This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft File: lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft (raw, json) Hash identifier: jh2Y0MdLXo9x2huZRabIw1jlKbAlw+BLSydpfR56OTQ= Subject key identifier: 52:60:FC:55:62:E2:94:39:2C:76:80:9C:17:D5:A9:62:67:1B:0C:F0 Authority key identifier: 94:28:2A:60:78:BA:98:FB:4A:6E:34:3E:76:03:A9:60:E7:A6:34:42 Certificate issuer: /CN=94282a6078ba98fb4a6e343e7603a960e7a63442 Certificate serial: 019BACEE429F752CA629402FF7724E63BAD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft Manifest number: 177D Signing time: Sun 11 Jan 2026 12:00:54 +0000 Manifest this update: Sun 11 Jan 2026 12:00:54 +0000 Manifest next update: Mon 12 Jan 2026 12:00:54 +0000 Files and hashes: 1: konyG3wRd-9i2JxpDmlDMCcy52k.roa (hash: 86FDIPp0O4UJXQA6vPE/wehrfqe3i/KwXCUD7kRjVEo=) 2: lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl (hash: KJogyUUPw7dz/QwhLbA/BFhGGSbMIr8Du/LYspwV0hY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ac:ee:42:9f:75:2c:a6:29:40:2f:f7:72:4e:63:ba:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94282a6078ba98fb4a6e343e7603a960e7a63442 Validity Not Before: Jan 11 12:00:54 2026 GMT Not After : Jan 12 12:00:54 2026 GMT Subject: CN=5260fc5562e294392c76809c17d5a962671b0cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:41:3a:34:63:b9:86:2a:7b:8d:89:4b:c7:39: 80:72:6e:92:94:fd:bd:a3:83:a4:12:00:57:46:c9: 73:9c:93:25:45:90:be:26:d6:f1:18:22:8d:fa:3a: b2:76:0a:f5:92:32:f7:52:23:5d:65:7d:25:05:78: ca:0b:fa:0a:cf:95:36:4c:e9:17:59:25:b3:b5:f1: 4c:b2:37:96:de:86:2c:0e:4e:ff:db:f1:ba:bb:b9: 8f:5d:fb:2c:af:18:da:08:01:6e:5e:95:07:4e:64: 9c:30:64:2a:dc:c2:9a:8e:6d:04:ed:95:af:aa:a1: b0:ae:34:af:4e:f0:a2:8e:5d:c1:cc:a6:cf:d6:a9: 3d:9e:e4:f9:cf:33:cf:c1:69:24:3c:53:55:59:f4: 8d:f3:a8:cd:ba:e3:8e:d4:6c:5f:d4:e1:9c:2c:a5: 51:7b:52:7d:c0:af:90:64:64:a4:d8:d6:26:6d:9e: 52:be:1c:fb:b2:83:67:3f:9a:23:df:8d:d3:b3:10: 71:73:05:0a:fd:f8:fa:de:20:4a:33:a9:93:36:f4: a7:95:b8:11:28:96:dc:ea:f7:cd:83:a1:ac:71:17: 33:91:a2:1c:0f:62:99:82:8a:9a:bc:27:4e:ff:3b: e1:10:3a:65:18:f8:15:7b:14:e1:4b:cc:5e:c9:95: 3a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:60:FC:55:62:E2:94:39:2C:76:80:9C:17:D5:A9:62:67:1B:0C:F0 X509v3 Authority Key Identifier: keyid:94:28:2A:60:78:BA:98:FB:4A:6E:34:3E:76:03:A9:60:E7:A6:34:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:65:cb:7a:58:a4:bb:b1:24:7d:ce:7d:52:99:02:89:f5:ab: 