This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft File: ln4P5z7udZt3H7cgI8VKecCmFxc.mft (raw, json) Hash identifier: +2I7PFnkHeBuNEC/n3bQDzUh0JmykDxg2DwfMidlqEQ= Subject key identifier: 8F:86:CA:D6:34:99:DA:A2:13:14:38:64:44:1A:61:51:91:37:77:8F Authority key identifier: 96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17 Certificate issuer: /CN=967e0fe73eee759b771fb72023c54a79c0a61717 Certificate serial: 019BF8E47283149174929A4B4DAE78968F65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft Manifest number: 05C2 Signing time: Mon 26 Jan 2026 06:01:19 +0000 Manifest this update: Mon 26 Jan 2026 06:01:19 +0000 Manifest next update: Tue 27 Jan 2026 06:01:19 +0000 Files and hashes: 1: K3S0XoV9uTdcPwSeYNQbNAsf14Y.roa (hash: loHuoVuquEI4tAT3rW7VS3mainPoNo4WAoOqCbKbYJk=) 2: ln4P5z7udZt3H7cgI8VKecCmFxc.crl (hash: TBU4C8zZLiZGHfGKSzxm0PBJR3R2NSt5jnORNZZ4SYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:72:83:14:91:74:92:9a:4b:4d:ae:78:96:8f:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967e0fe73eee759b771fb72023c54a79c0a61717 Validity Not Before: Jan 26 06:01:19 2026 GMT Not After : Jan 27 06:01:19 2026 GMT Subject: CN=8f86cad63499daa213143864441a61519137778f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:73:45:f1:06:73:ac:fe:3a:65:4b:8d:ff:f3: 02:e0:8e:3c:46:9f:4e:d5:84:46:12:0f:e0:9a:50: ea:59:d0:8e:93:80:a6:86:11:29:ff:4b:5f:b4:9b: 1b:36:a4:27:c3:c1:28:50:a0:a8:4d:bb:26:58:1c: 56:93:7c:b8:00:a5:a4:24:20:3d:b2:74:24:5b:ac: a8:0a:fe:d8:65:35:f0:a1:2b:8b:20:8f:9e:16:29: e6:2c:f3:c9:ab:50:b4:53:4b:79:ee:0a:63:00:f0: 2b:c3:01:c0:61:bb:60:86:28:d9:86:4c:61:5b:33: 0a:f3:58:a6:09:d8:f1:c4:06:53:b2:17:a6:a4:2e: cd:75:db:92:88:23:a6:4a:0f:ac:a2:38:4b:7c:4c: 5c:d4:02:fb:e7:05:b2:92:67:4c:77:5a:fb:7c:89: 38:e5:35:df:fd:ff:6b:2d:a0:ac:28:d6:2f:7a:a3: d2:4c:46:dd:06:57:fd:61:b4:78:fb:4f:63:e8:1c: 9f:c7:4f:2c:87:ac:24:40:a5:c6:7f:f5:6c:c3:35: 0a:7e:c1:67:ad:53:da:d6:ee:ef:66:d3:e0:96:5d: c4:12:9e:41:f9:5a:50:45:bc:15:c3:42:be:40:0b: 38:95:4c:c7:4a:49:d9:cd:50:a5:0d:ec:a6:18:4c: c0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:86:CA:D6:34:99:DA:A2:13:14:38:64:44:1A:61:51:91:37:77:8F X509v3 Authority Key Identifier: keyid:96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:67:6f:58:3e:3b:3a:84:cb:f4:4c:d5:8f:e5:c9:34:c2:9c: a6:9e:cf:34:55:09:48:4f:55:c7:cd:ba:c6:7e:3b:ce:22:5d: 