This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft File: LubVYKCKAT8_4OZtra9v0Cvq9D8.mft (raw, json) Hash identifier: agJrZvba69IwLdDl1wqbAR3n6066jHDS67JUFjGVFb8= Subject key identifier: 0E:34:2F:A8:6D:FC:9E:47:39:99:74:44:49:50:82:7F:E3:15:F3:92 Authority key identifier: 2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F Certificate issuer: /CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f Certificate serial: 019BF6F55FD3FFFFD6AA2CADC8135BEA235E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft Manifest number: 1825 Signing time: Sun 25 Jan 2026 21:00:34 +0000 Manifest this update: Sun 25 Jan 2026 21:00:34 +0000 Manifest next update: Mon 26 Jan 2026 21:00:34 +0000 Files and hashes: 1: GVmTcHNEbySWO7WrdP4mr8RnpuA.roa (hash: KF2454R21pC10ppMz3hBXK/oA3TnttDudSwSnWRb9YE=) 2: LubVYKCKAT8_4OZtra9v0Cvq9D8.crl (hash: 890OUQbLTGynVu6c4gSWJEfT4A9KdWoZenIP8XLK5sM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:5f:d3:ff:ff:d6:aa:2c:ad:c8:13:5b:ea:23:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f Validity Not Before: Jan 25 21:00:34 2026 GMT Not After : Jan 26 21:00:34 2026 GMT Subject: CN=0e342fa86dfc9e47399974444950827fe315f392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0c:21:7d:b5:f8:7d:28:f6:c9:87:e2:25:2b: 53:fd:f8:dd:d3:14:d9:a3:86:d7:28:5a:6a:65:14: 67:c6:74:37:49:39:25:71:44:33:24:be:7e:75:bc: 0c:dc:0d:04:94:85:4e:53:28:77:75:bd:c5:35:ff: 42:08:d7:09:27:b2:e5:2d:6c:95:91:18:a9:e8:cd: aa:6c:b6:59:c7:bb:bd:02:34:e5:04:aa:1b:73:99: 2c:c5:17:89:ed:7c:16:3e:b7:67:28:0a:b4:40:a0: 07:37:b4:e1:a6:26:84:92:68:fa:ea:3c:bc:64:d6: ca:0d:ac:08:1c:a1:0e:b0:ea:68:8a:80:10:a1:ab: fc:26:16:84:9c:3a:94:de:6b:f2:00:47:3a:7a:d4: 0a:ff:82:4d:9e:4a:4a:a7:0f:00:33:4a:c8:60:22: cd:d6:dc:ba:44:3e:dc:84:98:fd:9b:d7:09:e0:b1: 8d:ae:83:63:a8:3f:d1:59:e4:ae:a5:bf:6f:d9:a2: 7b:fc:5b:b5:19:04:49:44:b4:60:89:e7:ad:ec:16: 96:f9:ea:f9:c4:b3:aa:5e:e8:b7:81:5d:26:cf:0e: 95:5c:fe:7d:a9:a7:82:15:95:bb:0d:72:58:6c:d7: ac:4f:81:38:c8:87:7d:32:a3:8d:50:c3:4c:df:a0: 4f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:34:2F:A8:6D:FC:9E:47:39:99:74:44:49:50:82:7F:E3:15:F3:92 X509v3 Authority Key Identifier: keyid:2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ff:a1:51:a4:2c:6a:74:3a:58:42:00:09:4f:14:2b:da:cc: 4c:99:24:36:43:ed:d9:36:ab:f9:be:8c:0d:ea:38:9a:9a:79: a8:60:c1:d6:5e:ee:d5:45:9d:b4:43:cb:dd:0a:07:fc:4b:3c: 3b:ff:d0:ea:b0:b2:85:e4:37:6a:9a:c9:07:d8:b5:c6:6c:05: a1:f9:ed:e5:5b:fb:fc:de:e5:17:0a:3e:fa:ea:cf:9d:be:10: b2:6a:f5:1b:e4:dd:a2:94:d9:b7:eb:cb:10:4c:29:39:b8:08: 56:dc:39:fa:df:bb:f4:11:57:b3:c8:62:cc:de:a4:d7:6a:23: 6d:24:0a:b7:04:0d:aa:25:4f:17:78:6f:28:ea:93:7b:03:97: 26:6b:5d:f2:dd:a1:61:5b:09:a8:ad:3d:a4:b1:3b:93:fa:72: ff:39:1c:33:aa:cc:8a:57:8e:2b:4b:83:31:28:1a:f1:86:78: 19:7b:9e:f4:85:25:2a:c1:01:78:fc:7b:5d:7f:f7:7a:27:04: 9b:0b:0f:65:68:08:0a:f6:2c:33:ec:46:ec:fd:1d:82:e0:b6: d5:93:06:28:b3:eb:5f:48:f2:d2:00:ad:cd:7e:3e:fd:e4:4e: e7:76:41:bc:11:24:83:ae:d2:43:5b:5c:e7:ca:2f:de:3e:4f: bf:c5:af:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29V/T///WqiytyBNb6iNeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZTZkNTYwYTA4YTAxM2YzZmUwZTY2ZGFkYWY2ZmQwMmJl YWY0M2YwHhcNMjYwMTI1MjEwMDM0WhcNMjYwMTI2MjEwMDM0WjAzMTEwLwYDVQQD EygwZTM0MmZhODZkZmM5ZTQ3Mzk5OTc0NDQ0OTUwODI3ZmUzMTVmMzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwwhfbX4fSj2yYfiJStT/fjd0xTZ o4bXKFpqZRRnxnQ3STklcUQzJL5+dbwM3A0ElIVOUyh3db3FNf9CCNcJJ7LlLWyV kRip6M2qbLZZx7u9AjTlBKobc5ksxReJ7XwWPrdnKAq0QKAHN7ThpiaEkmj66jy8 ZNbKDawIHKEOsOpoioAQoav8JhaEnDqU3mvyAEc6etQK/4JNnkpKpw8AM0rIYCLN 1ty6RD7chJj9m9cJ4LGNroNjqD/RWeSupb9v2aJ7/Fu1GQRJRLRgieet7BaW+er5 xLOqXui3gV0mzw6VXP59qaeCFZW7DXJYbNesT4E4yId9MqONUMNM36BP/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA40L6ht/J5HOZl0RElQgn/jFfOSMB8GA1UdIwQY MBaAFC7m1WCgigE/P+Dmba2vb9Ar6vQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHViVllLQ0tBVDhfNE9adHJhOXYwQ3ZxOUQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jMDBhNWItNmE1OS00MWRkLWIxM2It NzM0OTVmYzA4ZmM0LzEvTHViVllLQ0tBVDhfNE9adHJhOXYwQ3ZxOUQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9jMDBhNWItNmE1OS00MWRkLWIxM2ItNzM0OTVmYzA4ZmM0 LzEvTHViVllLQ0tBVDhfNE9adHJhOXYwQ3ZxOUQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/+hUaQs anQ6WEIACU8UK9rMTJkkNkPt2Tar+b6MDeo4mpp5qGDB1l7u1UWdtEPL3QoH/Es8 O//Q6rCyheQ3aprJB9i1xmwFofnt5Vv7/N7lFwo++urPnb4Qsmr1G+TdopTZt+vL EEwpObgIVtw5+t+79BFXs8hizN6k12ojbSQKtwQNqiVPF3hvKOqTewOXJmtd8t2h YVsJqK09pLE7k/py/zkcM6rMileOK0uDMSga8YZ4GXue9IUlKsEBePx7XX/3eicE mwsPZWgICvYsM+xG7P0dguC21ZMGKLPrX0jy0gCtzX4+/eRO53ZBvBEkg67SQ1tc 58ov3j5Pv8WvgQ== -----END CERTIFICATE-----Generated at Mon Jan 26 02:21:34 2026 by rpki-client