This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft File: LcgdJMRd2qNF-QZN4p-8p7EppSw.mft (raw, json) Hash identifier: rv6l1WsS7X+hzVib7rD716KmVagRt47hfqrPvKmAERs= Subject key identifier: BE:9C:01:91:42:6F:1D:52:1D:AF:D9:4E:A0:49:CB:40:1E:BE:B1:40 Authority key identifier: 2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C Certificate issuer: /CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c Certificate serial: 019BEABAFACAA59E0EEFC854B7D49E0BB0FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft Manifest number: 17F9 Signing time: Fri 23 Jan 2026 12:01:20 +0000 Manifest this update: Fri 23 Jan 2026 12:01:20 +0000 Manifest next update: Sat 24 Jan 2026 12:01:20 +0000 Files and hashes: 1: 1jBYr9FWsRPu64lYAnK0ta-WBdA.roa (hash: 3LputYmrn0IPDDaA7qSescZ3E0lTXKfvLlqfzkE/kU0=) 2: HpLqibQGspD7I0_UJ2EcgU7t_k0.roa (hash: WDoBuCvl81J2NkEtc2oSPamqpTdUvE0GF3Mfe4I1HBQ=) 3: LcgdJMRd2qNF-QZN4p-8p7EppSw.crl (hash: JHCoBMmV5ekKcscVmfAAYQEOz+7usMZGv4x2BKNLEWY=) 4: PTD9xAwEKqmx4gmmtDTPK0hTyJw.roa (hash: ovDAPJ84DYuT4dk89ty5XzeA2lvBX0g4FHWlLvwK+L4=) 5: hXW_JJYbDEuARBvQ3ahscidHNa4.roa (hash: vgu1i3fvHneLweEnm2qJqevE9QNy+k15JJYScMlG9SQ=) 6: iAjz_7XGgeyKjKOC5mMhN8Ql2MM.roa (hash: 9fe4RXvq0cI0elK7H6sALndgETw3KtEVWMKky23SlPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 12:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ea:ba:fa:ca:a5:9e:0e:ef:c8:54:b7:d4:9e:0b:b0:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c Validity Not Before: Jan 23 12:01:20 2026 GMT Not After : Jan 24 12:01:20 2026 GMT Subject: CN=be9c0191426f1d521dafd94ea049cb401ebeb140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:52:b7:bf:21:c1:a4:c6:93:3b:e3:1a:5a:9f: 0f:ae:01:54:f4:64:6a:b9:e0:8f:6b:ed:4b:30:7c: e2:7f:a6:11:61:b9:84:df:19:a7:64:6b:7c:43:e1: fe:37:00:dd:fe:dc:b7:73:ed:9f:f0:8e:21:87:66: 9b:74:3a:c1:dc:9d:7f:b3:82:f4:4e:90:cd:88:da: 5a:6e:11:7e:fc:45:da:a5:e4:fd:b1:94:e9:b3:c7: f7:b5:cb:c1:05:0e:47:d5:35:08:23:31:4e:48:cf: a1:90:f8:5d:c5:28:99:13:05:fa:da:2a:af:05:49: 15:c9:09:86:3d:31:66:31:39:a4:c5:18:c6:8e:43: 83:3d:ae:ab:60:38:3b:4b:17:04:28:a3:69:a4:d7: 21:d0:7b:4d:b6:b6:17:c2:d6:9f:18:e3:4c:df:35: 10:f7:1a:09:84:a4:40:da:49:b8:c4:c4:56:d7:45: f1:78:8d:cf:68:10:99:30:5a:12:97:c0:6e:eb:2c: bc:1e:97:22:4d:fa:40:5b:fe:06:4b:ec:98:4a:96: 50:26:08:89:e2:96:41:52:49:dc:3a:14:e8:9c:ab: 64:b0:af:1d:c1:e7:f2:ed:5d:40:3e:71:e5:9f:d7: 6e:84:bc:aa:dd:ca:c6:3d:29:19:5b:cb:f6:f0:31: 61:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9C:01:91:42:6F:1D:52:1D:AF:D9:4E:A0:49:CB:40:1E:BE:B1:40 