This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft File: LkvU7cop1Ocr6GztC3rWUsfSYck.mft (raw, json) Hash identifier: 9Wx8GZ1pXQcQecjrMH3/FkR4GRPVDc1vkdJZgfVJYFo= Subject key identifier: FA:3A:7E:81:69:97:32:01:83:F9:D2:23:D7:BE:44:07:76:39:18:0D Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9 Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9 Certificate serial: 019BF318E7DC69169879E4C6E5C2E26A2B13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft Manifest number: 17EF Signing time: Sun 25 Jan 2026 03:00:54 +0000 Manifest this update: Sun 25 Jan 2026 03:00:54 +0000 Manifest next update: Mon 26 Jan 2026 03:00:54 +0000 Files and hashes: 1: LkvU7cop1Ocr6GztC3rWUsfSYck.crl (hash: ZxLZ4Rgt9RuZxiK3S1tb6sWToyR/TWmPUaIUppmHLis=) 2: csavTgWbEnAnj2FE7wmf-6_xsDo.roa (hash: NZc1W28oYgzZGInvZ1xUa3lyDRZmfm8SXHqRaJX4eiA=) 3: kciLrIkaNokpbwgdgmqHhosEQAA.roa (hash: lRqsBb/ckM2u20pZEo0aziVALwxR00NbO8g2ocSg11k=) 4: rDqpWECW0pza-2J9_z5v1QcmMYM.roa (hash: BlCKHTq9I2NrgHH11AE9oJ3PcBo5UMsZimSMaB2XjYs=) 5: tGV4YPNnQsDRzdIlgaAMjflbyZc.roa (hash: mek/U6Kf3m68n3h5nQGxZ1IWYVE3zIoWHPx7TmOAqIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:18:e7:dc:69:16:98:79:e4:c6:e5:c2:e2:6a:2b:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9 Validity Not Before: Jan 25 03:00:54 2026 GMT Not After : Jan 26 03:00:54 2026 GMT Subject: CN=fa3a7e816997320183f9d223d7be44077639180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2a:89:ca:64:a7:1d:dc:80:da:f7:eb:e5:7d: e3:ea:5e:ae:6f:ce:19:3b:94:81:1b:17:8e:ef:71: 26:cc:c9:4a:ca:f3:b2:77:fd:8e:c7:30:a2:64:33: e6:52:db:1f:0c:2e:04:4c:49:68:2a:57:db:1e:11: 32:2c:26:d6:52:1d:aa:b7:5f:c4:2e:ea:53:de:87: c4:7a:6a:e0:05:1e:46:d5:17:36:9c:d5:83:a3:7b: 3f:ca:05:9a:64:1c:a0:d4:13:09:49:dc:58:3d:64: 4f:d5:e9:51:f6:c7:98:2e:8c:51:a9:b5:79:88:dc: 46:e3:60:bd:8e:dc:61:ee:90:f8:09:af:5c:78:78: af:f3:0b:e0:ae:47:96:c2:05:5e:2d:4b:b8:c1:65: ff:a6:61:1b:b1:b3:35:69:99:b7:47:7a:a1:2b:a6: f1:1d:ca:ca:98:18:8e:8f:f5:bc:69:08:41:ad:84: 66:62:95:3f:e1:a5:c9:c6:c7:f2:ad:14:c6:db:ff: 40:e1:c5:7d:54:3d:5b:66:b2:b7:e9:b6:2e:65:01: 15:78:c3:99:2c:f4:f9:76:1a:95:b6:05:3d:5d:49: bc:5b:c6:39:f3:8f:f1:71:e0:98:61:6a:23:7a:4f: 73:89:ca:72:c7:35:db:7b:20:9f:a7:2d:eb:e6:95: ad:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3A:7E:81:69:97:32:01:83:F9:D2:23:D7:BE:44:07:76:39:18:0D X509v3 Authority Key Identifier: keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:a9:49:11:1e:a2:5a:e5:b1:76:07:a7:21:ad:81:3e:26:de: 