This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft File: lB8grdISwODmjj8a6OoqeWSfT0w.mft (raw, json) Hash identifier: AvUa75n1MparLNq0Em4Xm/CBOdEDKBpoxaiH3wQ1oko= Subject key identifier: 13:3A:53:CD:D4:27:16:AF:F1:16:B0:C0:49:3D:7E:A2:F5:E3:FF:B9 Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C Certificate issuer: /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c Certificate serial: 019BFA9B61F9FA42DD06EAFE2E3797F52696 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft Manifest number: 177B Signing time: Mon 26 Jan 2026 14:00:45 +0000 Manifest this update: Mon 26 Jan 2026 14:00:45 +0000 Manifest next update: Tue 27 Jan 2026 14:00:45 +0000 Files and hashes: 1: VQc3sfrfQ_ZcFsmsomF7nXLcToI.roa (hash: Uu3/xUJRPzGLWpwX2MPE5NEGEZBd6a2iLzvQAqiaoY0=) 2: lB8grdISwODmjj8a6OoqeWSfT0w.crl (hash: 9oor+/V1Wd2r+3JMgPRn7tKB8SJw9ODnuxp+YO6TlDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:61:f9:fa:42:dd:06:ea:fe:2e:37:97:f5:26:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c Validity Not Before: Jan 26 14:00:45 2026 GMT Not After : Jan 27 14:00:45 2026 GMT Subject: CN=133a53cdd42716aff116b0c0493d7ea2f5e3ffb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2a:f1:67:fa:13:08:be:ea:a2:4d:df:df:bc: 7d:64:dc:8c:97:e3:75:68:b8:5a:46:2c:44:d6:34: c2:a2:81:b3:66:b4:25:1d:5c:93:91:11:d6:5b:d8: 98:52:96:c6:3d:45:29:fa:b5:ad:51:77:8e:15:fb: a8:6d:27:66:e9:3d:e1:ee:2f:2e:42:3e:95:21:87: 44:66:fd:c4:1f:9b:b5:08:4f:50:35:7b:72:a3:70: e3:70:5f:9c:57:9b:35:23:a8:ad:f7:48:a5:e3:b1: 77:09:98:d9:1d:75:3c:ec:ac:bd:29:ba:4f:19:5e: d1:56:58:e1:7c:03:f4:31:33:a5:b1:71:db:e2:0f: d9:7f:2f:2a:3e:fb:af:c2:7b:05:64:6e:1e:55:1c: 65:68:14:42:c5:0c:2f:15:1f:92:d7:e3:f7:3f:48: c0:ac:19:45:4b:b9:27:2c:91:91:5a:c1:8a:74:e3: aa:8d:63:b8:ea:74:fb:b0:f7:92:9b:0e:d1:0b:4b: 1d:66:2f:27:02:3f:e0:f7:05:25:96:b4:53:6b:4a: 4b:80:76:25:21:ec:40:62:30:c6:20:eb:ad:75:82: 73:19:14:23:f1:4a:60:9b:f5:c2:78:a8:d3:97:08: b5:93:3c:b1:68:f4:c7:66:c1:6e:f9:76:a8:a7:49: 43:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3A:53:CD:D4:27:16:AF:F1:16:B0:C0:49:3D:7E:A2:F5:E3:FF:B9 X509v3 Authority Key Identifier: keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:43:75:a4:52:43:66:83:65:e0:ac:7b:ec:90:89:49:a6:63: f1:d3:12:9d:54:5b:da:c6:51:57:6c:c5:1d:cf:f2:26:83:ac: 