This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft File: LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft (raw, json) Hash identifier: 01aylZTxegkVKLjhWobiZyaPyJbCe5r4D29l5V/CPzU= Subject key identifier: 58:1A:DB:68:63:44:9C:AD:DA:F1:DC:9C:20:50:5C:F0:92:97:CB:1F Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0 Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0 Certificate serial: 019BFD6586DEF1B6F32983DA02E5927CD685 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft Manifest number: 07DE Signing time: Tue 27 Jan 2026 03:00:47 +0000 Manifest this update: Tue 27 Jan 2026 03:00:47 +0000 Manifest next update: Wed 28 Jan 2026 03:00:47 +0000 Files and hashes: 1: G8YCS6i0g0ubDbA7T2_j3kguxlE.roa (hash: qHRsf2eTwCBKp1PGCkPmqwvIHubp6Ujq79DZ3/G/6VI=) 2: LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl (hash: WSf0392dznnYZbpviVcRCA/3drPEgdctHdaDz8Rb8uM=) 3: _Q66pLzef8HiB2dIFrB73IR2x2g.roa (hash: nOI8zIBVSnJqmIf0/LULlXY1T16i45MjeJq+7As4mVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 03:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:65:86:de:f1:b6:f3:29:83:da:02:e5:92:7c:d6:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0 Validity Not Before: Jan 27 03:00:47 2026 GMT Not After : Jan 28 03:00:47 2026 GMT Subject: CN=581adb6863449caddaf1dc9c20505cf09297cb1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:51:aa:1c:3a:08:f9:6e:31:11:f9:c0:20:1d: 6f:f2:7d:9b:6a:b9:9a:14:a9:3f:a0:d2:80:4b:97: e1:74:fa:8f:34:3d:06:85:3c:f0:c4:c4:a8:df:0c: b9:c6:a0:e9:6b:44:71:0c:80:9c:4b:9a:f7:6e:51: 74:66:ee:6d:06:98:1a:e9:83:12:3f:dd:77:0e:fc: 65:be:74:ca:ee:4d:23:0f:f2:35:dc:47:30:cb:34: f5:3e:f4:f3:c3:a5:02:a6:54:47:ad:1c:74:35:18: b6:7b:38:61:d0:df:41:ed:09:b3:6e:5c:de:67:f5: 94:44:33:1a:6b:8d:2a:00:ba:ec:0f:e5:15:7d:1a: 82:ed:91:3b:df:d4:18:c8:60:bf:a8:f1:ed:7d:36: a1:0c:fa:20:52:47:d4:11:86:cf:dc:93:4c:53:7b: 0e:0b:15:12:3f:51:73:aa:6d:e2:bf:83:29:f1:7c: af:ea:f5:8f:0c:7c:3f:4a:3f:fb:6b:59:e4:32:aa: eb:f6:f0:55:20:27:00:4e:7f:7c:95:f5:7c:c2:6b: d6:61:a7:e8:01:5e:24:ed:5c:f2:ec:5e:c1:53:01: 94:14:8e:11:ac:b5:cb:03:5b:e6:be:70:77:30:50: 6f:fd:68:86:39:22:2e:5b:bc:5d:4f:df:f8:fe:6c: 09:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:1A:DB:68:63:44:9C:AD:DA:F1:DC:9C:20:50:5C:F0:92:97:CB:1F X509v3 Authority Key Identifier: keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:4b:2b:61:d5:45:81:30:4e:ba:18:48:ea:9a:a7:d0:01:2e: b4:e7:15:81:89:86:e6:32:eb:8e:b9:1b:49:7e:e1:58:f3:21: 47:64:bc:ed:fd:62:42:df:79:cd:88:37:82:64:3c:b8:f0:43: c4:9f:a4:ab:f4:47:f7:7a:4c:3a:47:48:f7:bd:c6:30:f7:81: f8:1e:bc:3e:85:eb:6f:5a:2e:ef:6a:a4:1e:ae:f9:7b:d2:9f: bd:0e:a3:3d:ba:97:cf:63:f4:5e:5d:16:df:1b:7b:2e:2c:91: 78:db:73:95:e0:9e:a4:ca:67:ca:65:84:52:99:29:e5:66:72: d9:4a:d0:42:a0:bf:31:5a:3c:50:62:9e:c2:6d:6f:53:29:69: 01:d2:89:f4:c1:72:d4:78:d3:64:61:e3:30:19:b2:1f:93:95: d9:55:63:cb:a7:7e:10:18:8f:07:b7:d7:fc:43:fb:18:08:d4: 10:f0:94:60:f1:16:45:c2:ba:80:b2:af:2b:f6:3b:7f:f0:94: a9:93:1f:ab:c8:b9:24:e5:72:37:73:cd:7f:8f:63:90:50:a5: fc:5b:1c:c6:ca:0f:1a:1a:ae:63:ce:e2:d9:73:c7:77:0a:2d: 71:75:ba:29:5c:5d:19:fd:a0:70:b1:85:d0:fa:45:00:7f:85: 4c:41:21:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9ZYbe8bbzKYPaAuWSfNaFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMGQ2MjEyOWQwMjA2M2Q0MDllYmZiMDFjNjQ4ZDQ2ZjM0 ODg5ZTAwHhcNMjYwMTI3MDMwMDQ3WhcNMjYwMTI4MDMwMDQ3WjAzMTEwLwYDVQQD Eyg1ODFhZGI2ODYzNDQ5Y2FkZGFmMWRjOWMyMDUwNWNmMDkyOTdjYjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1GqHDoI+W4xEfnAIB1v8n2barma FKk/oNKAS5fhdPqPND0GhTzwxMSo3wy5xqDpa0RxDICcS5r3blF0Zu5tBpga6YMS P913DvxlvnTK7k0jD/I13EcwyzT1PvTzw6UCplRHrRx0NRi2ezhh0N9B7Qmzblze Z/WURDMaa40qALrsD+UVfRqC7ZE739QYyGC/qPHtfTahDPogUkfUEYbP3JNMU3sO CxUSP1Fzqm3iv4Mp8Xyv6vWPDHw/Sj/7a1nkMqrr9vBVICcATn98lfV8wmvWYafo AV4k7Vzy7F7BUwGUFI4RrLXLA1vmvnB3MFBv/WiGOSIuW7xdT9/4/mwJiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFga22hjRJyt2vHcnCBQXPCSl8sfMB8GA1UdIwQY MBaAFC0NYhKdAgY9QJ6/sBxkjUbzSIngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wNjBmN2UtOGNmMC00ZWMyLWFmN2Et MWRhZWE0YmM5NGIzLzEvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wNjBmN2UtOGNmMC00ZWMyLWFmN2EtMWRhZWE0YmM5NGIz LzEvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlEsrYdVF gTBOuhhI6pqn0AEutOcVgYmG5jLrjrkbSX7hWPMhR2S87f1iQt95zYg3gmQ8uPBD xJ+kq/RH93pMOkdI973GMPeB+B68PoXrb1ou72qkHq75e9KfvQ6jPbqXz2P0Xl0W 3xt7LiyReNtzleCepMpnymWEUpkp5WZy2UrQQqC/MVo8UGKewm1vUylpAdKJ9MFy 1HjTZGHjMBmyH5OV2VVjy6d+EBiPB7fX/EP7GAjUEPCUYPEWRcK6gLKvK/Y7f/CU qZMfq8i5JOVyN3PNf49jkFCl/FscxsoPGhquY87i2XPHdwotcXW6KVxdGf2gcLGF 0PpFAH+FTEEhng== -----END CERTIFICATE-----Generated at Tue Jan 27 13:23:23 2026 by rpki-client