This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft File: lt2IX_TTiauqvQOlF10JdBrLpg0.mft (raw, json) Hash identifier: 3u7Ok9hvjp4I815qB8+N7J/2O4W5Ns5C9FpiB/9V1Ko= Subject key identifier: D9:81:0F:5D:5F:1F:78:77:AC:23:4E:2C:F9:DA:3A:32:58:32:D7:53 Authority key identifier: 96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D Certificate issuer: /CN=96dd885ff4d389abaabd03a5175d09741acba60d Certificate serial: 019BFF54084636CDE4F982F7FD7B0E8B5F6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft Manifest number: 0245 Signing time: Tue 27 Jan 2026 12:00:55 +0000 Manifest this update: Tue 27 Jan 2026 12:00:55 +0000 Manifest next update: Wed 28 Jan 2026 12:00:55 +0000 Files and hashes: 1: 6kMdvrwU2pCwvdQx9e2jtc6HHm0.roa (hash: qE4aJsmYODQ0nzOFNhlgM1kvgijeIJ6BoQLe8YycTn8=) 2: lt2IX_TTiauqvQOlF10JdBrLpg0.crl (hash: Rk2fh5rEDpHgBMb6Oq0W9nlhsLZlqc5Bmgq8AvX79vU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:54:08:46:36:cd:e4:f9:82:f7:fd:7b:0e:8b:5f:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96dd885ff4d389abaabd03a5175d09741acba60d Validity Not Before: Jan 27 12:00:55 2026 GMT Not After : Jan 28 12:00:55 2026 GMT Subject: CN=d9810f5d5f1f7877ac234e2cf9da3a325832d753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0f:0b:bb:a8:33:b0:7a:fd:76:da:e4:8d:19: 12:1c:9f:87:8d:52:0c:c6:bd:4f:d9:f2:ef:29:d8: a1:de:22:95:37:87:2d:82:93:2d:ab:82:c3:e6:df: cd:64:28:c6:45:79:14:ef:1f:a9:88:0f:ed:ad:ab: 67:d5:36:7b:12:d0:92:f7:cf:d5:ed:0f:bb:eb:ac: 41:37:63:7e:fd:10:f7:a4:63:96:aa:fe:12:e3:be: e3:26:cd:4d:e2:1b:2c:2f:3d:d2:6d:8b:fc:48:97: d7:68:05:b5:04:2d:70:89:04:7a:8f:59:18:14:01: 58:93:0a:41:e8:21:18:c2:ba:f1:33:98:59:d6:2e: a3:10:f0:f2:eb:fe:1b:da:f0:cd:04:3d:0d:2f:be: f7:fc:3f:8d:eb:16:ca:30:06:df:39:c2:1f:3c:28: 10:92:a5:18:7c:37:85:a5:c8:a8:ad:42:26:af:0f: c1:f4:b7:84:e2:70:10:77:32:8d:de:be:9d:c1:11: e7:52:f2:5d:33:cf:68:b3:eb:0e:da:32:e6:91:de: 43:e3:30:16:7a:7f:de:f7:3a:bd:51:58:77:52:24: 76:f1:ad:64:70:e6:c3:b0:24:54:c5:a0:d8:b0:43: f1:35:0d:3d:b1:c5:82:47:1e:01:1a:91:53:2b:4b: 05:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:81:0F:5D:5F:1F:78:77:AC:23:4E:2C:F9:DA:3A:32:58:32:D7:53 X509v3 Authority Key Identifier: keyid:96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:f0:e4:db:25:7d:0b:eb:61:a6:d4:68:aa:59:56:9a:29:9f: af:c9:10:8d:b6:78:62:1d:47:63:74:d0:fb:f7:f9:61:76:d4: 