This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft File: lwaqkFRlWGQk84f9vYNki3LZRt4.mft (raw, json) Hash identifier: zJWXE1CjlO3D53z9fJKLdlFlqDJkevKCxKQxiwPsmTE= Subject key identifier: E8:85:36:42:3A:A1:99:05:EC:1E:BE:67:27:C8:86:53:24:A3:31:DF Authority key identifier: 97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE Certificate issuer: /CN=9706aa905465586424f387fdbd83648b72d946de Certificate serial: 019BF91C046F3EAC60DCD5D4D68A5DB3EBEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 07:02:01 +0000 Manifest this update: Mon 26 Jan 2026 07:02:01 +0000 Manifest next update: Tue 27 Jan 2026 07:02:01 +0000 Files and hashes: 1: axFCojXUhSkytCN0atEZfj9fkA8.roa (hash: I3PEkjutyOX2FwIEMplxrCsf4ez6AG70VNxYovdKhQs=) 2: dp2gXrpfvOMg65Z1sl0IeonKbxM.roa (hash: 8Vzr1PEVztWf+5QEVA47vH/IaL1dnxwbEHxKX7SEwVU=) 3: lwaqkFRlWGQk84f9vYNki3LZRt4.crl (hash: n4Cqk+29D+tEU+MGVtNyJINvIfkiNuVG5t9x7+RORIo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1c:04:6f:3e:ac:60:dc:d5:d4:d6:8a:5d:b3:eb:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9706aa905465586424f387fdbd83648b72d946de Validity Not Before: Jan 26 07:02:01 2026 GMT Not After : Jan 27 07:02:01 2026 GMT Subject: CN=e88536423aa19905ec1ebe6727c8865324a331df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4a:ca:01:db:63:32:80:01:ca:89:11:8e:fc: dd:34:c2:8d:da:76:ad:3c:5d:13:34:f0:d3:fb:40: 5b:38:07:00:e9:b9:d4:c7:3a:86:da:7c:30:66:2b: 5a:17:6e:59:3a:62:ae:6f:aa:25:a0:e3:02:9a:af: ad:29:a4:2f:24:12:22:ea:9f:2f:2f:42:07:ad:67: b8:6a:06:f8:f0:26:cb:0f:99:98:25:f7:12:e3:4c: cb:09:cd:4f:51:e5:75:b9:37:33:fd:3c:a2:b0:99: 6d:c4:93:81:3f:41:9b:38:00:37:46:62:d1:77:27: 8e:43:d4:d1:33:89:5d:1f:3d:f3:67:b0:8d:9a:c9: 3d:ef:09:24:64:f9:8e:4b:43:86:02:3a:b8:f9:9d: 0a:62:aa:2a:2d:18:30:1f:56:70:a5:8e:f1:01:a6: b5:97:25:c5:30:d6:23:ad:ca:0b:97:58:82:e9:fa: 17:b9:3b:6d:26:45:ad:76:4b:44:02:b3:80:bc:a0: 54:a7:0a:86:b2:a2:4f:84:9d:c4:f9:06:b7:e0:6e: 43:7d:c3:f3:60:7d:37:7d:2a:03:20:52:2d:96:6f: a2:f1:24:69:05:85:22:80:3b:42:e6:ea:e4:5d:63: 71:21:d6:10:95:34:87:4b:d3:fb:66:43:bc:e1:61: 9d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:85:36:42:3A:A1:99:05:EC:1E:BE:67:27:C8:86:53:24:A3:31:DF X509v3 Authority Key Identifier: keyid:97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:47:54:a2:6f:bf:9b:48:c3:25:c3:80:a2:47:f3:b8:b5:f4: c8:a5:43:5e:12:32:93:32:ba:0c:ae:1c:a9:15:d0:8a:c2:be: fe:01:99:a7:9e:d6:7d:63:38:5e:96:4e:d4:33:9f:d3:fa:21: cf:7d:67:73:51:7b:4b:c6:eb:b2:cc:8c:01:5a:59:88:5b:da: 97:15:a6:55:c9:4c:48:67:15:e6:a1:df:14:ff:05:3b:3a:9f: 64:77:84:b4:05:5f:e4:e2:34:41:f0:ee:3b:77:2f:6f:62:9a: 49:3c:20:ab:d0:70:43:3a:a1:3f:d4:1b:dc:aa:77:96:dc:5c: 81:32:91:ca:26:04:61:93:9b:07:f1:84:e6:37:b2:ba:1a:e0: 47:80:bd:50:83:bd:e3:e2:8b:04:18:2c:87:fc:af:fb:21:cd: f5:1e:88:c5:a4:a8:ac:e1:f4:8f:60:bd:28:5d:0f:b4:ce:db: d9:90:f0:8e:1f:c0:1a:24:03:2c:e2:4f:de:9a:48:11:d1:93: fe:9b:87:21:64:14:f0:09:74:bf:b9:85:f5:72:29:90:90:d9: 88:4a:01:a4:90:cd:4d:0e:b5:39:04:86:d8:79:c8:58:e2:fb: e6:cf:b3:73:1d:5f:44:34:22:0b:05:0c:86:50:93:46:45:5a: 4f:03:ac:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5HARvPqxg3NXU1opds+vqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MDZhYTkwNTQ2NTU4NjQyNGYzODdmZGJkODM2NDhiNzJk OTQ2ZGUwHhcNMjYwMTI2MDcwMjAxWhcNMjYwMTI3MDcwMjAxWjAzMTEwLwYDVQQD EyhlODg1MzY0MjNhYTE5OTA1ZWMxZWJlNjcyN2M4ODY1MzI0YTMzMWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUrKAdtjMoAByokRjvzdNMKN2nat PF0TNPDT+0BbOAcA6bnUxzqG2nwwZitaF25ZOmKub6oloOMCmq+tKaQvJBIi6p8v L0IHrWe4agb48CbLD5mYJfcS40zLCc1PUeV1uTcz/TyisJltxJOBP0GbOAA3RmLR dyeOQ9TRM4ldHz3zZ7CNmsk97wkkZPmOS0OGAjq4+Z0KYqoqLRgwH1ZwpY7xAaa1 lyXFMNYjrcoLl1iC6foXuTttJkWtdktEArOAvKBUpwqGsqJPhJ3E+Qa34G5DfcPz YH03fSoDIFItlm+i8SRpBYUigDtC5urkXWNxIdYQlTSHS9P7ZkO84WGd/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOiFNkI6oZkF7B6+ZyfIhlMkozHfMB8GA1UdIwQY MBaAFJcGqpBUZVhkJPOH/b2DZIty2UbeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHdhcWtGUmxXR1FrODRmOXZZTmtpM0xaUnQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8xY2YzZjAtYTAzNi00Yzc2LThiMDkt NWM1MzViNzQ2MzUzLzEvbHdhcWtGUmxXR1FrODRmOXZZTmtpM0xaUnQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8xY2YzZjAtYTAzNi00Yzc2LThiMDktNWM1MzViNzQ2MzUz LzEvbHdhcWtGUmxXR1FrODRmOXZZTmtpM0xaUnQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJkdUom+/ m0jDJcOAokfzuLX0yKVDXhIykzK6DK4cqRXQisK+/gGZp57WfWM4XpZO1DOf0/oh z31nc1F7S8brssyMAVpZiFvalxWmVclMSGcV5qHfFP8FOzqfZHeEtAVf5OI0QfDu O3cvb2KaSTwgq9BwQzqhP9Qb3Kp3ltxcgTKRyiYEYZObB/GE5jeyuhrgR4C9UIO9 4+KLBBgsh/yv+yHN9R6IxaSorOH0j2C9KF0PtM7b2ZDwjh/AGiQDLOJP3ppIEdGT /puHIWQU8Al0v7mF9XIpkJDZiEoBpJDNTQ61OQSG2HnIWOL75s+zcx1fRDQiCwUM hlCTRkVaTwOsIA== -----END CERTIFICATE-----Generated at Mon Jan 26 16:27:36 2026 by rpki-client