This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft File: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft (raw, json) Hash identifier: ts6BjATwuKb7IU5EM6EhbQFb2uPD/n4pKRS1xqcSB7o= Subject key identifier: 6D:0C:44:E3:49:44:4E:85:A1:19:E2:48:70:A1:B6:9E:C1:83:AF:9C Authority key identifier: 96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5 Certificate issuer: /CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5 Certificate serial: 019C0C6BA8BD98068D35D77B0157E3A97E2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft Manifest number: 1786 Signing time: Fri 30 Jan 2026 01:01:47 +0000 Manifest this update: Fri 30 Jan 2026 01:01:47 +0000 Manifest next update: Sat 31 Jan 2026 01:01:47 +0000 Files and hashes: 1: 8Lq3lIQ57V2x5XRAthwXhjdfPZ0.roa (hash: 11Z2xFuTQAhf/AKwmMmwrf1P3F5XfEX9AMFlRSFk2p4=) 2: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl (hash: gMlwwk5Y3gQk5YSajrWBrQkvzq75nKN0YSD9tjOIUYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 20:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0c:6b:a8:bd:98:06:8d:35:d7:7b:01:57:e3:a9:7e:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5 Validity Not Before: Jan 30 01:01:47 2026 GMT Not After : Jan 31 01:01:47 2026 GMT Subject: CN=6d0c44e349444e85a119e24870a1b69ec183af9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:78:1a:49:17:43:7a:d6:48:49:b5:03:bb:fd: 6c:19:71:5f:d7:5f:f9:f7:fe:6a:d9:e9:7c:41:f9: d7:3e:9b:46:a1:60:6a:d7:45:56:26:39:1c:39:e6: f2:01:64:8a:49:34:64:6a:37:60:5d:65:10:42:2f: 7d:a0:85:69:9a:c6:14:82:34:78:b3:e0:e2:5b:f1: a9:dc:00:be:50:d6:bf:0f:73:25:f9:bc:1a:4c:dc: d9:f7:f6:51:1b:43:d0:33:8b:da:33:7b:e3:79:7d: 53:e2:fb:23:bc:89:a6:06:55:d3:60:a2:d4:57:1d: 72:89:00:97:58:96:8d:00:d2:90:17:7a:fe:6b:e2: f7:c7:a9:be:ac:4b:9b:ed:e0:26:9b:e2:2a:d6:12: 3a:c2:be:e1:25:96:4a:3c:e7:6e:fb:36:37:65:f4: 1d:0f:f5:12:b5:06:41:ef:94:41:3c:41:a2:4c:62: 0c:f7:7b:b2:48:71:52:b2:54:33:89:b2:1a:4f:1a: d1:17:b5:62:80:3a:5a:4e:77:78:64:88:16:aa:c0: c3:e4:fe:f7:07:0f:c1:92:02:11:21:4b:af:2c:5d: f5:c0:b6:8e:b7:2e:23:fa:59:e5:45:ba:b9:c7:7e: 5b:46:10:99:cd:32:d4:95:3c:8e:c2:a7:42:5f:b6: 18:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:0C:44:E3:49:44:4E:85:A1:19:E2:48:70:A1:B6:9E:C1:83:AF:9C X509v3 Authority Key Identifier: keyid:96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:24:46:4c:e7:c8:36:07:e9:7e:0c:bb:e3:20:62:98:2a:42: 