This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft File: Luu2kbJPKHklPjpqReC1xSZzsJ0.mft (raw, json) Hash identifier: Yt4V0BMja7jtvtbP+dDyxyhwxdJuVBlbDLO6RGoIv70= Subject key identifier: 8B:6E:EC:26:89:24:BE:2A:DD:C2:CF:97:F8:0A:19:58:1D:34:53:09 Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D Certificate issuer: /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d Certificate serial: 019BF5ABC2EFD8E9AEE6D5FC9399454885EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft Manifest number: 0853 Signing time: Sun 25 Jan 2026 15:00:32 +0000 Manifest this update: Sun 25 Jan 2026 15:00:32 +0000 Manifest next update: Mon 26 Jan 2026 15:00:32 +0000 Files and hashes: 1: A_Gsm_4wOb5bRF9FeIGRJivwiWk.roa (hash: WONLo4ffdGZ7F3KpQJPg5nA7ymG/aYtdHiv4YFfeuRU=) 2: FSD_xSgegT7cc3ZOOtXLgaBRjMs.roa (hash: NjZYQpqM0fGA4f7q8Gmw6Ge+hAZ+q6h+/rmaXtDWmiA=) 3: Luu2kbJPKHklPjpqReC1xSZzsJ0.crl (hash: egsrSSIcUkNcV2FP4FAC8MLuMXK7BWzOxxt/nhh+Ens=) 4: NBxLrYp1MaNdT6TxvAAYtWfhewg.roa (hash: rPCIzznV2WzQjL2Incul5yMnndBlCUTkN9KZDjWN1Xo=) 5: pbiThfAegyylM_yyLkJ568qRsIs.roa (hash: EbVW6OD32aGyMYOqnHpV6p+0BLMWbc1212XA0jq0pO8=) 6: uOdM0HaYrm9ssDjW8FvHnuA2ea0.roa (hash: 61P08wU4MuXomQI9LNTPbGuYgSvHUpRRhzxSAPpCJWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:c2:ef:d8:e9:ae:e6:d5:fc:93:99:45:48:85:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d Validity Not Before: Jan 25 15:00:32 2026 GMT Not After : Jan 26 15:00:32 2026 GMT Subject: CN=8b6eec268924be2addc2cf97f80a19581d345309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b9:ae:dd:4f:ce:b1:a4:0b:00:6f:67:ac:c0: 20:25:66:bb:fc:4b:33:66:b9:fd:19:79:50:85:7a: f4:d9:f0:ee:5a:92:ba:e3:cc:97:f1:16:6c:8d:c2: f2:a1:c0:ab:33:98:6b:81:3c:92:0b:4b:62:3b:32: d9:ed:6e:bc:ab:0a:7c:01:4d:50:1d:7e:69:c9:f5: 47:e8:58:21:33:56:71:f9:5c:99:aa:5a:34:05:87: be:1e:a1:5e:8b:c0:09:48:9b:b3:52:20:32:f9:0c: f4:48:3c:54:57:95:fb:90:75:4c:a1:61:86:31:43: e9:b8:06:60:82:9c:7c:d1:c6:e6:12:91:ac:15:df: d5:3d:9d:7f:ae:35:dc:10:96:d4:cf:f7:29:10:dc: 7c:47:ce:eb:12:65:1a:0c:d3:73:36:a4:2f:f2:47: 82:12:e7:4d:bb:9f:ed:f3:d6:17:ba:2b:d1:f4:19: 83:7e:0d:2c:72:6d:e9:e1:85:c5:25:9f:27:ae:f5: 09:7f:57:b5:47:77:34:99:d3:fa:9b:4a:35:d4:77: e9:3e:a2:98:da:07:9b:fb:57:f4:d6:5d:f7:65:f4: 83:be:79:64:52:ed:e0:32:93:7b:53:d8:dc:43:6c: 91:41:36:ec:fe:f9:14:3c:3b:fe:0a:9d:9f:6b:98: 22:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:6E:EC:26:89:24:BE:2A:DD:C2:CF:97:F8:0A:19:58:1D:34:53:09 X509v3 Authority Key Identifier: keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:99:9e:ec:87:e6:33:73:b0:96:dc:27:9b:bf:e4:11:b7:25: 53:b7:1b:5e:2e:19:4f:33:5d:1d:4d:c0:6f:3a:81:66:18:d2: bd:39:a0:d9:dd:7b:73:a8:39:e0:b0:47:fb:25:38:5a:c0:89: 33:1c:4f:85:28:c0:ca:f5:1b:87:f1:99:7a:5a:8e:ca:ee:94: e7:dd:da:2b:be:2f:7e:99:7b:02:9b:d1:6d:c9:a3:40:06:e8: 75:aa:ad:51:64:bb:ca:d4:3d:35:06:89:4a:26:c7:d4:6a:47: 5b:2a:cf:66:ad:44:25:70:e3:fc:3e:42:13:e9:50:56:ef:c5: 4d:9b:0c:ab:4e:ee:49:60:ce:0f:1c:b1:a2:f6:27:2e:f9:66: e6:97:86:58:db:2a:e6:d4:1c:22:12:b7:06:84:56:c3:fc:f6: e6:39:f7:c4:01:1b:15:15:1f:3c:c6:74:d5:1a:7b:c5:36:3a: 30:43:2c:14:66:6c:39:0f:4f:54:5e:15:3a:9d:bc:1f:c0:ca: 9a:6e:7d:e2:e0:53:4e:e4:61:b7:6a:70:73:62:d5:d1:be:91: 61:66:88:17:a0:4d:8c:40:12:b2:e9:0c:5b:61:9f:12:ee:e1: bd:7a:9d:6d:28:a9:ad:18:cc:3e:07:3e:43:d1:18:f0:8a:23: 6c:da:5c:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q8Lv2Omu5tX8k5lFSIXrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZWJiNjkxYjI0ZjI4NzkyNTNlM2E2YTQ1ZTBiNWM1MjY3 M2IwOWQwHhcNMjYwMTI1MTUwMDMyWhcNMjYwMTI2MTUwMDMyWjAzMTEwLwYDVQQD Eyg4YjZlZWMyNjg5MjRiZTJhZGRjMmNmOTdmODBhMTk1ODFkMzQ1MzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7mu3U/OsaQLAG9nrMAgJWa7/Esz Zrn9GXlQhXr02fDuWpK648yX8RZsjcLyocCrM5hrgTySC0tiOzLZ7W68qwp8AU1Q HX5pyfVH6FghM1Zx+VyZqlo0BYe+HqFei8AJSJuzUiAy+Qz0SDxUV5X7kHVMoWGG MUPpuAZggpx80cbmEpGsFd/VPZ1/rjXcEJbUz/cpENx8R87rEmUaDNNzNqQv8keC EudNu5/t89YXuivR9BmDfg0scm3p4YXFJZ8nrvUJf1e1R3c0mdP6m0o11HfpPqKY 2geb+1f01l33ZfSDvnlkUu3gMpN7U9jcQ2yRQTbs/vkUPDv+Cp2fa5giBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItu7CaJJL4q3cLPl/gKGVgdNFMJMB8GA1UdIwQY MBaAFC7rtpGyTyh5JT46akXgtcUmc7CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAt ZGEzZTExOTJjZGY2LzEvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAtZGEzZTExOTJjZGY2 LzEvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5me7Ifm M3Owltwnm7/kEbclU7cbXi4ZTzNdHU3AbzqBZhjSvTmg2d17c6g54LBH+yU4WsCJ MxxPhSjAyvUbh/GZelqOyu6U593aK74vfpl7ApvRbcmjQAbodaqtUWS7ytQ9NQaJ SibH1GpHWyrPZq1EJXDj/D5CE+lQVu/FTZsMq07uSWDODxyxovYnLvlm5peGWNsq 5tQcIhK3BoRWw/z25jn3xAEbFRUfPMZ01Rp7xTY6MEMsFGZsOQ9PVF4VOp28H8DK mm594uBTTuRht2pwc2LV0b6RYWaIF6BNjEASsukMW2GfEu7hvXqdbSiprRjMPgc+ Q9EY8IojbNpc4w== -----END CERTIFICATE-----Generated at Sun Jan 25 23:10:08 2026 by rpki-client