This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft File: lDyQO00Og7yLLUVDE26c1fOYZPU.mft (raw, json) Hash identifier: 3fNsJuuA2g2+87k1puNH2FVeEIBLz5CfUnDkFWpXfGY= Subject key identifier: FE:E7:74:9E:DE:43:AA:B0:09:D9:A1:2A:E6:81:27:18:0E:2D:69:B0 Authority key identifier: 94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5 Certificate issuer: /CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5 Certificate serial: 019BFA2DA3DCDF945DF950FDB8950DB78B82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft Manifest number: 091A Signing time: Mon 26 Jan 2026 12:00:53 +0000 Manifest this update: Mon 26 Jan 2026 12:00:53 +0000 Manifest next update: Tue 27 Jan 2026 12:00:53 +0000 Files and hashes: 1: NvHVcOuHPgyc57kdkgknLviy86E.roa (hash: y99G00GU2pSghDNIsvoE0LPbq8qsxNZ2XK//ZEAFwIQ=) 2: lDyQO00Og7yLLUVDE26c1fOYZPU.crl (hash: F2sRuDIDvMwZFJZCrc6UIMkegvOHWMnIR/14M4QW5IE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:a3:dc:df:94:5d:f9:50:fd:b8:95:0d:b7:8b:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5 Validity Not Before: Jan 26 12:00:53 2026 GMT Not After : Jan 27 12:00:53 2026 GMT Subject: CN=fee7749ede43aab009d9a12ae68127180e2d69b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:37:ac:49:61:ed:27:2c:d8:ff:37:ed:df:e4: 0f:26:58:3d:e6:c4:05:fd:e5:63:56:4d:96:7e:15: b8:01:3d:e7:09:8c:1b:88:27:4e:c9:b8:8b:5e:6c: 67:67:f2:1b:94:60:19:a8:e7:11:b2:f2:a2:0d:e9: a6:d0:cf:5d:06:91:de:a5:2c:79:54:f4:59:44:43: cf:4b:e4:85:e2:61:ff:74:88:45:c9:7a:48:87:b7: 06:3a:c5:b2:15:c6:97:8a:3f:d3:49:02:58:b5:a3: de:74:ac:25:35:86:ad:f0:0a:e7:5c:c5:07:95:04: ed:1e:00:18:3a:32:58:72:cc:cf:b3:39:ed:11:c1: e0:63:13:e9:33:5d:27:5b:b4:e3:c0:d3:44:dc:b9: f5:8c:c7:16:03:51:8d:9b:91:24:cf:a8:33:17:81: ed:a8:8e:eb:c1:2b:32:c4:aa:68:ef:ec:5d:25:76: be:5d:e0:9e:ed:b1:20:64:d0:5c:80:b7:2d:f8:b6: cc:25:65:52:68:74:91:85:cf:c3:59:58:9b:c1:d3: 9f:b5:65:f7:90:42:cf:55:13:bb:74:e6:54:88:bd: 4c:ce:81:d4:ed:4e:14:0a:36:b2:7a:40:3a:16:61: d4:31:7b:31:c9:6a:21:49:29:7b:5f:43:b1:39:1a: ee:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E7:74:9E:DE:43:AA:B0:09:D9:A1:2A:E6:81:27:18:0E:2D:69:B0 X509v3 Authority Key Identifier: keyid:94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:9c:01:d7:8e:66:ad:14:c7:62:96:24:88:7d:cc:6f:f4:37: 9e:b6:7b:9e:68:0b:be:92:c6:b0:64:c6:cb:c8:06:ed:14:64: 