This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft File: LS19l0PeLvovYzN4omj1jyqhYFA.mft (raw, json) Hash identifier: XUJ3XNjCtUxvyGYRohXSemKpbRznBcm0Pq6tCC3hEsA= Subject key identifier: 82:9B:3B:D4:45:C3:89:48:C7:21:8A:67:5C:62:70:21:A7:64:FF:36 Authority key identifier: 2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50 Certificate issuer: /CN=2d2d7d9743de2efa2f633378a268f58f2aa16050 Certificate serial: 019C09D7A075DE04F3EA20B11EB58AF3B4F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft Manifest number: 16A2 Signing time: Thu 29 Jan 2026 13:00:52 +0000 Manifest this update: Thu 29 Jan 2026 13:00:52 +0000 Manifest next update: Fri 30 Jan 2026 13:00:52 +0000 Files and hashes: 1: ET_38wfdzhJ7U1tL6nGbfTENNIQ.roa (hash: SCP22drV5yjMaMO6Qyzik8RwzK7qK47hYUDCwnDNJ2I=) 2: LS19l0PeLvovYzN4omj1jyqhYFA.crl (hash: MwCBCc7KwVmMd+jZ4b0jPtBTzan15BPI0WxeNsy3ruE=) 3: XHs1m3SRKcYSslJybhJTMzxM9-c.roa (hash: A0erFAS1Db0vVamA672kEgwbEmWDzDENo+wHPI/ufmU=) 4: g2QaSslIEgo7FZj53UBiSTtFk-4.roa (hash: 6A+YhHwe2IJ834GJkC/1/7bS6gTkAl2WRDOeCCEHr98=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.crl rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:09:d7:a0:75:de:04:f3:ea:20:b1:1e:b5:8a:f3:b4:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2d7d9743de2efa2f633378a268f58f2aa16050 Validity Not Before: Jan 29 13:00:52 2026 GMT Not After : Jan 30 13:00:52 2026 GMT Subject: CN=829b3bd445c38948c7218a675c627021a764ff36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c3:5a:bb:47:c4:b7:04:0a:d0:ab:c6:92:02: e7:9c:c7:a4:08:01:28:7d:a6:05:d3:d3:82:ae:35: 10:7c:6a:54:46:1c:7a:b8:e3:10:2e:f5:b1:0f:bc: b3:a5:9d:12:9e:91:04:a9:43:c0:b5:46:27:d2:70: 12:0a:8b:8f:39:23:ae:35:4b:59:f9:f1:4f:86:b0: 31:e1:c8:33:66:85:e0:69:53:c0:c2:56:32:fe:ce: 6c:a2:5d:a3:da:41:fc:b1:76:cf:60:af:d1:69:16: 0b:74:06:b6:7b:12:47:8a:03:b0:51:c0:25:21:de: 5f:3d:bc:df:73:49:63:23:29:bf:dd:76:7c:e9:10: 31:b9:b4:aa:7c:7d:d6:43:bd:d1:dd:ca:8a:c5:04: 10:4f:01:bb:d6:00:09:92:7b:ed:dc:dd:3f:36:c9: 2f:3e:b4:8d:97:1a:79:1f:a4:de:3e:85:7d:81:17: e8:e0:42:6c:ea:b1:1f:af:8e:7b:98:bc:6c:0c:81: 6b:b9:e2:f6:30:6b:00:03:b1:c2:62:6a:a0:b4:fc: 24:a2:6e:0b:2b:e1:7d:fd:9d:48:25:40:8c:c8:bf: 15:b1:8c:3e:49:93:e8:c4:82:4f:c1:09:14:f7:80: e6:47:87:8d:96:1a:a1:33:b8:11:49:b5:48:23:1a: b9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:9B:3B:D4:45:C3:89:48:C7:21:8A:67:5C:62:70:21:A7:64:FF:36 X509v3 Authority Key Identifier: