This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft File: lSC_jHciaj-ojr4RzI8RacxWCnk.mft (raw, json) Hash identifier: wBjP7VSMYtRe+Rk9fCAdNoFsc+W4m6xy6GiM7poAnL0= Subject key identifier: 55:3C:86:8A:A7:FA:B2:CD:CB:F9:3A:93:4C:57:63:55:AA:A2:1D:36 Authority key identifier: 95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79 Certificate issuer: /CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79 Certificate serial: 019B7892B8C81CA83B30084A940E96C1DE66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft Manifest number: 0EC1 Signing time: Thu 01 Jan 2026 08:00:39 +0000 Manifest this update: Thu 01 Jan 2026 08:00:39 +0000 Manifest next update: Fri 02 Jan 2026 08:00:39 +0000 Files and hashes: 1: 5_9mocxdNZ9MQ0g3lwcXXvM4yBI.roa (hash: QFa9yzo72h2sHM5VVVFbluHjiQ4dadLFT4v/+o9O32g=) 2: lSC_jHciaj-ojr4RzI8RacxWCnk.crl (hash: xYL2dR4kKQ0eQZw9AHvs4oy+eo26jrIJFbHb9iR7nX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.crl rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 08:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:92:b8:c8:1c:a8:3b:30:08:4a:94:0e:96:c1:de:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79 Validity Not Before: Jan 1 08:00:39 2026 GMT Not After : Jan 2 08:00:39 2026 GMT Subject: CN=553c868aa7fab2cdcbf93a934c576355aaa21d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4d:1c:23:4f:47:93:77:89:08:ff:2e:33:d1: 28:74:9e:ae:04:6f:e4:33:88:f6:b8:5c:01:7c:60: 4a:37:b1:58:b6:a4:65:d8:91:80:23:0f:eb:88:5c: a9:58:29:1b:80:9b:30:d4:d1:30:6c:7d:2e:ed:49: cb:64:8e:d5:bc:e6:e6:2f:db:09:58:4b:1f:60:4a: 6a:50:f1:f4:3c:45:b0:23:17:cb:68:c5:17:8d:ff: ce:ac:13:4e:76:c3:ea:3e:dd:68:fe:94:f4:63:33: cd:a9:b8:67:3c:dd:2d:b4:eb:f3:a5:c0:c8:f9:07: 2d:60:82:d8:d0:ff:33:b1:e7:a1:a3:66:5b:1b:01: 70:d3:02:c7:9b:49:5b:70:14:99:dc:26:35:ce:33: e9:ba:5a:1c:88:47:25:d8:2c:6e:9f:8e:52:70:26: aa:17:60:3e:4e:98:ea:af:84:7f:76:ab:33:41:dd: 2b:4c:6c:35:b7:f9:37:bf:f0:2c:01:f0:a5:e3:e2: 8c:ff:f4:cf:b0:e8:fe:37:25:c8:bd:5b:96:8c:1e: 7b:6b:05:ac:4d:40:5d:83:c4:c1:21:f2:1e:c0:cb: e6:9e:ce:48:5d:23:72:6e:59:1b:6f:93:f8:86:d5: 4d:19:a8:a4:82:65:e2:ee:6e:9b:d4:e4:b0:5f:14: 13:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:3C:86:8A:A7:FA:B2:CD:CB:F9:3A:93:4C:57:63:55:AA:A2:1D:36 X509v3 Authority Key Identifier: keyid:95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:27:80:2c:f2:12:71:b6:0f:1a:e8:e6:d8:e2:09:bc:11:25: 