This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft File: lUqTUetm2NhiTiDRafdmty9YrMA.mft (raw, json) Hash identifier: yNpSLuPSibtVYh/oOd5gcXtrM/ZgRlbOrfbGYzu0LhY= Subject key identifier: 8C:38:C3:E6:4A:8A:C9:12:5B:36:B6:C4:17:A3:8C:25:77:81:03:9F Authority key identifier: 95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0 Certificate issuer: /CN=954a9351eb66d8d8624e20d169f766b72f58acc0 Certificate serial: 019C1CB969FC551D3FAB9954E2FE98C6BC80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft Manifest number: 03B4 Signing time: Mon 02 Feb 2026 05:00:39 +0000 Manifest this update: Mon 02 Feb 2026 05:00:39 +0000 Manifest next update: Tue 03 Feb 2026 05:00:39 +0000 Files and hashes: 1: Cqp-7RFmWIRhPlRItz8b7WniVM8.roa (hash: WN3y68b5/hiQoqHDZtfcy65p4h2IyPgin5+Be6vlaV0=) 2: lUqTUetm2NhiTiDRafdmty9YrMA.crl (hash: Nc1yuCJ4uvcoczOydGWkbE0i7OjVOOsNMADyzMTKS9g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 05:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:b9:69:fc:55:1d:3f:ab:99:54:e2:fe:98:c6:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954a9351eb66d8d8624e20d169f766b72f58acc0 Validity Not Before: Feb 2 05:00:39 2026 GMT Not After : Feb 3 05:00:39 2026 GMT Subject: CN=8c38c3e64a8ac9125b36b6c417a38c257781039f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bc:aa:1e:ef:c2:19:91:dc:0f:ed:69:d2:50: 46:c9:59:71:65:9e:0b:58:88:a4:a0:7f:1a:2e:27: 11:93:71:d3:fb:55:d2:57:29:8a:e3:3e:c3:d8:ee: 60:d8:f5:26:38:5c:e2:cf:95:49:d4:a6:76:26:45: 85:96:f4:b3:be:e0:cb:42:6d:62:e3:f6:d4:7f:91: 26:2d:9f:9d:fd:03:0b:13:14:f2:b5:ce:34:98:9d: 21:42:e1:63:11:88:77:d7:5d:62:f0:08:da:a9:cf: 4d:00:d9:1a:bd:ae:3e:41:58:39:49:3b:d2:6e:a9: 29:19:83:64:43:e9:5f:ba:d1:72:75:0f:92:b3:84: 88:8b:96:78:9f:60:23:85:5d:82:b9:14:b0:0f:08: 0b:e4:4c:56:a2:e8:dc:a6:e7:47:82:17:0d:b5:7f: 8b:8a:03:38:c0:17:52:b9:cc:32:62:10:66:27:60: 6c:a3:ba:87:83:68:92:f2:58:91:50:9f:56:83:b6: 14:33:72:7b:bb:0e:ab:22:be:c6:a9:0e:9b:41:25: cb:7f:23:90:e6:33:8f:8d:73:5d:bc:03:a9:1e:71: bb:f1:a0:8d:f2:08:97:0d:77:8d:64:a3:29:10:3c: 90:30:fb:9c:fd:20:1e:f3:72:e0:66:35:b1:ca:59: 29:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:38:C3:E6:4A:8A:C9:12:5B:36:B6:C4:17:A3:8C:25:77:81:03:9F X509v3 Authority Key Identifier: keyid:95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:53:85:14:aa:7f:fe:c3:06:ef:d8:86:f4:02:a6:bf:40:9a: ab:41:c3:6f:7a:29:8b:43:a7:65:19:41:20:b2:53:3d:2b:18: 18:7a:35:c6:27:44:8f:ff:43:43:35:c1:c8:33:57:c7:aa:99: 97:be:7e:be:95:5f:01:44:fd:b3:97:f5:36:89:bd:b3:72:96: 49:0b:17:5d:51:a2:a9:c0:fe:26:98:9e:bd:b1:ae:52:c6:76: b6:71:85:07:8a:74:9b:df:69:0a:14:38:b2:f1:55:37:98:66: 8f:39:4e:de:bd:47:b5:bd:b1:72:91:fd:66:41:8b:8e:ce:23: a3:af:b2:99:30:53:14:f8:fc:05:5f:94:8b:6d:20:c3:1e:de: db:7a:9a:a1:8a:5e:0b:38:a4:b8:6d:6e:5d:f4:9f:cc:80:e9: 00:bb:92:ac:c0:ce:ae:53:12:83:44:02:4d:51:c4:93:08:31: a5:43:94:21:aa:20:b4:95:29:b9:67:90:77:26:a8:ad:dd:a3: de:0d:e1:7e:34:db:3d:e0:37:86:ae:26:38:ee:2c:c7:ef:9b: 54:fb:2f:0b:76:44:78:09:b4:cb:92:dc:f0:b1:81:7d:7b:aa: 14:69:dc:9f:1a:96:a3:ab:20:25:dd:b7:6b:ab:62:47:c8:02: 17:78:37:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcuWn8VR0/q5lU4v6YxryAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NGE5MzUxZWI2NmQ4ZDg2MjRlMjBkMTY5Zjc2NmI3MmY1 OGFjYzAwHhcNMjYwMjAyMDUwMDM5WhcNMjYwMjAzMDUwMDM5WjAzMTEwLwYDVQQD Eyg4YzM4YzNlNjRhOGFjOTEyNWIzNmI2YzQxN2EzOGMyNTc3ODEwMzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwryqHu/CGZHcD+1p0lBGyVlxZZ4L WIikoH8aLicRk3HT+1XSVymK4z7D2O5g2PUmOFziz5VJ1KZ2JkWFlvSzvuDLQm1i 4/bUf5EmLZ+d/QMLExTytc40mJ0hQuFjEYh3111i8Ajaqc9NANkava4+QVg5STvS bqkpGYNkQ+lfutFydQ+Ss4SIi5Z4n2AjhV2CuRSwDwgL5ExWoujcpudHghcNtX+L igM4wBdSucwyYhBmJ2Bso7qHg2iS8liRUJ9Wg7YUM3J7uw6rIr7GqQ6bQSXLfyOQ 5jOPjXNdvAOpHnG78aCN8giXDXeNZKMpEDyQMPuc/SAe83LgZjWxylkprwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIw4w+ZKiskSWza2xBejjCV3gQOfMB8GA1UdIwQY MBaAFJVKk1HrZtjYYk4g0Wn3ZrcvWKzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFVxVFVldG0yTmhpVGlEUmFmZG10eTlZck1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jZjY4M2UtNmFiZC00ZjVkLTk5NDMt MDJmM2RkYmExOTQyLzEvbFVxVFVldG0yTmhpVGlEUmFmZG10eTlZck1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jZjY4M2UtNmFiZC00ZjVkLTk5NDMtMDJmM2RkYmExOTQy LzEvbFVxVFVldG0yTmhpVGlEUmFmZG10eTlZck1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ1OFFKp/ /sMG79iG9AKmv0Caq0HDb3opi0OnZRlBILJTPSsYGHo1xidEj/9DQzXByDNXx6qZ l75+vpVfAUT9s5f1Nom9s3KWSQsXXVGiqcD+JpievbGuUsZ2tnGFB4p0m99pChQ4 svFVN5hmjzlO3r1Htb2xcpH9ZkGLjs4jo6+ymTBTFPj8BV+Ui20gwx7e23qaoYpe CzikuG1uXfSfzIDpALuSrMDOrlMSg0QCTVHEkwgxpUOUIaogtJUpuWeQdyaord2j 3g3hfjTbPeA3hq4mOO4sx++bVPsvC3ZEeAm0y5Lc8LGBfXuqFGncnxqWo6sgJd23 a6tiR8gCF3g3YA== -----END CERTIFICATE-----Generated at Mon Feb 2 09:30:14 2026 by rpki-client