This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft File: lDBvaK6kuuEk-shfLJqj9a6FARM.mft (raw, json) Hash identifier: VpHVEiseVfO3DGWymmZhGauMbd6+LNdBixSiWMSkI7o= Subject key identifier: 3D:AE:E8:EB:1E:28:85:0A:7B:CE:88:61:A1:FD:41:46:A9:65:4A:97 Authority key identifier: 94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13 Certificate issuer: /CN=94306f68aea4bae124fac85f2c9aa3f5ae850113 Certificate serial: 019BA26B1D1CDF6773708F5CF6F67BA66DA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft Manifest number: 04D9 Signing time: Fri 09 Jan 2026 11:01:27 +0000 Manifest this update: Fri 09 Jan 2026 11:01:27 +0000 Manifest next update: Sat 10 Jan 2026 11:01:27 +0000 Files and hashes: 1: 0S5WgWNA9Jpe-KcTd_sdYpyiaYo.roa (hash: c7DpYKj73JKX2DEHdN+T0nrc/rYvZLnTJkF6lYxE+e8=) 2: 32MPHrhab7tLeHA1QgnK1TjEYxU.roa (hash: JXdy+SGJGsVbR9WQI9uRSAp0xDEYoI/Mip8shHcZQPM=) 3: 49joF_4IAz2wl7KbPrKLoLa3pRQ.roa (hash: fdsATKk2aFvQW4eJks7KIlsXE+EQbgWm1W06MslxugE=) 4: lDBvaK6kuuEk-shfLJqj9a6FARM.crl (hash: bkuc15ysMBxEYHv/kM4axt9KYyz/+2e+D7kWUUlousI=) 5: xb6xFdizKg83UpWTs6O9IzIE0x4.roa (hash: 9WlZEi/4plVHygYQD8tYe4ThNR/Fd3krNDoyWiRXrD4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 11:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:6b:1d:1c:df:67:73:70:8f:5c:f6:f6:7b:a6:6d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94306f68aea4bae124fac85f2c9aa3f5ae850113 Validity Not Before: Jan 9 11:01:27 2026 GMT Not After : Jan 10 11:01:27 2026 GMT Subject: CN=3daee8eb1e28850a7bce8861a1fd4146a9654a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8c:db:31:ea:6e:c0:ce:6e:72:45:95:06:ab: d5:6a:a2:12:8f:b1:a1:fb:a9:85:9e:80:ad:8a:cb: 49:ab:a1:a6:68:96:82:d0:50:ab:d5:d9:b2:9f:66: 39:4c:0e:b8:85:a2:90:a1:d0:c6:35:8a:21:37:68: 54:a8:0e:ed:49:c2:14:e9:75:bb:31:32:b6:fb:6d: a3:ab:38:5d:05:fb:6e:41:00:dc:79:db:b9:ba:8c: 10:3d:ef:b9:fa:e6:c0:d0:9d:3c:f4:e7:50:91:aa: 68:43:27:a3:40:68:58:0a:fe:3b:57:75:9c:60:bf: f1:80:5e:95:df:8a:d1:4f:01:eb:f3:41:d2:55:2b: bf:64:ec:87:87:c3:10:a6:55:e8:cc:02:50:6c:94: 30:26:a9:16:06:b1:20:79:02:36:af:a1:33:aa:22: bc:0a:bb:4b:3f:ba:c2:ff:ae:e1:31:ba:d4:ad:84: 95:89:ed:13:7a:57:97:86:bf:f1:e0:d6:8c:32:49: 7b:64:c2:1e:9f:07:96:a8:5c:60:71:c1:3a:3b:d1: be:1f:bb:97:20:eb:b3:3c:12:34:3e:00:99:91:09: 29:68:af:c4:44:89:08:22:23:76:e6:f9:f9:ac:1d: 62:c2:ea:5f:b9:80:81:21:b9:87:eb:df:b6:4b:92: 3e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AE:E8:EB:1E:28:85:0A:7B:CE:88:61:A1:FD:41:46:A9:65:4A:97 