This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft File: laK2pvOHvqbovS6VKiNpCTkrBxM.mft (raw, json) Hash identifier: 6xH0NTpTzFulEnza+yU53xxTJLc2IJAB1R6Yl2VhIP8= Subject key identifier: 3C:07:8B:4A:91:31:CE:5A:DE:70:B8:F8:FB:C8:19:8A:ED:B5:26:B3 Authority key identifier: 95:A2:B6:A6:F3:87:BE:A6:E8:BD:2E:95:2A:23:69:09:39:2B:07:13 Certificate issuer: /CN=95a2b6a6f387bea6e8bd2e952a236909392b0713 Certificate serial: 019C1CB9D2B60AA963D2B111DEB17BFC1B05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft Manifest number: 1D Signing time: Mon 02 Feb 2026 05:01:05 +0000 Manifest this update: Mon 02 Feb 2026 05:01:05 +0000 Manifest next update: Tue 03 Feb 2026 05:01:05 +0000 Files and hashes: 1: Lj6y-FZHBk0nXBCvZAVa90vB490.asa (hash: LRhgAzghWUw9wnefJgk4F6ixrePoE4mvfQqraKNwKAQ=) 2: laK2pvOHvqbovS6VKiNpCTkrBxM.crl (hash: bCMH50f9x6oEYSHkZWG1NYbT37cLmeWdCNksVizfHxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.crl rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:b9:d2:b6:0a:a9:63:d2:b1:11:de:b1:7b:fc:1b:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a2b6a6f387bea6e8bd2e952a236909392b0713 Validity Not Before: Feb 2 05:01:05 2026 GMT Not After : Feb 3 05:01:05 2026 GMT Subject: CN=3c078b4a9131ce5ade70b8f8fbc8198aedb526b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d9:9c:46:19:21:e2:fc:15:b2:bd:a3:0f:bd: 2d:7b:ab:1f:7d:d6:b3:17:ef:b5:00:3e:2b:40:67: 56:1d:16:5d:41:1a:4b:d5:36:ab:b8:86:23:7c:d2: f9:29:60:9d:be:4e:35:37:2a:8e:8d:23:eb:87:a3: 1c:73:c2:17:fb:f7:59:02:af:61:c7:ac:5a:2d:bf: dd:72:c1:0a:45:7f:2b:84:8f:28:f8:a9:72:6e:11: 3b:13:4e:04:d9:e9:07:a2:49:6d:4a:cf:11:9e:31: 09:4b:21:67:09:9b:02:c6:ae:f9:a0:99:0d:44:8b: 75:7d:2f:3e:ad:f7:64:11:2c:85:0d:4e:a4:f4:a2: 31:b6:8a:39:ce:2c:c8:0b:0e:07:50:07:b1:f2:36: fe:4f:00:64:b4:18:d1:af:5a:57:f3:ca:05:7e:e8: 4a:9f:df:7a:97:8b:39:84:d5:ba:07:1b:88:e7:e3: b1:79:aa:ce:43:13:d7:94:dc:d7:6a:b0:fd:2e:05: 19:18:b9:04:c3:94:99:4e:19:7c:08:68:27:6f:a0: 34:c2:f8:0d:2b:70:b4:54:93:9e:86:b5:3d:ce:7f: 4f:5b:f3:59:58:2c:4e:07:78:fb:11:87:b3:19:ce: dc:09:3d:b6:ec:76:d5:27:92:d8:38:fc:01:c5:c8: af:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:07:8B:4A:91:31:CE:5A:DE:70:B8:F8:FB:C8:19:8A:ED:B5:26:B3 X509v3 Authority Key Identifier: keyid:95:A2:B6:A6:F3:87:BE:A6:E8:BD:2E:95:2A:23:69:09:39:2B:07:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:21:da:c1:73:e1:7f:c5:27:46:52:aa:30:db:5f:67:cc:f1: fb:2e:c8:d7:bb:fc:01:27:38:96:69:9a:79:70:b5:8a:89:bb: 5f:19:25:ca:c9:a8:96:8c:3a:ec:de:46:74:1d:55:71:53:56: 39:e6:72:43:81:83:37:07:f8:41:2a:22:ac:36:b5:70:b4:94: 9b:01:df:a6:63:ad:6c:a7:0c:7d:d0:a5:c8:07:db:91:c2:02: c8:a1:59:ba:39:a5:92:ca:55:6c:94:82:c3:ca:ce:ec:a2:51: 29:43:14:00:69:52:9f:a2:a6:42:14:30:30:c6:99:f7:f2:69: cd:6e:6c:d5:e6:69:71:84:d7:45:c9:ff:f3:43:56:07:38:30: f2:f5:d8:54:87:bd:fb:75:10:8e:50:b5:13:6b:ac:21:af:70: 5b:91:b6:5e:81:eb:c5:2b:06:c1:3d:5f:12:3d:92:7c:c8:cf: 2b:2d:e3:42:8d:29:4f:20:2e:0f:30:de:56:10:12:0a:9b:47: 80:1b:88:d5:d5:c9:c3:4a:84:66:af:e5:bc:f6:0b:f6:e9:bc: b1:1d:59:91:70:b3:dd:75:18:b6:a2:99:5c:77:77:5d:78:6c: 72:dd:e3:1a:95:fe:30:08:10:14:fc:68:87:e4:85:76:3d:ec: 25:da:db:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcudK2Cqlj0rER3rF7/BsFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YTJiNmE2ZjM4N2JlYTZlOGJkMmU5NTJhMjM2OTA5Mzky YjA3MTMwHhcNMjYwMjAyMDUwMTA1WhcNMjYwMjAzMDUwMTA1WjAzMTEwLwYDVQQD EygzYzA3OGI0YTkxMzFjZTVhZGU3MGI4ZjhmYmM4MTk4YWVkYjUyNmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69mcRhkh4vwVsr2jD70te6sffdaz F++1AD4rQGdWHRZdQRpL1TaruIYjfNL5KWCdvk41NyqOjSPrh6Mcc8IX+/dZAq9h x6xaLb/dcsEKRX8rhI8o+KlybhE7E04E2ekHokltSs8RnjEJSyFnCZsCxq75oJkN RIt1fS8+rfdkESyFDU6k9KIxtoo5zizICw4HUAex8jb+TwBktBjRr1pX88oFfuhK n996l4s5hNW6BxuI5+OxearOQxPXlNzXarD9LgUZGLkEw5SZThl8CGgnb6A0wvgN K3C0VJOehrU9zn9PW/NZWCxOB3j7EYezGc7cCT227HbVJ5LYOPwBxcivbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwHi0qRMc5a3nC4+PvIGYrttSazMB8GA1UdIwQY MBaAFJWitqbzh76m6L0ulSojaQk5KwcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGFLMnB2T0h2cWJvdlM2VktpTnBDVGtyQnhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85Mjk5ZmMtYjY2OC00ZjdlLWJmMGQt NWFhOWE0OWQzYjllLzEvbGFLMnB2T0h2cWJvdlM2VktpTnBDVGtyQnhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS85Mjk5ZmMtYjY2OC00ZjdlLWJmMGQtNWFhOWE0OWQzYjll LzEvbGFLMnB2T0h2cWJvdlM2VktpTnBDVGtyQnhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMSHawXPh f8UnRlKqMNtfZ8zx+y7I17v8ASc4lmmaeXC1iom7Xxklysmolow67N5GdB1VcVNW OeZyQ4GDNwf4QSoirDa1cLSUmwHfpmOtbKcMfdClyAfbkcICyKFZujmlkspVbJSC w8rO7KJRKUMUAGlSn6KmQhQwMMaZ9/JpzW5s1eZpcYTXRcn/80NWBzgw8vXYVIe9 +3UQjlC1E2usIa9wW5G2XoHrxSsGwT1fEj2SfMjPKy3jQo0pTyAuDzDeVhASCptH gBuI1dXJw0qEZq/lvPYL9um8sR1ZkXCz3XUYtqKZXHd3XXhsct3jGpX+MAgQFPxo h+SFdj3sJdrb6w== -----END CERTIFICATE-----Generated at Mon Feb 2 08:01:48 2026 by rpki-client