This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft File: lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft (raw, json) Hash identifier: EkOlGFo/3WSiPiMRga+iy/D7M44rCWjtKqo4jHxNLCE= Subject key identifier: E6:C2:A3:5C:3D:D5:CE:46:7B:70:C8:67:5A:5D:36:96:21:D8:20:D0 Authority key identifier: 95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3 Certificate issuer: /CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3 Certificate serial: 019B7A4B0C078899B3C2E24511B8A8033859 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft Manifest number: 1739 Signing time: Thu 01 Jan 2026 16:01:37 +0000 Manifest this update: Thu 01 Jan 2026 16:01:37 +0000 Manifest next update: Fri 02 Jan 2026 16:01:37 +0000 Files and hashes: 1: J7FeME6X_EaiBdjBEuAbDz0h-wk.roa (hash: Vo2/tm/C/KJ/j4K0JEVvCiIn5IsRx4PScob1tXJwJvI=) 2: lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl (hash: R1askyRTK/Bl+Q0mrYekX6riHto8oTYSERFzDStLsXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 16:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:4b:0c:07:88:99:b3:c2:e2:45:11:b8:a8:03:38:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3 Validity Not Before: Jan 1 16:01:37 2026 GMT Not After : Jan 2 16:01:37 2026 GMT Subject: CN=e6c2a35c3dd5ce467b70c8675a5d369621d820d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:75:eb:61:11:2d:15:07:6e:fa:57:99:a9:32: 1a:95:ae:76:e3:02:94:77:3e:e6:71:7a:63:93:33: e3:ae:43:e6:88:aa:20:75:1d:68:31:d5:4c:03:1b: c9:74:d3:f7:2b:f0:53:9e:11:e2:8c:b8:79:5c:bb: 5c:46:ad:b1:d2:c8:ee:29:e6:e4:c7:6b:ba:ec:12: 6d:8b:c1:7a:31:85:91:83:63:23:40:f2:ae:49:e8: f7:e6:a3:a8:24:77:2c:80:31:73:aa:46:05:f4:09: 5b:2a:cc:8d:ad:05:4c:d8:90:0e:da:bd:29:8d:84: 6a:b9:d4:0e:cb:45:47:b8:b4:78:d0:b8:7e:29:87: 75:b2:03:3c:20:5e:4f:64:c6:38:97:c9:7d:37:8c: 54:51:9e:3c:6a:d5:f6:db:2d:fc:62:64:19:87:57: 5d:89:6c:2c:26:89:ee:56:c1:65:c2:d4:5e:5a:dd: 71:1b:01:c0:ea:00:7b:64:cb:24:fe:0e:44:fc:ec: 55:9e:a9:1c:9d:b0:9d:8b:d5:c6:eb:ab:c0:08:eb: 9e:76:4b:11:a3:21:1d:35:49:60:8c:da:e4:f8:d0: 31:7f:2d:91:d2:ed:70:ad:f4:97:47:89:55:92:58: 2c:12:aa:05:dc:bb:5e:c4:23:30:21:24:a4:3d:e0: f1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C2:A3:5C:3D:D5:CE:46:7B:70:C8:67:5A:5D:36:96:21:D8:20:D0 X509v3 Authority Key Identifier: keyid:95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:18:4c:0f:32:8b:92:18:4b:08:4d:d7:60:02:76:37:0c:bc: 