This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft File: Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft (raw, json) Hash identifier: UinA+mU/Hu2Bb3Bn+sYY1c3tF1cfp37FjqFFWg4EnLs= Subject key identifier: E8:4F:71:42:2F:51:18:06:4E:12:E6:6F:06:25:03:DE:53:61:45:AF Authority key identifier: 2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07 Certificate issuer: /CN=2eeec5231d212b310579d78fc41479ca6ec2aa07 Certificate serial: 019BF3F53839B10BB34705A0544759E8AF20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 07:01:32 +0000 Manifest this update: Sun 25 Jan 2026 07:01:32 +0000 Manifest next update: Mon 26 Jan 2026 07:01:32 +0000 Files and hashes: 1: Bb9QyEQzV03EaTR7wLylrCdBBvA.roa (hash: ajzUK2Os2Vg3pTgwsENMtTaJGe2FDCIo+i+dlQF9074=) 2: Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl (hash: +S6/twEOKroQh+pp79H6ASPT4rOw8rlRhblIke1VYSI=) 3: NhO_IDsun1DhSJC0nOwiJzZ6IyY.roa (hash: UE/nLkMq9esL2M39yDKTuiYBOgv6z8tQHjDR2GXbU1s=) 4: pR8icRPbtmxZyLYy7ClhNlyoP3I.roa (hash: hJET2JInI9K0Hd2BzAqq/nSPxKB057Gd1PzyTDZKZpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f5:38:39:b1:0b:b3:47:05:a0:54:47:59:e8:af:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2eeec5231d212b310579d78fc41479ca6ec2aa07 Validity Not Before: Jan 25 07:01:32 2026 GMT Not After : Jan 26 07:01:32 2026 GMT Subject: CN=e84f71422f5118064e12e66f062503de536145af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0f:59:6f:d5:4e:d1:be:11:b3:31:7d:98:18: e6:04:7d:63:e2:37:5c:49:e4:d0:13:94:68:78:a5: 82:9e:47:13:6c:60:1e:2e:4c:0a:9e:dd:a7:7b:bc: a9:3b:07:02:d2:eb:37:43:7e:66:8b:95:e9:0c:4f: cd:27:65:74:40:ce:61:7a:f1:42:de:94:64:f1:76: 4c:1a:7c:ed:28:aa:2a:b1:07:f3:0e:bc:47:9c:00: 71:48:09:5a:fb:eb:9f:84:25:ba:9a:e2:33:13:93: d8:ff:06:4b:10:c4:e6:ac:bc:91:99:d4:b2:c1:06: 86:31:83:c9:ba:3c:c6:cf:1f:e9:57:57:cf:54:32: ad:51:e6:f3:f2:97:1a:d3:18:02:33:15:77:8d:b4: c9:02:4f:97:dc:a5:07:10:7b:95:20:e1:4c:03:58: 7b:e1:2d:18:e3:d8:5a:8f:53:41:79:2c:03:86:1b: 99:d9:1a:2b:2c:07:13:02:6a:00:02:61:a0:37:29: 04:ee:e1:52:db:f5:65:6d:1b:ad:01:4b:12:7b:d3: 50:b4:44:eb:a2:a8:d4:37:af:b5:61:f7:04:7b:ab: 53:8c:8e:9f:b5:66:bc:b5:99:ec:72:2d:a8:de:b0: 8b:05:ac:34:0b:5a:a0:08:c5:96:8a:e1:f8:6d:c5: 77:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:4F:71:42:2F:51:18:06:4E:12:E6:6F:06:25:03:DE:53:61:45:AF X509v3 Authority Key Identifier: keyid:2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:c6:1d:af:d6:6f:2f:6c:9b:a1:fa:f6:75:27:fa:1d:a7:d1: 