This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft File: lhJPJSRqVAn77hG1Ny3YviTG6es.mft (raw, json) Hash identifier: yOcWSeWKAnBTxyyXqzXG2kRsDaE2yPstdXn1grNXpCw= Subject key identifier: 65:96:F8:13:F9:7F:4A:63:6F:5D:63:B0:EE:49:88:C1:C0:B5:6C:42 Authority key identifier: 96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB Certificate issuer: /CN=96124f25246a5409fbee11b5372dd8be24c6e9eb Certificate serial: 019BF9F668ED089D2F1459C08D9CB230DBEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft Manifest number: 0B0A Signing time: Mon 26 Jan 2026 11:00:33 +0000 Manifest this update: Mon 26 Jan 2026 11:00:33 +0000 Manifest next update: Tue 27 Jan 2026 11:00:33 +0000 Files and hashes: 1: Hw97gFeq9kX_yGiriy5YWSviL7I.roa (hash: geBLQXUNVCDp1lRH1gHpPHwudjQBTslh6GIdsZoKBSA=) 2: lhJPJSRqVAn77hG1Ny3YviTG6es.crl (hash: 1gPZ9zQdkcbgri7E2AanhCIFAxr2FdwAXCeCjuNNCXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 11:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f6:68:ed:08:9d:2f:14:59:c0:8d:9c:b2:30:db:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96124f25246a5409fbee11b5372dd8be24c6e9eb Validity Not Before: Jan 26 11:00:33 2026 GMT Not After : Jan 27 11:00:33 2026 GMT Subject: CN=6596f813f97f4a636f5d63b0ee4988c1c0b56c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ce:26:3a:8f:78:8c:06:d5:1a:48:1d:72:a0: 55:9a:27:8a:3e:96:c0:0b:69:fd:2c:31:78:f3:77: b0:77:f2:cb:80:34:2b:ed:5b:2a:19:bf:5b:d8:70: 94:5e:ed:06:8e:78:60:17:2e:32:85:38:ba:5e:04: 7a:ed:5e:0f:fb:7a:e5:50:98:c2:8b:95:e4:4a:16: b8:0c:68:92:dc:90:d2:e1:7e:d6:71:16:82:e6:a2: 08:34:59:b2:4e:87:4b:cd:3e:be:35:61:c8:f1:e8: 80:b3:9e:d3:6d:0f:c8:19:9b:0b:91:79:d7:8c:63: 5e:85:75:f9:8a:2a:74:9e:7f:2c:f1:51:37:54:8e: 17:f1:74:ca:5d:ce:87:33:80:de:a0:18:69:57:9f: 03:48:7d:cd:7d:c6:be:83:86:55:38:78:fc:95:fe: 34:d1:b6:d5:14:1e:e5:d8:c5:92:76:91:6a:9f:07: 8a:81:e3:76:0c:34:94:b0:6b:86:e3:8e:c8:a7:22: c4:ab:bb:18:fb:bf:54:f4:56:d4:33:47:df:00:f0: 40:90:5d:a2:50:c7:d0:d8:06:08:ad:ca:c8:0e:49: 84:f3:c7:73:6c:06:87:3f:21:48:6d:58:b8:5d:44: ec:67:8a:96:16:7e:bb:8d:6c:26:26:55:29:56:74: 2b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:96:F8:13:F9:7F:4A:63:6F:5D:63:B0:EE:49:88:C1:C0:B5:6C:42 X509v3 Authority Key Identifier: keyid:96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:c1:3c:06:da:7b:84:e2:e0:80:6e:00:83:7f:e9:c1:b8:d3: 87:b7:a5:e0:0b:68:ed:00:0c:1a:db:d0:6a:c0:f6:44:9c:2e: 3c:1e:5a:af:c3:4f:b0:d4:e7:4e:77:43:dc:70:bb:80:d6:53: 20:d3:9c:f9:7e:c8:76:4f:80:44:e6:08:e1:e5:90:71:6c:65: 46:1a:70:7a:24:dd:08:57:f2:c3:f5:4c:0f:a7:ac:7e:26:19: 29:df:76:68:04:6b:10:d7:21:74:1e:ab:21:77:ff:1c:77:94: e4:13:7a:d6:f1:f6:08:14:be:a4:8d:9a:f7:9d:8e:53:16:53: 0b:b3:69:83:40:6a:ca:4b:91:18:57:f7:7c:56:53:d0:58:75: dd:cc:a9:94:1a:05:bd:73:4c:03:6f:51:cf:f7:d1:7e:29:26: c0:4d:d2:bc:9f:fc:0e:39:8f:4a:28:11:e3:21:13:af:a3:0a: 04:01:06:c0:7a:de:5d:40:da:b5:bf:18:99:b8:d0:f5:c0:72: de:55:49:ff:72:48:c0:12:b3:e1:5b:6c:76:9c:a5:8a:4a:7e: be:63:2b:02:fb:c1:86:1f:d3:2b:c9:2f:3c:6f:5e:46:d0:c3: d0:98:28:94:e3:5d:c6:42:f2:b5:90:c0:89:63:f5:be:cd:5b: 96:e8:e3:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv59mjtCJ0vFFnAjZyyMNvvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MTI0ZjI1MjQ2YTU0MDlmYmVlMTFiNTM3MmRkOGJlMjRj NmU5ZWIwHhcNMjYwMTI2MTEwMDMzWhcNMjYwMTI3MTEwMDMzWjAzMTEwLwYDVQQD Eyg2NTk2ZjgxM2Y5N2Y0YTYzNmY1ZDYzYjBlZTQ5ODhjMWMwYjU2YzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs4mOo94jAbVGkgdcqBVmieKPpbA C2n9LDF483ewd/LLgDQr7VsqGb9b2HCUXu0GjnhgFy4yhTi6XgR67V4P+3rlUJjC i5XkSha4DGiS3JDS4X7WcRaC5qIINFmyTodLzT6+NWHI8eiAs57TbQ/IGZsLkXnX jGNehXX5iip0nn8s8VE3VI4X8XTKXc6HM4DeoBhpV58DSH3Nfca+g4ZVOHj8lf40 0bbVFB7l2MWSdpFqnweKgeN2DDSUsGuG447IpyLEq7sY+79U9FbUM0ffAPBAkF2i UMfQ2AYIrcrIDkmE88dzbAaHPyFIbVi4XUTsZ4qWFn67jWwmJlUpVnQr0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWW+BP5f0pjb11jsO5JiMHAtWxCMB8GA1UdIwQY MBaAFJYSTyUkalQJ++4RtTct2L4kxunrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8xNGI1OGQtYTFhMy00NmMxLWFjNjIt OGVlZmI5NTJkOGMxLzEvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8xNGI1OGQtYTFhMy00NmMxLWFjNjItOGVlZmI5NTJkOGMx LzEvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc8E8Btp7 hOLggG4Ag3/pwbjTh7el4Ato7QAMGtvQasD2RJwuPB5ar8NPsNTnTndD3HC7gNZT INOc+X7Idk+AROYI4eWQcWxlRhpweiTdCFfyw/VMD6esfiYZKd92aARrENchdB6r IXf/HHeU5BN61vH2CBS+pI2a952OUxZTC7Npg0BqykuRGFf3fFZT0Fh13cyplBoF vXNMA29Rz/fRfikmwE3SvJ/8DjmPSigR4yETr6MKBAEGwHreXUDatb8YmbjQ9cBy 3lVJ/3JIwBKz4Vtsdpylikp+vmMrAvvBhh/TK8kvPG9eRtDD0JgolONdxkLytZDA iWP1vs1blujjTw== -----END CERTIFICATE-----Generated at Mon Jan 26 18:14:27 2026 by rpki-client