This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft File: 1-LPVjZk_lghA9-8v4gwAityXH5c.mft (raw, json) Hash identifier: lulsMWwXP1grG/+CB0hJzLSgqz3Z3Rm6z/+EBmCgt/8= Subject key identifier: 67:47:69:B0:B8:BD:C9:9E:BB:E0:8C:09:EA:64:81:00:E7:87:67:07 Authority key identifier: F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97 Certificate issuer: /CN=f8b3d58d993f960840f7ef2fe20c008adc971f97 Certificate serial: 019C262A7D6EB2237AF4E902407C4B351FA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft Manifest number: 1800 Signing time: Wed 04 Feb 2026 01:00:44 +0000 Manifest this update: Wed 04 Feb 2026 01:00:44 +0000 Manifest next update: Thu 05 Feb 2026 01:00:44 +0000 Files and hashes: 1: 1-LPVjZk_lghA9-8v4gwAityXH5c.crl (hash: cupC/7CxcHz/We+k0yfDgNOgO0BpL+B5Djgaw+RSgZI=) 2: FMo7TJvkPpYtgzLEkKIdGr7kRp4.roa (hash: SV7/k04fYgWabF2RHzjM0CZofp3MWJKlFtmZhh/YzbY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:26:2a:7d:6e:b2:23:7a:f4:e9:02:40:7c:4b:35:1f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8b3d58d993f960840f7ef2fe20c008adc971f97 Validity Not Before: Feb 4 01:00:44 2026 GMT Not After : Feb 5 01:00:44 2026 GMT Subject: CN=674769b0b8bdc99ebbe08c09ea648100e7876707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ff:61:5c:9f:c2:db:7e:3e:b1:d8:6f:52:ff: e0:b6:7d:18:6d:2d:d7:fb:82:a8:72:ba:37:7a:3d: 63:ac:8d:84:9a:ec:c8:88:43:b9:31:4f:43:bd:93: a0:e2:66:ad:38:00:79:5e:05:a9:fe:11:0c:98:aa: 15:26:ef:0e:92:e9:8c:5b:32:43:38:8c:8f:a6:d1: 32:43:37:44:b8:01:0a:33:d4:31:f4:88:fe:a1:ff: a4:4c:60:ef:2e:5b:c0:88:9c:4b:1f:53:e8:c6:10: 6c:65:ea:1c:90:5a:2b:d5:bd:f6:f5:1f:05:e3:55: af:ef:83:93:4b:f9:e8:ed:78:ef:83:ca:d8:b4:6f: dd:fd:4b:7f:da:d8:ab:82:be:58:38:53:60:bf:99: 57:a6:20:b5:a0:f8:78:ff:2d:ba:e2:85:9c:1f:3c: 11:2d:b8:f8:ca:41:f9:a2:1a:c9:18:1c:4d:e5:86: 76:98:0a:cf:90:41:56:23:46:5d:f4:e7:39:a1:1b: 00:0a:88:94:f1:b9:ff:12:21:cc:b0:4c:74:99:a1: 9e:66:fe:19:a9:90:f8:aa:90:f0:e1:c9:7f:71:ed: 44:8c:58:47:ad:2d:a2:9a:99:f1:db:64:46:4a:5f: a6:a7:6a:bf:0c:c3:1e:2d:eb:31:69:57:2e:76:7d: f4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:47:69:B0:B8:BD:C9:9E:BB:E0:8C:09:EA:64:81:00:E7:87:67:07 X509v3 Authority Key Identifier: keyid:F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:4f:7e:ad:eb:11:6c:0b:13:01:b3:03:94:d0:c8:57:8c:9f: ce:6b:93:4b:30:be:f7:67:17:81:49:68:1e:7c:9f:5a:76:44: 