keyid:2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:0b:c6:0d:b0:bb:60:e0:3c:65:4b:20:59:84:61:0b:01:65: 06:02:e2:38:68:a6:4b:09:20:98:4b:cf:0e:57:ef:b8:4a:e4: 0a:33:a4:25:0e:ae:16:5e:06:99:56:a5:8d:fa:ee:a7:6f:62: 8d:a3:60:b5:6f:d7:b9:36:bc:9e:c3:26:b7:71:df:f0:1d:ea: 18:60:82:9a:fd:1c:c9:ac:36:52:c4:93:b8:20:47:57:64:71: 93:9e:c7:e7:77:d1:2a:74:97:3c:fb:46:0d:55:cb:64:e8:33: 69:63:ae:fc:7d:87:a9:99:0b:0e:87:02:fa:62:74:8d:f6:39: ca:36:86:c3:00:27:0e:c1:05:d0:8f:bf:08:77:46:7f:e7:43: 02:ae:05:dc:7c:19:3c:6b:29:d7:c2:42:80:f5:f9:4c:1e:8e: be:65:ff:16:d5:22:f5:0d:bc:9a:a1:9d:26:7a:66:ce:5c:0b: 43:bf:d7:06:fe:b3:cd:eb:1f:63:1f:9f:78:0d:02:a2:4e:d4: 5a:d1:e5:91:51:ae:ef:cc:84:e9:a9:da:a0:16:2b:c7:8e:f5: 86:49:66:0b:ff:7c:24:87:0b:03:0d:b2:da:0a:b9:90:9f:1f: b2:48:f9:eb:d8:8b:b4:f5:19:92:cf:e2:f3:96:09:6c:32:36: ec:b2:f0:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwJ16B13gTz6iCxHrWK87T2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMmQ3ZDk3NDNkZTJlZmEyZjYzMzM3OGEyNjhmNThmMmFh MTYwNTAwHhcNMjYwMTI5MTMwMDUyWhcNMjYwMTMwMTMwMDUyWjAzMTEwLwYDVQQD Eyg4MjliM2JkNDQ1YzM4OTQ4YzcyMThhNjc1YzYyNzAyMWE3NjRmZjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMNau0fEtwQK0KvGkgLnnMekCAEo faYF09OCrjUQfGpURhx6uOMQLvWxD7yzpZ0SnpEEqUPAtUYn0nASCouPOSOuNUtZ +fFPhrAx4cgzZoXgaVPAwlYy/s5sol2j2kH8sXbPYK/RaRYLdAa2exJHigOwUcAl Id5fPbzfc0ljIym/3XZ86RAxubSqfH3WQ73R3cqKxQQQTwG71gAJknvt3N0/Nskv PrSNlxp5H6TePoV9gRfo4EJs6rEfr457mLxsDIFrueL2MGsAA7HCYmqgtPwkom4L K+F9/Z1IJUCMyL8VsYw+SZPoxIJPwQkU94DmR4eNlhqhM7gRSbVIIxq5VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKbO9RFw4lIxyGKZ1xicCGnZP82MB8GA1UdIwQY MBaAFC0tfZdD3i76L2MzeKJo9Y8qoWBQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFMxOWwwUGVMdm92WXpONG9tajFqeXFoWUZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9jZjdjMTktMWM3ZC00ZWJlLWI0ZGQt Y2JjY2Y5MDQ1NWZlLzEvTFMxOWwwUGVMdm92WXpONG9tajFqeXFoWUZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9jZjdjMTktMWM3ZC00ZWJlLWI0ZGQtY2JjY2Y5MDQ1NWZl LzEvTFMxOWwwUGVMdm92WXpONG9tajFqeXFoWUZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjAvGDbC7 YOA8ZUsgWYRhCwFlBgLiOGimSwkgmEvPDlfvuErkCjOkJQ6uFl4GmValjfrup29i jaNgtW/XuTa8nsMmt3Hf8B3qGGCCmv0cyaw2UsSTuCBHV2Rxk57H53fRKnSXPPtG DVXLZOgzaWOu/H2HqZkLDocC+mJ0jfY5yjaGwwAnDsEF0I+/CHdGf+dDAq4F3HwZ PGsp18JCgPX5TB6OvmX/FtUi9Q28mqGdJnpmzlwLQ7/XBv6zzesfYx+feA0Cok7U WtHlkVGu78yE6anaoBYrx471hklmC/98JIcLAw2y2gq5kJ8fskj569iLtPUZks/i 85YJbDI27LLwmQ== -----END CERTIFICATE-----Generated at Thu Jan 29 17:55:55 2026 by rpki-client