5d:23:e2:f3:e2:51:16:46:22:ae:7d:ec:89:69:ed:81:33:7a: 19:00:7f:91:b7:ac:e4:12:2b:7d:95:7f:5a:f2:9f:07:cc:43: fe:5e:17:89:1e:bd:1d:e5:4b:88:d6:e7:5c:b8:f0:b0:4c:a4: c8:5d:d5:32:44:1d:74:c3:9c:ca:34:f5:cf:4c:90:cb:87:50: 0c:ff:b5:83:f3:cf:e5:38:f8:79:f1:3d:a8:2e:fd:ba:5e:90: 3e:7c:44:0f:a1:88:a9:5d:42:53:5d:b4:9a:b8:c8:8e:3f:6a: 86:b3:30:b6:83:cc:44:13:28:2c:22:6f:59:41:c1:56:e7:b1: a3:b0:51:49:02:7d:68:aa:9d:23:cb:99:86:40:3e:98:ca:b0: f8:12:34:cc:a3:e2:06:00:d1:62:d9:5f:72:54:71:7f:b4:13: c7:47:64:f7:3c:04:40:0e:c9:9e:ff:4c:de:0f:5d:50:f7:d3: 1f:97:13:5c:44:e8:67:28:3b:85:db:d5:90:99:25:79:c4:5a: 00:77:b5:3c:77:9a:d5:00:e4:cf:ee:94:c3:a9:7c:b6:14:fc: 1a:ff:34:42:96:97:38:7c:67:6c:39:25:d0:d1:e3:0e:f5:40: 2a:47:31:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGOfcaRaYeeTG5cLiaisTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNGJkNGVkY2EyOWQ0ZTcyYmU4NmNlZDBiN2FkNjUyYzdk MjYxYzkwHhcNMjYwMTI1MDMwMDU0WhcNMjYwMTI2MDMwMDU0WjAzMTEwLwYDVQQD EyhmYTNhN2U4MTY5OTczMjAxODNmOWQyMjNkN2JlNDQwNzc2MzkxODBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliqJymSnHdyA2vfr5X3j6l6ub84Z O5SBGxeO73EmzMlKyvOyd/2OxzCiZDPmUtsfDC4ETEloKlfbHhEyLCbWUh2qt1/E LupT3ofEemrgBR5G1Rc2nNWDo3s/ygWaZByg1BMJSdxYPWRP1elR9seYLoxRqbV5 iNxG42C9jtxh7pD4Ca9ceHiv8wvgrkeWwgVeLUu4wWX/pmEbsbM1aZm3R3qhK6bx HcrKmBiOj/W8aQhBrYRmYpU/4aXJxsfyrRTG2/9A4cV9VD1bZrK36bYuZQEVeMOZ LPT5dhqVtgU9XUm8W8Y584/xceCYYWojek9zicpyxzXbeyCfpy3r5pWt/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPo6foFplzIBg/nSI9e+RAd2ORgNMB8GA1UdIwQY MBaAFC5L1O3KKdTnK+hs7Qt61lLH0mHJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGt2VTdjb3AxT2NyNkd6dEMzcldVc2ZTWWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hNTNiYjYtNjZjMC00ODYxLWIyODgt MmE2MzcyZTA1NGQyLzEvTGt2VTdjb3AxT2NyNkd6dEMzcldVc2ZTWWNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9hNTNiYjYtNjZjMC00ODYxLWIyODgtMmE2MzcyZTA1NGQy LzEvTGt2VTdjb3AxT2NyNkd6dEMzcldVc2ZTWWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUalJER6i WuWxdgenIa2BPibeXSPi8+JRFkYirn3siWntgTN6GQB/kbes5BIrfZV/WvKfB8xD /l4XiR69HeVLiNbnXLjwsEykyF3VMkQddMOcyjT1z0yQy4dQDP+1g/PP5Tj4efE9 qC79ul6QPnxED6GIqV1CU120mrjIjj9qhrMwtoPMRBMoLCJvWUHBVuexo7BRSQJ9 aKqdI8uZhkA+mMqw+BI0zKPiBgDRYtlfclRxf7QTx0dk9zwEQA7Jnv9M3g9dUPfT H5cTXEToZyg7hdvVkJklecRaAHe1PHea1QDkz+6Uw6l8thT8Gv80QpaXOHxnbDkl 0NHjDvVAKkcxEg== -----END CERTIFICATE-----Generated at Sun Jan 25 07:51:32 2026 by rpki-client