This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft File: LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft (raw, json) Hash identifier: j7B7xLm41UKNcRCGBDw8ruDET4DBD+fpitytBTWAyrY= Subject key identifier: 37:7C:B7:DE:DB:AD:41:62:25:5D:7D:87:A2:92:87:9C:00:AB:AA:11 Authority key identifier: 2C:AB:F5:75:4F:FE:1A:1C:FB:89:B4:F2:B0:BF:10:65:82:3B:12:CF Certificate issuer: /CN=2cabf5754ffe1a1cfb89b4f2b0bf1065823b12cf Certificate serial: 019BAE6FCBB991BFA3A4DB1CA0651EFD573D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft Manifest number: 10F7 Signing time: Sun 11 Jan 2026 19:02:00 +0000 Manifest this update: Sun 11 Jan 2026 19:02:00 +0000 Manifest next update: Mon 12 Jan 2026 19:02:00 +0000 Files and hashes: 1: LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl (hash: qQUxuDcHNccG7PfIic9mGjIvadrMB6XjYDRSihsLuzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:6f:cb:b9:91:bf:a3:a4:db:1c:a0:65:1e:fd:57:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cabf5754ffe1a1cfb89b4f2b0bf1065823b12cf Validity Not Before: Jan 11 19:02:00 2026 GMT Not After : Jan 12 19:02:00 2026 GMT Subject: CN=377cb7dedbad4162255d7d87a292879c00abaa11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ce:85:e6:b9:4a:f4:ae:3f:27:d5:1f:ee:65: 40:61:ea:3b:04:5e:b0:1e:7a:75:80:c6:52:17:14: 8c:a8:4f:32:de:8c:39:8d:fd:e9:e2:14:a2:15:29: 96:e7:ee:b9:fc:58:57:37:16:61:a1:3c:1d:97:9e: f3:65:ca:b0:2f:d2:ad:20:d3:1a:53:21:ae:91:77: 55:b5:09:96:83:c5:c9:76:c8:8c:86:bc:20:ed:35: 91:14:d5:a8:23:fc:42:ae:00:06:5a:b1:fe:1f:40: 7c:3c:90:4a:e6:31:2d:f0:f3:e0:d2:5e:ea:18:a5: ee:d0:75:6e:a5:9a:40:e5:24:8e:90:04:1c:b9:90: 0e:3e:b2:39:3d:3b:ee:9e:1e:db:92:25:7c:9f:95: e5:89:56:ec:47:40:53:bc:00:ab:d1:45:54:99:81: e4:2f:0b:d8:0b:ad:47:f7:4e:d1:bf:64:9b:a7:55: 84:87:5b:58:81:ec:04:5b:88:02:1a:61:1a:57:6a: 0f:d4:b7:9d:38:f2:04:54:f6:27:5a:a8:35:57:d0: d0:e3:fa:e4:b1:e2:92:ef:f6:43:d3:9d:30:f3:61: 38:19:2d:46:b1:a7:fe:d4:10:5c:6a:21:ee:df:84: 8a:d4:f8:57:6a:ca:71:27:86:1d:8a:c4:e5:81:06: 28:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:7C:B7:DE:DB:AD:41:62:25:5D:7D:87:A2:92:87:9C:00:AB:AA:11 X509v3 Authority Key Identifier: keyid:2C:AB:F5:75:4F:FE:1A:1C:FB:89:B4:F2:B0:BF:10:65:82:3B:12:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5a:e0:af:42:5b:99:91:4f:55:bd:e1:6d:a0:5c:b3:f2:ab: 67:36:dc:05:db:fe:f3:a8:52:a2:f5:9a:96:e1:e7:d5:77:a3: 