This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft File: lmAVV4yUjzG_dKHh__1_o-NGAgY.mft (raw, json) Hash identifier: YhIn/mJxRl/J/baeioUyuwp6bEGiS3Cbn2Dl7N7IyKY= Subject key identifier: D8:05:E6:54:A3:F5:4B:4D:43:C7:BD:70:19:30:8F:93:24:A7:E3:A1 Authority key identifier: 96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06 Certificate issuer: /CN=966015578c948f31bf74a1e1fffd7fa3e3460206 Certificate serial: 019BAE00ED7E13D28CEC80D70EC45D725640 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft Manifest number: 0E50 Signing time: Sun 11 Jan 2026 17:00:54 +0000 Manifest this update: Sun 11 Jan 2026 17:00:54 +0000 Manifest next update: Mon 12 Jan 2026 17:00:54 +0000 Files and hashes: 1: USwT2SeaguMlyEEPFKrGUCTjicc.roa (hash: fLXx8GADpNCNj3rL26EzgEHCDr9VafNfGAWI6je4Vrw=) 2: lmAVV4yUjzG_dKHh__1_o-NGAgY.crl (hash: HrHp/3vW/CgcLo0zIbjp2cqBYBOfNaHw+A2BIJ9qsw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 17:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:00:ed:7e:13:d2:8c:ec:80:d7:0e:c4:5d:72:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=966015578c948f31bf74a1e1fffd7fa3e3460206 Validity Not Before: Jan 11 17:00:54 2026 GMT Not After : Jan 12 17:00:54 2026 GMT Subject: CN=d805e654a3f54b4d43c7bd7019308f9324a7e3a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d2:83:e3:3e:c4:04:92:54:51:04:0a:3c:eb: f4:dd:fd:14:c1:16:fc:fb:f0:5d:6a:92:b2:76:1a: d3:a2:c1:40:b9:34:6f:e3:c1:4d:6c:b9:b3:08:a7: dd:47:71:03:75:8e:dc:8f:55:24:0d:1f:32:3c:3c: 33:c2:34:2c:95:15:ab:51:e8:fd:b9:2e:33:40:22: 5a:79:99:40:6a:d1:63:eb:18:94:08:e6:d0:48:05: c2:b1:5b:73:64:b7:d2:a9:e2:2c:f7:a6:23:b2:da: 71:aa:d3:54:4c:e9:fe:fc:05:05:50:88:ac:c9:47: dd:d5:b9:93:e1:ac:56:37:8c:f5:89:24:a6:f8:71: 42:f5:7b:93:e0:ca:b5:a5:05:24:12:eb:32:bd:8c: de:4e:d6:ff:64:38:22:c8:e6:0a:ad:ce:a9:ee:a3: 96:a4:33:cc:f4:10:6c:42:e3:06:75:bf:b4:6e:8b: c6:0f:6e:45:5e:a1:a7:12:3e:d5:96:37:b6:4f:b9: b6:3c:a1:1c:02:81:d7:28:d7:1b:6b:4b:f7:f0:dd: ab:d6:4d:2f:e9:05:a7:d2:5f:37:14:88:49:89:19: 9b:b5:5b:41:bf:98:18:16:fe:08:b8:45:bc:c0:cb: 1f:00:ad:5e:4b:23:ab:57:cc:b7:14:fb:a4:08:01: 49:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:05:E6:54:A3:F5:4B:4D:43:C7:BD:70:19:30:8F:93:24:A7:E3:A1 X509v3 Authority Key Identifier: keyid:96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:24:2b:17:ac:96:2e:6a:87:83:2f:eb:ec:61:92:f6:c9:d5: f1:24:0f:dc:d5:83:26:3f:a4:99:5c:27:d4:31:46:1b:f8:40: 07:11:d3:ce:e0:1c:5d:61:3e:37:bc:a1:75:eb:a2:08:1f:11: e4:96:83:85:51:6d:0e:9d:85:6b:8b:ab:e8:a5:98:58:96:31: 99:b4:8b:98:12:55:05:c6:7b:99:2a:22:7d:37:1c:9b:7e:43: d8:bc:c1:92:23:c5:b0:74:72:79:07:5e:30:0f:f5:cc:68:5f: 84:b1:f6:cc:7d:29:43:94:cf:e7:90:46:a1:53:ba:d7:fb:42: 3c:58:f0:65:7f:1f:31:db:95:e2:9b:70:27:0f:9a:61:c7:59: 60:32:94:99:8e:be:97:4d:5e:e8:a4:37:b3:5a:f4:bd:2b:b8: 97:2f:7c:19:30:0d:e3:ec:9d:50:68:21:1a:0f:63:96:3f:7a: 9e:f0:f0:71:9d:3d:00:9c:98:78:a1:ca:42:11:29:2c:8d:4b: 23:04:6f:b0:88:c5:5d:0f:9e:50:14:95:53:ba:64:9b:02:72: 9b:76:22:e7:4c:3f:fe:5e:9a:22:cd:f6:10:41:77:88:99:2b: f2:e2:f7:3b:e9:3d:a2:77:9e:17:ee:9f:57:32:75:2e:ef:93: 6c:29:04:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuuAO1+E9KM7IDXDsRdclZAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NjAxNTU3OGM5NDhmMzFiZjc0YTFlMWZmZmQ3ZmEzZTM0 NjAyMDYwHhcNMjYwMTExMTcwMDU0WhcNMjYwMTEyMTcwMDU0WjAzMTEwLwYDVQQD EyhkODA1ZTY1NGEzZjU0YjRkNDNjN2JkNzAxOTMwOGY5MzI0YTdlM2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9KD4z7EBJJUUQQKPOv03f0UwRb8 +/BdapKydhrTosFAuTRv48FNbLmzCKfdR3EDdY7cj1UkDR8yPDwzwjQslRWrUej9 uS4zQCJaeZlAatFj6xiUCObQSAXCsVtzZLfSqeIs96YjstpxqtNUTOn+/AUFUIis yUfd1bmT4axWN4z1iSSm+HFC9XuT4Mq1pQUkEusyvYzeTtb/ZDgiyOYKrc6p7qOW pDPM9BBsQuMGdb+0bovGD25FXqGnEj7Vlje2T7m2PKEcAoHXKNcba0v38N2r1k0v 6QWn0l83FIhJiRmbtVtBv5gYFv4IuEW8wMsfAK1eSyOrV8y3FPukCAFJlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgF5lSj9UtNQ8e9cBkwj5Mkp+OhMB8GA1UdIwQY MBaAFJZgFVeMlI8xv3Sh4f/9f6PjRgIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG1BVlY0eVVqekdfZEtIaF9fMV9vLU5HQWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9iNTAxMTAtMDJiMC00MjM1LTk4NGYt MmQ4MGNiMjU1NzlhLzEvbG1BVlY0eVVqekdfZEtIaF9fMV9vLU5HQWdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9iNTAxMTAtMDJiMC00MjM1LTk4NGYtMmQ4MGNiMjU1Nzlh LzEvbG1BVlY0eVVqekdfZEtIaF9fMV9vLU5HQWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZSQrF6yW LmqHgy/r7GGS9snV8SQP3NWDJj+kmVwn1DFGG/hABxHTzuAcXWE+N7yhdeuiCB8R 5JaDhVFtDp2Fa4ur6KWYWJYxmbSLmBJVBcZ7mSoifTccm35D2LzBkiPFsHRyeQde MA/1zGhfhLH2zH0pQ5TP55BGoVO61/tCPFjwZX8fMduV4ptwJw+aYcdZYDKUmY6+ l01e6KQ3s1r0vSu4ly98GTAN4+ydUGghGg9jlj96nvDwcZ09AJyYeKHKQhEpLI1L IwRvsIjFXQ+eUBSVU7pkmwJym3Yi50w//l6aIs32EEF3iJkr8uL3O+k9oneeF+6f VzJ1Lu+TbCkETQ== -----END CERTIFICATE-----Generated at Sun Jan 11 20:07:57 2026 by rpki-client