This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft File: lzvsM65zjJiViBnGwTuzNe40q0w.mft (raw, json) Hash identifier: zAHdPlDROEfJo4xFsV50W76oT/5vKJFklio8XAuYbIY= Subject key identifier: AA:ED:D9:A8:65:07:88:78:72:6F:71:DC:C7:77:E0:75:9D:A2:34:63 Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c Certificate serial: 019BD6C66176723F234F0F81EC20DCAC6E99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft Manifest number: 0E80 Signing time: Mon 19 Jan 2026 15:01:23 +0000 Manifest this update: Mon 19 Jan 2026 15:01:23 +0000 Manifest next update: Tue 20 Jan 2026 15:01:23 +0000 Files and hashes: 1: C0AVe4iSzt1tLzO1z3J_8BFSSwQ.roa (hash: 1x0Uuntsxdx1mq0mpp7kC3SseRJDTb+Eb50/cVmhJPA=) 2: idAPicjfcAurqzPxNV2Y-GlWZVM.roa (hash: 9WnV/PIHV4CmrkZ1/Csc9lXw9Lt4fmaI0bw+OleKvs0=) 3: lzvsM65zjJiViBnGwTuzNe40q0w.crl (hash: zs7AqCmK/XPMv1CxF2DURihgqVDuNPtOcYsGNN5ljrY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:c6:61:76:72:3f:23:4f:0f:81:ec:20:dc:ac:6e:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c Validity Not Before: Jan 19 15:01:23 2026 GMT Not After : Jan 20 15:01:23 2026 GMT Subject: CN=aaedd9a865078878726f71dcc777e0759da23463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:21:6c:42:ad:78:74:d0:d1:dc:23:6f:39:fe: f9:74:db:cc:8e:0b:c4:cb:df:e5:b0:e0:c2:66:0b: f4:a6:6f:b8:ca:58:94:b3:03:84:a5:57:09:2a:d4: cf:50:ef:12:b7:7e:43:8b:a6:f1:ea:00:8d:17:1d: 60:c6:56:d5:f6:a9:35:48:ab:d7:3f:4b:6b:14:86: 4a:91:88:a9:cf:25:25:2c:a2:02:8b:18:78:ef:37: bd:bd:8f:03:76:75:8a:ea:6a:ab:9f:a4:dc:7a:7e: 83:1d:63:af:5c:1e:fd:ec:b4:3c:6c:46:45:b6:69: 41:b7:c8:dd:61:95:4b:b3:8a:79:7f:98:3d:b3:c2: 0b:fa:9d:87:c3:d2:e5:50:81:e8:1c:76:1d:69:33: c6:5c:31:f4:18:b6:6d:f9:f7:0a:4b:21:d9:25:7b: c7:4f:69:4b:5f:66:17:9a:e4:f9:02:a8:3f:4e:9b: 64:65:78:2f:03:e0:c3:8b:7d:12:5e:a9:b3:4f:40: 6b:93:66:cf:67:cb:49:c0:42:65:52:f7:6d:92:72: 25:66:54:7f:60:db:fe:a5:75:c7:c0:c0:26:f6:c7: fa:a8:32:c7:45:e1:3b:3e:39:54:de:79:71:69:9b: b1:7c:5a:87:15:54:02:96:08:19:5b:aa:1d:c2:fb: 5b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:ED:D9:A8:65:07:88:78:72:6F:71:DC:C7:77:E0:75:9D:A2:34:63 X509v3 Authority Key Identifier: keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:53:8d:fa:76:40:85:eb:bd:eb:27:8b:25:a7:37:7f:09:90: 