This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft File: LO_eMLilizIqQx8IKe1P8ztarBg.mft (raw, json) Hash identifier: H5KnfoDwPDfbo4NXIAPYuO6VseHnlzYTGOlgl1ZUD74= Subject key identifier: 81:7F:5D:F3:C5:13:D9:0C:4F:15:41:F5:2A:40:BA:F5:04:12:EC:6B Authority key identifier: 2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18 Certificate issuer: /CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18 Certificate serial: 019BF988CB4B3C3183870CF04D969EDB242F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 09:00:50 +0000 Manifest this update: Mon 26 Jan 2026 09:00:50 +0000 Manifest next update: Tue 27 Jan 2026 09:00:50 +0000 Files and hashes: 1: LO_eMLilizIqQx8IKe1P8ztarBg.crl (hash: tYPvA6UPW56EZM8OVRnV54zU6BHi2gYHf4+0nnVomsY=) 2: riStBl-2mLLI1xTkjtqgzstCOrU.roa (hash: hf9I5Mw3LW7ngdtmYTFwt2Y1Syg1s0AmbFlrIM3a+Ns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:88:cb:4b:3c:31:83:87:0c:f0:4d:96:9e:db:24:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18 Validity Not Before: Jan 26 09:00:50 2026 GMT Not After : Jan 27 09:00:50 2026 GMT Subject: CN=817f5df3c513d90c4f1541f52a40baf50412ec6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:76:5d:bc:e8:25:ce:68:9f:08:31:da:8c:21: df:da:68:b8:7c:04:e6:d6:cc:68:23:27:d2:31:ad: e9:0f:d8:98:3a:44:bf:c0:51:bd:c1:ad:64:a0:cd: e4:18:ee:5a:bd:bf:ed:48:c7:f5:e6:9d:dd:f4:15: 84:6b:a3:91:c6:88:7a:7e:68:82:c0:7f:8e:e1:7e: 12:e5:71:05:82:85:5a:9a:18:8c:d1:1d:b5:17:c0: 56:90:0a:da:83:b1:c4:92:0e:c3:eb:40:84:e9:1d: 0d:d9:fb:9e:5e:be:cd:69:00:97:0e:2e:15:5f:3a: a0:d3:a0:e6:c2:a5:27:ec:34:f3:6c:dd:d0:be:02: f0:af:9e:7a:50:3b:99:07:a7:b2:39:8c:9e:cb:38: 0e:a4:77:24:0a:57:1f:c8:06:6d:39:1c:81:3d:d9: 3c:51:f9:9f:e2:ba:81:3d:18:b3:fa:66:9f:c0:48: 26:17:19:7f:1c:7e:6b:e2:ca:c9:ff:ab:59:87:26: 08:b9:9b:db:e4:63:5b:91:8e:a7:56:04:2b:09:a0: 8e:51:5c:f9:78:31:68:0e:61:93:21:0c:e7:0f:76: 31:2c:b7:3c:a3:55:f7:33:f6:e4:24:67:bc:20:de: 34:ba:7d:70:28:77:e8:c3:bc:13:be:69:7f:0a:13: 57:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7F:5D:F3:C5:13:D9:0C:4F:15:41:F5:2A:40:BA:F5:04:12:EC:6B X509v3 Authority Key Identifier: keyid:2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:d6:ef:4f:a0:4d:f8:7a:e5:63:fd:fe:0e:28:c1:90:15:9e: 61:d2:2a:20:8d:37:25:7a:86:3c:46:4f:e4:ce:9a:37:dd:2d: 