This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft File: lpztpb83kB_p5E9ztb-CtoezRXI.mft (raw, json) Hash identifier: +Hj7OcCjkvosqHcfeD7gfPd3Q3fxmdpMyucmdVqgZ28= Subject key identifier: 49:8D:C7:55:5A:07:9E:C2:90:F9:DD:EE:E4:70:80:2A:F6:AB:AB:1A Authority key identifier: 96:9C:ED:A5:BF:37:90:1F:E9:E4:4F:73:B5:BF:82:B6:87:B3:45:72 Certificate issuer: /CN=969ceda5bf37901fe9e44f73b5bf82b687b34572 Certificate serial: 019BD9C7D0D0C13542E1370CF18124D7071D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft Manifest number: 0C7F Signing time: Tue 20 Jan 2026 05:01:49 +0000 Manifest this update: Tue 20 Jan 2026 05:01:49 +0000 Manifest next update: Wed 21 Jan 2026 05:01:49 +0000 Files and hashes: 1: 5tq-dphgnapNG8uID0bzWyuSiiI.roa (hash: Geh8HxvdWtRdjQA8GTRZhRKQeMt/TQkbrTaKQX7hwuM=) 2: SNXaMmatRq7Y2yZacERGh_Byx3c.roa (hash: 1VfAG/PWe9ADh3l7lJxuP3CaKheNhNOZc9+mMKVHmsc=) 3: aeJRC_Zrs1Xdsza3m-Bp94bJ1dk.roa (hash: 31o9/oasTnGfM4n9yp1biNvrc9x/A8EYFBmDcG491Fg=) 4: lpztpb83kB_p5E9ztb-CtoezRXI.crl (hash: /JA6gKEbJ8SjhpdAb8qQYusH++6LYzaFLJfvZQ8ch5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 05:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d9:c7:d0:d0:c1:35:42:e1:37:0c:f1:81:24:d7:07:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=969ceda5bf37901fe9e44f73b5bf82b687b34572 Validity Not Before: Jan 20 05:01:49 2026 GMT Not After : Jan 21 05:01:49 2026 GMT Subject: CN=498dc7555a079ec290f9ddeee470802af6abab1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ef:10:e3:2a:a3:26:37:f8:93:53:58:ed:ab: f7:d7:91:cd:ac:b3:2a:82:78:86:0d:1b:12:d2:37: a7:de:4e:6d:90:83:3b:99:e8:34:05:90:da:80:de: 35:fb:5c:d1:3a:d9:c2:51:66:3c:b7:15:9e:4e:0f: 97:f2:66:92:7e:de:3a:bd:fa:26:27:7f:46:e9:7a: 2e:90:82:6a:84:21:57:b4:53:2f:e6:be:8f:2b:82: 4e:eb:9e:c7:4b:63:c9:26:cf:ce:ab:8b:c3:59:6b: 88:44:54:5e:e5:8b:25:ff:07:64:83:13:51:71:5d: 7d:7d:c3:bc:75:f4:d6:40:17:43:ab:08:98:67:53: 00:54:fd:a2:63:55:11:e5:c4:44:fb:5a:d6:d1:cd: 56:9e:4d:4b:93:db:2a:8e:08:8d:97:59:20:b9:00: 41:f4:98:a8:f6:8b:97:08:68:3a:4a:40:83:dd:78: 33:e3:fa:6b:27:64:c9:5f:2d:48:b2:7b:15:5d:df: 70:7c:f6:ea:00:96:f1:eb:c2:c0:3b:dc:7d:5d:77: f3:43:91:01:b2:49:11:ea:a8:e2:ce:df:18:ea:3e: 8e:02:18:8a:09:b5:a4:e7:6f:60:3e:5f:f2:bd:97: e2:62:5a:ae:1b:82:8f:8f:ae:77:b7:68:69:35:d7: 34:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:8D:C7:55:5A:07:9E:C2:90:F9:DD:EE:E4:70:80:2A:F6:AB:AB:1A X509v3 Authority Key Identifier: