This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft File: lHS1JBtjw6-9s0LMR2NMVasv-EY.mft (raw, json) Hash identifier: BtV466gSpw4Rc6sP+8wknY8HDC0t37w8pziumws0Xlg= Subject key identifier: B8:3B:D1:2D:57:C3:AC:07:36:02:43:44:F8:A4:13:A2:BC:47:3B:79 Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46 Certificate issuer: /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846 Certificate serial: 019BAA5BAB111EF4A5DB2A7C793EF5C7284F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft Manifest number: 02D1 Signing time: Sun 11 Jan 2026 00:01:32 +0000 Manifest this update: Sun 11 Jan 2026 00:01:32 +0000 Manifest next update: Mon 12 Jan 2026 00:01:32 +0000 Files and hashes: 1: EhjDtKMsVMUs0ZuH-lX2Q3No4_k.roa (hash: dyUmYbTgpywEf3UhaQdBj3HPVSQs7lYIPuCIHhpwi/A=) 2: lHS1JBtjw6-9s0LMR2NMVasv-EY.crl (hash: d7hk8oh1XqaE8TauRme/pCYO97ivtFt9qWK2PHV4i3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 20:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:aa:5b:ab:11:1e:f4:a5:db:2a:7c:79:3e:f5:c7:28:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846 Validity Not Before: Jan 11 00:01:32 2026 GMT Not After : Jan 12 00:01:32 2026 GMT Subject: CN=b83bd12d57c3ac0736024344f8a413a2bc473b79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:71:5d:ec:c5:07:46:6b:af:00:76:9f:1a:1d: 97:87:45:83:50:df:d7:c7:4c:fd:b8:78:fe:88:72: f6:d6:8c:e0:fa:0a:c2:1f:6e:3b:57:c4:77:b4:1a: 0d:a2:af:9e:75:b6:c7:ca:42:de:d4:e8:85:a3:72: 06:42:1f:be:96:05:55:00:d5:da:36:3d:54:05:9b: 24:b5:c8:57:48:75:3e:82:d5:6f:f1:f3:ab:c0:06: 3d:a6:10:46:65:be:bf:05:7a:e1:fb:3f:26:3d:94: 53:a4:a6:a7:92:be:a9:3b:52:1f:0b:e8:50:f7:c4: b9:b7:c0:db:de:6e:d9:2d:0d:90:05:6c:97:f4:1d: 13:55:6b:77:53:92:f3:01:3a:1c:6a:b4:6b:2a:c2: a3:68:07:11:8c:07:6e:73:5c:2c:d7:0b:62:c0:7a: db:4c:c6:47:87:0b:19:14:ca:63:29:0f:45:00:34: 8b:46:b8:14:11:16:7f:f0:2a:56:50:ec:8e:2f:b3: a8:54:87:08:e9:0d:4c:1a:1d:44:10:c7:25:6f:1c: c0:01:52:24:99:eb:ea:a3:78:f8:9f:29:f4:4f:4a: 64:0e:2d:1c:9e:f1:94:8b:63:bb:99:ca:ee:d1:93: 24:2c:81:c7:d5:09:5a:d8:02:0d:42:21:dc:15:d8: 0b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3B:D1:2D:57:C3:AC:07:36:02:43:44:F8:A4:13:A2:BC:47:3B:79 X509v3 Authority Key Identifier: keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:36:7c:c4:31:0d:0b:13:9c:f3:4b:da:18:6a:0e:8c:20:dd: a6:a1:4b:6a:42:e5:2d:a5:db:07:6a:c1:d1:2d:29:8a:41:07: 