81:bb:8f:88:c7:48:9a:59:5e:e0:f2:33:5a:51:e9:66:56:a6: a9:98:b8:45:bd:49:ae:ff:ad:81:c9:30:4c:2b:c9:59:d2:01: 9e:1e:9e:34:e5:f9:03:82:1b:bd:49:e2:ea:e6:0e:da:87:42: 21:88:c4:39:3a:69:ba:e9:c3:29:43:79:e8:3a:41:7e:28:15: 1d:ae:3b:cf:f0:9b:9d:c6:93:d7:23:3d:5f:53:9d:99:8b:f7: 91:d9:28:85:4f:a5:a1:fd:f8:2e:30:9e:ce:b4:bd:6d:fe:79: ee:8b:20:82:92:34:7e:78:48:a9:0c:93:7c:0f:7d:97:f7:bb: f9:59:ec:37:72:26:3a:1b:56:1f:5f:12:bd:21:16:fe:f5:70: ce:33:d6:1c:fc:1d:f8:4a:ae:dd:c2:60:74:93:37:43:b2:45: ef:64:27:01:69:b4:26:72:3c:61:75:c6:61:49:68:6e:46:09: 36:79:67:c6:9f:e7:d6:f5:95:6f:2f:a3:1f:3c:f4:2a:06:29: 16:3e:14:35:28:24:2c:d7:03:26:37:c8:06:cb:a1:c3:ff:f3: 61:f7:c8:2d:5d:fa:72:b7:93:9a:6e:ec:a3:79:02:7c:b8:6d: fe:9a:c3:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwMa6i9mAaNNdd7AVfjqX4uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MTEyNjRiYjllNGU2ZmE5OTQ0OWVlNDU2YzVkMDUzZjNh ZDAxYzUwHhcNMjYwMTMwMDEwMTQ3WhcNMjYwMTMxMDEwMTQ3WjAzMTEwLwYDVQQD Eyg2ZDBjNDRlMzQ5NDQ0ZTg1YTExOWUyNDg3MGExYjY5ZWMxODNhZjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3gaSRdDetZISbUDu/1sGXFf11/5 9/5q2el8QfnXPptGoWBq10VWJjkcOebyAWSKSTRkajdgXWUQQi99oIVpmsYUgjR4 s+DiW/Gp3AC+UNa/D3Ml+bwaTNzZ9/ZRG0PQM4vaM3vjeX1T4vsjvImmBlXTYKLU Vx1yiQCXWJaNANKQF3r+a+L3x6m+rEub7eAmm+Iq1hI6wr7hJZZKPOdu+zY3ZfQd D/UStQZB75RBPEGiTGIM93uySHFSslQzibIaTxrRF7VigDpaTnd4ZIgWqsDD5P73 Bw/BkgIRIUuvLF31wLaOty4j+lnlRbq5x35bRhCZzTLUlTyOwqdCX7YYJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0MRONJRE6FoRniSHChtp7Bg6+cMB8GA1UdIwQY MBaAFJYRJku55Ob6mUSe5FbF0FPzrQHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGhFbVM3bms1dnFaUko3a1ZzWFFVX090QWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82MGU5YTAtYzljMS00MWU5LTg5ZmMt MjRiNjc2YjU2NzgzLzEvbGhFbVM3bms1dnFaUko3a1ZzWFFVX090QWNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS82MGU5YTAtYzljMS00MWU5LTg5ZmMtMjRiNjc2YjU2Nzgz LzEvbGhFbVM3bms1dnFaUko3a1ZzWFFVX090QWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUCRGTOfI Ngfpfgy74yBimCpCgbuPiMdImlle4PIzWlHpZlamqZi4Rb1Jrv+tgckwTCvJWdIB nh6eNOX5A4IbvUni6uYO2odCIYjEOTppuunDKUN56DpBfigVHa47z/CbncaT1yM9 X1OdmYv3kdkohU+lof34LjCezrS9bf557osggpI0fnhIqQyTfA99l/e7+VnsN3Im OhtWH18SvSEW/vVwzjPWHPwd+Equ3cJgdJM3Q7JF72QnAWm0JnI8YXXGYUlobkYJ Nnlnxp/n1vWVby+jHzz0KgYpFj4UNSgkLNcDJjfIBsuhw//zYffILV36creTmm7s o3kCfLht/prDMg== -----END CERTIFICATE-----Generated at Fri Jan 30 07:13:57 2026 by rpki-client