END CERTIFICATE-----Generated at Mon Jan 26 09:45:59 2026 by rpki-client