This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft File: LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft (raw, json) Hash identifier: nHm5XrrLmLIJov/gFeNbQJwzovqj681xApHXh4Hlf1c= Subject key identifier: 0B:F9:AD:38:13:A3:5F:6D:2C:49:97:6D:CD:34:42:68:AE:79:1B:AA Authority key identifier: 2E:5C:57:1B:F9:BF:A7:E2:1B:C7:E3:39:F9:B8:EE:BE:06:13:37:11 Certificate issuer: /CN=2e5c571bf9bfa7e21bc7e339f9b8eebe06133711 Certificate serial: 019BF687787FAC536DDCF4E78095085FAB08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft Manifest number: 0ECF Signing time: Sun 25 Jan 2026 19:00:31 +0000 Manifest this update: Sun 25 Jan 2026 19:00:31 +0000 Manifest next update: Mon 26 Jan 2026 19:00:31 +0000 Files and hashes: 1: LlxXG_m_p-Ibx-M5-bjuvgYTNxE.crl (hash: dtShLREnw6KqhF+Ta1AM4vle88e3dvfmzq+IGc8Jdng=) 2: hWYG6SA4jMjGfHFArO_-xfjzCA0.roa (hash: M5+XjEjzxKltQFP4I5ZzSuED19Ey6Fm4q51WKuVhoeg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.crl rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft rsync://rpki.ripe.net/repository/DEFAULT/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:78:7f:ac:53:6d:dc:f4:e7:80:95:08:5f:ab:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e5c571bf9bfa7e21bc7e339f9b8eebe06133711 Validity Not Before: Jan 25 19:00:31 2026 GMT Not After : Jan 26 19:00:31 2026 GMT Subject: CN=0bf9ad3813a35f6d2c49976dcd344268ae791baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:62:67:56:35:a8:49:ef:67:f2:53:a9:2e:5a: 56:ca:60:69:d5:70:aa:86:85:d0:de:76:b4:ff:48: 38:e9:35:ab:df:68:31:75:0a:57:6d:4a:05:10:81: c1:00:18:62:73:cb:a6:cf:95:b1:f5:94:8e:ab:2d: e2:98:5b:35:58:8a:52:0a:ef:ea:6d:f1:0c:c1:5b: ed:6a:72:97:cb:99:8d:f5:70:ed:99:ea:93:25:76: 83:8a:c0:cf:20:85:81:de:c6:68:d9:56:1d:dc:a4: 8b:6c:88:8f:69:82:df:9e:8a:96:68:41:64:3b:f4: e3:23:a2:95:45:73:15:c9:cf:2e:7a:33:88:1f:01: ea:37:52:35:84:e7:a0:6f:ce:e0:3f:c4:92:ab:8d: af:03:19:d0:2f:3b:a9:f9:58:88:cd:3e:32:ac:2a: 4d:78:5f:d2:2f:d2:1e:b4:0f:c0:d0:f7:4c:1b:ce: 6e:d9:67:d5:10:11:db:2e:ec:18:08:f7:d5:93:e1: f5:a2:a1:38:c8:db:77:d3:1f:93:40:2e:d8:94:96: fb:d9:ff:27:32:6b:4b:cf:8c:d0:f1:0f:77:48:5d: ee:58:de:9c:c1:cb:21:d4:ff:88:65:d8:c3:b7:75: 9c:dc:c4:eb:c3:f0:84:33:e8:ce:93:68:28:da:c7: 31:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F9:AD:38:13:A3:5F:6D:2C:49:97:6D:CD:34:42:68:AE:79:1B:AA X509v3 Authority Key Identifier: keyid:2E:5C:57:1B:F9:BF:A7:E2:1B:C7:E3:39:F9:B8:EE:BE:06:13:37:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:c0:e6:b2:c2:4c:da:82:ca:43:65:32:6b:e3:d1:78:ad:9a: 