This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft File: lXPBpW7MJKV9K2hOVILat7jZ0ss.mft (raw, json) Hash identifier: No8NNzY7IciAt0WPdEjfFI5Hy0xEkzuQ7kjIDV83IxU= Subject key identifier: A4:C2:FD:D4:43:79:A7:16:03:B0:99:4A:56:2A:03:F5:BE:F9:1F:C4 Authority key identifier: 95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB Certificate issuer: /CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb Certificate serial: 019BF273EA0BC25A022FD154CE4D959E044C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft Manifest number: 162F Signing time: Sun 25 Jan 2026 00:00:41 +0000 Manifest this update: Sun 25 Jan 2026 00:00:41 +0000 Manifest next update: Mon 26 Jan 2026 00:00:41 +0000 Files and hashes: 1: LRNAbpyVNd4xRcYWOniPaIJsimE.roa (hash: MN58eSDU1GHmgZaBD9VcuURzS5Nsy+/QBrg9oxjCqD0=) 2: lXPBpW7MJKV9K2hOVILat7jZ0ss.crl (hash: k8eWqBN3W1MAiO2iFFgxkh+Uec+BXayeULF6yDGCtGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:73:ea:0b:c2:5a:02:2f:d1:54:ce:4d:95:9e:04:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb Validity Not Before: Jan 25 00:00:41 2026 GMT Not After : Jan 26 00:00:41 2026 GMT Subject: CN=a4c2fdd44379a71603b0994a562a03f5bef91fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9c:55:76:f7:37:68:86:2b:99:e1:30:41:39: 80:85:4e:c4:fe:76:e6:71:f7:6a:4f:17:1e:45:3d: 95:03:68:e5:0d:20:71:dd:3c:3a:cb:c6:4d:13:05: d4:f6:5c:b6:29:f0:46:14:b3:e2:54:58:a9:b0:df: 36:b6:32:66:28:bf:27:6c:f6:74:66:9e:9f:eb:93: 38:03:4e:24:05:00:66:44:90:af:cc:04:6c:f3:da: 10:a5:17:20:39:ee:36:6e:12:85:67:76:eb:ec:c8: f2:3a:e4:46:b4:29:bc:df:48:5b:b8:0e:fe:0a:79: ae:d1:da:82:07:41:8c:c7:6c:0c:d8:36:c0:ae:7c: de:55:97:53:d9:03:3b:f3:05:ea:a9:ed:51:63:03: 71:37:56:d6:e2:65:e6:e4:07:0c:db:d6:ed:e2:0a: fc:c9:b4:6a:4f:f5:30:8f:b0:ec:e6:4b:72:d9:a8: fd:a3:77:64:98:f0:ee:64:9a:13:55:37:b5:3a:57: 69:6a:1d:d8:cb:f1:25:d1:a6:d1:59:da:d4:83:36: 74:50:b5:6b:d3:bc:1e:11:18:bd:22:d5:52:6e:c7: 16:ef:f0:f6:52:76:7d:41:d0:db:18:cf:d9:88:85: c2:bd:cd:6a:87:61:cd:a0:8a:74:de:25:cb:6b:16: d7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C2:FD:D4:43:79:A7:16:03:B0:99:4A:56:2A:03:F5:BE:F9:1F:C4 X509v3 Authority Key Identifier: keyid:95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ef:26:a8:b4:fc:bb:f2:74:ce:26:53:88:60:47:37:db:b3:88: 1d:9d:bd:6d:77:64:4e:db:dd:59:72:90:12:bf:65:d4:3e:68: 