This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft File: lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft (raw, json) Hash identifier: if+8dYvAGJAObCHlHT1Gq/gj8sF7Nk7eUqpIperpeQo= Subject key identifier: F4:C0:B7:11:B5:DD:50:60:F8:3F:F6:E9:8C:34:D0:19:6A:40:13:0F Authority key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2 Certificate issuer: /CN=95461fbee1c06e3eafac0f2f95253ca8603accf2 Certificate serial: 019BFA645BE0BC28A01CCEB96EB8E6DD6B84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft Manifest number: 0961 Signing time: Mon 26 Jan 2026 13:00:39 +0000 Manifest this update: Mon 26 Jan 2026 13:00:39 +0000 Manifest next update: Tue 27 Jan 2026 13:00:39 +0000 Files and hashes: 1: DlYdZNTLvfx2OD11UfQRnD3hK2o.roa (hash: Yz+AdjCjCsAlEW+BjCHTyQFo7Owy/uvBTZnF71MgcBA=) 2: lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl (hash: oi04Lle+Y5IBO5ZWj3QsSYROBVofgMaMmPeeDECUehk=) 3: zw7G6rZ3OugQehoBP3QpVRIzHKs.roa (hash: Ywv0pQZLRrxCf8Y+ep3+4GqTg47V6bf1LboUdnUKZNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:5b:e0:bc:28:a0:1c:ce:b9:6e:b8:e6:dd:6b:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2 Validity Not Before: Jan 26 13:00:39 2026 GMT Not After : Jan 27 13:00:39 2026 GMT Subject: CN=f4c0b711b5dd5060f83ff6e98c34d0196a40130f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:83:b7:be:55:06:e8:96:09:f2:42:44:ce:4c: 91:2d:a4:38:2c:7e:a9:6c:0b:83:23:d0:e8:61:0d: 04:fa:33:ea:6d:74:86:c1:88:3c:77:61:7f:83:ca: 4d:25:ad:2f:5c:21:1b:d5:5d:69:4f:5d:cd:76:05: 48:c9:08:2e:70:f2:8c:9f:eb:fa:c2:88:fe:74:66: 6c:51:5d:79:29:b4:0f:6a:07:d7:92:a4:78:bc:6a: 38:b0:77:2c:c1:68:79:12:c2:77:e8:23:d1:d5:7b: 4c:f4:17:80:bc:9b:6b:7c:da:5a:6a:c7:f0:7f:f9: 72:41:b2:66:6d:12:53:42:13:cc:63:9c:bd:3a:48: 5a:90:49:e3:e0:ea:68:99:c5:ea:66:0c:4e:e2:ec: a4:9d:21:fb:1e:8c:b2:ef:06:57:7e:8f:7b:d3:2e: 8f:4e:4f:f8:39:87:73:16:6f:23:61:b7:12:fa:00: 1a:65:07:36:95:13:49:ef:4a:c8:87:14:71:fe:1f: 3a:7c:f2:fc:2a:36:7d:bc:db:44:1f:4e:89:71:30: bd:f8:ec:fa:ea:41:fe:b5:2a:91:06:0a:7a:03:d4: cf:c5:83:8d:2c:bc:35:42:c2:38:61:28:07:69:c6: 77:98:9d:da:76:a1:91:8a:76:8d:a7:b2:09:7c:ee: 39:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C0:B7:11:B5:DD:50:60:F8:3F:F6:E9:8C:34:D0:19:6A:40:13:0F X509v3 Authority Key Identifier: keyid:95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:be:3c:eb:54:78:23:c7:82:78:61:e1:0b:15:e5:54:fc:e8: ad:f1:64:86:5c:d4:34:6f:8d:57:1b:68:3d:44:47:35:f0:9e: 94:52:17:d2:1d:04:ca:61:7d:46:23:25:03:3a:1c:84:4b:cd: db:0a:1f:d5:1b:ac:23:e4:c1:94:4c:09:a8:7b:97:cf:f5:10: 9e:86:56:a5:87:41:8c:e9:4a:73:f5:54:85:1e:d5:1f:50:a4: e5:8a:5f:d0:e4:09:81:b3:b0:ae:77:77:f5:a1:06:e3:4f:41: 0f:db:36:4d:31:6a:10:fd:5f:f1:0a:9e:22:98:88:99:d6:69: ec:86:ac:82:d0:3e:87:90:ad:ee:fc:c9:22:f4:62:8b:b2:05: 4d:53:f8:c7:3c:44:62:05:10:75:50:3d:0a:ed:5e:2f:c7:c2: 5a:7b:50:78:be:57:96:08:4e:17:60:2f:74:59:a7:4d:dd:09: 6d:6f:70:f1:df:47:ce:40:a7:97:b1:85:36:31:6c:41:26:2e: 79:2a:15:fe:1f:0c:72:99:37:0a:db:ca:5f:e9:29:93:c9:ce: 31:5f:bd:17:11:04:f1:e4:1d:a5:77:5f:e2:b0:6f:96:db:81: f1:15:42:46:c8:cd:0e:ff:90:68:50:f4:39:a4:24:7e:9e:10: 9a:29:1c:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZFvgvCigHM65brjm3WuEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NDYxZmJlZTFjMDZlM2VhZmFjMGYyZjk1MjUzY2E4NjAz YWNjZjIwHhcNMjYwMTI2MTMwMDM5WhcNMjYwMTI3MTMwMDM5WjAzMTEwLwYDVQQD EyhmNGMwYjcxMWI1ZGQ1MDYwZjgzZmY2ZTk4YzM0ZDAxOTZhNDAxMzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIO3vlUG6JYJ8kJEzkyRLaQ4LH6p bAuDI9DoYQ0E+jPqbXSGwYg8d2F/g8pNJa0vXCEb1V1pT13NdgVIyQgucPKMn+v6 woj+dGZsUV15KbQPagfXkqR4vGo4sHcswWh5EsJ36CPR1XtM9BeAvJtrfNpaasfw f/lyQbJmbRJTQhPMY5y9OkhakEnj4OpomcXqZgxO4uyknSH7Hoyy7wZXfo970y6P Tk/4OYdzFm8jYbcS+gAaZQc2lRNJ70rIhxRx/h86fPL8KjZ9vNtEH06JcTC9+Oz6 6kH+tSqRBgp6A9TPxYONLLw1QsI4YSgHacZ3mJ3adqGRinaNp7IJfO45xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTAtxG13VBg+D/26Yw00BlqQBMPMB8GA1UdIwQY MBaAFJVGH77hwG4+r6wPL5UlPKhgOszyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lNWNlOGYtNWVhMC00NzlmLTkzZTkt ODlkNWM2MGY1MDFmLzEvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9lNWNlOGYtNWVhMC00NzlmLTkzZTktODlkNWM2MGY1MDFm LzEvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQL4861R4 I8eCeGHhCxXlVPzorfFkhlzUNG+NVxtoPURHNfCelFIX0h0EymF9RiMlAzochEvN 2wof1RusI+TBlEwJqHuXz/UQnoZWpYdBjOlKc/VUhR7VH1Ck5Ypf0OQJgbOwrnd3 9aEG409BD9s2TTFqEP1f8QqeIpiImdZp7IasgtA+h5Ct7vzJIvRii7IFTVP4xzxE YgUQdVA9Cu1eL8fCWntQeL5XlghOF2AvdFmnTd0JbW9w8d9HzkCnl7GFNjFsQSYu eSoV/h8Mcpk3CtvKX+kpk8nOMV+9FxEE8eQdpXdf4rBvltuB8RVCRsjNDv+QaFD0 OaQkfp4QmikceQ== -----END CERTIFICATE-----Generated at Mon Jan 26 22:40:33 2026 by rpki-client