This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft File: licbYtGOSsd8YQlpDqrkzDTQ6bY.mft (raw, json) Hash identifier: haY5xYISaHXLYj79S3t9Z3QGjJ06XT2u8a15KXmGHCg= Subject key identifier: 8C:E9:81:11:4E:A3:40:AA:8B:95:97:5A:43:12:1F:DE:50:CD:82:99 Authority key identifier: 96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6 Certificate issuer: /CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6 Certificate serial: 019BFB40221EEDCFD3B6659024031B8A0868 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft Manifest number: 0CA1 Signing time: Mon 26 Jan 2026 17:00:42 +0000 Manifest this update: Mon 26 Jan 2026 17:00:42 +0000 Manifest next update: Tue 27 Jan 2026 17:00:42 +0000 Files and hashes: 1: KUOqjCxyAKEhTbAupzFiFaYvtyw.roa (hash: os3TCsMwZbVNQhnConL+JRAfWiuBh8Xi7SXGh1W8p5c=) 2: aZ8AkYbZDzLWgutOqU36IbLeq9I.roa (hash: cnNNZQp5lYYOI91A8raXO1cOrkw9J8G5tTC55Sx7Npk=) 3: licbYtGOSsd8YQlpDqrkzDTQ6bY.crl (hash: hlKB4L/hpfxyOL2UoiZOZRvRA0oMfTQza8F1NHzc1Ag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:40:22:1e:ed:cf:d3:b6:65:90:24:03:1b:8a:08:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6 Validity Not Before: Jan 26 17:00:42 2026 GMT Not After : Jan 27 17:00:42 2026 GMT Subject: CN=8ce981114ea340aa8b95975a43121fde50cd8299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ee:88:c5:9e:85:b3:e0:25:7d:a8:c1:eb:17: bf:c7:a4:c8:ab:e9:57:e3:ee:29:9e:6a:57:b1:f6: 1b:86:56:af:1b:ea:1d:fa:4b:19:90:0b:fb:59:82: eb:bd:69:5c:22:48:14:c5:f8:a9:fd:bd:cd:7d:14: b7:c8:34:8d:14:18:0a:05:db:8c:56:3f:3b:a5:96: 8c:2b:b6:36:82:50:54:2c:74:00:2c:46:c1:8c:14: 39:a6:9f:3d:4f:ec:18:1b:ad:34:5b:47:f8:1a:e0: da:f8:dc:f1:63:69:25:d3:d2:e5:7a:28:03:de:32: 00:88:84:96:b8:bc:14:87:fb:91:36:5d:25:24:87: 21:6c:f7:3f:f5:8d:10:c7:34:4d:60:2f:bd:2f:c0: 3d:d1:1b:dd:6f:bb:d9:95:69:38:01:8c:e5:35:ee: 81:e2:2a:52:a1:84:9d:8e:4b:30:56:01:d7:17:68: 79:d4:99:a3:35:d8:d8:87:81:2c:99:ec:b9:f4:17: 1d:ee:60:23:36:5e:53:00:87:7d:0f:6e:71:fe:f0: be:2e:64:04:e7:bd:74:61:9a:20:85:22:07:b7:02: 6c:87:6c:7c:db:f6:06:4e:b2:2b:05:85:0d:f9:2f: 07:5a:eb:7d:7d:0f:01:3e:b7:d1:6b:78:0b:c9:7f: 3f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E9:81:11:4E:A3:40:AA:8B:95:97:5A:43:12:1F:DE:50:CD:82:99 X509v3 Authority Key Identifier: keyid:96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:69:51:50:06:c0:57:9c:71:fe:61:97:06:97:29:29:d6:ad: 