9b:dc:c7:97:ff:7c:b7:00:0a:14:f3:dc:b9:db:ec:c4:21:68: bd:09:c4:13:44:d1:14:6e:69:1e:a3:1b:ce:89:a7:f6:ac:50: ab:26:04:a9:e0:61:c6:26:b9:13:e0:0a:6d:73:76:87:2d:e3: b1:7e:6d:36:68:ef:e5:7b:4c:43:2a:58:f8:69:08:6c:dd:26: 30:d4:94:80:27:ac:59:d4:70:b5:3f:7b:a9:b8:3c:15:60:bd: e4:e7:6b:ae:3d:29:9a:ac:06:1c:ee:d2:01:58:bd:62:8f:15: 5c:44:66:b7:d3:5e:a5:59:89:ad:fb:39:1c:4b:2e:09:3a:4d: cb:03:bf:fc:42:9f:f7:e1:c1:c4:4c:33:23:ce:77:a3:d9:74: d7:22:6c:1e:a1:61:b3:78:b7:c4:51:b4:28:c5:e9:c7:9b:11: 59:b9:60:cf:f2:50:45:c1:d8:76:66:69:6b:54:48:f8:15:cc: 73:02:44:6e:eb:c0:d9:88:f1:c5:58:75:87:16:0f:6c:02:82: 76:87:4c:54:6a:66:88:c6:ad:b8:31:5f:ac:0f:80:c3:26:70: ec:4e:a0:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LaPc35Rd+VD9uJUNt4uCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0M2M5MDNiNGQwZTgzYmM4YjJkNDU0MzEzNmU5Y2Q1ZjM5 ODY0ZjUwHhcNMjYwMTI2MTIwMDUzWhcNMjYwMTI3MTIwMDUzWjAzMTEwLwYDVQQD EyhmZWU3NzQ5ZWRlNDNhYWIwMDlkOWExMmFlNjgxMjcxODBlMmQ2OWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjesSWHtJyzY/zft3+QPJlg95sQF /eVjVk2WfhW4AT3nCYwbiCdOybiLXmxnZ/IblGAZqOcRsvKiDemm0M9dBpHepSx5 VPRZREPPS+SF4mH/dIhFyXpIh7cGOsWyFcaXij/TSQJYtaPedKwlNYat8ArnXMUH lQTtHgAYOjJYcszPszntEcHgYxPpM10nW7TjwNNE3Ln1jMcWA1GNm5Ekz6gzF4Ht qI7rwSsyxKpo7+xdJXa+XeCe7bEgZNBcgLct+LbMJWVSaHSRhc/DWVibwdOftWX3 kELPVRO7dOZUiL1MzoHU7U4UCjayekA6FmHUMXsxyWohSSl7X0OxORruCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7ndJ7eQ6qwCdmhKuaBJxgOLWmwMB8GA1UdIwQY MBaAFJQ8kDtNDoO8iy1FQxNunNXzmGT1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbER5UU8wME9nN3lMTFVWREUyNmMxZk9ZWlBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81MDhhMjYtZTE5OS00MWI5LTllMTkt Zjk4Yzc1ZGVhMjkyLzEvbER5UU8wME9nN3lMTFVWREUyNmMxZk9ZWlBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS81MDhhMjYtZTE5OS00MWI5LTllMTktZjk4Yzc1ZGVhMjky LzEvbER5UU8wME9nN3lMTFVWREUyNmMxZk9ZWlBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5wB145m rRTHYpYkiH3Mb/Q3nrZ7nmgLvpLGsGTGy8gG7RRkm9zHl/98twAKFPPcudvsxCFo vQnEE0TRFG5pHqMbzomn9qxQqyYEqeBhxia5E+AKbXN2hy3jsX5tNmjv5XtMQypY +GkIbN0mMNSUgCesWdRwtT97qbg8FWC95Odrrj0pmqwGHO7SAVi9Yo8VXERmt9Ne pVmJrfs5HEsuCTpNywO//EKf9+HBxEwzI853o9l01yJsHqFhs3i3xFG0KMXpx5sR Wblgz/JQRcHYdmZpa1RI+BXMcwJEbuvA2YjxxVh1hxYPbAKCdodMVGpmiMatuDFf rA+AwyZw7E6gag== -----END CERTIFICATE-----Generated at Mon Jan 26 16:27:38 2026 by rpki-client