This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft File: lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft (raw, json) Hash identifier: Eu7RADbiYdcbHHlkID7IoxolLJ87T5kZwkO1D1XVVTA= Subject key identifier: CA:8A:4E:05:22:D6:8D:05:32:4E:D3:61:C8:86:3B:02:BC:DD:ED:4B Authority key identifier: 96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67 Certificate issuer: /CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67 Certificate serial: 019BF72D0DAE0474E9BA084CA6E2393ECA07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft Manifest number: 0F20 Signing time: Sun 25 Jan 2026 22:01:23 +0000 Manifest this update: Sun 25 Jan 2026 22:01:23 +0000 Manifest next update: Mon 26 Jan 2026 22:01:23 +0000 Files and hashes: 1: Qb_RZp-mahSy8KfrU77wNxpfg_E.roa (hash: u1xd1aPYepFZHPAZOvL3xwts9hFrIKK/yaiHVAix9zo=) 2: lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl (hash: DbAILiJ4ZJx59WqOx9Gic2CT9/EzrQ0Rtf2QOkeHdPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:0d:ae:04:74:e9:ba:08:4c:a6:e2:39:3e:ca:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67 Validity Not Before: Jan 25 22:01:23 2026 GMT Not After : Jan 26 22:01:23 2026 GMT Subject: CN=ca8a4e0522d68d05324ed361c8863b02bcdded4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3f:6c:18:66:03:11:cb:8f:ed:77:58:7a:ce: be:36:45:3a:29:ef:94:b5:a4:2b:60:cf:47:3f:48: 67:89:4b:58:2f:51:cd:e9:88:06:50:6f:f6:ff:55: 4d:84:5f:3f:c8:1a:27:c3:9f:9f:2a:1c:37:70:03: cd:49:7e:fe:19:ac:c6:c5:8c:2d:0a:50:7b:57:d5: a0:f4:01:ec:c4:a8:1f:77:c0:66:4c:66:b5:38:43: 5d:82:81:82:eb:fa:84:ff:c2:b8:12:a0:23:d4:c5: d1:8f:4c:81:f7:fd:6d:44:4e:eb:b9:76:85:72:cf: e6:6f:44:5b:cc:91:a3:4e:df:16:37:22:11:a5:18: da:78:36:09:3b:ba:16:aa:e6:96:29:a7:40:ac:e1: 00:c3:a6:20:4c:b5:cb:f6:7b:8c:fa:82:38:83:ed: ed:b1:56:4c:03:86:69:df:54:9d:41:7b:99:6b:65: 70:35:d1:6a:27:75:d1:c8:4a:4a:a6:c1:36:ee:9c: 71:43:7b:61:0e:ac:e9:75:3e:e4:7b:44:6b:af:31: 14:fb:0d:d4:87:bc:1a:67:75:2a:e1:55:da:86:a1: 73:16:c6:68:a3:da:78:53:c6:18:7e:44:3b:dd:4c: aa:0b:dc:63:af:2a:76:a2:f5:d6:9f:88:8b:56:a4: 65:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8A:4E:05:22:D6:8D:05:32:4E:D3:61:C8:86:3B:02:BC:DD:ED:4B X509v3 Authority Key Identifier: keyid:96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:86:8f:0d:27:9f:fb:a5:92:48:6d:8f:bd:a0:61:01:88:9f: d8:34:1e:19:32:ab:b9:36:36:c4:b3:71:a1:59:b0:c3:66:b6: 