3a:4e:41:d7:81:68:67:8c:32:f5:5f:03:d5:12:44:b4:3c:b8: da:f8:bc:8f:1c:03:97:39:a1:ca:c0:41:ed:eb:5c:3e:36:f3: db:15:c5:fc:0d:a5:12:26:0e:7b:c9:65:e1:cc:1b:82:4c:9b: 8d:a6:4d:c0:1a:87:2e:5f:2a:79:d4:20:21:a5:2f:98:03:4b: c0:07:7a:67:92:9a:3d:19:ac:9c:9b:37:fb:3c:d3:13:0b:d3: eb:e9:31:21:00:85:80:85:00:ca:69:21:ad:cf:1b:a5:e7:3c: be:63:cc:72:f8:ab:fd:6c:85:a6:72:c5:d6:47:3e:d1:c1:c2: d5:8e:19:39:26:e8:b7:6a:46:a9:78:72:df:1b:7c:ad:83:fe: 0a:e7:2e:d1:7a:0a:08:0b:bc:87:6a:c4:86:78:29:80:9d:d2: 0e:d3:da:5e:af:70:a0:ac:ab:db:96:43:46:0e:f0:71:e3:5a: b4:20:2c:ea:e6:27:4f:90:87:a7:e2:aa:0b:a6:26:ce:58:97: 82:b0:7c:39:f7:18:9d:da:60:56:dc:e7:fa:76:23:58:bd:3f: 8d:a8:d9:22:a3:2d:28:c7:3f:33:d9:13:82:24:36:94:b0:71: c3:8c:88:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvWxmF2cj8jTw+B7CDcrG6ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3M2JlYzMzYWU3MzhjOTg5NTg4MTljNmMxM2JiMzM1ZWUz NGFiNGMwHhcNMjYwMTE5MTUwMTIzWhcNMjYwMTIwMTUwMTIzWjAzMTEwLwYDVQQD EyhhYWVkZDlhODY1MDc4ODc4NzI2ZjcxZGNjNzc3ZTA3NTlkYTIzNDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCFsQq14dNDR3CNvOf75dNvMjgvE y9/lsODCZgv0pm+4yliUswOEpVcJKtTPUO8St35Di6bx6gCNFx1gxlbV9qk1SKvX P0trFIZKkYipzyUlLKICixh47ze9vY8DdnWK6mqrn6Tcen6DHWOvXB797LQ8bEZF tmlBt8jdYZVLs4p5f5g9s8IL+p2Hw9LlUIHoHHYdaTPGXDH0GLZt+fcKSyHZJXvH T2lLX2YXmuT5Aqg/TptkZXgvA+DDi30SXqmzT0Brk2bPZ8tJwEJlUvdtknIlZlR/ YNv+pXXHwMAm9sf6qDLHReE7PjlU3nlxaZuxfFqHFVQClggZW6odwvtbnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrt2ahlB4h4cm9x3Md34HWdojRjMB8GA1UdIwQY MBaAFJc77DOuc4yYlYgZxsE7szXuNKtMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yZjQ2MDUtMzU2YS00YWY2LWIxNWQt YzQyZjlhYmYxNDc3LzEvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8yZjQ2MDUtMzU2YS00YWY2LWIxNWQtYzQyZjlhYmYxNDc3 LzEvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1ON+nZA heu96yeLJac3fwmQOk5B14FoZ4wy9V8D1RJEtDy42vi8jxwDlzmhysBB7etcPjbz 2xXF/A2lEiYOe8ll4cwbgkybjaZNwBqHLl8qedQgIaUvmANLwAd6Z5KaPRmsnJs3 +zzTEwvT6+kxIQCFgIUAymkhrc8bpec8vmPMcvir/WyFpnLF1kc+0cHC1Y4ZOSbo t2pGqXhy3xt8rYP+Cucu0XoKCAu8h2rEhngpgJ3SDtPaXq9woKyr25ZDRg7wceNa tCAs6uYnT5CHp+KqC6YmzliXgrB8OfcYndpgVtzn+nYjWL0/jajZIqMtKMc/M9kT giQ2lLBxw4yIRQ== -----END CERTIFICATE-----Generated at Mon Jan 19 19:18:20 2026 by rpki-client