This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft File: LS-TOfu4yzPFInUcUw86IKdTVHw.mft (raw, json) Hash identifier: LBcskgcNssirxHc7CrZs4D/CSl1xy4vKGY43YzeXJmM= Subject key identifier: 9C:26:03:D6:E1:0E:F6:8E:36:DE:33:B1:2A:12:CE:D8:F2:3C:FA:79 Authority key identifier: 2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C Certificate issuer: /CN=2d2f9339fbb8cb33c522751c530f3a20a753547c Certificate serial: 019BD01F4EF02B9B4706F8D6C0D8C6B6C80E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft Manifest number: 17D8 Signing time: Sun 18 Jan 2026 08:01:11 +0000 Manifest this update: Sun 18 Jan 2026 08:01:11 +0000 Manifest next update: Mon 19 Jan 2026 08:01:11 +0000 Files and hashes: 1: LS-TOfu4yzPFInUcUw86IKdTVHw.crl (hash: 2FKEU7MyFj2fOAyxu/0u6NVocDbBlCDg2pZ7lZpr2L0=) 2: Ytkz7IxlIJqgH0OSm69kUlp-EPE.roa (hash: 7rQof/E5rSCbBHNmieO3tmtfWyDOmcOWMAzvg/zrozI=) 3: lK_21cfqHhmJDzSShJrfpf28gUs.roa (hash: kBqpwIbu+aOiILYXAzJqhtjAR9DT0AhDNrOMT8mT30s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d0:1f:4e:f0:2b:9b:47:06:f8:d6:c0:d8:c6:b6:c8:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2f9339fbb8cb33c522751c530f3a20a753547c Validity Not Before: Jan 18 08:01:11 2026 GMT Not After : Jan 19 08:01:11 2026 GMT Subject: CN=9c2603d6e10ef68e36de33b12a12ced8f23cfa79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b3:7f:b3:0a:ee:e4:23:29:e9:f5:87:91:97: d1:61:2d:a3:1a:4f:75:63:94:f3:37:4f:fc:bd:62: 88:96:65:13:62:ad:c0:74:9e:21:ef:67:5c:24:0b: 84:f0:19:ae:24:be:18:f3:4b:62:a4:58:31:4f:52: b2:66:8b:d7:0a:b5:0c:a4:b3:d1:5f:ff:c1:b1:ae: 60:58:6d:f2:fb:7a:a5:a4:12:f8:06:d3:83:1c:70: f5:9d:13:db:d4:2e:93:e2:ca:82:86:d8:7f:20:ba: a7:b1:77:14:a6:64:a1:5a:83:dd:cf:e7:7b:c0:e9: ef:d5:2c:db:8f:15:a2:8f:6c:e7:7e:c5:e1:ee:6e: 3b:9f:9c:41:a6:95:d6:ca:41:16:cf:b8:67:c5:49: f5:4a:e8:57:76:9b:bb:84:3c:c1:e8:a1:5d:82:78: 17:6e:f7:64:8d:3a:85:3c:d5:d6:47:f8:89:4b:95: 95:ea:65:58:51:15:21:2f:bb:0a:1f:74:99:fb:fc: dd:27:68:fc:88:b6:d7:2f:6c:fe:0a:ff:b7:0f:68: 82:12:46:17:80:2f:85:c8:29:e3:d3:3f:cf:22:c7: ec:c1:88:a1:9a:dc:f2:90:f8:78:67:d8:4a:c6:90: f3:4d:cb:54:ed:32:a6:bb:34:3d:00:5e:1e:26:52: 00:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:26:03:D6:E1:0E:F6:8E:36:DE:33:B1:2A:12:CE:D8:F2:3C:FA:79 X509v3 Authority Key Identifier: keyid:2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:1c:34:51:16:5b:94:6c:54:fa:f0:c0:89:6c:1a:c3:c0:d7: 