This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft File: LnPLOHXZEhkmGzrpAQgTEaWgcas.mft (raw, json) Hash identifier: xZ34ryL4j5Nx1cMr63FAidjQx3/6INvTxwZ66W5nZLA= Subject key identifier: 50:C2:A7:B0:C1:43:E7:0E:47:62:48:13:05:03:88:F6:C3:4A:B7:B1 Authority key identifier: 2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB Certificate issuer: /CN=2e73cb3875d91219261b3ae901081311a5a071ab Certificate serial: 019BFCF89A4C91691D260651B89C830F31A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft Manifest number: 0168 Signing time: Tue 27 Jan 2026 01:01:49 +0000 Manifest this update: Tue 27 Jan 2026 01:01:49 +0000 Manifest next update: Wed 28 Jan 2026 01:01:49 +0000 Files and hashes: 1: LnPLOHXZEhkmGzrpAQgTEaWgcas.crl (hash: jdEhoOPRK90G4AMm2C2Ciu+LicZCwmonr6lxSb0tv9A=) 2: d9bKfKc4CWNG5hnKSbTK0Rni9UU.roa (hash: 4jZ3a0Nmi0XTCu3Uai+tAC5QbHyDGtcHMO/I90in7Wg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f8:9a:4c:91:69:1d:26:06:51:b8:9c:83:0f:31:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e73cb3875d91219261b3ae901081311a5a071ab Validity Not Before: Jan 27 01:01:49 2026 GMT Not After : Jan 28 01:01:49 2026 GMT Subject: CN=50c2a7b0c143e70e47624813050388f6c34ab7b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:06:33:a4:ca:93:d7:f7:84:3e:76:4a:88:94: b0:6a:83:43:6a:e3:39:a0:dc:5d:e8:ed:a5:42:de: 28:41:cb:b9:fb:84:82:13:c7:4f:c8:98:69:bb:e4: 05:f1:49:ea:17:0c:73:5d:a6:d5:31:d9:92:4d:d5: 38:c9:40:b0:ae:2a:1c:e8:04:3a:54:62:f9:fb:8e: c8:48:90:9c:b1:c3:64:86:cc:84:ce:fa:96:58:01: ad:8f:db:a3:fe:f5:e2:b5:b0:2f:eb:71:52:60:d0: ac:83:1c:aa:c8:05:ba:bb:87:a8:a1:eb:c3:1b:ac: 6a:ee:69:56:d8:89:7f:70:f4:b8:c6:5e:01:26:45: 73:d2:5f:06:5d:70:fe:a0:c5:be:f4:d3:31:f7:5a: ae:3c:35:f4:73:32:ae:23:61:d7:7a:b1:66:24:e6: fa:a9:e7:08:79:0d:ad:c7:95:ba:75:7e:7b:9e:7d: 4d:6c:78:7a:b5:59:09:86:8a:08:38:78:a8:e6:a8: 77:33:43:22:f0:b0:7f:9f:0e:22:46:43:1c:03:7b: 89:d4:3c:86:68:cb:dd:29:8f:f3:28:49:47:21:f7: 00:e6:07:77:a6:c0:70:5e:96:e6:53:2c:f1:ea:e4: d1:1f:03:b6:67:e3:7e:8d:34:51:4f:b3:f1:d7:ed: af:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C2:A7:B0:C1:43:E7:0E:47:62:48:13:05:03:88:F6:C3:4A:B7:B1 X509v3 Authority Key Identifier: keyid:2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:8e:fa:d7:1a:59:26:f1:ee:7f:8a:5a:2c:c7:ab:2c:3b:ee: 25:4d:c5:6d:d5:34:60:1d:ee:fd:bd:62:b2:59:47:56:f4:50: 