75:86:a0:8e:60:77:1b:ef:79:db:36:95:67:34:85:13:2f:6d: d1:c5:fb:29:75:44:2e:4a:74:16:fc:b4:8b:4f:26:0d:39:67: 4d:40:53:2d:0f:2a:ce:ac:69:49:65:31:9e:25:4e:81:5e:2d: ca:8a:51:0c:38:3c:2f:b7:51:ce:52:56:ef:87:4a:71:a9:ba: 24:9e:ff:7b:d5:1d:15:19:0e:40:a5:fe:27:72:72:34:28:8c: df:52:c8:f7:a3:69:30:ac:12:74:c8:b9:cd:90:15:74:9c:39: 74:be:c5:06:87:e0:8e:aa:f0:51:15:8c:5c:3f:0b:51:2b:e7: c1:4d:85:eb:52:72:5a:ea:f8:55:d4:47:3c:e7:bb:83:c4:e6: a9:f0:3e:a7:7f:45:a2:dc:a7:ee:ff:2a:a5:04:2a:f7:0c:c9: 24:c2:b3:c9:6a:e7:21:c7:68:77:5c:fc:2d:8d:a9:19:03:b8: 28:4b:1c:6a:19:6b:18:8c:37:fa:69:c2:61:aa:0e:d8:e4:75: 71:50:af:8a:d1:ae:73:16:14:ae:33:42:d6:26:fe:33:70:86: f0:3d:41:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuub8u5kb+jpNscoGUe/Vc9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYWJmNTc1NGZmZTFhMWNmYjg5YjRmMmIwYmYxMDY1ODIz YjEyY2YwHhcNMjYwMTExMTkwMjAwWhcNMjYwMTEyMTkwMjAwWjAzMTEwLwYDVQQD EygzNzdjYjdkZWRiYWQ0MTYyMjU1ZDdkODdhMjkyODc5YzAwYWJhYTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvM6F5rlK9K4/J9Uf7mVAYeo7BF6w Hnp1gMZSFxSMqE8y3ow5jf3p4hSiFSmW5+65/FhXNxZhoTwdl57zZcqwL9KtINMa UyGukXdVtQmWg8XJdsiMhrwg7TWRFNWoI/xCrgAGWrH+H0B8PJBK5jEt8PPg0l7q GKXu0HVupZpA5SSOkAQcuZAOPrI5PTvunh7bkiV8n5XliVbsR0BTvACr0UVUmYHk LwvYC61H907Rv2Sbp1WEh1tYgewEW4gCGmEaV2oP1LedOPIEVPYnWqg1V9DQ4/rk seKS7/ZD050w82E4GS1Gsaf+1BBcaiHu34SK1PhXaspxJ4YdisTlgQYoEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDd8t97brUFiJV19h6KSh5wAq6oRMB8GA1UdIwQY MBaAFCyr9XVP/hoc+4m08rC/EGWCOxLPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEt2MWRVXy1HaHo3aWJUeXNMOFFaWUk3RXM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lNGI3ODktM2MwZi00YTNiLTgxNWYt MDY5NzhmMThjNzM0LzEvTEt2MWRVXy1HaHo3aWJUeXNMOFFaWUk3RXM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9lNGI3ODktM2MwZi00YTNiLTgxNWYtMDY5NzhmMThjNzM0 LzEvTEt2MWRVXy1HaHo3aWJUeXNMOFFaWUk3RXM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALlrgr0Jb mZFPVb3hbaBcs/KrZzbcBdv+86hSovWaluHn1XejdYagjmB3G+952zaVZzSFEy9t 0cX7KXVELkp0Fvy0i08mDTlnTUBTLQ8qzqxpSWUxniVOgV4tyopRDDg8L7dRzlJW 74dKcam6JJ7/e9UdFRkOQKX+J3JyNCiM31LI96NpMKwSdMi5zZAVdJw5dL7FBofg jqrwURWMXD8LUSvnwU2F61JyWur4VdRHPOe7g8TmqfA+p39Fotyn7v8qpQQq9wzJ JMKzyWrnIcdod1z8LY2pGQO4KEscahlrGIw3+mnCYaoO2OR1cVCvitGucxYUrjNC 1ib+M3CG8D1BVg== -----END CERTIFICATE-----Generated at Mon Jan 12 00:52:25 2026 by rpki-client