This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft File: LrTU3kCE88jhpPbU01U5B6sMgIo.mft (raw, json) Hash identifier: 58Xrkwxb+azZV5I1OmbiMlKKFGbJssnjW6DxCI5hhwQ= Subject key identifier: F7:F4:D1:ED:25:1A:81:82:AF:19:F3:25:54:4E:D4:2E:D9:BA:C8:3E Authority key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A Certificate issuer: /CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a Certificate serial: 019BFB4098EE5A79E1EFB3EB1B87B9919A1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft Manifest number: 12DE Signing time: Mon 26 Jan 2026 17:01:13 +0000 Manifest this update: Mon 26 Jan 2026 17:01:13 +0000 Manifest next update: Tue 27 Jan 2026 17:01:13 +0000 Files and hashes: 1: LrTU3kCE88jhpPbU01U5B6sMgIo.crl (hash: Ynctkx85vzqcuIEbqSymvt2fhgOzTDmHzw4XK2cA/LU=) 2: Moeip8R_9eCgH5gE9qFlzdSPbf4.roa (hash: Xen0gyInzO8m2TyeEXkURaZEZO8wHBtan+ynje6Rv8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:40:98:ee:5a:79:e1:ef:b3:eb:1b:87:b9:91:9a:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a Validity Not Before: Jan 26 17:01:13 2026 GMT Not After : Jan 27 17:01:13 2026 GMT Subject: CN=f7f4d1ed251a8182af19f325544ed42ed9bac83e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fb:52:28:95:5b:5a:c1:88:10:3d:bc:0c:49: 32:e1:17:a1:25:bd:91:09:cc:00:96:ca:70:b5:70: fb:a5:14:1e:c0:34:f6:14:91:53:74:1e:c6:e6:61: fe:9c:b0:8d:25:63:63:ac:e5:ab:fa:75:27:f5:89: 0b:2f:ec:2b:77:83:ef:08:34:2d:8e:d7:4c:cb:25: 4c:a4:16:e4:3f:14:35:b6:5f:39:8a:14:3d:01:46: 21:ef:54:25:84:8a:0c:27:2f:fc:95:f9:0f:43:ea: 71:89:8a:e9:c6:47:56:83:9a:c8:8d:98:b2:40:58: 9a:f9:67:e0:8d:25:46:68:c9:74:50:cc:24:5d:c5: 71:e9:5a:94:4f:55:ed:5e:df:4c:49:d3:d3:69:62: 5f:ca:f2:25:c3:c1:48:3d:7e:ef:db:a5:d6:82:c7: ef:fb:04:85:4e:7c:db:e7:56:3f:17:b1:0b:38:91: 09:64:22:10:29:9f:02:73:53:f5:9e:74:05:65:cd: ed:1f:db:b8:fa:36:04:f0:1d:d3:0f:4f:3b:56:6b: 86:ae:b4:69:92:00:22:33:16:81:2e:8c:b7:79:cd: 73:40:98:b2:81:dc:d1:2d:4a:82:83:33:72:dd:33: 11:d4:40:17:0b:9b:8e:9f:7c:0e:61:67:bd:37:5a: db:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F4:D1:ED:25:1A:81:82:AF:19:F3:25:54:4E:D4:2E:D9:BA:C8:3E X509v3 Authority Key Identifier: keyid:2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:68:77:f8:94:f8:52:b2:1b:57:ea:51:09:cf:22:31:03:61: 08:01:cc:bf:d3:31:97:2e:6e:31:e0:42:b9:fb:6e:2f:14:f2: e2:e4:5a:1b:fe:ee:32:a0:db:f4:1d:61:18:68:f4:34:23:27: 9b:8b:7c:2c:ab:38:6e:79:15:37:8d:fc:58:d5:d1:10:85:dd: 32:be:32:af:0f:7a:dd:a8:1f:64:62:12:e1:67:47:05:b9:9b: af:94:b5:cc:ca:58:ac:13:e4:d0:25:a5:fe:0e:0f:92:be:bf: 27:39:79:fc:fa:64:cb:f2:1a:f6:de:84:dc:11:3f:4c:1a:66: ec:36:30:6d:d4:47:3d:df:27:fe:c8:31:6e:3f:2f:02:c6:86: b7:c9:b2:e0:c6:ff:9b:88:d7:69:5d:01:a6:19:9f:a9:aa:26: 2b:22:c6:5c:98:63:1c:c2:7e:28:9e:c1:ee:2d:aa:cd:d6:bd: b1:94:8a:24:4d:d0:c2:57:f7:14:82:f7:37:3f:68:92:12:58: af:2d:84:b8:d4:1e:6d:25:09:55:3b:68:8b:f6:cd:1c:65:44: cd:44:43:89:5f:ff:13:94:43:5d:9e:f3:60:ec:d9:20:b7:f3: 38:c9:db:f9:99:a4:21:7a:2c:79:9d:df:8c:c4:8f:1e:5f:4b: 55:f2:82:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7QJjuWnnh77PrG4e5kZodMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYjRkNGRlNDA4NGYzYzhlMWE0ZjZkNGQzNTUzOTA3YWIw YzgwOGEwHhcNMjYwMTI2MTcwMTEzWhcNMjYwMTI3MTcwMTEzWjAzMTEwLwYDVQQD EyhmN2Y0ZDFlZDI1MWE4MTgyYWYxOWYzMjU1NDRlZDQyZWQ5YmFjODNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/tSKJVbWsGIED28DEky4RehJb2R CcwAlspwtXD7pRQewDT2FJFTdB7G5mH+nLCNJWNjrOWr+nUn9YkLL+wrd4PvCDQt jtdMyyVMpBbkPxQ1tl85ihQ9AUYh71QlhIoMJy/8lfkPQ+pxiYrpxkdWg5rIjZiy QFia+WfgjSVGaMl0UMwkXcVx6VqUT1XtXt9MSdPTaWJfyvIlw8FIPX7v26XWgsfv +wSFTnzb51Y/F7ELOJEJZCIQKZ8Cc1P1nnQFZc3tH9u4+jYE8B3TD087VmuGrrRp kgAiMxaBLoy3ec1zQJiygdzRLUqCgzNy3TMR1EAXC5uOn3wOYWe9N1rb/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPf00e0lGoGCrxnzJVRO1C7Zusg+MB8GA1UdIwQY MBaAFC601N5AhPPI4aT21NNVOQerDICKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83Y2ZjNjgtNDdiOC00NjI4LWI0MmYt OTUyOWJjY2JiYjE0LzEvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS83Y2ZjNjgtNDdiOC00NjI4LWI0MmYtOTUyOWJjY2JiYjE0 LzEvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2h3+JT4 UrIbV+pRCc8iMQNhCAHMv9Mxly5uMeBCuftuLxTy4uRaG/7uMqDb9B1hGGj0NCMn m4t8LKs4bnkVN438WNXREIXdMr4yrw963agfZGIS4WdHBbmbr5S1zMpYrBPk0CWl /g4Pkr6/Jzl5/Ppky/Ia9t6E3BE/TBpm7DYwbdRHPd8n/sgxbj8vAsaGt8my4Mb/ m4jXaV0BphmfqaomKyLGXJhjHMJ+KJ7B7i2qzda9sZSKJE3Qwlf3FIL3Nz9okhJY ry2EuNQebSUJVTtoi/bNHGVEzURDiV//E5RDXZ7zYOzZILfzOMnb+ZmkIXoseZ3f jMSPHl9LVfKCHQ== -----END CERTIFICATE-----Generated at Mon Jan 26 19:10:57 2026 by rpki-client