43:2b:ab:9b:1b:32:71:03:5e:65:0b:34:0f:bb:ea:ab:73:da: b2:d8:96:3b:de:16:97:47:90:a8:52:71:69:8c:22:70:5b:81: df:9b:e4:78:ce:da:78:12:0c:2f:67:b2:05:55:03:8a:d0:f8: 25:f7:81:71:21:4d:9b:29:be:51:2b:25:ff:a4:37:53:72:bd: 6f:48:aa:e9:fb:3b:4b:53:d0:f0:b6:69:4a:8a:00:b0:4e:15: ad:0d:64:e6:49:47:31:65:52:3b:23:b0:7a:5b:74:52:6c:b3: 6c:bc:6f:99:dc:fe:14:d6:af:05:1b:b3:9a:09:c5:3a:bc:da: 50:7e:91:7d:82:ab:66:98:16:fc:55:6f:28:51:0f:89:ab:4d: 19:45:00:fe:99:ff:e0:32:a2:b5:54:78:c1:68:11:7c:fc:48: bb:68:d6:91:00:f0:6e:b3:d5:09:c4:6f:b2:2e:5e:7d:78:54: ef:f6:a8:3b:0e:dd:04:15:ee:6f:14:19:59:e1:33:08:8d:4c: 1e:8f:20:49:cb:f0:88:11:6c:43:e4:c3:4d:60:a6:b9:cc:ef: 03:bd:b5:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6m2H5+kLdBur+LjeX9SaWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MWYyMGFkZDIxMmMwZTBlNjhlM2YxYWU4ZWEyYTc5NjQ5 ZjRmNGMwHhcNMjYwMTI2MTQwMDQ1WhcNMjYwMTI3MTQwMDQ1WjAzMTEwLwYDVQQD EygxMzNhNTNjZGQ0MjcxNmFmZjExNmIwYzA0OTNkN2VhMmY1ZTNmZmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArirxZ/oTCL7qok3f37x9ZNyMl+N1 aLhaRixE1jTCooGzZrQlHVyTkRHWW9iYUpbGPUUp+rWtUXeOFfuobSdm6T3h7i8u Qj6VIYdEZv3EH5u1CE9QNXtyo3DjcF+cV5s1I6it90il47F3CZjZHXU87Ky9KbpP GV7RVljhfAP0MTOlsXHb4g/Zfy8qPvuvwnsFZG4eVRxlaBRCxQwvFR+S1+P3P0jA rBlFS7knLJGRWsGKdOOqjWO46nT7sPeSmw7RC0sdZi8nAj/g9wUllrRTa0pLgHYl IexAYjDGIOutdYJzGRQj8Upgm/XCeKjTlwi1kzyxaPTHZsFu+Xaop0lDmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBM6U83UJxav8RawwEk9fqL14/+5MB8GA1UdIwQY MBaAFJQfIK3SEsDg5o4/GujqKnlkn09MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEI4Z3JkSVN3T0Rtamo4YTZPb3FlV1NmVDB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xOTJjNjctOTM1My00OWMzLThhMmYt MzY1ZTEzZGE2MmVhLzEvbEI4Z3JkSVN3T0Rtamo4YTZPb3FlV1NmVDB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8xOTJjNjctOTM1My00OWMzLThhMmYtMzY1ZTEzZGE2MmVh LzEvbEI4Z3JkSVN3T0Rtamo4YTZPb3FlV1NmVDB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArkN1pFJD ZoNl4Kx77JCJSaZj8dMSnVRb2sZRV2zFHc/yJoOsQyurmxsycQNeZQs0D7vqq3Pa stiWO94Wl0eQqFJxaYwicFuB35vkeM7aeBIML2eyBVUDitD4JfeBcSFNmym+USsl /6Q3U3K9b0iq6fs7S1PQ8LZpSooAsE4VrQ1k5klHMWVSOyOwelt0UmyzbLxvmdz+ FNavBRuzmgnFOrzaUH6RfYKrZpgW/FVvKFEPiatNGUUA/pn/4DKitVR4wWgRfPxI u2jWkQDwbrPVCcRvsi5efXhU7/aoOw7dBBXubxQZWeEzCI1MHo8gScvwiBFsQ+TD TWCmuczvA721XA== -----END CERTIFICATE-----Generated at Tue Jan 27 00:09:51 2026 by rpki-client