This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft File: LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft (raw, json) Hash identifier: iZDfZysdkUr88s/tYubB6iQ4fwGZAsHKu1HKjvpmYrs= Subject key identifier: 55:E4:F8:B7:80:0A:30:54:51:63:E8:46:3C:1C:4A:77:7F:8A:57:1C Authority key identifier: 2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01 Certificate issuer: /CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01 Certificate serial: 019BDF5C1AAFD88EE3F7C2ADB779B4DCC810 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft Manifest number: 0112 Signing time: Wed 21 Jan 2026 07:01:53 +0000 Manifest this update: Wed 21 Jan 2026 07:01:53 +0000 Manifest next update: Thu 22 Jan 2026 07:01:53 +0000 Files and hashes: 1: DQVqjzC5rdONHq62ZKGqNPJyrRw.roa (hash: dDYajOCYrao79EK9Kj5vMqOndXhk7A3V1BOKDwNdvCc=) 2: LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl (hash: 8j0PuNZdJCkuYTk200yQUdZ0iEYYc+BPPgr9Qr88gRI=) 3: NE7mP6LXofTtetMrz0bZ4gVjQZQ.roa (hash: OKq/sE5vI4Tp87JPYnyleJOP67qF4AH8+fsvJkq27uQ=) 4: fE9cNRDKHoumM1hRkT3ZAa2rwPs.roa (hash: Zy3HM17iHdXxNk/UVoAmsPQwfcZdi0N5Gh6yWp44W4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:5c:1a:af:d8:8e:e3:f7:c2:ad:b7:79:b4:dc:c8:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01 Validity Not Before: Jan 21 07:01:53 2026 GMT Not After : Jan 22 07:01:53 2026 GMT Subject: CN=55e4f8b7800a30545163e8463c1c4a777f8a571c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a2:bc:4f:1e:0c:cf:40:be:db:e5:1c:cd:6e: 4a:bc:b7:e1:ff:d7:73:8c:02:fb:d9:6b:be:73:90: 25:56:df:c5:91:48:7a:cc:db:6a:a8:9f:2b:c7:0d: 05:c8:43:22:24:c1:73:ff:00:30:d2:fa:78:71:e8: f7:9f:f3:7d:28:0b:d7:08:e1:0b:cd:52:2e:30:0e: 86:91:8e:52:1a:4b:25:cd:27:70:1f:48:b5:f2:0e: b4:45:31:5c:82:d6:b0:60:8e:65:fe:71:47:58:44: 78:fa:4a:32:8d:f8:fc:41:a2:d5:ac:e2:89:8a:6f: fa:e1:0c:06:20:b5:1b:3f:80:98:9c:43:6c:56:de: 42:ca:5b:e4:df:2b:04:c0:17:64:be:76:05:86:b9: ca:b4:2c:17:b8:45:e0:4f:38:1a:92:04:33:f5:20: 01:08:85:b2:56:10:df:94:03:cc:8f:5c:d6:b0:7f: 49:4d:da:ea:8d:71:17:5a:f2:eb:80:86:4f:b9:af: 55:2d:2f:e3:e9:c4:10:2d:68:9b:84:5f:c0:d5:ab: 1f:09:2a:a3:48:b5:91:25:a5:f9:c2:9b:25:96:75: 44:5b:dd:4d:76:0b:87:5b:b9:35:37:bc:1c:f7:ee: ea:cf:dd:d9:f0:13:19:81:c9:ce:49:22:6a:4e:4a: d3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E4:F8:B7:80:0A:30:54:51:63:E8:46:3C:1C:4A:77:7F:8A:57:1C X509v3 Authority Key Identifier: keyid:2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:b1:2a:1b:3e:21:ee:53:25:40:47:8f:be:3c:a5:91:76:43: 