2c:ce:2f:f2:cc:01:31:4f:65:f4:c9:85:ea:27:15:77:1c:7e: 31:2b:d7:24:2e:ae:e5:9f:b7:23:43:33:54:46:e0:0d:c5:c0: 3d:89:93:e0:25:73:57:73:4e:ed:87:13:57:97:76:29:38:78: bb:fe:05:33:16:de:00:97:af:2d:a8:47:1f:a6:bb:2b:b6:fe: 2b:f4:4b:21:30:18:78:04:9a:ce:b4:da:5c:ae:31:c8:60:ae: 31:20:6c:41:7e:2b:60:a1:94:b3:5d:cf:49:6a:21:95:61:f1: 72:3f:05:77:21:da:c2:be:92:2e:28:b8:bc:51:5d:36:12:42: 30:35:e1:ac:1e:6c:9a:19:16:b7:64:8b:6b:e4:cc:73:a8:66: 14:78:22:96:ac:e7:75:f2:db:15:a1:07:c2:88:a2:c6:cc:06: 0a:1b:86:3a:19:49:ed:f5:23:86:b1:cd:0b:61:a9:20:93:52: a1:e4:7a:18:77:c7:4c:5c:7c:d9:c9:c0:5d:65:f2:cb:d0:95: 8d:d7:8f:54:49:0c:e5:a0:40:6c:38:57:27:7f:3b:ee:aa:9e: d3:d2:1d:75:75:87:43:48:c1:d8:a8:0b:5a:98:c4:da:97:91: b9:26:b6:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7QCIe7c/TtmWQJAMbighoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MjcxYjYyZDE4ZTRhYzc3YzYxMDk2OTBlYWFlNGNjMzRk MGU5YjYwHhcNMjYwMTI2MTcwMDQyWhcNMjYwMTI3MTcwMDQyWjAzMTEwLwYDVQQD Eyg4Y2U5ODExMTRlYTM0MGFhOGI5NTk3NWE0MzEyMWZkZTUwY2Q4Mjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse6IxZ6Fs+AlfajB6xe/x6TIq+lX 4+4pnmpXsfYbhlavG+od+ksZkAv7WYLrvWlcIkgUxfip/b3NfRS3yDSNFBgKBduM Vj87pZaMK7Y2glBULHQALEbBjBQ5pp89T+wYG600W0f4GuDa+NzxY2kl09LleigD 3jIAiISWuLwUh/uRNl0lJIchbPc/9Y0QxzRNYC+9L8A90Rvdb7vZlWk4AYzlNe6B 4ipSoYSdjkswVgHXF2h51JmjNdjYh4Esmey59Bcd7mAjNl5TAId9D25x/vC+LmQE 5710YZoghSIHtwJsh2x82/YGTrIrBYUN+S8HWut9fQ8BPrfRa3gLyX8/JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzpgRFOo0Cqi5WXWkMSH95QzYKZMB8GA1UdIwQY MBaAFJYnG2LRjkrHfGEJaQ6q5Mw00Om2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGljYll0R09Tc2Q4WVFscERxcmt6RFRRNmJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mNmI2MGItNTgwOC00OGEyLTgyMDMt MWNhM2ZiYmZiYTNmLzEvbGljYll0R09Tc2Q4WVFscERxcmt6RFRRNmJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mNmI2MGItNTgwOC00OGEyLTgyMDMtMWNhM2ZiYmZiYTNm LzEvbGljYll0R09Tc2Q4WVFscERxcmt6RFRRNmJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmlRUAbA V5xx/mGXBpcpKdatLM4v8swBMU9l9MmF6icVdxx+MSvXJC6u5Z+3I0MzVEbgDcXA PYmT4CVzV3NO7YcTV5d2KTh4u/4FMxbeAJevLahHH6a7K7b+K/RLITAYeASazrTa XK4xyGCuMSBsQX4rYKGUs13PSWohlWHxcj8FdyHawr6SLii4vFFdNhJCMDXhrB5s mhkWt2SLa+TMc6hmFHgilqzndfLbFaEHwoiixswGChuGOhlJ7fUjhrHNC2GpIJNS oeR6GHfHTFx82cnAXWXyy9CVjdePVEkM5aBAbDhXJ3877qqe09IddXWHQ0jB2KgL WpjE2peRuSa2jA== -----END CERTIFICATE-----Generated at Mon Jan 26 22:27:41 2026 by rpki-client