X509v3 Authority Key Identifier: keyid:2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:91:00:72:ff:aa:a0:23:96:b3:bb:c2:11:16:9e:f8:45:27: 3f:cb:5f:8d:bc:c7:bf:87:69:80:98:e1:18:cb:bd:36:d7:a8: 49:43:70:a5:f1:43:76:d5:c6:a5:45:d4:91:67:c6:23:7d:58: ca:03:66:58:48:2b:63:ca:1f:70:7d:5a:10:0d:24:b7:d2:00: d5:8b:73:9a:b0:e1:41:f1:5d:44:c4:b6:f6:6f:25:73:57:6d: db:1d:ad:bc:28:b4:84:64:e5:19:14:ac:18:7f:c5:4a:17:0d: e7:aa:21:c3:d4:89:00:6a:49:70:d3:ff:30:28:a6:84:82:e0: 1d:b3:60:93:39:69:4b:5f:1a:df:11:15:d7:0c:d4:85:ba:c9: 84:57:8f:04:8b:7b:19:16:e0:30:31:63:d1:ae:6e:de:18:cb: ae:59:b0:d6:fa:df:94:f3:db:f1:36:2a:5e:88:c3:bb:0f:e3: 46:50:8e:7d:a5:97:05:17:c1:68:40:a4:75:8e:ae:de:1c:79: ff:90:d2:0d:0b:26:2e:f1:1c:1e:e1:a0:61:1f:52:f0:92:f0: d4:cd:b1:40:eb:0e:27:03:33:16:88:29:5d:39:0a:1e:79:56: 59:eb:b8:52:7c:fb:28:fc:32:1d:30:20:32:b3:3f:01:64:31: 6a:64:bf:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvquvrKpZ4O78hUt9SeC7D8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkYzgxZDI0YzQ1ZGRhYTM0NWY5MDY0ZGUyOWZiY2E3YjEy OWE1MmMwHhcNMjYwMTIzMTIwMTIwWhcNMjYwMTI0MTIwMTIwWjAzMTEwLwYDVQQD EyhiZTljMDE5MTQyNmYxZDUyMWRhZmQ5NGVhMDQ5Y2I0MDFlYmViMTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61K3vyHBpMaTO+MaWp8PrgFU9GRq ueCPa+1LMHzif6YRYbmE3xmnZGt8Q+H+NwDd/ty3c+2f8I4hh2abdDrB3J1/s4L0 TpDNiNpabhF+/EXapeT9sZTps8f3tcvBBQ5H1TUIIzFOSM+hkPhdxSiZEwX62iqv BUkVyQmGPTFmMTmkxRjGjkODPa6rYDg7SxcEKKNppNch0HtNtrYXwtafGONM3zUQ 9xoJhKRA2km4xMRW10XxeI3PaBCZMFoSl8Bu6yy8HpciTfpAW/4GS+yYSpZQJgiJ 4pZBUkncOhTonKtksK8dwefy7V1APnHln9duhLyq3crGPSkZW8v28DFh9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6cAZFCbx1SHa/ZTqBJy0AevrFAMB8GA1UdIwQY MBaAFC3IHSTEXdqjRfkGTeKfvKexKaUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGNnZEpNUmQycU5GLVFaTjRwLThwN0VwcFN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iZjNkYjUtYTMzZi00MzExLWFjZDkt MmZjYzBiNzQ5YjMyLzEvTGNnZEpNUmQycU5GLVFaTjRwLThwN0VwcFN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9iZjNkYjUtYTMzZi00MzExLWFjZDktMmZjYzBiNzQ5YjMy LzEvTGNnZEpNUmQycU5GLVFaTjRwLThwN0VwcFN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5EAcv+q oCOWs7vCERae+EUnP8tfjbzHv4dpgJjhGMu9NteoSUNwpfFDdtXGpUXUkWfGI31Y ygNmWEgrY8ofcH1aEA0kt9IA1YtzmrDhQfFdRMS29m8lc1dt2x2tvCi0hGTlGRSs GH/FShcN56ohw9SJAGpJcNP/MCimhILgHbNgkzlpS18a3xEV1wzUhbrJhFePBIt7 GRbgMDFj0a5u3hjLrlmw1vrflPPb8TYqXojDuw/jRlCOfaWXBRfBaECkdY6u3hx5 /5DSDQsmLvEcHuGgYR9S8JLw1M2xQOsOJwMzFogpXTkKHnlWWeu4Unz7KPwyHTAg MrM/AWQxamS/MQ== -----END CERTIFICATE-----Generated at Fri Jan 23 22:43:04 2026 by rpki-client