This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft File: LysmxVJWMAYhPP5IFKncKg_Bb0M.mft (raw, json) Hash identifier: Tuv8QYp3+/dbKDC14UdrA7TlclLOMCYpt4u8NYbGRqg= Subject key identifier: BF:1F:B5:84:1C:8B:9E:D6:17:DC:88:D7:25:2B:60:86:1F:96:84:73 Authority key identifier: 2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43 Certificate issuer: /CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43 Certificate serial: 019C03D66D5010482BD43AADB14AFC86C91A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft Manifest number: 09EE Signing time: Wed 28 Jan 2026 09:01:50 +0000 Manifest this update: Wed 28 Jan 2026 09:01:50 +0000 Manifest next update: Thu 29 Jan 2026 09:01:50 +0000 Files and hashes: 1: CVFC2AZT4zU7rxI78osYUeetX2c.roa (hash: ISGwaf6fRTl6b38lrffHUitVBZ3yWrYSjAcvo0Gl7Qs=) 2: LysmxVJWMAYhPP5IFKncKg_Bb0M.crl (hash: wRBYmQ8iuoGjSvCZbql6mVg7Zt+3L93S0oNwE1z4vH4=) 3: PHM1V2LiLUnh_dtpW6HSuR0CqtM.roa (hash: WaAP7/tUSsIc2V6rPX2u2qrSpkI6CsWvnNzs+Vmc/68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:03:d6:6d:50:10:48:2b:d4:3a:ad:b1:4a:fc:86:c9:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43 Validity Not Before: Jan 28 09:01:50 2026 GMT Not After : Jan 29 09:01:50 2026 GMT Subject: CN=bf1fb5841c8b9ed617dc88d7252b60861f968473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fe:4f:8b:39:1f:d2:80:75:0b:05:0b:e8:be: b3:f1:20:c8:29:f4:e0:b5:89:a7:73:4d:f8:38:89: 48:40:a6:8e:b3:ae:e1:8d:ab:1e:38:ca:32:2d:94: e9:93:68:70:c2:64:9a:33:c8:eb:55:e8:9f:9d:09: 5f:cc:60:e8:ef:bf:35:a5:39:23:f0:7f:92:e0:84: 65:10:43:60:32:ee:ae:25:c3:cc:04:16:86:71:93: b3:f5:4f:0e:50:13:42:80:aa:7f:05:f5:87:20:7d: 2c:0f:2e:95:0b:d2:d1:a1:fc:ab:e0:51:d0:a9:42: 3f:92:f6:48:18:71:88:70:af:99:56:ef:db:8c:97: c1:95:88:41:7e:2a:8e:eb:b3:07:15:3f:fb:3f:6c: b9:03:5a:f7:29:f7:00:62:ce:92:76:1a:a5:91:b1: 52:7d:fb:64:74:b5:16:30:e7:ef:aa:1d:54:4d:e0: 07:a6:fb:21:20:94:38:ae:93:b2:ca:b0:c8:bc:78: 93:2c:c5:44:fc:3e:37:a8:79:14:b8:7d:65:b5:29: 67:1c:23:aa:ec:34:f6:4a:d1:f0:3f:5e:6c:a7:64: aa:86:19:13:58:44:f3:8f:25:fd:db:ee:bb:a8:62: 14:bd:53:4a:a2:c5:1c:00:8f:6e:82:ab:d0:59:d4: d5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1F:B5:84:1C:8B:9E:D6:17:DC:88:D7:25:2B:60:86:1F:96:84:73 X509v3 Authority Key Identifier: keyid:2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f0:ad:99:38:42:52:23:93:d6:66:98:4d:ad:df:05:81:2b: 