X509v3 Authority Key Identifier: keyid:94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:3e:b3:d6:a2:54:b5:19:3e:17:ab:80:03:d4:ec:4c:47:29: 6b:fc:9b:ce:f9:2e:79:ea:82:0c:ff:83:7e:42:4b:f8:10:f8: 28:51:86:da:bc:fa:a3:a5:c7:f1:c6:7e:5b:a5:ba:7a:fc:09: d2:e9:17:46:87:54:56:7e:4d:5b:c6:86:75:f5:90:f6:c8:82: 15:72:06:61:38:a5:fe:d1:e9:d0:30:01:e0:2b:a5:5d:bf:35: bd:8d:7f:ef:27:2d:77:b5:86:09:83:a5:3a:6d:1f:18:a6:5a: 16:97:4f:f5:ee:ab:56:e1:3e:5a:6f:8d:13:6e:8e:f6:41:17: 64:03:8b:fe:3e:fa:18:6e:3c:bb:57:b5:88:42:b7:df:39:56: 66:94:18:d1:a5:06:1b:58:8c:8e:e3:25:5e:bd:e6:3b:bd:24: 75:e0:5e:49:4a:e7:4e:0c:88:a9:9c:5d:e2:c8:af:34:46:0b: 4c:99:ad:44:f4:e2:22:a3:bb:f8:eb:a6:13:79:14:0a:ab:37: 33:e2:5f:51:3f:72:6e:7f:01:45:c2:cd:41:29:de:f3:7b:57: 15:29:27:29:f5:54:89:35:8e:fa:f8:df:a1:a8:1c:84:f7:94: 52:14:3f:bf:1a:af:00:3d:35:c7:5f:04:02:5e:f5:11:46:03: 80:a0:b5:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuiax0c32dzcI9c9vZ7pm2gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MzA2ZjY4YWVhNGJhZTEyNGZhYzg1ZjJjOWFhM2Y1YWU4 NTAxMTMwHhcNMjYwMTA5MTEwMTI3WhcNMjYwMTEwMTEwMTI3WjAzMTEwLwYDVQQD EygzZGFlZThlYjFlMjg4NTBhN2JjZTg4NjFhMWZkNDE0NmE5NjU0YTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4zbMepuwM5uckWVBqvVaqISj7Gh +6mFnoCtistJq6GmaJaC0FCr1dmyn2Y5TA64haKQodDGNYohN2hUqA7tScIU6XW7 MTK2+22jqzhdBftuQQDcedu5uowQPe+5+ubA0J089OdQkapoQyejQGhYCv47V3Wc YL/xgF6V34rRTwHr80HSVSu/ZOyHh8MQplXozAJQbJQwJqkWBrEgeQI2r6EzqiK8 CrtLP7rC/67hMbrUrYSVie0TeleXhr/x4NaMMkl7ZMIenweWqFxgccE6O9G+H7uX IOuzPBI0PgCZkQkpaK/ERIkIIiN25vn5rB1iwupfuYCBIbmH69+2S5I+pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2u6OseKIUKe86IYaH9QUapZUqXMB8GA1UdIwQY MBaAFJQwb2iupLrhJPrIXyyao/WuhQETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC81ZmQ4OGUtZmZiNi00NjUyLWE5OTAt M2Q4YmM4OWI0NDI3LzEvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC81ZmQ4OGUtZmZiNi00NjUyLWE5OTAtM2Q4YmM4OWI0NDI3 LzEvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcz6z1qJU tRk+F6uAA9TsTEcpa/ybzvkueeqCDP+DfkJL+BD4KFGG2rz6o6XH8cZ+W6W6evwJ 0ukXRodUVn5NW8aGdfWQ9siCFXIGYTil/tHp0DAB4CulXb81vY1/7yctd7WGCYOl Om0fGKZaFpdP9e6rVuE+Wm+NE26O9kEXZAOL/j76GG48u1e1iEK33zlWZpQY0aUG G1iMjuMlXr3mO70kdeBeSUrnTgyIqZxd4sivNEYLTJmtRPTiIqO7+OumE3kUCqs3 M+JfUT9ybn8BRcLNQSne83tXFSknKfVUiTWO+vjfoagchPeUUhQ/vxqvAD01x18E Al71EUYDgKC1aw== -----END CERTIFICATE-----Generated at Fri Jan 9 17:08:58 2026 by rpki-client