This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.mft File: lpMmVir3Dnnz1RJIjikOkkMtWgE.mft (raw, json) Hash identifier: hcQAe/MESD6WhyV8oTILWY40yHz5A/tr4P/o3fZVPks= Subject key identifier: 5F:64:D5:C3:17:F9:28:8C:64:F5:38:EA:93:67:62:D9:0A:C9:5F:DC Authority key identifier: 96:93:26:56:2A:F7:0E:79:F3:D5:12:48:8E:29:0E:92:43:2D:5A:01 Certificate issuer: /CN=969326562af70e79f3d512488e290e92432d5a01 Certificate serial: 019BFB76F85C21FC01188FB7824EDDF696F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpMmVir3Dnnz1RJIjikOkkMtWgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.mft Manifest number: 1495 Signing time: Mon 26 Jan 2026 18:00:36 +0000 Manifest this update: Mon 26 Jan 2026 18:00:36 +0000 Manifest next update: Tue 27 Jan 2026 18:00:36 +0000 Files and hashes: 1: Vw02a6yVOC0_9OLMkHUnacovi9A.roa (hash: kApqSWOU193HAJks7pitPfX6Bo18GzOTPZ3hEE/9dhU=) 2: lpMmVir3Dnnz1RJIjikOkkMtWgE.crl (hash: 2ooMRJaWQRGvzk1OVK6Egabwa9pYDzX8F0kAFZ1syT8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.crl rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.mft rsync://rpki.ripe.net/repository/DEFAULT/lpMmVir3Dnnz1RJIjikOkkMtWgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:76:f8:5c:21:fc:01:18:8f:b7:82:4e:dd:f6:96:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=969326562af70e79f3d512488e290e92432d5a01 Validity Not Before: Jan 26 18:00:36 2026 GMT Not After : Jan 27 18:00:36 2026 GMT Subject: CN=5f64d5c317f9288c64f538ea936762d90ac95fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ab:f8:0e:a7:ec:da:55:f8:d6:0c:b9:8d:76: 64:89:00:60:32:80:a8:93:46:49:73:b2:a4:56:cc: ac:6b:13:bc:8f:90:7b:f4:cb:1c:55:5d:e5:2f:62: 8a:f9:ed:55:ff:e7:e4:03:e7:34:13:ce:d3:69:8f: eb:1b:ae:b8:5c:a5:67:7e:37:2e:13:e5:68:bc:ef: c1:38:0b:30:ad:59:a7:d6:bc:c5:e8:03:4d:fb:29: c8:4d:37:db:21:04:9e:ee:29:21:28:80:b8:b2:86: 9b:c0:35:d9:2a:54:87:ea:43:28:74:d2:fb:5b:da: 8b:38:e8:f3:58:ce:3c:51:48:57:08:37:4e:e8:f0: be:1a:8e:22:63:aa:b0:d3:bd:fd:a3:dd:16:c9:49: 96:20:01:76:fd:c8:27:29:b9:a8:da:55:eb:5b:39: c3:86:66:f2:22:14:2e:be:6d:93:0a:ce:f1:62:40: 08:20:61:f2:45:8d:77:fe:4f:da:5f:08:93:cf:4d: e0:f3:3f:98:3d:03:60:97:9a:43:d1:71:2c:72:c4: 66:cc:c5:6d:c6:7a:c0:13:ef:43:4f:b4:28:4c:17: c1:79:89:01:b8:44:a9:82:54:48:98:89:f0:a9:a3: 56:17:af:56:11:cb:ec:de:f4:5f:e5:98:4d:0c:a0: 92:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:64:D5:C3:17:F9:28:8C:64:F5:38:EA:93:67:62:D9:0A:C9:5F:DC X509v3 Authority Key Identifier: keyid:96:93:26:56:2A:F7:0E:79:F3:D5:12:48:8E:29:0E:92:43:2D:5A:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpMmVir3Dnnz1RJIjikOkkMtWgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:c9:32:67:55:f4:a9:08:4b:a1:69:b3:6e:2b:fe:d2:c5:b6: 7a:d8:b8:c5:2e:8d:6d:b0:6c:db:e9:09:19:b6:0c:f9:5f:f0: 86:3c:3f:b8:85:29:63:53:07:1d:57:e7:9b:5a:b3:fc:80:aa: 31:82:2d:00:b7:f5:a6:59:cd:8f:5f:ed:35:a1:3d:d4:19:7a: 9f:f4:ce:2c:9e:e0:30:99:36:cb:8c:94:31:24:95:54:7d:0d: 69:89:2e:72:e0:e5:01:fb:d2:d2:32:26:b0:f1:49:62:55:0b: 2b:d2:ef:f0:36:48:1d:b9:a8:49:90:d0:71:a8:78:94:c3:67: db:75:b6:39:bb:20:7c:38:14:55:ae:f8:9b:4b:d5:76:38:34: 68:07:b2:74:46:cb:95:5d:89:ed:40:49:7e:3c:5a:d4:70:43: e3:a2:b2:1a:cc:fc:ed:da:82:8a:e7:44:56:79:95:32:93:4d: 33:5a:f1:77:c6:ab:53:af:6b:3a:b9:f7:48:a2:b2:c1:80:ba: 64:32:51:f7:76:b5:4b:86:0d:de:e8:8a:49:61:6e:8d:fc:9a: a0:78:e9:4c:88:d7:da:15:8e:21:76:e8:e5:63:0e:7f:76:74: 9c:f7:69:4d:c4:8d:bb:fd:4e:9a:c8:51:80:49:b0:e4:9d:68: 65:4a:7b:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7dvhcIfwBGI+3gk7d9pb5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2OTMyNjU2MmFmNzBlNzlmM2Q1MTI0ODhlMjkwZTkyNDMy ZDVhMDEwHhcNMjYwMTI2MTgwMDM2WhcNMjYwMTI3MTgwMDM2WjAzMTEwLwYDVQQD Eyg1ZjY0ZDVjMzE3ZjkyODhjNjRmNTM4ZWE5MzY3NjJkOTBhYzk1ZmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6v4Dqfs2lX41gy5jXZkiQBgMoCo k0ZJc7KkVsysaxO8j5B79MscVV3lL2KK+e1V/+fkA+c0E87TaY/rG664XKVnfjcu E+VovO/BOAswrVmn1rzF6ANN+ynITTfbIQSe7ikhKIC4soabwDXZKlSH6kModNL7 W9qLOOjzWM48UUhXCDdO6PC+Go4iY6qw0739o90WyUmWIAF2/cgnKbmo2lXrWznD hmbyIhQuvm2TCs7xYkAIIGHyRY13/k/aXwiTz03g8z+YPQNgl5pD0XEscsRmzMVt xnrAE+9DT7QoTBfBeYkBuESpglRImInwqaNWF69WEcvs3vRf5ZhNDKCSoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9k1cMX+SiMZPU46pNnYtkKyV/cMB8GA1UdIwQY MBaAFJaTJlYq9w5589USSI4pDpJDLVoBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHBNbVZpcjNEbm56MVJKSWppa09ra010V2dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8zNGQ5NGQtMmNjNi00MDlkLTk1ZjMt OTQ5YjkxZTlmNDhkLzEvbHBNbVZpcjNEbm56MVJKSWppa09ra010V2dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8zNGQ5NGQtMmNjNi00MDlkLTk1ZjMtOTQ5YjkxZTlmNDhk LzEvbHBNbVZpcjNEbm56MVJKSWppa09ra010V2dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsMkyZ1X0 qQhLoWmzbiv+0sW2eti4xS6NbbBs2+kJGbYM+V/whjw/uIUpY1MHHVfnm1qz/ICq MYItALf1plnNj1/tNaE91Bl6n/TOLJ7gMJk2y4yUMSSVVH0NaYkucuDlAfvS0jIm sPFJYlULK9Lv8DZIHbmoSZDQcah4lMNn23W2ObsgfDgUVa74m0vVdjg0aAeydEbL lV2J7UBJfjxa1HBD46KyGsz87dqCiudEVnmVMpNNM1rxd8arU69rOrn3SKKywYC6 ZDJR93a1S4YN3uiKSWFujfyaoHjpTIjX2hWOIXbo5WMOf3Z0nPdpTcSNu/1OmshR gEmw5J1oZUp7bw== -----END CERTIFICATE-----Generated at Mon Jan 26 21:53:37 2026 by rpki-client