8b:27:21:48:32:86:40:e4:42:23:5c:14:50:9c:89:f6:40:41: c6:9a:0c:98:26:57:80:c7:9b:08:a0:3f:06:58:e9:f6:2d:22: 03:a4:12:5e:f6:dc:5c:f4:11:80:a9:a8:6e:a3:6f:67:b9:6e: a0:d9:27:c5:27:76:9f:9f:85:d1:60:b8:ff:e5:d1:79:57:dd: 31:8c:36:47:fd:e5:3a:1a:5e:2b:32:a9:4a:b9:98:1b:c7:ad: 8f:fb:e8:2c:b2:54:a6:7b:34:7e:cb:08:26:24:95:c7:28:02: b3:57:cf:5d:c1:63:19:48:fe:9d:d8:c3:44:c4:45:1a:95:3b: 5e:1d:f1:a5:a3:6d:ec:c1:a6:30:66:20:7d:2b:3b:c1:7e:88: 03:18:ba:14:a6:e5:1a:fb:c6:d5:35:e6:7e:4a:6e:69:3f:81: f7:60:01:4e:af:33:2c:f7:f7:f3:b5:a9:a1:d5:67:8b:9b:5c: 15:41:48:b7:6b:82:bd:ec:54:b5:bc:86:6c:d4:45:7f:15:7e: af:d1:4b:de:5a:65:c8:27:1f:e9:f6:86:fe:8a:96:d6:e1:23: e1:f7:50:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv/VAhGNs3k+YL3/XsOi19qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZGQ4ODVmZjRkMzg5YWJhYWJkMDNhNTE3NWQwOTc0MWFj YmE2MGQwHhcNMjYwMTI3MTIwMDU1WhcNMjYwMTI4MTIwMDU1WjAzMTEwLwYDVQQD EyhkOTgxMGY1ZDVmMWY3ODc3YWMyMzRlMmNmOWRhM2EzMjU4MzJkNzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyw8Lu6gzsHr9dtrkjRkSHJ+HjVIM xr1P2fLvKdih3iKVN4ctgpMtq4LD5t/NZCjGRXkU7x+piA/tratn1TZ7EtCS98/V 7Q+766xBN2N+/RD3pGOWqv4S477jJs1N4hssLz3SbYv8SJfXaAW1BC1wiQR6j1kY FAFYkwpB6CEYwrrxM5hZ1i6jEPDy6/4b2vDNBD0NL773/D+N6xbKMAbfOcIfPCgQ kqUYfDeFpciorUImrw/B9LeE4nAQdzKN3r6dwRHnUvJdM89os+sO2jLmkd5D4zAW en/e9zq9UVh3UiR28a1kcObDsCRUxaDYsEPxNQ09scWCRx4BGpFTK0sFtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNmBD11fH3h3rCNOLPnaOjJYMtdTMB8GA1UdIwQY MBaAFJbdiF/004mrqr0DpRddCXQay6YNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHQySVhfVFRpYXVxdlFPbEYxMEpkQnJMcGcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8wYzUyNjUtMzJhZi00OGYyLTkwNmQt YjY1MmM4NTU1NmJiLzEvbHQySVhfVFRpYXVxdlFPbEYxMEpkQnJMcGcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8wYzUyNjUtMzJhZi00OGYyLTkwNmQtYjY1MmM4NTU1NmJi LzEvbHQySVhfVFRpYXVxdlFPbEYxMEpkQnJMcGcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUfDk2yV9 C+thptRoqllWmimfr8kQjbZ4Yh1HY3TQ+/f5YXbUiychSDKGQORCI1wUUJyJ9kBB xpoMmCZXgMebCKA/Bljp9i0iA6QSXvbcXPQRgKmobqNvZ7luoNknxSd2n5+F0WC4 /+XReVfdMYw2R/3lOhpeKzKpSrmYG8etj/voLLJUpns0fssIJiSVxygCs1fPXcFj GUj+ndjDRMRFGpU7Xh3xpaNt7MGmMGYgfSs7wX6IAxi6FKblGvvG1TXmfkpuaT+B 92ABTq8zLPf387WpodVni5tcFUFIt2uCvexUtbyGbNRFfxV+r9FL3lplyCcf6faG /oqW1uEj4fdQtA== -----END CERTIFICATE-----Generated at Tue Jan 27 16:25:40 2026 by rpki-client