50:14:2d:2a:49:1e:a3:8c:6a:4e:6c:63:18:24:5a:5c:52:3d: c2:b3:10:04:a9:bc:74:58:36:f8:f6:7d:48:05:e3:af:45:2b: bd:9b:01:4f:00:6a:7a:05:67:36:df:f8:e6:93:18:ee:00:60: 28:1e:7e:db:8f:d0:6d:bb:ec:82:d3:6a:28:a8:6c:dd:ed:77: 20:2f:d0:68:87:2a:66:69:48:1c:94:f8:96:10:47:59:36:6d: 71:80:d1:b5:6f:90:e6:0d:34:b7:c5:6e:fb:ff:d4:46:ef:a3: 3a:73:f0:ce:dd:ae:89:ae:d7:8a:e3:02:76:13:32:4a:0a:b5: 91:c5:3d:c6:73:24:a1:d2:1e:7a:18:aa:ff:8a:41:eb:03:77: 6c:52:02:2c:ee:e2:ea:da:c0:1f:5b:d0:f9:40:fc:f9:08:c6: 36:e3:0c:2d:f1:47:de:4f:17:cc:cd:4c:4d:96:3a:0b:02:e0: 63:72:ce:b1:61:38:4d:51:e4:a8:4b:e8:5b:06:c2:31:5d:84: b0:e0:69:ab:8f:1e:83:67:af:2a:25:6e:06:01:1b:c0:a6:77: 2f:1b:25:2e:8e:e1:5e:6e:27:f1:e2:d4:22:fb:38:43:52:e6: 38:0d:91:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvfXBqv2I7j98Ktt3m03MgQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkM2MzOTg3ZTdjMzRiMzY2YWEwZjA5YzQwZWE0YzgwYmZl ZDBlMDEwHhcNMjYwMTIxMDcwMTUzWhcNMjYwMTIyMDcwMTUzWjAzMTEwLwYDVQQD Eyg1NWU0ZjhiNzgwMGEzMDU0NTE2M2U4NDYzYzFjNGE3NzdmOGE1NzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6K8Tx4Mz0C+2+UczW5KvLfh/9dz jAL72Wu+c5AlVt/FkUh6zNtqqJ8rxw0FyEMiJMFz/wAw0vp4cej3n/N9KAvXCOEL zVIuMA6GkY5SGkslzSdwH0i18g60RTFcgtawYI5l/nFHWER4+koyjfj8QaLVrOKJ im/64QwGILUbP4CYnENsVt5Cylvk3ysEwBdkvnYFhrnKtCwXuEXgTzgakgQz9SAB CIWyVhDflAPMj1zWsH9JTdrqjXEXWvLrgIZPua9VLS/j6cQQLWibhF/A1asfCSqj SLWRJaX5wpsllnVEW91NdguHW7k1N7wc9+7qz93Z8BMZgcnOSSJqTkrTyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXk+LeACjBUUWPoRjwcSnd/ilccMB8GA1UdIwQY MBaAFC08OYfnw0s2aqDwnEDqTIC/7Q4BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFR3NWgtZkRTelpxb1BDY1FPcE1nTF90RGdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wNjhhNmMtOTIxYi00ZTBiLWJhN2Ut M2E2ZGU5OWVkZTQ3LzEvTFR3NWgtZkRTelpxb1BDY1FPcE1nTF90RGdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wNjhhNmMtOTIxYi00ZTBiLWJhN2UtM2E2ZGU5OWVkZTQ3 LzEvTFR3NWgtZkRTelpxb1BDY1FPcE1nTF90RGdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbLEqGz4h 7lMlQEePvjylkXZDUBQtKkkeo4xqTmxjGCRaXFI9wrMQBKm8dFg2+PZ9SAXjr0Ur vZsBTwBqegVnNt/45pMY7gBgKB5+24/QbbvsgtNqKKhs3e13IC/QaIcqZmlIHJT4 lhBHWTZtcYDRtW+Q5g00t8Vu+//URu+jOnPwzt2uia7XiuMCdhMySgq1kcU9xnMk odIeehiq/4pB6wN3bFICLO7i6trAH1vQ+UD8+QjGNuMMLfFH3k8XzM1MTZY6CwLg Y3LOsWE4TVHkqEvoWwbCMV2EsOBpq48eg2evKiVuBgEbwKZ3LxslLo7hXm4n8eLU Ivs4Q1LmOA2R/A== -----END CERTIFICATE-----Generated at Wed Jan 21 08:58:25 2026 by rpki-client