8c:4f:76:5b:b8:5c:78:9c:13:1e:1c:96:72:08:ac:fb:62:cb: 71:9b:e8:19:bd:aa:c1:11:66:db:cd:4d:77:7e:4e:77:f4:83: ac:e5:99:74:5b:a0:76:8f:d5:42:5d:61:4e:fe:f3:30:0b:9e: 36:17:32:4f:6e:c2:89:d4:e2:0b:61:5b:26:75:06:b8:98:e7: 23:a6:57:73:58:e8:53:0a:be:b9:ed:b0:b5:5b:35:b7:12:eb: 44:5b:c7:85:bf:15:74:20:37:a1:04:07:1b:c6:9b:92:ea:21: 2c:f1:c7:4c:77:f6:ae:99:a1:73:96:63:47:0d:23:bc:d8:13: dc:56:bb:68:1d:74:ab:56:e3:ff:ae:a6:f2:fa:09:68:43:5f: 55:34:93:ac:eb:72:ea:2f:f1:c6:65:c9:45:a7:eb:6f:5a:55: 92:55:a4:1b:0d:4f:0f:46:96:14:19:b4:4d:1d:6f:dc:15:69: bc:0a:61:92:dc:c1:3a:ad:a2:50:6c:69:62:04:58:f8:6a:e2: e0:60:dd:95:55:14:6e:a3:91:3f:7d:17:a4:02:1e:5c:47:13: d6:05:5f:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8+JpMkWkdJgZRuJyDDzGpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNzNjYjM4NzVkOTEyMTkyNjFiM2FlOTAxMDgxMzExYTVh MDcxYWIwHhcNMjYwMTI3MDEwMTQ5WhcNMjYwMTI4MDEwMTQ5WjAzMTEwLwYDVQQD Eyg1MGMyYTdiMGMxNDNlNzBlNDc2MjQ4MTMwNTAzODhmNmMzNGFiN2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQYzpMqT1/eEPnZKiJSwaoNDauM5 oNxd6O2lQt4oQcu5+4SCE8dPyJhpu+QF8UnqFwxzXabVMdmSTdU4yUCwrioc6AQ6 VGL5+47ISJCcscNkhsyEzvqWWAGtj9uj/vXitbAv63FSYNCsgxyqyAW6u4eooevD G6xq7mlW2Il/cPS4xl4BJkVz0l8GXXD+oMW+9NMx91quPDX0czKuI2HXerFmJOb6 qecIeQ2tx5W6dX57nn1NbHh6tVkJhooIOHio5qh3M0Mi8LB/nw4iRkMcA3uJ1DyG aMvdKY/zKElHIfcA5gd3psBwXpbmUyzx6uTRHwO2Z+N+jTRRT7Px1+2vMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDCp7DBQ+cOR2JIEwUDiPbDSrexMB8GA1UdIwQY MBaAFC5zyzh12RIZJhs66QEIExGloHGrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG5QTE9IWFpFaGttR3pycEFRZ1RFYVdnY2FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mM2YyZDktMmE4Zi00YWU2LWJhNTUt ZjRhZmZjODAyOGYzLzEvTG5QTE9IWFpFaGttR3pycEFRZ1RFYVdnY2FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mM2YyZDktMmE4Zi00YWU2LWJhNTUtZjRhZmZjODAyOGYz LzEvTG5QTE9IWFpFaGttR3pycEFRZ1RFYVdnY2FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUY761xpZ JvHuf4paLMerLDvuJU3FbdU0YB3u/b1isllHVvRQjE92W7hceJwTHhyWcgis+2LL cZvoGb2qwRFm281Nd35Od/SDrOWZdFugdo/VQl1hTv7zMAueNhcyT27CidTiC2Fb JnUGuJjnI6ZXc1joUwq+ue2wtVs1txLrRFvHhb8VdCA3oQQHG8abkuohLPHHTHf2 rpmhc5ZjRw0jvNgT3Fa7aB10q1bj/66m8voJaENfVTSTrOty6i/xxmXJRafrb1pV klWkGw1PD0aWFBm0TR1v3BVpvAphktzBOq2iUGxpYgRY+Gri4GDdlVUUbqORP30X pAIeXEcT1gVfPA== -----END CERTIFICATE-----Generated at Tue Jan 27 06:42:36 2026 by rpki-client