This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft File: lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft (raw, json) Hash identifier: VfAToHZgLi/wQz1kiyNT5KM5EARUloJBuQFsnIaL5hY= Subject key identifier: F8:E9:D9:C0:A6:9C:52:80:67:43:F2:AF:E3:A8:CA:0A:D8:0C:04:3E Authority key identifier: 94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9 Certificate issuer: /CN=94472e859957355da5ddd13496d70d70773491f9 Certificate serial: 019BB2BA4C0E4937749B175BD5D99049A8C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft Manifest number: 10E8 Signing time: Mon 12 Jan 2026 15:01:52 +0000 Manifest this update: Mon 12 Jan 2026 15:01:52 +0000 Manifest next update: Tue 13 Jan 2026 15:01:52 +0000 Files and hashes: 1: lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl (hash: pwaww5gCyhAkdWeRMBxPX9cPUFlVBfC4cDB7qcMjZ4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 15:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:ba:4c:0e:49:37:74:9b:17:5b:d5:d9:90:49:a8:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94472e859957355da5ddd13496d70d70773491f9 Validity Not Before: Jan 12 15:01:52 2026 GMT Not After : Jan 13 15:01:52 2026 GMT Subject: CN=f8e9d9c0a69c52806743f2afe3a8ca0ad80c043e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1b:b7:8c:49:56:62:52:6a:2d:27:d3:81:50: 49:f8:29:a3:5d:f7:9b:29:a4:af:d1:ab:00:b0:53: bc:42:45:55:c3:ce:d3:41:6e:65:b6:21:9d:f4:98: 47:54:82:4f:6b:85:51:bc:88:dc:5d:db:2a:a4:1b: 66:22:65:54:fc:04:a3:0d:aa:f4:42:22:d2:86:eb: 6e:f5:a2:33:6f:01:18:6a:da:e4:60:ad:14:04:2e: fb:ca:57:99:34:7f:98:50:ca:1b:0e:39:68:c7:e4: b0:16:41:d6:c3:dd:4c:52:32:02:28:44:3e:e5:72: e2:a1:1c:c9:7b:e5:5a:e4:73:8f:b4:2e:63:10:f3: dc:e7:96:1d:b7:76:2e:09:f6:e5:f9:86:09:b5:68: 6b:9a:94:73:45:c4:ac:d9:2f:6d:f0:7d:39:bc:40: ff:98:63:e3:58:09:62:8e:5e:64:29:11:0f:76:72: 94:d7:a7:3d:b8:75:be:59:74:87:d6:59:87:7d:98: 0d:6b:63:35:ee:b9:de:3f:2d:65:7f:57:dc:c7:59: 55:a8:ca:bf:44:e8:85:2d:28:14:dc:8b:d4:f1:55: bb:fc:32:8c:b7:04:01:c6:63:61:b9:04:13:d2:8f: 84:43:3e:70:6a:5a:05:0b:81:9b:e9:23:0c:eb:72: aa:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E9:D9:C0:A6:9C:52:80:67:43:F2:AF:E3:A8:CA:0A:D8:0C:04:3E X509v3 Authority Key Identifier: keyid:94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:ed:6a:25:cd:c6:ab:01:73:10:75:04:0b:5a:00:45:22:c0: 45:ed:a2:f7:21:a8:c1:4e:f4:bb:24:cd:a6:b2:36:34:c2:91: 47:71:f5:c2:3f:10:cb:28:ed:06:e2:23:0f:7a:d8:4e:c3:fa: 48:d0:74:4d:93:d5:54:a4:e0:73:7b:6f:b2:59:5c:a9:ac:79: e8:31:fe:f7:16:8e:76:83:6d:54:57:1d:c1:dd:2c:0c:c9:f2: 38:af:2d:56:36:13:49:a8:b0:cd:00:58:c4:36:2d:1a:7e:8c: fe:d2:f6:b6:ba:a8:c8:45:c3:6b:67:63:52:d6:26:31:68:03: 91:b3:de:36:a3:4b:42:ad:3a:5c:05:37:3d:33:ff:59:37:4c: 45:7e:1a:57:fa:ad:17:5f:4e:93:33:96:0b:ea:22:7e:ae:95: 6c:98:c0:84:57:52:ba:b2:09:c1:cb:14:37:a6:4a:6c:29:a2: 8a:5f:b4:a7:9b:7b:f7:3e:c0:38:c7:3a:96:50:c8:8a:f7:b5: d1:93:47:98:d7:41:2e:df:be:26:0c:c4:a0:12:3a:7a:d9:ab: 4c:33:2e:18:53:78:67:72:70:d2:89:c6:b0:c3:23:d1:4f:3c: 73:10:e3:f0:96:a4:3f:22:dd:e4:53:2a:fd:1f:f0:66:de:11: 60:fd:96:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuyukwOSTd0mxdb1dmQSajIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NDcyZTg1OTk1NzM1NWRhNWRkZDEzNDk2ZDcwZDcwNzcz NDkxZjkwHhcNMjYwMTEyMTUwMTUyWhcNMjYwMTEzMTUwMTUyWjAzMTEwLwYDVQQD EyhmOGU5ZDljMGE2OWM1MjgwNjc0M2YyYWZlM2E4Y2EwYWQ4MGMwNDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hu3jElWYlJqLSfTgVBJ+CmjXfeb KaSv0asAsFO8QkVVw87TQW5ltiGd9JhHVIJPa4VRvIjcXdsqpBtmImVU/ASjDar0 QiLShutu9aIzbwEYatrkYK0UBC77yleZNH+YUMobDjlox+SwFkHWw91MUjICKEQ+ 5XLioRzJe+Va5HOPtC5jEPPc55Ydt3YuCfbl+YYJtWhrmpRzRcSs2S9t8H05vED/ mGPjWAlijl5kKREPdnKU16c9uHW+WXSH1lmHfZgNa2M17rnePy1lf1fcx1lVqMq/ ROiFLSgU3IvU8VW7/DKMtwQBxmNhuQQT0o+EQz5waloFC4Gb6SMM63KqOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPjp2cCmnFKAZ0Pyr+OoygrYDAQ+MB8GA1UdIwQY MBaAFJRHLoWZVzVdpd3RNJbXDXB3NJH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEVjdWhabFhOVjJsM2RFMGx0Y05jSGMwa2ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kNmMxOGEtNTVlZi00MTE4LTk3MGMt NjBkMWVkODBjN2NmLzEvbEVjdWhabFhOVjJsM2RFMGx0Y05jSGMwa2ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9kNmMxOGEtNTVlZi00MTE4LTk3MGMtNjBkMWVkODBjN2Nm LzEvbEVjdWhabFhOVjJsM2RFMGx0Y05jSGMwa2ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyO1qJc3G qwFzEHUEC1oARSLARe2i9yGowU70uyTNprI2NMKRR3H1wj8QyyjtBuIjD3rYTsP6 SNB0TZPVVKTgc3tvsllcqax56DH+9xaOdoNtVFcdwd0sDMnyOK8tVjYTSaiwzQBY xDYtGn6M/tL2trqoyEXDa2djUtYmMWgDkbPeNqNLQq06XAU3PTP/WTdMRX4aV/qt F19OkzOWC+oifq6VbJjAhFdSurIJwcsUN6ZKbCmiil+0p5t79z7AOMc6llDIive1 0ZNHmNdBLt++JgzEoBI6etmrTDMuGFN4Z3Jw0onGsMMj0U88cxDj8JakPyLd5FMq /R/wZt4RYP2WCQ== -----END CERTIFICATE-----Generated at Mon Jan 12 22:45:11 2026 by rpki-client