21:e3:bd:6d:f5:96:1e:a0:90:f3:a1:76:fb:b3:c5:fe:70:e7: 23:05:2f:b6:05:0a:9c:b6:7b:00:d1:71:55:77:67:b9:fa:3a: b2:4f:70:2b:40:e9:a8:e1:57:7f:0a:22:e2:0b:4c:55:fa:20: 92:b4:5d:f3:8d:de:92:80:95:4f:cc:6d:cf:8d:81:e5:8d:b2: 2f:bc:30:ed:b4:79:82:27:eb:b3:71:32:d3:d6:1a:d5:3c:ce: 22:cc:04:69:32:75:56:7f:c0:d2:c3:94:c6:75:be:36:4c:e6: b0:90:32:60:c4:04:b6:d7:0e:63:32:e7:06:2a:c5:02:7d:21: f9:5a:3d:42:80:8a:27:9a:49:0e:57:3b:ed:b1:62:07:b2:da: 11:c5:71:1d:cf:f3:d4:b9:a4:f5:44:cc:b7:70:72:d2:ce:67: a3:5e:91:6c:ef:c3:ee:a9:de:c9:ba:74:bd:b0:dc:d3:11:52: 85:16:bf:4a:e1:53:a0:de:f0:8d:d7:b1:c3:5d:85:e0:82:f6: e8:02:8b:2c:02:0a:25:1a:63:ec:ce:da:94:58:74:45:f3:fa: fa:e7:17:d2:10:94:6a:62:ab:b6:37:b9:9a:25:06:ad:cb:9c: 05:84:b3:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h3h/rFNt3PTngJUIX6sIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNWM1NzFiZjliZmE3ZTIxYmM3ZTMzOWY5YjhlZWJlMDYx MzM3MTEwHhcNMjYwMTI1MTkwMDMxWhcNMjYwMTI2MTkwMDMxWjAzMTEwLwYDVQQD EygwYmY5YWQzODEzYTM1ZjZkMmM0OTk3NmRjZDM0NDI2OGFlNzkxYmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2JnVjWoSe9n8lOpLlpWymBp1XCq hoXQ3na0/0g46TWr32gxdQpXbUoFEIHBABhic8umz5Wx9ZSOqy3imFs1WIpSCu/q bfEMwVvtanKXy5mN9XDtmeqTJXaDisDPIIWB3sZo2VYd3KSLbIiPaYLfnoqWaEFk O/TjI6KVRXMVyc8uejOIHwHqN1I1hOegb87gP8SSq42vAxnQLzup+ViIzT4yrCpN eF/SL9IetA/A0PdMG85u2WfVEBHbLuwYCPfVk+H1oqE4yNt30x+TQC7YlJb72f8n MmtLz4zQ8Q93SF3uWN6cwcsh1P+IZdjDt3Wc3MTrw/CEM+jOk2go2scxSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAv5rTgTo19tLEmXbc00QmiueRuqMB8GA1UdIwQY MBaAFC5cVxv5v6fiG8fjOfm47r4GEzcRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGx4WEdfbV9wLUlieC1NNS1ianV2Z1lUTnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85NzlkMjAtMmZmMi00ZjkyLTljMjct ZDYwOTJhOWZiZTZjLzEvTGx4WEdfbV9wLUlieC1NNS1ianV2Z1lUTnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS85NzlkMjAtMmZmMi00ZjkyLTljMjctZDYwOTJhOWZiZTZj LzEvTGx4WEdfbV9wLUlieC1NNS1ianV2Z1lUTnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8DmssJM 2oLKQ2Uya+PReK2aIeO9bfWWHqCQ86F2+7PF/nDnIwUvtgUKnLZ7ANFxVXdnufo6 sk9wK0DpqOFXfwoi4gtMVfogkrRd843ekoCVT8xtz42B5Y2yL7ww7bR5gifrs3Ey 09Ya1TzOIswEaTJ1Vn/A0sOUxnW+NkzmsJAyYMQEttcOYzLnBirFAn0h+Vo9QoCK J5pJDlc77bFiB7LaEcVxHc/z1Lmk9UTMt3By0s5no16RbO/D7qneybp0vbDc0xFS hRa/SuFToN7wjdexw12F4IL26AKLLAIKJRpj7M7alFh0RfP6+ucX0hCUamKrtje5 miUGrcucBYSz8w== -----END CERTIFICATE-----Generated at Mon Jan 26 01:13:50 2026 by rpki-client