This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft File: LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft (raw, json) Hash identifier: rSih4WnkpjakThuS7XszPEMyl6k3pdSkO2GQ8+Js00A= Subject key identifier: F9:98:F6:C8:27:54:2B:08:E9:C2:45:03:A5:C8:C0:E0:CD:2B:E8:E5 Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e Certificate serial: 019BFBAF274DBAF727884C7EAD3CC382E406 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft Manifest number: 0899 Signing time: Mon 26 Jan 2026 19:01:58 +0000 Manifest this update: Mon 26 Jan 2026 19:01:58 +0000 Manifest next update: Tue 27 Jan 2026 19:01:58 +0000 Files and hashes: 1: 4B896DriFtAolXOY-xdv5QVHnqc.roa (hash: wR37hBGCsDrwex8V1Zs7ZSZ8bVSJce10KqTd05gjF0c=) 2: C2FZwLx5J6LOD83i2EDZOR5RtUI.roa (hash: TfNzI2cSGpuwkVH14MS6urWLY0KlAYesDO88Jrb6EW8=) 3: LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl (hash: lIS9Q0uK/OzZ3yUOTiMX8KKRjYy7IeGO1EjfCCM2Ui8=) 4: Y4jQJn9-X8hzytmQcxrO0HZU2f0.roa (hash: bSnQnShvbXI84/DgdDetWzox4Bh8KlqChBqyyJnAbOU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:af:27:4d:ba:f7:27:88:4c:7e:ad:3c:c3:82:e4:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e Validity Not Before: Jan 26 19:01:58 2026 GMT Not After : Jan 27 19:01:58 2026 GMT Subject: CN=f998f6c827542b08e9c24503a5c8c0e0cd2be8e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:39:5a:36:2a:18:e7:f4:2f:66:16:87:2b:16: 2e:8d:c0:9e:82:9a:c6:61:f5:4a:32:7d:33:cd:cc: 7d:3d:f9:dc:be:00:56:82:6b:88:a0:20:a0:fb:90: 1d:b6:14:59:8b:3d:57:db:76:d1:16:5e:0f:50:10: f8:a8:fe:55:13:6a:b3:8d:0b:b2:98:ef:22:f0:9b: 55:9f:81:13:d9:d3:7a:f5:6a:c4:b4:1e:18:16:3a: c5:00:05:b3:68:cf:53:35:d1:2b:d0:fb:7c:99:37: 4f:7f:2d:8d:4e:37:fe:65:a2:f8:0f:48:66:7d:85: 64:69:9b:e6:c0:49:ed:96:69:85:04:8a:64:b3:3c: c3:b3:65:4a:69:1e:90:08:ad:35:1f:97:ae:14:6d: c4:72:46:d1:d5:fa:10:76:8b:57:e4:67:8b:c8:07: ab:1d:02:58:28:80:8b:43:88:5d:af:84:e4:00:00: de:a1:a3:dd:bb:50:4a:36:28:51:73:c6:57:f7:a0: cc:03:23:26:9b:75:01:51:c8:68:c8:db:32:4f:ea: 8e:c6:e5:95:79:eb:5b:ab:8e:4d:fb:f2:7c:0c:e6: 71:cd:fb:0f:2e:30:20:68:38:69:f2:36:2f:64:1e: e5:a4:6d:86:93:7e:2b:99:10:11:dc:ad:37:17:dc: 8d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:98:F6:C8:27:54:2B:08:E9:C2:45:03:A5:C8:C0:E0:CD:2B:E8:E5 X509v3 Authority Key Identifier: keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:9f:27:12:d1:4d:80:4c:28:db:5f:e4:be:63:aa:ba:e3:07: a3:ce:8d:5c:c0:8a:96:c2:9b:01:12:3e:f5:02:06:ff:7b:d0: 59:2a:db:f2:a9:71:d6:18:9f:6b:e9:f0:f4:3b:a3:56:de:69: 02:6f:ec:76:7f:fc:89:e5:d3:3c:2e:ad:ff:45:1d:c8:28:6e: 93:93:30:3c:38:79:26:24:f3:65:71:ac:72:27:f2:ae:e0:0f: 83:43:38:61:eb:39:9c:dc:b0:51:89:ad:ce:13:9b:96:78:da: 69:54:10:16:40:b5:27:ed:48:fc:8a:0b:00:0a:55:48:62:77: 42:26:d2:48:3e:07:af:7e:b0:52:52:79:39:2c:78:b3:88:57: b9:c8:88:28:15:de:37:b1:17:5b:2c:8d:4f:5e:ea:72:25:65: 2c:eb:4a:ee:56:1f:6a:3a:04:e8:09:89:26:90:74:24:55:ba: 09:fe:ff:9b:f7:d1:eb:27:0a:9f:b1:8c:83:c3:9c:ff:68:18: 69:98:92:5f:6b:4b:5a:24:a4:4e:5b:83:5b:76:90:61:b7:41: 9b:20:5e:d8:c8:2b:6c:60:f7:d0:50:c0:17:26:12:83:6c:14: c3:b9:5a:67:57:1e:5c:5d:d7:33:e3:05:8e:1e:0b:d9:f9:74: c8:63:a8:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7rydNuvcniEx+rTzDguQGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMGE5MzMzZjkzY2NhNTQ0ZmRhYmUyZWE3YTY3MzhhNTRh Zjc1OWUwHhcNMjYwMTI2MTkwMTU4WhcNMjYwMTI3MTkwMTU4WjAzMTEwLwYDVQQD EyhmOTk4ZjZjODI3NTQyYjA4ZTljMjQ1MDNhNWM4YzBlMGNkMmJlOGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDlaNioY5/QvZhaHKxYujcCegprG YfVKMn0zzcx9PfncvgBWgmuIoCCg+5AdthRZiz1X23bRFl4PUBD4qP5VE2qzjQuy mO8i8JtVn4ET2dN69WrEtB4YFjrFAAWzaM9TNdEr0Pt8mTdPfy2NTjf+ZaL4D0hm fYVkaZvmwEntlmmFBIpkszzDs2VKaR6QCK01H5euFG3EckbR1foQdotX5GeLyAer HQJYKICLQ4hdr4TkAADeoaPdu1BKNihRc8ZX96DMAyMmm3UBUchoyNsyT+qOxuWV eetbq45N+/J8DOZxzfsPLjAgaDhp8jYvZB7lpG2Gk34rmRAR3K03F9yNuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmY9sgnVCsI6cJFA6XIwODNK+jlMB8GA1UdIwQY MBaAFC4KkzP5PMpUT9q+Lqemc4pUr3WeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNGQwOWYtMjlkZi00NGVhLWE3YjEt MGEwYWFlYWVlNGYxLzEvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNGQwOWYtMjlkZi00NGVhLWE3YjEtMGEwYWFlYWVlNGYx LzEvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAap8nEtFN gEwo21/kvmOquuMHo86NXMCKlsKbARI+9QIG/3vQWSrb8qlx1hifa+nw9DujVt5p Am/sdn/8ieXTPC6t/0UdyChuk5MwPDh5JiTzZXGscifyruAPg0M4Yes5nNywUYmt zhOblnjaaVQQFkC1J+1I/IoLAApVSGJ3QibSSD4Hr36wUlJ5OSx4s4hXuciIKBXe N7EXWyyNT17qciVlLOtK7lYfajoE6AmJJpB0JFW6Cf7/m/fR6ycKn7GMg8Oc/2gY aZiSX2tLWiSkTluDW3aQYbdBmyBe2MgrbGD30FDAFyYSg2wUw7laZ1ceXF3XM+MF jh4L2fl0yGOoEg== -----END CERTIFICATE-----Generated at Mon Jan 26 21:53:14 2026 by rpki-client