This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft File: 2Lkq9Et5_ArPZBA-tfszepHuzZo.mft (raw, json) Hash identifier: zBjhxz9gh/3uoeHYvFQokVpcluFIRyAabJW2ruvgWSs= Subject key identifier: 77:4B:21:8E:2C:AE:B9:89:C4:05:C2:74:78:7F:E4:4F:3D:7C:38:18 Authority key identifier: D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A Certificate issuer: /CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a Certificate serial: 019BFC534B93156863466161CD3F0FD716CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft Manifest number: 0E97 Signing time: Mon 26 Jan 2026 22:01:15 +0000 Manifest this update: Mon 26 Jan 2026 22:01:15 +0000 Manifest next update: Tue 27 Jan 2026 22:01:15 +0000 Files and hashes: 1: 2Lkq9Et5_ArPZBA-tfszepHuzZo.crl (hash: ECYcIxMxu7wmsIXALZorTA7379vspO6bCo3eYeMoITE=) 2: lfk8mpf-5xapMajz92ZL6z0nPMA.roa (hash: JB5YGARWt9JTsH5kYi0wJ9fz5K5BaCEyt+jmAjdRDCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:53:4b:93:15:68:63:46:61:61:cd:3f:0f:d7:16:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a Validity Not Before: Jan 26 22:01:15 2026 GMT Not After : Jan 27 22:01:15 2026 GMT Subject: CN=774b218e2caeb989c405c274787fe44f3d7c3818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:56:c8:0c:01:2e:5d:c6:87:c5:bb:ec:c4:22: 6d:1a:ea:cd:b0:5a:4f:00:67:bd:3e:7c:c5:e8:f9: 07:6a:5c:12:20:5a:5b:91:77:b7:7a:b4:e5:18:6f: 8e:77:84:3c:f3:a9:9e:75:85:cb:44:2a:b0:58:ea: 9b:01:10:34:f4:bc:4d:bb:c8:a0:9f:cc:85:3c:df: 65:c1:a0:31:ce:68:ec:19:8c:c2:be:a5:2d:ab:52: 0d:a5:5e:86:8f:6c:12:b3:05:9a:13:45:66:67:7a: 02:a8:8f:09:2e:67:fe:f1:b7:74:f0:ff:be:4d:10: 54:f5:e3:82:e4:d7:2a:e1:04:65:5b:e4:35:d2:12: 7d:48:9d:ad:dd:cf:29:f6:85:57:96:85:c9:02:ad: 51:84:87:08:34:d2:50:e1:5c:8c:63:5c:36:a2:d7: 78:54:fd:41:b3:ff:4c:54:7f:60:ee:98:7f:a6:f2: f9:b4:fb:a9:51:e6:a5:fa:9e:ed:e1:61:68:ad:fb: bf:fe:e4:86:02:ad:a0:50:6c:64:50:ac:a1:6d:07: d9:fc:d2:4e:53:aa:64:95:74:8f:44:61:0d:a2:d7: 9d:f7:13:71:ff:53:d1:1c:70:b4:b3:2f:bd:05:95: ad:be:2c:b0:06:ae:4e:b7:6f:02:06:66:e1:59:fe: 45:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:4B:21:8E:2C:AE:B9:89:C4:05:C2:74:78:7F:E4:4F:3D:7C:38:18 X509v3 Authority Key Identifier: keyid:D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f4:90:30:16:95:77:15:24:60:7a:ce:da:54:73:83:f3:a2: 9f:39:ca:2a:ad:5f:bb:6f:98:c2:fb:9a:ac:91:54:29:7e:31: 