00:f4:f3:41:69:88:b6:49:fc:bb:b3:99:9a:b0:da:63:a9:91: 9b:8a:62:8c:70:ff:a6:d7:e9:54:d8:f3:ed:f0:5b:2c:c4:80: 30:6a:24:06:4b:68:c9:7f:3a:83:cf:f3:bd:19:3f:9a:36:b1: 7c:00:54:a7:bb:fe:0b:ce:0b:73:30:30:39:b6:0d:7b:c7:5c: 2c:e7:09:2f:83:a6:3f:67:70:67:39:e5:51:0a:bb:6c:11:84: 90:2f:e8:53:54:85:07:65:ac:2e:0a:b2:c6:47:2e:ec:64:12: 85:5c:de:5d:85:08:63:a2:9c:6b:15:90:57:57:dc:22:5a:85: ff:b9:02:dc:c8:1e:e7:2d:4f:fa:a1:d5:ab:8c:a8:cf:e7:db: 65:2f:f0:bc:9c:9e:6e:92:f0:18:57:8a:e6:08:9b:3b:df:d8: 8f:7f:6c:69:80:12:a0:a4:20:76:53:21:32:ad:79:db:14:d0: 2b:46:90:9d:15:e4:20:54:d9:b6:61:73:3e:f4:e6:71:2a:a6: 37:f5:8e:3c:99:29:47:9c:4a:8a:a5:3c:1e:62:2e:c9:74:e8: 6e:18:00:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuqW6sRHvSl2yp8eT71xyhPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NzRiNTI0MWI2M2MzYWZiZGIzNDJjYzQ3NjM0YzU1YWIy ZmY4NDYwHhcNMjYwMTExMDAwMTMyWhcNMjYwMTEyMDAwMTMyWjAzMTEwLwYDVQQD EyhiODNiZDEyZDU3YzNhYzA3MzYwMjQzNDRmOGE0MTNhMmJjNDczYjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3Fd7MUHRmuvAHafGh2Xh0WDUN/X x0z9uHj+iHL21ozg+grCH247V8R3tBoNoq+edbbHykLe1OiFo3IGQh++lgVVANXa Nj1UBZsktchXSHU+gtVv8fOrwAY9phBGZb6/BXrh+z8mPZRTpKankr6pO1IfC+hQ 98S5t8Db3m7ZLQ2QBWyX9B0TVWt3U5LzATocarRrKsKjaAcRjAduc1ws1wtiwHrb TMZHhwsZFMpjKQ9FADSLRrgUERZ/8CpWUOyOL7OoVIcI6Q1MGh1EEMclbxzAAVIk mevqo3j4nyn0T0pkDi0cnvGUi2O7mcru0ZMkLIHH1Qla2AINQiHcFdgLRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLg70S1Xw6wHNgJDRPikE6K8Rzt5MB8GA1UdIwQY MBaAFJR0tSQbY8OvvbNCzEdjTFWrL/hGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEhTMUpCdGp3Ni05czBMTVIyTk1WYXN2LUVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83ZjAyYjAtZDlhZC00ZjVkLTliNjkt NDhmNjIxYWNiOWI3LzEvbEhTMUpCdGp3Ni05czBMTVIyTk1WYXN2LUVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83ZjAyYjAtZDlhZC00ZjVkLTliNjktNDhmNjIxYWNiOWI3 LzEvbEhTMUpCdGp3Ni05czBMTVIyTk1WYXN2LUVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAejZ8xDEN CxOc80vaGGoOjCDdpqFLakLlLaXbB2rB0S0pikEHAPTzQWmItkn8u7OZmrDaY6mR m4pijHD/ptfpVNjz7fBbLMSAMGokBktoyX86g8/zvRk/mjaxfABUp7v+C84LczAw ObYNe8dcLOcJL4OmP2dwZznlUQq7bBGEkC/oU1SFB2WsLgqyxkcu7GQShVzeXYUI Y6KcaxWQV1fcIlqF/7kC3Mge5y1P+qHVq4yoz+fbZS/wvJyebpLwGFeK5gibO9/Y j39saYASoKQgdlMhMq152xTQK0aQnRXkIFTZtmFzPvTmcSqmN/WOPJkpR5xKiqU8 HmIuyXTobhgA/w== -----END CERTIFICATE-----Generated at Sun Jan 11 06:50:26 2026 by rpki-client