12:86:b9:aa:ae:96:d9:c4:09:93:f1:a1:13:69:e9:97:c8:46: 2e:c1:d1:1a:75:58:99:a3:b2:02:73:43:ef:e1:59:fa:84:9c: 5c:98:bd:c5:26:ba:15:3e:0e:9a:09:66:c4:da:22:a3:ec:4f: 58:46:d8:60:14:04:5b:70:f9:28:e3:0e:ef:2d:8b:67:a2:7a: 0e:ec:00:f6:7c:b2:73:bc:b4:df:5e:df:ca:db:bd:57:b4:5c: f1:32:9e:cd:17:be:85:07:7a:30:d6:25:74:e2:f2:ec:1f:a4: 59:53:93:82:d8:58:fd:33:4b:0f:08:2b:30:fe:70:33:0e:b5: e0:7d:ac:21:30:9a:79:5e:1b:7e:ca:97:3b:d5:94:f4:b4:10: 1d:0e:f4:6a:73:26:45:eb:e8:d6:70:4f:a6:24:cf:da:ab:c3: fc:bd:63:72:eb:c0:f0:57:88:86:80:6a:92:31:93:18:8e:a0: df:db:f7:2b:31:78:b5:cb:6f:1b:65:80:ed:e7:6f:0e:2a:34: 08:fd:30:1f:d3:94:4c:07:31:2b:c3:df:cc:de:c2:ef:be:62: 7a:97:19:a7:8d:68:59:c1:a3:12:38:1c:c4:0b:a0:94:c5:76: ce:d1:95:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwD1m1QEEgr1DqtsUr8hskaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMmIyNmM1NTI1NjMwMDYyMTNjZmU0ODE0YTlkYzJhMGZj MTZmNDMwHhcNMjYwMTI4MDkwMTUwWhcNMjYwMTI5MDkwMTUwWjAzMTEwLwYDVQQD EyhiZjFmYjU4NDFjOGI5ZWQ2MTdkYzg4ZDcyNTJiNjA4NjFmOTY4NDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/5Pizkf0oB1CwUL6L6z8SDIKfTg tYmnc034OIlIQKaOs67hjaseOMoyLZTpk2hwwmSaM8jrVeifnQlfzGDo7781pTkj 8H+S4IRlEENgMu6uJcPMBBaGcZOz9U8OUBNCgKp/BfWHIH0sDy6VC9LRofyr4FHQ qUI/kvZIGHGIcK+ZVu/bjJfBlYhBfiqO67MHFT/7P2y5A1r3KfcAYs6SdhqlkbFS fftkdLUWMOfvqh1UTeAHpvshIJQ4rpOyyrDIvHiTLMVE/D43qHkUuH1ltSlnHCOq 7DT2StHwP15sp2SqhhkTWETzjyX92+67qGIUvVNKosUcAI9ugqvQWdTVVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8ftYQci57WF9yI1yUrYIYfloRzMB8GA1UdIwQY MBaAFC8rJsVSVjAGITz+SBSp3CoPwW9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHlzbXhWSldNQVloUFA1SUZLbmNLZ19CYjBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80Y2MxMTUtYWY2NS00OTEzLTlkNjkt MWMzNWI4MzkzNzliLzEvTHlzbXhWSldNQVloUFA1SUZLbmNLZ19CYjBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi80Y2MxMTUtYWY2NS00OTEzLTlkNjktMWMzNWI4MzkzNzli LzEvTHlzbXhWSldNQVloUFA1SUZLbmNLZ19CYjBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHvCtmThC UiOT1maYTa3fBYErEoa5qq6W2cQJk/GhE2npl8hGLsHRGnVYmaOyAnND7+FZ+oSc XJi9xSa6FT4OmglmxNoio+xPWEbYYBQEW3D5KOMO7y2LZ6J6DuwA9nyyc7y0317f ytu9V7Rc8TKezRe+hQd6MNYldOLy7B+kWVOTgthY/TNLDwgrMP5wMw614H2sITCa eV4bfsqXO9WU9LQQHQ70anMmRevo1nBPpiTP2qvD/L1jcuvA8FeIhoBqkjGTGI6g 39v3KzF4tctvG2WA7edvDio0CP0wH9OUTAcxK8PfzN7C775iepcZp41oWcGjEjgc xAuglMV2ztGVZw== -----END CERTIFICATE-----Generated at Wed Jan 28 19:17:26 2026 by rpki-client