29:12:2f:6e:d4:99:a9:ec:40:5c:b5:f8:55:04:f9:00:04:88: cf:ef:9e:e6:91:eb:06:1a:ad:b5:44:47:3a:9b:c6:62:34:b2: 35:3b:9a:fb:94:90:88:7d:88:43:17:7b:ff:83:61:c6:21:ad: 62:12:b7:ff:d3:98:2d:08:6a:31:4e:98:1a:35:e2:a6:4b:ac: 40:cf:23:09:60:30:21:fa:9e:17:f3:c7:47:36:49:70:80:69: 03:bc:39:d6:df:78:76:57:90:00:62:c8:96:b7:c6:22:a9:7d: fe:fb:27:ee:4d:e1:f7:38:77:a2:e4:0a:99:48:55:fa:39:32: dd:f8:1d:5e:10:ff:2f:27:5e:ec:d5:2c:90:5d:2e:8e:26:22: 50:ef:d9:7c:4b:38:06:0c:a3:9e:36:2f:06:42:05:c2:65:4e: 40:af:bb:41:64:b1:15:d0:7c:83:85:ef:3d:73:b8:a5:79:45: 14:2e:84:48:93:af:15:8e:4f:60:34:ad:52:18:79:c2:88:0d: 72:5c:b2:1a:74:23:ae:5c:c7:e2:57:59:14:af:c2:b1:7d:26: 6b:b3:74:fc -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZwmKn1usiN69OkCQHxLNR+nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YjNkNThkOTkzZjk2MDg0MGY3ZWYyZmUyMGMwMDhhZGM5 NzFmOTcwHhcNMjYwMjA0MDEwMDQ0WhcNMjYwMjA1MDEwMDQ0WjAzMTEwLwYDVQQD Eyg2NzQ3NjliMGI4YmRjOTllYmJlMDhjMDllYTY0ODEwMGU3ODc2NzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP9hXJ/C234+sdhvUv/gtn0YbS3X +4Kocro3ej1jrI2EmuzIiEO5MU9DvZOg4matOAB5XgWp/hEMmKoVJu8OkumMWzJD OIyPptEyQzdEuAEKM9Qx9Ij+of+kTGDvLlvAiJxLH1PoxhBsZeockFor1b329R8F 41Wv74OTS/no7Xjvg8rYtG/d/Ut/2tirgr5YOFNgv5lXpiC1oPh4/y264oWcHzwR Lbj4ykH5ohrJGBxN5YZ2mArPkEFWI0Zd9Oc5oRsACoiU8bn/EiHMsEx0maGeZv4Z qZD4qpDw4cl/ce1EjFhHrS2impnx22RGSl+mp2q/DMMeLesxaVcudn303wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGdHabC4vcmeu+CMCepkgQDnh2cHMB8GA1UdIwQY MBaAFPiz1Y2ZP5YIQPfvL+IMAIrclx+XMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1MUFZqWmtfbGdoQTktOHY0Z3dBaXR5WEg1Yy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvOGI1OGU5LTMyMzAtNDQxOC04ZjY4 LTgxMjI0ZTQ4MGMwMy8xLzEtTFBWalprX2xnaEE5LTh2NGd3QWl0eVhINWMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2EyLzhiNThlOS0zMjMwLTQ0MTgtOGY2OC04MTIyNGU0ODBj MDMvMS8xLUxQVmpaa19sZ2hBOS04djRnd0FpdHlYSDVjLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR09+ resRbAsTAbMDlNDIV4yfzmuTSzC+92cXgUloHnyfWnZEKRIvbtSZqexAXLX4VQT5 AASIz++e5pHrBhqttURHOpvGYjSyNTua+5SQiH2IQxd7/4NhxiGtYhK3/9OYLQhq MU6YGjXipkusQM8jCWAwIfqeF/PHRzZJcIBpA7w51t94dleQAGLIlrfGIql9/vsn 7k3h9zh3ouQKmUhV+jky3fgdXhD/Lyde7NUskF0ujiYiUO/ZfEs4BgyjnjYvBkIF wmVOQK+7QWSxFdB8g4XvPXO4pXlFFC6ESJOvFY5PYDStUhh5wogNclyyGnQjrlzH 4ldZFK/CsX0ma7N0/A== -----END CERTIFICATE-----Generated at Wed Feb 4 08:31:11 2026 by rpki-client