This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft File: LWmLr5_z7uvmYoSIn79onU5oPIE.mft (raw, json) Hash identifier: oHK26RxIpKJq0xuLqdCNv657VWGzMkUlkqaL1P9Lx6Y= Subject key identifier: D0:06:11:9D:78:58:5E:90:BD:56:FF:26:B3:A8:CF:D4:54:04:6A:F7 Authority key identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81 Certificate issuer: /CN=2d698baf9ff3eeebe66284889fbf689d4e683c81 Certificate serial: 019BFB0A262A551B16C55539383F34F544D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft Manifest number: 1074 Signing time: Mon 26 Jan 2026 16:01:44 +0000 Manifest this update: Mon 26 Jan 2026 16:01:44 +0000 Manifest next update: Tue 27 Jan 2026 16:01:44 +0000 Files and hashes: 1: KhWNkr5gAw1c6ddmTPeSiEEfFWg.roa (hash: BfC/J8Ikas8k6I01UNkrtdj0AZZqj/UTxvhIrki0FuQ=) 2: LWmLr5_z7uvmYoSIn79onU5oPIE.crl (hash: z/K1SaiW0/s2AWWqKWxmU7z4bBGM/9R5pxyus828bd4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:0a:26:2a:55:1b:16:c5:55:39:38:3f:34:f5:44:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d698baf9ff3eeebe66284889fbf689d4e683c81 Validity Not Before: Jan 26 16:01:44 2026 GMT Not After : Jan 27 16:01:44 2026 GMT Subject: CN=d006119d78585e90bd56ff26b3a8cfd454046af7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c9:f0:02:01:c9:06:32:72:8c:14:61:7b:fc: 51:11:dc:2a:77:40:dd:f5:66:f8:ec:4b:79:f8:aa: 5d:f6:89:76:fd:b8:20:d3:24:43:03:88:a3:ef:55: b9:24:1c:1f:f6:89:b4:99:2d:a2:c5:a5:f6:74:a7: dd:ba:42:a3:34:80:3a:48:0a:21:b1:d4:a6:e3:60: ce:20:95:d5:dd:72:02:5a:92:d0:50:21:f6:8c:f9: 12:90:2e:5f:c9:73:48:73:ac:6d:6c:08:e6:b0:4e: 8f:d7:4b:db:5e:69:f8:bf:ad:c1:06:08:79:6f:df: e1:ed:1f:61:07:75:17:cc:59:88:d1:c8:fc:bf:1d: 64:a0:f6:9b:0e:1a:85:8b:87:76:1e:5d:3f:88:b9: 8b:a3:7e:96:6c:9f:8d:9e:0d:7e:a1:7a:56:60:8f: 4a:1f:7a:83:02:a2:40:a3:0e:7f:bc:6b:12:3e:ec: 4d:0a:0e:e0:f6:fa:e1:42:97:3d:93:92:dc:ed:58: 5b:f5:e8:2f:52:86:48:bb:30:22:b8:f8:d6:f4:42: c0:da:c8:74:36:e7:b2:33:bd:ba:9c:ff:4e:73:15: 16:97:5a:60:11:1f:25:83:1c:b7:03:ee:f1:aa:ed: bd:f2:10:2d:a7:4a:d9:e6:1d:31:dc:b5:f8:cd:55: 98:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:06:11:9D:78:58:5E:90:BD:56:FF:26:B3:A8:CF:D4:54:04:6A:F7 X509v3 Authority Key Identifier: keyid:2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ca:1e:65:f5:4b:b4:db:8b:20:bd:d8:a0:83:20:b1:e8:08: 