29:c1:06:7b:0b:11:f3:af:2c:d7:9b:64:a9:34:3d:b8:6a:42: 36:2e:7f:4e:ae:8f:e3:df:dc:ac:0f:ce:d5:71:e1:9d:ef:73: 2f:f4:c1:ef:9e:cb:7f:e2:53:60:a2:6e:8a:b3:22:8a:71:27: e6:96:2a:0a:6b:9a:c1:ce:76:70:e9:6d:0f:c0:76:ac:4f:61: 10:26:14:0e:94:f1:e7:db:0e:6e:dc:3a:08:c2:f2:6e:f7:a9: d5:d0:7d:17:15:9e:57:a3:47:ce:70:b2:13:a4:f2:82:72:9f: d8:26:c4:d0:37:5d:5e:21:43:1e:9e:46:82:6c:a9:12:f2:cb: 0a:af:85:37:65:7a:50:dd:6a:c3:75:e7:bc:bd:1f:a2:51:3f: 74:a4:3c:6f:0c:dc:60:4d:b6:ca:ac:49:0e:aa:8f:80:69:b6: 3e:aa:d5:44:7b:f9:6f:21:8a:6d:7b:03:c5:29:12:ee:b7:85: c0:2f:4c:aa:1b:74:10:87:b4:fe:04:2e:bd:ed:e0:2a:20:f3: 2b:43:e6:db:e5:8c:02:25:23:25:df:75:09:ad:48:b8:99:9c: 46:e3:a6:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LQ2uBHTpughMpuI5PsoHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2Yjg3ZTVmZDFhYWRjMWJiZWEzNzJiNDI2OWVlYmQzOTNj NWNkNjcwHhcNMjYwMTI1MjIwMTIzWhcNMjYwMTI2MjIwMTIzWjAzMTEwLwYDVQQD EyhjYThhNGUwNTIyZDY4ZDA1MzI0ZWQzNjFjODg2M2IwMmJjZGRlZDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0T9sGGYDEcuP7XdYes6+NkU6Ke+U taQrYM9HP0hniUtYL1HN6YgGUG/2/1VNhF8/yBonw5+fKhw3cAPNSX7+GazGxYwt ClB7V9Wg9AHsxKgfd8BmTGa1OENdgoGC6/qE/8K4EqAj1MXRj0yB9/1tRE7ruXaF cs/mb0RbzJGjTt8WNyIRpRjaeDYJO7oWquaWKadArOEAw6YgTLXL9nuM+oI4g+3t sVZMA4Zp31SdQXuZa2VwNdFqJ3XRyEpKpsE27pxxQ3thDqzpdT7ke0RrrzEU+w3U h7waZ3Uq4VXahqFzFsZoo9p4U8YYfkQ73UyqC9xjryp2ovXWn4iLVqRlUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqKTgUi1o0FMk7TYciGOwK83e1LMB8GA1UdIwQY MBaAFJa4fl/RqtwbvqNytCae69OTxc1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHJoLVg5R3EzQnUtbzNLMEpwN3IwNVBGeldjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi82YTg4YWMtZWZiNC00NWU0LTkxOTkt MmFiZGIyMTk0MWJjLzEvbHJoLVg5R3EzQnUtbzNLMEpwN3IwNVBGeldjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi82YTg4YWMtZWZiNC00NWU0LTkxOTktMmFiZGIyMTk0MWJj LzEvbHJoLVg5R3EzQnUtbzNLMEpwN3IwNVBGeldjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmoaPDSef +6WSSG2PvaBhAYif2DQeGTKruTY2xLNxoVmww2a2KcEGewsR868s15tkqTQ9uGpC Ni5/Tq6P49/crA/O1XHhne9zL/TB757Lf+JTYKJuirMiinEn5pYqCmuawc52cOlt D8B2rE9hECYUDpTx59sObtw6CMLybvep1dB9FxWeV6NHznCyE6TygnKf2CbE0Ddd XiFDHp5GgmypEvLLCq+FN2V6UN1qw3XnvL0folE/dKQ8bwzcYE22yqxJDqqPgGm2 PqrVRHv5byGKbXsDxSkS7reFwC9Mqht0EIe0/gQuve3gKiDzK0Pm2+WMAiUjJd91 Ca1IuJmcRuOmIw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:02 2026 by rpki-client