keyid:96:9C:ED:A5:BF:37:90:1F:E9:E4:4F:73:B5:BF:82:B6:87:B3:45:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:d5:3d:6c:82:8a:d6:2e:4c:64:0b:75:d7:1e:50:09:7e:08: ae:c6:ce:97:be:80:59:1d:0f:95:40:1e:07:d7:50:29:be:69: b8:9d:b2:0b:7b:4c:e7:2b:08:c7:21:73:a3:4b:ed:39:ab:3d: 7d:23:4d:32:81:95:51:bb:21:7f:49:0f:0f:56:d0:5c:45:36: 1a:9a:d6:c8:ef:e3:0c:8b:e2:2e:f1:8e:b0:80:af:d3:65:c0: 18:c3:90:13:b8:89:87:63:58:90:f2:df:8e:27:34:00:4f:87: c4:0e:b9:9e:ea:c8:a7:50:b1:52:c9:1b:49:2e:0a:d6:00:68: d3:5d:32:81:67:84:12:fb:d8:3a:4d:aa:de:bd:da:fd:ec:a7: f1:9e:d4:27:04:db:3c:a0:c2:25:95:ad:c7:f6:8b:c7:17:a8: 98:2e:15:7e:a8:e2:38:ec:07:20:3b:52:63:ad:0e:c9:92:f4: de:03:8c:39:7f:65:77:90:f3:64:49:50:0b:0f:c8:59:57:81: 78:cb:89:d1:53:db:a7:d3:67:4f:6e:ac:48:85:68:b0:89:ab: 60:9b:b0:da:aa:9e:b1:5c:b6:8d:be:e0:b0:ce:69:45:d8:b1: 60:00:fd:ae:e2:74:f9:7e:e5:e4:9a:47:f5:14:69:a1:e0:a4: f5:1e:de:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvZx9DQwTVC4TcM8YEk1wcdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2OWNlZGE1YmYzNzkwMWZlOWU0NGY3M2I1YmY4MmI2ODdi MzQ1NzIwHhcNMjYwMTIwMDUwMTQ5WhcNMjYwMTIxMDUwMTQ5WjAzMTEwLwYDVQQD Eyg0OThkYzc1NTVhMDc5ZWMyOTBmOWRkZWVlNDcwODAyYWY2YWJhYjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2u8Q4yqjJjf4k1NY7av315HNrLMq gniGDRsS0jen3k5tkIM7meg0BZDagN41+1zROtnCUWY8txWeTg+X8maSft46vfom J39G6XoukIJqhCFXtFMv5r6PK4JO657HS2PJJs/Oq4vDWWuIRFRe5Ysl/wdkgxNR cV19fcO8dfTWQBdDqwiYZ1MAVP2iY1UR5cRE+1rW0c1Wnk1Lk9sqjgiNl1kguQBB 9Jio9ouXCGg6SkCD3Xgz4/prJ2TJXy1IsnsVXd9wfPbqAJbx68LAO9x9XXfzQ5EB skkR6qjizt8Y6j6OAhiKCbWk529gPl/yvZfiYlquG4KPj653t2hpNdc0ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmNx1VaB57CkPnd7uRwgCr2q6saMB8GA1UdIwQY MBaAFJac7aW/N5Af6eRPc7W/graHs0VyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHB6dHBiODNrQl9wNUU5enRiLUN0b2V6UlhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS81Y2ZmZDItYjU2OC00ZDU1LWExMjQt MjFmYzlhZmM4YWMxLzEvbHB6dHBiODNrQl9wNUU5enRiLUN0b2V6UlhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS81Y2ZmZDItYjU2OC00ZDU1LWExMjQtMjFmYzlhZmM4YWMx LzEvbHB6dHBiODNrQl9wNUU5enRiLUN0b2V6UlhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9U9bIKK 1i5MZAt11x5QCX4IrsbOl76AWR0PlUAeB9dQKb5puJ2yC3tM5ysIxyFzo0vtOas9 fSNNMoGVUbshf0kPD1bQXEU2GprWyO/jDIviLvGOsICv02XAGMOQE7iJh2NYkPLf jic0AE+HxA65nurIp1CxUskbSS4K1gBo010ygWeEEvvYOk2q3r3a/eyn8Z7UJwTb PKDCJZWtx/aLxxeomC4VfqjiOOwHIDtSY60OyZL03gOMOX9ld5DzZElQCw/IWVeB eMuJ0VPbp9NnT26sSIVosImrYJuw2qqesVy2jb7gsM5pRdixYAD9ruJ0+X7l5JpH 9RRpoeCk9R7ePg== -----END CERTIFICATE-----Generated at Tue Jan 20 15:38:35 2026 by rpki-client