34:8a:f2:82:b1:b3:5a:db:f1:34:28:e9:b3:96:c3:e6:a5:00: 0e:48:60:c5:19:78:9c:13:6e:4c:79:bf:2d:2d:e5:7e:68:57: 92:68:1e:52:06:da:a3:0b:f6:31:e3:94:5b:9f:bc:8b:b1:6e: 1f:86:21:c7:e7:3b:63:ff:e8:eb:51:43:f4:6a:80:40:c1:2e: 24:a3:96:6e:f3:1b:99:2e:0f:b7:92:ab:94:c9:83:9f:f7:98: b8:8a:e5:f1:dc:5a:d8:77:8b:6f:2e:ad:fd:0c:fd:13:7e:7b: bf:7e:df:79:94:3d:2a:e0:1c:0e:c1:d8:e1:c0:00:af:3f:31: c0:a3:cf:5a:19:73:c4:75:85:e0:84:db:35:09:1c:a0:ca:4f: e3:e5:df:42:a0:e2:c2:80:43:cc:22:fe:67:79:40:95:7a:29: 00:50:71:de:2f:5d:e4:3b:c3:a6:ee:95:ae:de:77:7b:4b:81: cd:ca:a1:e4:c9:f2:02:b4:cb:9f:5b:80:36:ae:93:1d:f0:45: 14:95:b8:e4:87:0f:1a:66:43:e7:2b:36:97:db:6e:c3:72:44: fd:8b:b7:36:f5:42:99:31:74:51:14:98:44:ec:e7:1d:85:9f: 16:8a:42:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9Tg5sQuzRwWgVEdZ6K8gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZWVjNTIzMWQyMTJiMzEwNTc5ZDc4ZmM0MTQ3OWNhNmVj MmFhMDcwHhcNMjYwMTI1MDcwMTMyWhcNMjYwMTI2MDcwMTMyWjAzMTEwLwYDVQQD EyhlODRmNzE0MjJmNTExODA2NGUxMmU2NmYwNjI1MDNkZTUzNjE0NWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA9Zb9VO0b4RszF9mBjmBH1j4jdc SeTQE5RoeKWCnkcTbGAeLkwKnt2ne7ypOwcC0us3Q35mi5XpDE/NJ2V0QM5hevFC 3pRk8XZMGnztKKoqsQfzDrxHnABxSAla++ufhCW6muIzE5PY/wZLEMTmrLyRmdSy wQaGMYPJujzGzx/pV1fPVDKtUebz8pca0xgCMxV3jbTJAk+X3KUHEHuVIOFMA1h7 4S0Y49haj1NBeSwDhhuZ2RorLAcTAmoAAmGgNykE7uFS2/VlbRutAUsSe9NQtETr oqjUN6+1YfcEe6tTjI6ftWa8tZnsci2o3rCLBaw0C1qgCMWWiuH4bcV3dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhPcUIvURgGThLmbwYlA95TYUWvMB8GA1UdIwQY MBaAFC7uxSMdISsxBXnXj8QUecpuwqoHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHU3Rkl4MGhLekVGZWRlUHhCUjV5bTdDcWdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84Yjg1NmEtMzhhZS00Y2ZiLTgxZDIt MjcxYTk1NzZlYWU3LzEvTHU3Rkl4MGhLekVGZWRlUHhCUjV5bTdDcWdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84Yjg1NmEtMzhhZS00Y2ZiLTgxZDItMjcxYTk1NzZlYWU3 LzEvTHU3Rkl4MGhLekVGZWRlUHhCUjV5bTdDcWdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZMYdr9Zv L2ybofr2dSf6HafRNIrygrGzWtvxNCjps5bD5qUADkhgxRl4nBNuTHm/LS3lfmhX kmgeUgbaowv2MeOUW5+8i7FuH4Yhx+c7Y//o61FD9GqAQMEuJKOWbvMbmS4Pt5Kr lMmDn/eYuIrl8dxa2HeLby6t/Qz9E357v37feZQ9KuAcDsHY4cAArz8xwKPPWhlz xHWF4ITbNQkcoMpP4+XfQqDiwoBDzCL+Z3lAlXopAFBx3i9d5DvDpu6Vrt53e0uB zcqh5MnyArTLn1uANq6THfBFFJW45IcPGmZD5ys2l9tuw3JE/Yu3NvVCmTF0URSY ROznHYWfFopC3w== -----END CERTIFICATE-----Generated at Sun Jan 25 15:22:51 2026 by rpki-client