1f:73:c9:d7:44:c1:58:16:29:70:04:05:e6:97:85:e7:22:41: 7e:64:c1:e5:c9:79:d9:75:0d:2b:11:bd:3a:bc:e8:c6:ee:64: 3d:54:86:76:f9:d0:7d:db:ac:c6:8b:0e:28:c6:d5:3c:06:7d: 7b:62:d2:58:76:d4:72:dc:00:ea:1d:e9:4d:b4:24:d7:91:10: 3c:8b:23:52:39:9d:ca:32:35:22:2b:55:4a:19:fe:07:ac:09: 56:b4:39:8b:9a:a1:32:1c:d6:0d:c1:8a:83:79:51:a1:07:8b: 8b:05:ec:09:77:bf:d7:ae:72:50:76:ea:8a:58:2f:bf:32:0b: de:ae:93:a1:13:0f:9d:3a:8b:5e:c9:af:d2:04:d5:63:89:90: 7f:78:eb:36:13:63:03:26:22:fe:38:e4:ce:6e:b7:fe:b1:0a: 02:c7:2e:b7:30:b2:d7:9b:97:7f:31:a6:34:2d:0c:34:fa:9c: 7c:62:6b:79:71:eb:cc:e4:b3:8c:eb:0a:36:3d:fb:b2:6d:4f: f8:57:29:d3:f4:16:23:ec:ff:3d:0b:5d:4f:e2:e6:54:4e:af: 4a:e4:5a:cc:78:2f:ad:fd:54:22:c3:82:5e:30:6e:11:4f:79: f8:ae:f3:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4krjIHKg7MAhKlA6Wwd5mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjBiZjhjNzcyMjZhM2ZhODhlYmUxMWNjOGYxMTY5Y2M1 NjBhNzkwHhcNMjYwMTAxMDgwMDM5WhcNMjYwMTAyMDgwMDM5WjAzMTEwLwYDVQQD Eyg1NTNjODY4YWE3ZmFiMmNkY2JmOTNhOTM0YzU3NjM1NWFhYTIxZDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU0cI09Hk3eJCP8uM9EodJ6uBG/k M4j2uFwBfGBKN7FYtqRl2JGAIw/riFypWCkbgJsw1NEwbH0u7UnLZI7VvObmL9sJ WEsfYEpqUPH0PEWwIxfLaMUXjf/OrBNOdsPqPt1o/pT0YzPNqbhnPN0ttOvzpcDI +QctYILY0P8zseeho2ZbGwFw0wLHm0lbcBSZ3CY1zjPpulociEcl2Cxun45ScCaq F2A+Tpjqr4R/dqszQd0rTGw1t/k3v/AsAfCl4+KM//TPsOj+NyXIvVuWjB57awWs TUBdg8TBIfIewMvmns5IXSNyblkbb5P4htVNGaikgmXi7m6b1OSwXxQTjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFU8hoqn+rLNy/k6k0xXY1Wqoh02MB8GA1UdIwQY MBaAFJUgv4x3Imo/qI6+EcyPEWnMVgp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNDX2pIY2lhai1vanI0UnpJOFJhY3hXQ25rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mMDlhN2YtNTc2MS00NWE3LTljY2It MWYzZWQ2ZDg4MWI4LzEvbFNDX2pIY2lhai1vanI0UnpJOFJhY3hXQ25rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9mMDlhN2YtNTc2MS00NWE3LTljY2ItMWYzZWQ2ZDg4MWI4 LzEvbFNDX2pIY2lhai1vanI0UnpJOFJhY3hXQ25rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOCeALPIS cbYPGujm2OIJvBElH3PJ10TBWBYpcAQF5peF5yJBfmTB5cl52XUNKxG9Orzoxu5k PVSGdvnQfdusxosOKMbVPAZ9e2LSWHbUctwA6h3pTbQk15EQPIsjUjmdyjI1IitV Shn+B6wJVrQ5i5qhMhzWDcGKg3lRoQeLiwXsCXe/165yUHbqilgvvzIL3q6ToRMP nTqLXsmv0gTVY4mQf3jrNhNjAyYi/jjkzm63/rEKAscutzCy15uXfzGmNC0MNPqc fGJreXHrzOSzjOsKNj37sm1P+Fcp0/QWI+z/PQtdT+LmVE6vSuRazHgvrf1UIsOC XjBuEU95+K7z9A== -----END CERTIFICATE-----Generated at Thu Jan 1 15:57:34 2026 by rpki-client