This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft File: LUhz5ui-T503ZBhPE-V1D4xh9os.mft (raw, json) Hash identifier: 1YCeTH7uYVsXMURepTfOzh/afGuMIurbN/fujz3B3eo= Subject key identifier: 86:48:83:D1:A6:39:79:E8:5A:37:99:D0:39:EA:2E:F8:A3:E0:9F:DC Authority key identifier: 2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B Certificate issuer: /CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b Certificate serial: 019BF91AF9EFE619B3F70AAF5FD5D6C93203 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft Manifest number: 0DD5 Signing time: Mon 26 Jan 2026 07:00:53 +0000 Manifest this update: Mon 26 Jan 2026 07:00:53 +0000 Manifest next update: Tue 27 Jan 2026 07:00:53 +0000 Files and hashes: 1: LUhz5ui-T503ZBhPE-V1D4xh9os.crl (hash: f5FzDj+bwaGcJV27zbkRMdCkOAOUUrxgDkVLvTHM7ps=) 2: MDbmuyuCNpEGg70tUNib047bzYM.roa (hash: aRny3LR/3U87kr9DfyYwPngDlU1/98VG3ukh37CaHsI=) 3: vLaBL3FQDXYxCxa5QCEYQSKizbk.roa (hash: bow5STBCMw0saR4ctONz11ABlaiag4hx4EvsTW2vQ+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1a:f9:ef:e6:19:b3:f7:0a:af:5f:d5:d6:c9:32:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b Validity Not Before: Jan 26 07:00:53 2026 GMT Not After : Jan 27 07:00:53 2026 GMT Subject: CN=864883d1a63979e85a3799d039ea2ef8a3e09fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:69:4b:c3:99:80:e5:14:2e:e9:ca:93:bb:27: a6:1e:a2:6c:81:06:06:e7:d0:4e:10:8b:dc:3c:07: 58:4e:66:0f:a4:0c:cb:f5:41:8f:a9:96:dd:b4:c2: 3b:ee:06:42:da:a5:c7:af:64:ab:39:85:2e:65:70: be:e8:5e:07:44:29:e4:37:a4:4b:fd:4e:24:f6:15: 3f:e5:98:9b:51:2e:97:02:89:a5:eb:0a:dd:2e:50: 3c:1d:ec:73:d3:bf:c1:4c:2d:f8:17:82:a3:b6:33: f8:72:a4:f6:65:5c:19:ae:3c:1e:38:d2:7f:bb:fc: 8c:0d:1b:f0:4a:65:c7:66:69:64:7c:3a:4c:98:cf: 5d:44:14:26:1d:e8:b9:d2:61:3f:3e:9b:89:71:11: 97:f0:fb:c8:96:9b:9a:28:60:99:da:ce:32:70:e5: ce:b2:7c:90:3c:f9:62:e0:45:21:69:0f:8c:86:ec: 0a:05:32:d5:89:8b:d3:7c:67:32:1c:e1:d4:02:d0: 14:b0:ed:33:50:84:d7:b2:53:aa:86:ed:22:cd:29: c5:94:ff:b7:f2:46:23:17:f5:4b:cc:c9:a2:80:5e: d1:99:aa:f9:6b:04:41:97:24:48:a1:7c:b6:a9:b9: d9:3f:1b:cb:2c:c2:c4:93:e4:4f:e9:91:ee:5b:24: ab:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:48:83:D1:A6:39:79:E8:5A:37:99:D0:39:EA:2E:F8:A3:E0:9F:DC X509v3 Authority Key Identifier: keyid:2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:04:4f:51:b5:7d:3b:56:61:b8:bd:85:38:a6:3f:80:77:9d: 30:16:82:4d:b3:fc:8e:9e:1f:45:59:1a:7c:5f:02:b8:c4:59: 84:b0:63:f2:c8:cb:0e:27:28:29:b3:c5:0d:57:87:9a:92:6c: 2c:5e:a7:59:a0:5c:6a:5d:7c:3b:9c:3b:66:a4:01:b0:58:78: 9c:f7:d8:a3:6a:71:99:f9:81:c8:7e:41:23:4f:0d:59:30:a2: 97:48:5b:57:e5:1d:91:59:1a:af:12:de:ee:a1:16:cd:18:fd: f1:a9:3b:1b:71:c2:96:63:1c:2c:e4:c7:25:93:8f:96:1c:77: 90:11:b8:0a:67:d9:d5:95:db:fc:03:38:53:49:64:58:e9:f1: fc:4a:a6:74:36:8d:0c:f7:76:91:56:92:55:53:6c:0a:b1:98: d7:0e:04:80:57:7c:02:b8:c6:b5:cc:1d:63:d0:50:10:fa:f1: 00:be:cd:ce:b1:c8:c2:65:28:c8:8a:d3:a4:55:de:d4:41:ee: 5d:86:af:c2:58:4a:a9:80:81:34:59:de:15:ba:ad:87:fb:a9: 04:96:60:fd:4a:68:ab:c8:12:a5:d0:8a:a2:79:4a:87:89:43: 24:9d:a5:6a:a3:bb:c7:4a:15:b1:b2:24:ae:65:f2:5d:87:ed: 1b:fa:7f:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5Gvnv5hmz9wqvX9XWyTIDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNDg3M2U2ZThiZTRmOWQzNzY0MTg0ZjEzZTU3NTBmOGM2 MWY2OGIwHhcNMjYwMTI2MDcwMDUzWhcNMjYwMTI3MDcwMDUzWjAzMTEwLwYDVQQD Eyg4NjQ4ODNkMWE2Mzk3OWU4NWEzNzk5ZDAzOWVhMmVmOGEzZTA5ZmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGlLw5mA5RQu6cqTuyemHqJsgQYG 59BOEIvcPAdYTmYPpAzL9UGPqZbdtMI77gZC2qXHr2SrOYUuZXC+6F4HRCnkN6RL /U4k9hU/5ZibUS6XAoml6wrdLlA8Hexz07/BTC34F4KjtjP4cqT2ZVwZrjweONJ/ u/yMDRvwSmXHZmlkfDpMmM9dRBQmHei50mE/PpuJcRGX8PvIlpuaKGCZ2s4ycOXO snyQPPli4EUhaQ+MhuwKBTLViYvTfGcyHOHUAtAUsO0zUITXslOqhu0izSnFlP+3 8kYjF/VLzMmigF7Rmar5awRBlyRIoXy2qbnZPxvLLMLEk+RP6ZHuWySr7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZIg9GmOXnoWjeZ0DnqLvij4J/cMB8GA1UdIwQY MBaAFC1Ic+bovk+dN2QYTxPldQ+MYfaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80N2I0MTMtNjQxNi00MDJhLWI1ZTEt NjU5NmQ1MDM2MzYyLzEvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80N2I0MTMtNjQxNi00MDJhLWI1ZTEtNjU5NmQ1MDM2MzYy LzEvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQRPUbV9 O1ZhuL2FOKY/gHedMBaCTbP8jp4fRVkafF8CuMRZhLBj8sjLDicoKbPFDVeHmpJs LF6nWaBcal18O5w7ZqQBsFh4nPfYo2pxmfmByH5BI08NWTCil0hbV+UdkVkarxLe 7qEWzRj98ak7G3HClmMcLOTHJZOPlhx3kBG4CmfZ1ZXb/AM4U0lkWOnx/EqmdDaN DPd2kVaSVVNsCrGY1w4EgFd8ArjGtcwdY9BQEPrxAL7NzrHIwmUoyIrTpFXe1EHu XYavwlhKqYCBNFneFbqth/upBJZg/Upoq8gSpdCKonlKh4lDJJ2laqO7x0oVsbIk rmXyXYftG/p/tw== -----END CERTIFICATE-----Generated at Mon Jan 26 16:27:43 2026 by rpki-client