1a:e8:db:ac:9d:0c:23:6f:3a:20:eb:60:59:0d:20:28:bd:7c: f0:f4:f9:b1:2f:9f:a4:04:2b:ad:dd:cc:ac:1a:46:8d:b6:35: eb:96:57:58:92:30:2e:f6:15:5e:9e:82:09:39:8a:30:47:12: b2:ff:32:bc:d4:aa:cf:fc:e9:90:df:3b:e3:d2:02:19:81:dd: 7d:ef:d5:43:53:9b:43:20:9a:40:06:d5:85:7b:28:36:d1:be: b5:6b:ed:ed:5b:bd:b3:9d:02:86:74:fe:be:35:ac:3d:fa:07: af:9d:de:a0:13:01:c7:fa:7d:b1:6b:da:cf:d9:cc:9f:56:98: 15:4c:7a:a9:77:47:32:db:5c:72:d3:b4:e7:b4:7c:fe:b3:42: cb:9d:32:5e:6e:c2:08:1f:a5:e3:bc:6c:fa:5b:b0:1a:59:23: e5:45:65:21:b3:b5:12:d1:e5:1b:e5:b6:97:5d:a2:ff:e9:90: ea:30:79:f0:f5:9e:66:a4:40:33:cf:f8:37:68:44:06:b0:92: 29:96:05:81:14:51:68:5a:2b:86:7f:f2:f7:0f:cb:ad:57:aa: 4d:e9:6f:30:3a:49:bb:46:b1:71:5b:f8:f6:68:fb:fb:b4:50: da:a7:7e:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZus7kKfdSymKUAv93JOY7rUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MjgyYTYwNzhiYTk4ZmI0YTZlMzQzZTc2MDNhOTYwZTdh NjM0NDIwHhcNMjYwMTExMTIwMDU0WhcNMjYwMTEyMTIwMDU0WjAzMTEwLwYDVQQD Eyg1MjYwZmM1NTYyZTI5NDM5MmM3NjgwOWMxN2Q1YTk2MjY3MWIwY2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUE6NGO5hip7jYlLxzmAcm6SlP29 o4OkEgBXRslznJMlRZC+JtbxGCKN+jqydgr1kjL3UiNdZX0lBXjKC/oKz5U2TOkX WSWztfFMsjeW3oYsDk7/2/G6u7mPXfssrxjaCAFuXpUHTmScMGQq3MKajm0E7ZWv qqGwrjSvTvCijl3BzKbP1qk9nuT5zzPPwWkkPFNVWfSN86jNuuOO1Gxf1OGcLKVR e1J9wK+QZGSk2NYmbZ5Svhz7soNnP5oj343TsxBxcwUK/fj63iBKM6mTNvSnlbgR KJbc6vfNg6GscRczkaIcD2KZgoqavCdO/zvhEDplGPgVexThS8xeyZU6GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJg/FVi4pQ5LHaAnBfVqWJnGwzwMB8GA1UdIwQY MBaAFJQoKmB4upj7Sm40PnYDqWDnpjRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbENncVlIaTZtUHRLYmpRLWRnT3BZT2VtTkVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yYTk2YjgtMDQ2ZC00YWMzLWIyM2Qt ZDgxOTc5NGEzMmEzLzEvbENncVlIaTZtUHRLYmpRLWRnT3BZT2VtTkVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8yYTk2YjgtMDQ2ZC00YWMzLWIyM2QtZDgxOTc5NGEzMmEz LzEvbENncVlIaTZtUHRLYmpRLWRnT3BZT2VtTkVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiGXLelik u7Ekfc59UpkCifWrGujbrJ0MI286IOtgWQ0gKL188PT5sS+fpAQrrd3MrBpGjbY1 65ZXWJIwLvYVXp6CCTmKMEcSsv8yvNSqz/zpkN8749ICGYHdfe/VQ1ObQyCaQAbV hXsoNtG+tWvt7Vu9s50ChnT+vjWsPfoHr53eoBMBx/p9sWvaz9nMn1aYFUx6qXdH MttcctO057R8/rNCy50yXm7CCB+l47xs+luwGlkj5UVlIbO1EtHlG+W2l12i/+mQ 6jB58PWeZqRAM8/4N2hEBrCSKZYFgRRRaForhn/y9w/LrVeqTelvMDpJu0axcVv4 9mj7+7RQ2qd+lA== -----END CERTIFICATE-----Generated at Sun Jan 11 20:05:08 2026 by rpki-client