This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft File: lKOAb3QqvNXbEgT1KPTKbd6x6do.mft (raw, json) Hash identifier: 6uD/GdLOLg0HCHRYee8w18UpcoB7IOSKZZqqL8NVLV4= Subject key identifier: AC:77:D4:DC:DD:7C:D2:47:E0:A9:E9:F5:3D:D4:F1:FB:57:5E:31:3A Authority key identifier: 94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA Certificate issuer: /CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da Certificate serial: 019BADCB2B03B511F3C16E59AA876FD0CF9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft Manifest number: 0F08 Signing time: Sun 11 Jan 2026 16:02:11 +0000 Manifest this update: Sun 11 Jan 2026 16:02:11 +0000 Manifest next update: Mon 12 Jan 2026 16:02:11 +0000 Files and hashes: 1: lKOAb3QqvNXbEgT1KPTKbd6x6do.crl (hash: cdGf7UCngQU/tTwtKGO8gntL78dcbQAhNau7MdfzUO0=) 2: yA5GH7gLA1HVBnxPLthwZlHoljY.roa (hash: ZrNoguXr/VbPxJyma5te3bY/LH0TrJlliompzvOOHkA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 16:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:cb:2b:03:b5:11:f3:c1:6e:59:aa:87:6f:d0:cf:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da Validity Not Before: Jan 11 16:02:11 2026 GMT Not After : Jan 12 16:02:11 2026 GMT Subject: CN=ac77d4dcdd7cd247e0a9e9f53dd4f1fb575e313a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bc:52:83:75:2d:39:27:58:b2:68:0d:cd:15: 52:35:ac:8b:e9:da:1b:a4:94:c2:70:a2:7e:be:5f: 6d:50:df:d4:cf:10:cf:39:49:11:49:1e:28:8b:18: ee:4d:1d:16:00:f0:8b:ee:89:a0:ee:3d:1b:55:12: 9a:cf:92:1d:9c:b3:70:69:f2:29:3f:87:7f:88:98: 68:54:f8:a7:1c:79:57:13:a2:7d:7f:7e:b2:dc:18: 9d:bf:af:df:57:3e:ca:ba:62:e1:82:a4:cd:3a:21: d8:de:97:f2:53:cc:52:e3:f8:5c:8b:7d:07:a4:cb: 2d:60:62:d8:5d:19:70:83:22:3f:44:29:e4:3d:88: c4:1e:ac:7a:b4:4e:55:34:56:e5:dd:03:7e:56:20: bc:7f:53:3c:2f:62:eb:ba:a9:4b:ad:69:6a:54:51: 11:31:0f:fa:f2:77:8e:9c:de:c2:53:2d:e5:c6:30: 5d:bb:ea:8c:be:ac:fc:0c:86:6a:1a:d6:70:97:22: 69:54:a6:f4:2d:60:43:e3:31:e3:88:e9:37:d8:f0: 5c:0d:b7:67:cd:0f:db:3f:a3:c0:1a:4d:d4:06:dc: ef:d9:51:d0:bd:90:a8:b6:10:6b:f7:ce:c7:ee:74: b5:87:a1:55:d7:38:b3:25:82:45:08:91:a9:cd:01: 1e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:77:D4:DC:DD:7C:D2:47:E0:A9:E9:F5:3D:D4:F1:FB:57:5E:31:3A X509v3 Authority Key Identifier: keyid:94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:4e:42:9c:de:1b:bf:2d:97:23:7c:07:08:00:8b:c6:5b:b6: 35:c3:77:12:2f:b1:e0:04:3a:15:b5:7d:14:56:47:df:9d:76: 23:06:13:19:5a:dc:5d:c8:06:3c:fe:98:ee:93:2e:77:b9:72: 77:66:5f:f6:1b:6c:cf:fb:1a:9b:ff:35:d6:50:05:72:66:f8: ca:b9:1c:25:03:ad:97:8b:09:5d:4d:4e:63:35:1e:09:9f:e5: 58:10:00:9d:d9:f4:f7:32:4d:de:72:e3:44:e3:51:77:f4:6c: 94:3a:01:d0:b0:ed:56:61:43:0c:09:e4:ca:ff:e5:1b:63:8a: f7:2c:e5:18:5e:72:d1:69:29:33:b4:c4:dd:73:8e:72:7b:7c: e4:d4:3a:71:84:ab:52:5d:d7:0f:7a:6c:16:93:97:59:28:93: 2d:2d:b2:bb:e7:5e:ac:d0:a2:44:7e:3d:dd:7d:77:63:52:d1: f8:b2:28:9a:07:d5:04:79:c0:1c:5c:d0:8d:f0:ed:76:8b:1e: 95:bd:68:96:20:d8:15:04:3b:d4:4f:8d:21:84:51:4e:4d:5e: 3f:e6:1e:80:13:d6:0f:bd:4b:2e:0a:e5:ef:2f:59:e9:b1:f8: 4f:83:59:c0:b6:74:70:57:19:7c:08:66:0c:d8:7f:26:f6:b0: a7:4a:73:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZutyysDtRHzwW5Zqodv0M+cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0YTM4MDZmNzQyYWJjZDVkYjEyMDRmNTI4ZjRjYTZkZGVi MWU5ZGEwHhcNMjYwMTExMTYwMjExWhcNMjYwMTEyMTYwMjExWjAzMTEwLwYDVQQD EyhhYzc3ZDRkY2RkN2NkMjQ3ZTBhOWU5ZjUzZGQ0ZjFmYjU3NWUzMTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLxSg3UtOSdYsmgNzRVSNayL6dob pJTCcKJ+vl9tUN/UzxDPOUkRSR4oixjuTR0WAPCL7omg7j0bVRKaz5IdnLNwafIp P4d/iJhoVPinHHlXE6J9f36y3Bidv6/fVz7KumLhgqTNOiHY3pfyU8xS4/hci30H pMstYGLYXRlwgyI/RCnkPYjEHqx6tE5VNFbl3QN+ViC8f1M8L2LruqlLrWlqVFER MQ/68neOnN7CUy3lxjBdu+qMvqz8DIZqGtZwlyJpVKb0LWBD4zHjiOk32PBcDbdn zQ/bP6PAGk3UBtzv2VHQvZCothBr987H7nS1h6FV1zizJYJFCJGpzQEe2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKx31NzdfNJH4Knp9T3U8ftXXjE6MB8GA1UdIwQY MBaAFJSjgG90KrzV2xIE9Sj0ym3esenaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jN2I1MjQtYzRkOS00MWE0LTg4ZmEt ZDhiZjUyMWIyNmIwLzEvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9jN2I1MjQtYzRkOS00MWE0LTg4ZmEtZDhiZjUyMWIyNmIw LzEvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEk5CnN4b vy2XI3wHCACLxlu2NcN3Ei+x4AQ6FbV9FFZH3512IwYTGVrcXcgGPP6Y7pMud7ly d2Zf9htsz/sam/811lAFcmb4yrkcJQOtl4sJXU1OYzUeCZ/lWBAAndn09zJN3nLj RONRd/RslDoB0LDtVmFDDAnkyv/lG2OK9yzlGF5y0WkpM7TE3XOOcnt85NQ6cYSr Ul3XD3psFpOXWSiTLS2yu+derNCiRH493X13Y1LR+LIomgfVBHnAHFzQjfDtdose lb1oliDYFQQ71E+NIYRRTk1eP+YegBPWD71LLgrl7y9Z6bH4T4NZwLZ0cFcZfAhm DNh/Jvawp0pzIw== -----END CERTIFICATE-----Generated at Sun Jan 11 23:41:13 2026 by rpki-client