45:46:28:81:40:83:09:66:9f:a1:cb:e5:61:62:ab:2a:bd:df: 18:26:bd:81:29:12:fc:2f:f6:19:c1:62:b1:eb:a0:b1:03:46: ce:ab:17:e2:71:65:61:78:ca:e2:b7:05:e4:d5:13:82:f4:5d: 46:e7:91:0e:db:1a:32:80:c9:28:f4:30:01:3f:ea:a6:10:c4: b8:0b:c0:7c:9e:42:b2:39:f1:d5:95:93:a9:cf:cb:02:e0:93: 4d:1f:0e:e8:e4:37:e3:27:0b:6d:99:8d:23:50:25:9d:22:41: 03:34:50:a2:8a:ad:54:18:cd:6e:95:e5:6d:b7:2f:1a:1d:fd: c9:76:94:64:4f:5d:86:66:46:3e:0d:5e:97:17:b4:a0:cf:c5: 08:5a:f6:87:24:6b:85:d1:3c:f0:5c:13:e4:50:53:45:91:c2: 94:e5:bf:be:97:c3:f3:10:42:5e:fa:78:31:63:83:cb:e8:f0: ae:91:2b:c2:88:bc:8c:a8:82:b3:b1:1c:81:9f:98:3d:45:dc: 05:99:a4:18:78:f0:a7:50:a0:7d:bf:bc:0d:e8:d3:a7:e2:b6: cd:3b:91:a6:d1:2f:55:4a:92:6e:c1:94:78:0f:ca:1f:27:61: 77:14:a5:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvQH07wK5tHBvjWwNjGtsgOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMmY5MzM5ZmJiOGNiMzNjNTIyNzUxYzUzMGYzYTIwYTc1 MzU0N2MwHhcNMjYwMTE4MDgwMTExWhcNMjYwMTE5MDgwMTExWjAzMTEwLwYDVQQD Eyg5YzI2MDNkNmUxMGVmNjhlMzZkZTMzYjEyYTEyY2VkOGYyM2NmYTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrN/swru5CMp6fWHkZfRYS2jGk91 Y5TzN0/8vWKIlmUTYq3AdJ4h72dcJAuE8BmuJL4Y80tipFgxT1KyZovXCrUMpLPR X//Bsa5gWG3y+3qlpBL4BtODHHD1nRPb1C6T4sqChth/ILqnsXcUpmShWoPdz+d7 wOnv1SzbjxWij2znfsXh7m47n5xBppXWykEWz7hnxUn1SuhXdpu7hDzB6KFdgngX bvdkjTqFPNXWR/iJS5WV6mVYURUhL7sKH3SZ+/zdJ2j8iLbXL2z+Cv+3D2iCEkYX gC+FyCnj0z/PIsfswYihmtzykPh4Z9hKxpDzTctU7TKmuzQ9AF4eJlIAnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwmA9bhDvaONt4zsSoSztjyPPp5MB8GA1UdIwQY MBaAFC0vkzn7uMszxSJ1HFMPOiCnU1R8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFMtVE9mdTR5elBGSW5VY1V3ODZJS2RUVkh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi85NWZhNjEtMTdmYi00ODkwLTk1OTgt MWQzYTFlOWI3NTQ1LzEvTFMtVE9mdTR5elBGSW5VY1V3ODZJS2RUVkh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi85NWZhNjEtMTdmYi00ODkwLTk1OTgtMWQzYTFlOWI3NTQ1 LzEvTFMtVE9mdTR5elBGSW5VY1V3ODZJS2RUVkh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlxw0URZb lGxU+vDAiWwaw8DXRUYogUCDCWafocvlYWKrKr3fGCa9gSkS/C/2GcFiseugsQNG zqsX4nFlYXjK4rcF5NUTgvRdRueRDtsaMoDJKPQwAT/qphDEuAvAfJ5Csjnx1ZWT qc/LAuCTTR8O6OQ34ycLbZmNI1AlnSJBAzRQooqtVBjNbpXlbbcvGh39yXaUZE9d hmZGPg1elxe0oM/FCFr2hyRrhdE88FwT5FBTRZHClOW/vpfD8xBCXvp4MWODy+jw rpErwoi8jKiCs7EcgZ+YPUXcBZmkGHjwp1Cgfb+8DejTp+K2zTuRptEvVUqSbsGU eA/KHydhdxSl4w== -----END CERTIFICATE-----Generated at Sun Jan 18 09:53:25 2026 by rpki-client