This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft File: _LiYPlKfyUm4n6s3A7eVt4sah1w.mft (raw, json) Hash identifier: O439X+/VeCz7n9o5uNAQCv7uSIIa4+yMDEeF+ffDrg8= Subject key identifier: 73:55:27:86:3C:32:86:01:02:42:6A:6F:84:88:52:04:C8:79:08:F5 Authority key identifier: FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C Certificate issuer: /CN=fcb8983e529fc949b89fab3703b795b78b1a875c Certificate serial: 019B97B00EDF0F11C717C5528893C7B4CD58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft Manifest number: 0C24 Signing time: Wed 07 Jan 2026 09:00:56 +0000 Manifest this update: Wed 07 Jan 2026 09:00:56 +0000 Manifest next update: Thu 08 Jan 2026 09:00:56 +0000 Files and hashes: 1: _LiYPlKfyUm4n6s3A7eVt4sah1w.crl (hash: vMLmQG11wyfUb5qmcxBcgoTB4WQHDENE/iWihXOt2zs=) 2: prQ66WR-2hX9fe4qngBkX-oQAis.roa (hash: qCnV7ilduwTB9MzFqgP4zRzlhz0MnbggECjM60aFcrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 09:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:97:b0:0e:df:0f:11:c7:17:c5:52:88:93:c7:b4:cd:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcb8983e529fc949b89fab3703b795b78b1a875c Validity Not Before: Jan 7 09:00:56 2026 GMT Not After : Jan 8 09:00:56 2026 GMT Subject: CN=735527863c32860102426a6f84885204c87908f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bf:a3:d0:0d:c4:21:9d:f3:1a:f0:37:a7:05: a5:dc:41:33:fa:43:5a:74:44:f1:28:cd:73:87:fa: bc:41:0c:5c:28:dd:aa:92:6b:da:ef:50:81:f6:1a: 04:ae:d0:61:65:b1:83:c2:7a:bf:29:a2:52:b8:2b: 0c:2c:6a:e0:48:15:77:a1:cb:9e:3f:b9:0d:63:55: 94:fd:bd:a9:68:0f:ba:e3:67:e7:09:27:fa:2c:0f: ee:1f:fb:6f:6b:16:44:af:98:07:fe:64:a1:f9:8d: 3f:ea:a5:c2:0d:cb:1c:0a:ad:56:15:ca:74:28:15: 40:48:5a:7c:29:3b:72:88:af:d0:b8:4a:4b:5f:80: 6c:88:a9:0d:7c:98:b7:cf:02:f2:5b:e1:7a:87:c2: 5a:8e:d6:b8:b9:83:bf:23:14:f6:da:f9:3a:1e:d1: 10:6c:cc:06:2d:19:aa:98:79:c0:a9:60:0e:af:8f: 05:78:23:61:1a:78:00:0d:a8:e1:b3:59:38:e0:ed: 8c:e9:ff:ec:d9:92:11:f0:c9:f9:46:0f:18:df:0d: cf:87:08:58:4c:53:8f:de:91:80:a7:27:06:f4:e1: 7a:72:59:96:a8:73:e5:89:8c:00:18:73:b3:5a:3f: 67:ec:40:b3:09:cd:20:8d:ac:b5:1e:ba:c1:ac:8c: 56:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:55:27:86:3C:32:86:01:02:42:6A:6F:84:88:52:04:C8:79:08:F5 X509v3 Authority Key Identifier: keyid:FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:4c:dd:62:17:6f:cb:53:36:ec:10:12:d3:fd:ff:39:f3:ab: cd:3f:eb:a5:20:97:52:2d:50:c1:77:71:9c:d3:f8:8a:b4:cb: 13:7f:7a:96:6e:a3:80:c1:98:9d:fa:32:c4:71:6b:8b:e6:db: f1:55:47:10:b6:6f:06:69:75:e1:ca:ad:de:10:97:42:02:d0: ed:5a:05:6d:78:b8:99:05:a1:90:6e:2f:3a:68:c5:e8:80:41: b5:3e:48:7e:41:7a:b3:45:80:f8:34:84:9c:66:a5:6f:e2:8a: 10:7c:6d:8b:e9:74:24:2f:70:0a:27:7a:af:49:78:0c:99:07: 4f:82:79:5c:86:2c:33:bf:a4:00:6d:61:d9:21:a0:f1:5b:48: fb:d0:87:99:2e:a3:3c:d0:c6:69:ff:4a:7d:a6:89:25:25:cb: 9f:42:f9:7b:2d:24:0f:3f:fe:f4:c5:55:1b:a0:e9:0a:ec:42: 1a:b2:d4:64:31:23:3a:02:0e:28:e3:6e:2c:84:d3:cd:10:96: 58:c8:9f:c9:79:44:a0:fc:8c:fe:57:3f:bd:d8:88:bb:80:b0: 2b:11:18:b3:b6:f2:47:30:a9:bd:f3:fb:96:6c:7f:63:d6:b1: 16:22:34:67:51:7d:7b:b2:29:70:b4:63:7a:c4:5b:68:4d:38: a2:c3:8a:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuXsA7fDxHHF8VSiJPHtM1YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYjg5ODNlNTI5ZmM5NDliODlmYWIzNzAzYjc5NWI3OGIx YTg3NWMwHhcNMjYwMTA3MDkwMDU2WhcNMjYwMTA4MDkwMDU2WjAzMTEwLwYDVQQD Eyg3MzU1Mjc4NjNjMzI4NjAxMDI0MjZhNmY4NDg4NTIwNGM4NzkwOGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb+j0A3EIZ3zGvA3pwWl3EEz+kNa dETxKM1zh/q8QQxcKN2qkmva71CB9hoErtBhZbGDwnq/KaJSuCsMLGrgSBV3ocue P7kNY1WU/b2paA+642fnCSf6LA/uH/tvaxZEr5gH/mSh+Y0/6qXCDcscCq1WFcp0 KBVASFp8KTtyiK/QuEpLX4BsiKkNfJi3zwLyW+F6h8Jajta4uYO/IxT22vk6HtEQ bMwGLRmqmHnAqWAOr48FeCNhGngADajhs1k44O2M6f/s2ZIR8Mn5Rg8Y3w3PhwhY TFOP3pGApycG9OF6clmWqHPliYwAGHOzWj9n7ECzCc0gjay1HrrBrIxWXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNVJ4Y8MoYBAkJqb4SIUgTIeQj1MB8GA1UdIwQY MBaAFPy4mD5Sn8lJuJ+rNwO3lbeLGodcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0xpWVBsS2Z5VW00bjZzM0E3ZVZ0NHNhaDF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80ZjEwYTMtNmIyMS00ODA1LThlMDMt OTMxZmYzZDlkZjQxLzEvX0xpWVBsS2Z5VW00bjZzM0E3ZVZ0NHNhaDF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80ZjEwYTMtNmIyMS00ODA1LThlMDMtOTMxZmYzZDlkZjQx LzEvX0xpWVBsS2Z5VW00bjZzM0E3ZVZ0NHNhaDF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0zdYhdv y1M27BAS0/3/OfOrzT/rpSCXUi1QwXdxnNP4irTLE396lm6jgMGYnfoyxHFri+bb 8VVHELZvBml14cqt3hCXQgLQ7VoFbXi4mQWhkG4vOmjF6IBBtT5IfkF6s0WA+DSE nGalb+KKEHxti+l0JC9wCid6r0l4DJkHT4J5XIYsM7+kAG1h2SGg8VtI+9CHmS6j PNDGaf9KfaaJJSXLn0L5ey0kDz/+9MVVG6DpCuxCGrLUZDEjOgIOKONuLITTzRCW WMifyXlEoPyM/lc/vdiIu4CwKxEYs7byRzCpvfP7lmx/Y9axFiI0Z1F9e7IpcLRj esRbaE04osOK5A== -----END CERTIFICATE-----Generated at Wed Jan 7 16:47:48 2026 by rpki-client