47:bb:fa:c0:7a:79:d2:54:a4:fe:e8:49:67:93:ba:43:66:04: 18:a3:88:e1:f0:f7:10:5a:5f:4f:4e:e0:e7:c0:fd:78:67:0b: 64:30:8b:de:d7:b6:2e:23:e8:60:1d:ea:c7:a1:ba:ab:07:ab: e9:60:c3:52:76:55:70:5f:ef:28:63:03:0c:b2:d0:32:9f:41: 76:f3:7a:3a:e8:0a:41:34:0c:b8:5e:a0:ae:bf:c9:23:6c:a2: ae:c3:f3:2c:41:b6:5e:2a:10:40:42:54:95:ac:50:08:24:a1: bf:3e:3d:df:e0:27:4d:5a:d5:8b:d7:7c:cd:a4:36:cc:d8:b5: 07:50:30:2d:a3:9b:16:0b:fe:a4:e3:95:15:0f:d5:b3:9c:8c: 98:b4:8f:33:84:2e:c2:5d:d5:0f:7b:84:1e:19:dc:4f:3c:bc: 7f:81:d1:1f:39:cc:8b:cf:f4:55:a3:25:2d:83:9b:08:ac:2d: d3:21:a9:20:0d:40:44:b0:b0:23:f9:e6:0b:eb:1c:a4:2e:2a: 32:0f:58:cd:06:d7:6c:60:dd:d0:24:c6:a5:2b:5f:0a:c2:50: f4:65:31:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyc+oLwloCL9FUzk2VngRMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NzNjMWE1NmVjYzI0YTU3ZDJiNjg0ZTU0ODJkYWI3Yjhk OWQyY2IwHhcNMjYwMTI1MDAwMDQxWhcNMjYwMTI2MDAwMDQxWjAzMTEwLwYDVQQD EyhhNGMyZmRkNDQzNzlhNzE2MDNiMDk5NGE1NjJhMDNmNWJlZjkxZmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJxVdvc3aIYrmeEwQTmAhU7E/nbm cfdqTxceRT2VA2jlDSBx3Tw6y8ZNEwXU9ly2KfBGFLPiVFipsN82tjJmKL8nbPZ0 Zp6f65M4A04kBQBmRJCvzARs89oQpRcgOe42bhKFZ3br7MjyOuRGtCm830hbuA7+ Cnmu0dqCB0GMx2wM2DbArnzeVZdT2QM78wXqqe1RYwNxN1bW4mXm5AcM29bt4gr8 ybRqT/Uwj7Ds5kty2aj9o3dkmPDuZJoTVTe1Oldpah3Yy/El0abRWdrUgzZ0ULVr 07weERi9ItVSbscW7/D2UnZ9QdDbGM/ZiIXCvc1qh2HNoIp03iXLaxbXBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTC/dRDeacWA7CZSlYqA/W++R/EMB8GA1UdIwQY MBaAFJVzwaVuzCSlfStoTlSC2re42dLLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFhQQnBXN01KS1Y5SzJoT1ZJTGF0N2paMHNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82NDI4NGYtMDM1Yy00NjIwLTk0ZGIt NGNiOWRkZjA5ZDQ1LzEvbFhQQnBXN01KS1Y5SzJoT1ZJTGF0N2paMHNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC82NDI4NGYtMDM1Yy00NjIwLTk0ZGItNGNiOWRkZjA5ZDQ1 LzEvbFhQQnBXN01KS1Y5SzJoT1ZJTGF0N2paMHNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7yaotPy7 8nTOJlOIYEc327OIHZ29bXdkTtvdWXKQEr9l1D5oR7v6wHp50lSk/uhJZ5O6Q2YE GKOI4fD3EFpfT07g58D9eGcLZDCL3te2LiPoYB3qx6G6qwer6WDDUnZVcF/vKGMD DLLQMp9BdvN6OugKQTQMuF6grr/JI2yirsPzLEG2XioQQEJUlaxQCCShvz493+An TVrVi9d8zaQ2zNi1B1AwLaObFgv+pOOVFQ/Vs5yMmLSPM4Quwl3VD3uEHhncTzy8 f4HRHznMi8/0VaMlLYObCKwt0yGpIA1ARLCwI/nmC+scpC4qMg9YzQbXbGDd0CTG pStfCsJQ9GUxHw== -----END CERTIFICATE-----Generated at Sun Jan 25 05:41:42 2026 by rpki-client