This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft File: LuliCJJdg2-NA30XmYCoOhsME0I.mft (raw, json) Hash identifier: FlH9/qmsjM3E1aE5gScfJh+WWochSzVJnt4cHPsUMNg= Subject key identifier: E6:CD:1B:07:09:52:C8:29:08:55:B7:56:5C:79:B2:89:CE:13:DB:93 Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42 Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342 Certificate serial: 019BF72DB31FCD90F3F41F2365278DFDC321 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 22:02:05 +0000 Manifest this update: Sun 25 Jan 2026 22:02:05 +0000 Manifest next update: Mon 26 Jan 2026 22:02:05 +0000 Files and hashes: 1: 08zs1vez5T3OxmoffP4v4xK9YRM.roa (hash: uy8J25dlMEzvaPv80sYDbmqCg6sB5jPeyau+AuQ0+dM=) 2: 1k_gsLYQzZ2auoJeJkWUzu7Ie1o.roa (hash: QopUlfrOmMWf3HhqNYkuS7EjOhnM84v1jbZHx5PFkcs=) 3: LuliCJJdg2-NA30XmYCoOhsME0I.crl (hash: vF4gon2X9NeBPWUtnqiK6Yyn2kp5h+mlzyZJxWrwmQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:b3:1f:cd:90:f3:f4:1f:23:65:27:8d:fd:c3:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342 Validity Not Before: Jan 25 22:02:05 2026 GMT Not After : Jan 26 22:02:05 2026 GMT Subject: CN=e6cd1b070952c8290855b7565c79b289ce13db93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:44:6f:9f:3a:47:c7:38:93:de:c1:ed:16:ce: 96:e3:c7:35:d0:11:52:23:66:90:fc:f1:40:8f:e2: 6c:a3:b5:18:39:3b:46:c2:63:68:12:d3:c6:61:65: 74:8e:f3:7c:90:1a:f3:e9:99:85:a2:6d:0e:a8:43: 08:d9:33:5f:a3:fc:5d:bc:a2:c9:4c:cd:6e:ed:c9: 93:90:b2:1f:cf:34:de:2e:b1:c1:76:6b:fb:4e:4b: f3:ff:2f:fc:08:56:71:98:1e:c5:47:28:46:e0:e6: 3d:17:5a:08:2c:f4:7c:e1:37:29:53:20:7f:18:1e: ea:d2:2f:af:6a:9a:fe:4c:d6:25:98:01:b3:1f:b9: c2:f5:b9:34:30:c0:69:0a:3a:03:fb:44:2f:67:c3: 4e:8f:bb:cb:c4:79:2b:61:78:0a:25:a3:de:32:fa: 0b:36:07:e3:c5:62:b4:b8:00:62:83:e8:f7:81:c3: 65:2c:24:09:af:8a:1a:90:db:d5:2c:7e:f2:6a:e8: cd:24:98:37:89:67:d4:39:b5:97:11:b9:99:6a:81: f2:f6:ec:0d:16:de:38:10:a2:74:94:00:ff:91:c3: 8b:f3:9a:60:9c:3e:e1:71:bc:09:0a:05:08:f3:60: 9d:76:f6:3d:72:68:19:ef:29:9c:95:18:9b:df:46: 4a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:CD:1B:07:09:52:C8:29:08:55:B7:56:5C:79:B2:89:CE:13:DB:93 X509v3 Authority Key Identifier: keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:4e:36:49:ba:39:0e:68:2a:a9:b5:49:1d:98:ca:e3:54:13: 2d:83:5a:d0:ce:60:20:8b:0d:06:b6:19:ae:d4:54:64:df:b4: 91:f0:e2:84:1e:53:ba:ce:c4:da:72:04:6c:92:57:c2:11:e3: 26:5c:6a:d7:7e:59:43:fe:dd:88:19:ea:6f:82:f1:f2:16:9d: b2:be:ba:84:bc:af:35:79:94:64:9d:13:04:9f:ff:68:d1:32: b0:7b:76:ac:00:e1:20:ee:9b:aa:22:67:ff:da:c7:e5:a1:cb: 7c:b7:fa:5e:52:39:5c:0f:7a:66:8a:49:79:67:10:96:47:2d: a4:4e:5d:65:25:55:5b:20:fe:45:bc:11:01:c1:77:38:a9:1c: 1e:e8:c8:82:d6:c2:a8:17:19:29:8c:99:7b:22:55:c5:bd:26: ab:9d:a4:f7:b7:7d:44:a8:f3:9d:65:3d:37:59:54:ad:29:e4: aa:80:2e:a4:44:72:91:48:07:6a:6b:26:8f:7b:99:f2:e5:61: ae:eb:fe:b8:1f:4a:ac:aa:e1:ba:73:71:9d:89:47:f9:b8:28: 81:59:ee:ed:4b:bd:58:2a:13:fb:03:75:63:9b:2b:3f:8c:fd: 71:36:d7:8b:df:3a:2b:72:34:0b:30:b0:c1:ca:ba:11:cb:23: 63:4b:f0:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LbMfzZDz9B8jZSeN/cMhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZTk2MjA4OTI1ZDgzNmY4ZDAzN2QxNzk5ODBhODNhMWIw YzEzNDIwHhcNMjYwMTI1MjIwMjA1WhcNMjYwMTI2MjIwMjA1WjAzMTEwLwYDVQQD EyhlNmNkMWIwNzA5NTJjODI5MDg1NWI3NTY1Yzc5YjI4OWNlMTNkYjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwERvnzpHxziT3sHtFs6W48c10BFS I2aQ/PFAj+Jso7UYOTtGwmNoEtPGYWV0jvN8kBrz6ZmFom0OqEMI2TNfo/xdvKLJ TM1u7cmTkLIfzzTeLrHBdmv7Tkvz/y/8CFZxmB7FRyhG4OY9F1oILPR84TcpUyB/ GB7q0i+vapr+TNYlmAGzH7nC9bk0MMBpCjoD+0QvZ8NOj7vLxHkrYXgKJaPeMvoL NgfjxWK0uABig+j3gcNlLCQJr4oakNvVLH7yaujNJJg3iWfUObWXEbmZaoHy9uwN Ft44EKJ0lAD/kcOL85pgnD7hcbwJCgUI82CddvY9cmgZ7ymclRib30ZKLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObNGwcJUsgpCFW3Vlx5sonOE9uTMB8GA1UdIwQY MBaAFC7pYgiSXYNvjQN9F5mAqDobDBNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83MWM2MDgtMWNjMi00ODk5LWE1ZmEt ODQ2YWFmMGViMWFkLzEvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83MWM2MDgtMWNjMi00ODk5LWE1ZmEtODQ2YWFmMGViMWFk LzEvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQU42Sbo5 DmgqqbVJHZjK41QTLYNa0M5gIIsNBrYZrtRUZN+0kfDihB5Tus7E2nIEbJJXwhHj Jlxq135ZQ/7diBnqb4Lx8hadsr66hLyvNXmUZJ0TBJ//aNEysHt2rADhIO6bqiJn /9rH5aHLfLf6XlI5XA96ZopJeWcQlkctpE5dZSVVWyD+RbwRAcF3OKkcHujIgtbC qBcZKYyZeyJVxb0mq52k97d9RKjznWU9N1lUrSnkqoAupERykUgHamsmj3uZ8uVh ruv+uB9KrKrhunNxnYlH+bgogVnu7Uu9WCoT+wN1Y5srP4z9cTbXi986K3I0CzCw wcq6EcsjY0vwPg== -----END CERTIFICATE-----Generated at Mon Jan 26 03:11:59 2026 by rpki-client