81:92:07:e0:06:bd:d1:32:a9:6a:e1:c6:30:ad:90:42:c2:19: 6f:85:4e:60:36:30:7f:a3:6c:e3:5f:86:65:c0:e1:a7:c2:69: 0d:e4:92:a5:6a:d9:40:2b:c6:51:d5:ac:a6:43:1d:e8:2b:b8: f3:48:a5:cc:f5:33:e6:2f:d3:1f:6f:83:d8:ce:ab:fd:08:e3: e8:9a:9f:79:11:b8:9d:17:c1:49:20:24:b8:ec:f9:a0:cf:aa: 31:7c:0a:ee:19:64:24:ff:b8:70:14:90:cc:ae:ec:97:36:95: 1d:ec:e8:0f:4e:e5:1e:30:19:38:e1:3f:9c:0c:50:c9:09:03: 19:31:62:70:01:2d:84:46:af:f1:08:37:ff:82:08:4e:94:ac: 82:a4:da:66:21:b0:51:96:4e:81:2e:50:a7:a3:91:ae:d0:ce: 5b:32:98:ca:c0:9d:1d:21:28:87:c0:ce:8b:25:51:c2:b2:32: 1a:d1:4c:7a:a0:98:3c:d4:3d:5f:7f:22:31:c0:78:e3:dc:86: 5e:13:58:8a:04:59:f2:2f:d4:95:82:65:98:67:52:7e:f6:7e: 9f:d6:01:1c:23:52:a2:50:eb:20:f6:80:c0:6d:d6:d0:ec:f1: 2e:12:7b:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CiYqVRsWxVU5OD809UTTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNjk4YmFmOWZmM2VlZWJlNjYyODQ4ODlmYmY2ODlkNGU2 ODNjODEwHhcNMjYwMTI2MTYwMTQ0WhcNMjYwMTI3MTYwMTQ0WjAzMTEwLwYDVQQD EyhkMDA2MTE5ZDc4NTg1ZTkwYmQ1NmZmMjZiM2E4Y2ZkNDU0MDQ2YWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycnwAgHJBjJyjBRhe/xREdwqd0Dd 9Wb47Et5+Kpd9ol2/bgg0yRDA4ij71W5JBwf9om0mS2ixaX2dKfdukKjNIA6SAoh sdSm42DOIJXV3XICWpLQUCH2jPkSkC5fyXNIc6xtbAjmsE6P10vbXmn4v63BBgh5 b9/h7R9hB3UXzFmI0cj8vx1koPabDhqFi4d2Hl0/iLmLo36WbJ+Nng1+oXpWYI9K H3qDAqJAow5/vGsSPuxNCg7g9vrhQpc9k5Lc7Vhb9egvUoZIuzAiuPjW9ELA2sh0 NueyM726nP9OcxUWl1pgER8lgxy3A+7xqu298hAtp0rZ5h0x3LX4zVWYlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAGEZ14WF6QvVb/JrOoz9RUBGr3MB8GA1UdIwQY MBaAFC1pi6+f8+7r5mKEiJ+/aJ1OaDyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81NzJhOTgtM2JiNy00Mjc2LTlkMzkt ZGZmNWEwOWE4MmNiLzEvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS81NzJhOTgtM2JiNy00Mjc2LTlkMzktZGZmNWEwOWE4MmNi LzEvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8oeZfVL tNuLIL3YoIMgsegIgZIH4Aa90TKpauHGMK2QQsIZb4VOYDYwf6Ns41+GZcDhp8Jp DeSSpWrZQCvGUdWspkMd6Cu480ilzPUz5i/TH2+D2M6r/Qjj6JqfeRG4nRfBSSAk uOz5oM+qMXwK7hlkJP+4cBSQzK7slzaVHezoD07lHjAZOOE/nAxQyQkDGTFicAEt hEav8Qg3/4IITpSsgqTaZiGwUZZOgS5Qp6ORrtDOWzKYysCdHSEoh8DOiyVRwrIy GtFMeqCYPNQ9X38iMcB449yGXhNYigRZ8i/UlYJlmGdSfvZ+n9YBHCNSolDrIPaA wG3W0OzxLhJ7WQ== -----END CERTIFICATE-----Generated at Mon Jan 26 23:03:07 2026 by rpki-client