86:cc:9a:e0:2c:d4:2e:4c:39:73:ce:01:9d:3b:d0:88:b1:bb: 91:df:d8:9c:9f:1b:2d:3c:1d:f4:bc:ad:56:dc:83:61:f9:27: a7:fb:6d:e7:5b:28:27:55:e4:0f:32:95:22:fc:4b:6b:c1:69: be:c8:be:55:2f:bc:bc:7e:85:20:09:c0:30:41:de:ce:ae:5b: db:2a:31:4b:9b:66:a7:6f:bb:73:13:78:bd:4d:00:7c:8d:70: 94:e0:da:e6:56:11:4e:9d:b7:a2:72:e8:2a:86:80:82:fa:60: 62:56:70:7c:41:ae:8c:78:1c:92:d5:db:06:d0:66:ba:36:08: 1d:91:d0:ac:a9:06:1f:9d:c9:cb:c6:64:bc:03:10:15:f0:a4: 1b:bc:55:82:1c:43:0a:99:31:f9:0a:ad:bb:57:65:a8:96:c7: 95:e6:2b:49:40:07:5c:4c:50:93:a9:dc:9d:b0:d4:58:85:b6: 85:79:54:8a:1b:c1:0d:9c:71:a1:e4:18:aa:e7:e9:26:b7:6b: 28:4d:f8:fc:3f:21:03:41:13:ed:e9:9b:a1:e9:ae:8b:fc:0d: b7:fa:cb:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8U0uTFWhjRmFhzT8P1xbOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YjkyYWY0NGI3OWZjMGFjZjY0MTAzZWI1ZmIzMzdhOTFl ZWNkOWEwHhcNMjYwMTI2MjIwMTE1WhcNMjYwMTI3MjIwMTE1WjAzMTEwLwYDVQQD Eyg3NzRiMjE4ZTJjYWViOTg5YzQwNWMyNzQ3ODdmZTQ0ZjNkN2MzODE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVbIDAEuXcaHxbvsxCJtGurNsFpP AGe9PnzF6PkHalwSIFpbkXe3erTlGG+Od4Q886medYXLRCqwWOqbARA09LxNu8ig n8yFPN9lwaAxzmjsGYzCvqUtq1INpV6Gj2wSswWaE0VmZ3oCqI8JLmf+8bd08P++ TRBU9eOC5Ncq4QRlW+Q10hJ9SJ2t3c8p9oVXloXJAq1RhIcINNJQ4VyMY1w2otd4 VP1Bs/9MVH9g7ph/pvL5tPupUeal+p7t4WForfu//uSGAq2gUGxkUKyhbQfZ/NJO U6pklXSPRGENoted9xNx/1PRHHC0sy+9BZWtviywBq5Ot28CBmbhWf5FLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdLIY4srrmJxAXCdHh/5E89fDgYMB8GA1UdIwQY MBaAFNi5KvRLefwKz2QQPrX7M3qR7s2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkxrcTlFdDVfQXJQWkJBLXRmc3plcEh1elpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9lYWM4NmItNmU5MS00YmJlLWEyMDMt NjdhYzk3MTE4Y2FjLzEvMkxrcTlFdDVfQXJQWkJBLXRmc3plcEh1elpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9lYWM4NmItNmU5MS00YmJlLWEyMDMtNjdhYzk3MTE4Y2Fj LzEvMkxrcTlFdDVfQXJQWkJBLXRmc3plcEh1elpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvSQMBaV dxUkYHrO2lRzg/OinznKKq1fu2+YwvuarJFUKX4xhsya4CzULkw5c84BnTvQiLG7 kd/YnJ8bLTwd9LytVtyDYfknp/tt51soJ1XkDzKVIvxLa8Fpvsi+VS+8vH6FIAnA MEHezq5b2yoxS5tmp2+7cxN4vU0AfI1wlODa5lYRTp23onLoKoaAgvpgYlZwfEGu jHgcktXbBtBmujYIHZHQrKkGH53Jy8ZkvAMQFfCkG7xVghxDCpkx+Qqtu1dlqJbH leYrSUAHXExQk6ncnbDUWIW2hXlUihvBDZxxoeQYqufpJrdrKE34/D8hA0ET7emb oemui/wNt/rLKA== -----END CERTIFICATE-----Generated at Tue Jan 27 02:12:38 2026 by rpki-client