88:69:54:74:70:ac:49:ac:5d:f6:80:30:83:35:57:3a:fd:c4: 50:51:8f:25:34:96:ed:c0:a6:29:44:f6:24:53:23:59:5c:26: 37:ed:85:5b:53:21:f4:e0:44:2d:48:82:06:34:65:8b:b8:2d: 64:3d:02:0e:5b:e5:97:d6:9a:87:aa:c8:e6:03:ed:96:4c:08: e2:b2:ba:f4:2d:1f:31:91:ec:e6:f7:00:b3:ac:45:05:2e:1f: 2d:32:5a:57:c1:e5:98:9c:20:6b:19:ba:19:26:9f:39:d9:d6: 45:bd:f5:2b:19:72:f8:ca:81:97:12:c5:15:84:6d:a8:57:ce: 7c:ba:02:12:9f:1d:73:bb:34:5e:0c:0a:8d:fb:17:ed:51:22: 2f:12:a4:c7:dd:3c:eb:6b:d8:a5:a7:d8:55:93:62:5a:a9:d7: 08:ca:39:53:f6:0b:e8:76:f1:d4:64:d6:61:c5:6b:a8:25:29: 8f:2f:46:85:9e:de:9d:9c:81:d6:6f:d7:51:6a:7f:a3:aa:06: c2:cd:fb:a2:5b:77:8a:45:0d:d9:90:af:0d:e4:4d:4c:75:f1: 98:70:3a:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iMtLPDGDhwzwTZae2yQvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZWZkZTMwYjhhNThiMzIyYTQzMWYwODI5ZWQ0ZmYzM2I1 YWFjMTgwHhcNMjYwMTI2MDkwMDUwWhcNMjYwMTI3MDkwMDUwWjAzMTEwLwYDVQQD Eyg4MTdmNWRmM2M1MTNkOTBjNGYxNTQxZjUyYTQwYmFmNTA0MTJlYzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXZdvOglzmifCDHajCHf2mi4fATm 1sxoIyfSMa3pD9iYOkS/wFG9wa1koM3kGO5avb/tSMf15p3d9BWEa6ORxoh6fmiC wH+O4X4S5XEFgoVamhiM0R21F8BWkArag7HEkg7D60CE6R0N2fueXr7NaQCXDi4V Xzqg06DmwqUn7DTzbN3QvgLwr556UDuZB6eyOYyeyzgOpHckClcfyAZtORyBPdk8 Ufmf4rqBPRiz+mafwEgmFxl/HH5r4srJ/6tZhyYIuZvb5GNbkY6nVgQrCaCOUVz5 eDFoDmGTIQznD3YxLLc8o1X3M/bkJGe8IN40un1wKHfow7wTvml/ChNXQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIF/XfPFE9kMTxVB9SpAuvUEEuxrMB8GA1UdIwQY MBaAFCzv3jC4pYsyKkMfCCntT/M7WqwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE9fZU1MaWxpeklxUXg4SUtlMVA4enRhckJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zM2EwZjktMTE3OC00YTZkLWI5NjQt ZmY3NjVmODUzMWQ1LzEvTE9fZU1MaWxpeklxUXg4SUtlMVA4enRhckJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zM2EwZjktMTE3OC00YTZkLWI5NjQtZmY3NjVmODUzMWQ1 LzEvTE9fZU1MaWxpeklxUXg4SUtlMVA4enRhckJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdbvT6BN +HrlY/3+DijBkBWeYdIqII03JXqGPEZP5M6aN90tiGlUdHCsSaxd9oAwgzVXOv3E UFGPJTSW7cCmKUT2JFMjWVwmN+2FW1Mh9OBELUiCBjRli7gtZD0CDlvll9aah6rI 5gPtlkwI4rK69C0fMZHs5vcAs6xFBS4fLTJaV8HlmJwgaxm6GSafOdnWRb31Kxly +MqBlxLFFYRtqFfOfLoCEp8dc7s0XgwKjfsX7VEiLxKkx90862vYpafYVZNiWqnX CMo5U/YL6Hbx1GTWYcVrqCUpjy9GhZ7enZyB1m/XUWp/o6oGws37olt3ikUN2ZCv DeRNTHXxmHA6Tg== -----END CERTIFICATE-----Generated at Mon Jan 26 12:25:33 2026 by rpki-client