20:f9:a0:18:ba:10:b7:38:eb:13:9d:e9:cf:b8:41:b2:58:c9: 32:2b:71:93:66:d3:6f:9a:a5:48:94:58:83:53:39:b0:a5:99: bb:33:ae:5c:a7:6c:98:4d:a3:ed:1c:f4:2b:c3:48:9a:92:a6: ee:f7:b6:41:52:ae:2e:b2:1c:0f:12:73:79:dc:d4:39:65:39: 25:82:20:4e:e3:67:2d:2c:74:c8:1f:6a:ca:f2:a0:f0:84:c8: 72:4f:f2:bf:db:6a:f4:a9:f9:7f:e0:a2:7e:9b:6f:fb:ef:aa: 7c:03:23:d2:1e:d5:98:e4:2a:d9:67:ec:48:b2:6c:b9:30:ae: 0f:31:94:fe:90:a0:40:6a:d2:de:33:6e:a5:f7:ca:dc:cd:3f: 9d:03:31:c5:0d:13:d1:14:32:ed:35:dc:dd:8d:56:65:d9:5e: 06:9f:a8:dc:70:e7:8e:81:42:5c:47:64:66:70:c5:1d:bd:15: 31:e2:97:1c:fe:1c:fe:37:ee:c6:fb:46:ac:5b:f9:04:67:be: 09:ef:4d:28:23:96:32:1b:fb:21:c3:c2:63:86:db:81:52:8a: e0:d6:da:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45HKDFJF0kppLTa54lo9lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2N2UwZmU3M2VlZTc1OWI3NzFmYjcyMDIzYzU0YTc5YzBh NjE3MTcwHhcNMjYwMTI2MDYwMTE5WhcNMjYwMTI3MDYwMTE5WjAzMTEwLwYDVQQD Eyg4Zjg2Y2FkNjM0OTlkYWEyMTMxNDM4NjQ0NDFhNjE1MTkxMzc3NzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHNF8QZzrP46ZUuN//MC4I48Rp9O 1YRGEg/gmlDqWdCOk4CmhhEp/0tftJsbNqQnw8EoUKCoTbsmWBxWk3y4AKWkJCA9 snQkW6yoCv7YZTXwoSuLII+eFinmLPPJq1C0U0t57gpjAPArwwHAYbtghijZhkxh WzMK81imCdjxxAZTshempC7NdduSiCOmSg+sojhLfExc1AL75wWykmdMd1r7fIk4 5TXf/f9rLaCsKNYveqPSTEbdBlf9YbR4+09j6Byfx08sh6wkQKXGf/VswzUKfsFn rVPa1u7vZtPgll3EEp5B+VpQRbwVw0K+QAs4lUzHSknZzVClDeymGEzAAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+GytY0mdqiExQ4ZEQaYVGRN3ePMB8GA1UdIwQY MBaAFJZ+D+c+7nWbdx+3ICPFSnnAphcXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG40UDV6N3VkWnQzSDdjZ0k4VktlY0NtRnhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NGI3YmEtZDEyZS00ZDkyLThmMzEt N2FlOTNmZDJhZDA0LzEvbG40UDV6N3VkWnQzSDdjZ0k4VktlY0NtRnhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC85NGI3YmEtZDEyZS00ZDkyLThmMzEtN2FlOTNmZDJhZDA0 LzEvbG40UDV6N3VkWnQzSDdjZ0k4VktlY0NtRnhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlGdvWD47 OoTL9EzVj+XJNMKcpp7PNFUJSE9Vx826xn47ziJdIPmgGLoQtzjrE53pz7hBsljJ Mitxk2bTb5qlSJRYg1M5sKWZuzOuXKdsmE2j7Rz0K8NImpKm7ve2QVKuLrIcDxJz edzUOWU5JYIgTuNnLSx0yB9qyvKg8ITIck/yv9tq9Kn5f+Cifptv+++qfAMj0h7V mOQq2WfsSLJsuTCuDzGU/pCgQGrS3jNupffK3M0/nQMxxQ0T0RQy7TXc3Y1WZdle Bp+o3HDnjoFCXEdkZnDFHb0VMeKXHP4c/jfuxvtGrFv5BGe+Ce9NKCOWMhv7IcPC Y4bbgVKK4Nbahw== -----END CERTIFICATE-----Generated at Mon Jan 26 13:49:13 2026 by rpki-client