3a:96:6d:3d:fd:da:ee:38:23:21:e5:b0:64:d8:56:98:1b:32: 10:a6:76:7a:43:32:70:bd:69:13:78:c9:c7:d4:31:30:51:c9: c7:46:ed:ad:71:c8:d2:fb:dd:56:25:ec:25:6a:28:95:2b:56: 16:16:01:f0:73:90:4a:7a:35:9a:80:1a:38:4c:39:8e:d8:ab: 72:ab:b1:76:fb:fb:a8:55:23:56:0f:fd:46:00:c6:3b:eb:33: c4:13:de:91:6b:4e:c6:6a:b7:64:bc:bf:3d:85:70:52:33:62: 9c:9c:2c:d0:86:f5:da:1a:45:4b:38:f9:17:bc:17:a3:78:f7: 07:21:49:3e:c3:76:9e:24:e2:28:e7:00:02:bc:48:be:f5:71: d0:09:d0:c1:a7:e2:37:ff:dc:d3:09:9d:ee:fc:a7:42:f2:4b: fd:82:d3:32:bb:30:57:ae:17:da:55:f3:65:68:f1:48:46:f7: 55:ff:4c:11:a8:ed:16:32:11:d5:57:79:1f:4e:a3:66:9e:13: 75:72:b2:46:81:43:15:cb:b3:c1:2f:2d:d6:53:16:12:8b:39: 62:95:23:ac:61:57:31:1c:5f:58:f9:a6:7c:4f:19:2e:64:f4: 7a:53:4f:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt6SwwHiJmzwuJFEbioAzhZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MzU0NjJlYmIyMDI5YTgzZDNlZWFiNDYyZmYwNTJlY2Zh MGUxYzMwHhcNMjYwMTAxMTYwMTM3WhcNMjYwMTAyMTYwMTM3WjAzMTEwLwYDVQQD EyhlNmMyYTM1YzNkZDVjZTQ2N2I3MGM4Njc1YTVkMzY5NjIxZDgyMGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznXrYREtFQdu+leZqTIala524wKU dz7mcXpjkzPjrkPmiKogdR1oMdVMAxvJdNP3K/BTnhHijLh5XLtcRq2x0sjuKebk x2u67BJti8F6MYWRg2MjQPKuSej35qOoJHcsgDFzqkYF9AlbKsyNrQVM2JAO2r0p jYRqudQOy0VHuLR40Lh+KYd1sgM8IF5PZMY4l8l9N4xUUZ48atX22y38YmQZh1dd iWwsJonuVsFlwtReWt1xGwHA6gB7ZMsk/g5E/OxVnqkcnbCdi9XG66vACOuedksR oyEdNUlgjNrk+NAxfy2R0u1wrfSXR4lVklgsEqoF3LtexCMwISSkPeDxwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObCo1w91c5Ge3DIZ1pdNpYh2CDQMB8GA1UdIwQY MBaAFJU1Ri67ICmoPT7qtGL/BS7PoOHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFRWR0xyc2dLYWc5UHVxMFl2OEZMcy1nNGNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80ZjlmOWYtMzBhOC00MzcwLTk0ZTct MzhhYmZhNGZhMzUwLzEvbFRWR0xyc2dLYWc5UHVxMFl2OEZMcy1nNGNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi80ZjlmOWYtMzBhOC00MzcwLTk0ZTctMzhhYmZhNGZhMzUw LzEvbFRWR0xyc2dLYWc5UHVxMFl2OEZMcy1nNGNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADBhMDzKL khhLCE3XYAJ2Nwy8OpZtPf3a7jgjIeWwZNhWmBsyEKZ2ekMycL1pE3jJx9QxMFHJ x0btrXHI0vvdViXsJWoolStWFhYB8HOQSno1moAaOEw5jtircquxdvv7qFUjVg/9 RgDGO+szxBPekWtOxmq3ZLy/PYVwUjNinJws0Ib12hpFSzj5F7wXo3j3ByFJPsN2 niTiKOcAArxIvvVx0AnQwafiN//c0wmd7vynQvJL/YLTMrswV64X2lXzZWjxSEb3 Vf9MEajtFjIR1Vd5H06jZp4TdXKyRoFDFcuzwS8t1lMWEos5YpUjrGFXMRxfWPmm fE8ZLmT0elNPSw== -----END CERTIFICATE-----Generated at Thu Jan 1 19:54:35 2026 by rpki-client