This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft File: LxiqH1XWNcliBMp5qCmT-87BUSw.mft (raw, json) Hash identifier: zypL722czwXnJszZqGgtp8I38udg9oMGltEVgPDu7dE= Subject key identifier: 03:E8:BF:04:5C:C5:8E:E4:C2:60:5D:4C:11:27:3F:49:EF:6D:D6:0D Authority key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C Certificate issuer: /CN=2f18aa1f55d635c96204ca79a82993fbcec1512c Certificate serial: 019BF5075EC6C3D2871A4260FE716A94A0ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 12:00:59 +0000 Manifest this update: Sun 25 Jan 2026 12:00:59 +0000 Manifest next update: Mon 26 Jan 2026 12:00:59 +0000 Files and hashes: 1: LgLEIgozDh6ZtieL7JWKGQ61yzE.roa (hash: BgRl5tIbVsSwLTDHr7kVBjnhqq09mtoEkAcyM+VA2Ws=) 2: LxiqH1XWNcliBMp5qCmT-87BUSw.crl (hash: s7uRQjiJc46ZFknsCRzB5h80P3E2F0MrjQVab84ByIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:5e:c6:c3:d2:87:1a:42:60:fe:71:6a:94:a0:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c Validity Not Before: Jan 25 12:00:59 2026 GMT Not After : Jan 26 12:00:59 2026 GMT Subject: CN=03e8bf045cc58ee4c2605d4c11273f49ef6dd60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5e:74:62:42:d4:c5:f9:4d:19:46:7b:b5:c1: e3:3c:cd:70:6b:a4:fa:4c:06:53:29:b3:c7:77:66: 22:87:f9:56:07:8a:bc:85:85:50:c0:a3:d4:ef:ba: 36:71:46:40:f3:d9:ba:0d:91:2c:e6:0f:dd:84:af: 00:aa:49:4b:7d:35:12:87:1a:a7:54:ba:40:d4:7f: 5d:48:6c:fe:4a:05:c8:a0:81:3c:26:19:fa:ac:5d: 28:f3:6e:18:0d:70:ce:f3:c0:5c:a9:cd:5d:f3:df: 42:51:ae:6b:94:66:ce:f5:01:ba:53:89:99:41:93: 6e:16:5e:a4:f2:66:97:dd:f9:f4:80:ee:14:7a:fd: 9f:62:27:7d:1b:c8:e4:e3:ab:eb:cf:a1:a6:77:30: 15:80:6c:df:17:8d:46:3b:92:af:37:5d:11:fe:59: 0e:09:0b:86:98:60:d8:30:c3:18:db:60:fd:2a:4a: ac:4a:c9:f5:6f:95:91:5b:94:16:f9:d4:66:0f:93: 84:26:59:77:ee:3d:64:6c:42:9e:70:8b:34:67:c0: bf:82:f1:4d:10:1a:84:3f:b2:3d:1c:fd:43:91:ab: 8e:5c:0a:45:b7:5b:80:8e:ac:b9:1e:33:ce:25:82: b5:fe:82:84:47:83:3d:90:4c:7d:61:6e:79:d5:d3: d0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E8:BF:04:5C:C5:8E:E4:C2:60:5D:4C:11:27:3F:49:EF:6D:D6:0D X509v3 Authority Key Identifier: keyid:2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:1a:72:9a:a1:71:91:89:11:71:d2:a2:ee:90:23:48:78:cf: e4:9e:05:bc:00:00:96:81:9d:cb:6f:44:3a:02:ba:cd:62:07: 9d:9f:06:f7:7f:6c:8f:81:74:71:0d:d0:17:a5:fc:1d:36:3b: 45:4d:89:72:84:ae:ba:d3:29:47:c3:6d:cb:51:c5:ab:05:71: f2:1a:86:f6:16:2c:ea:c3:f0:0a:3b:8a:46:b5:77:2b:13:38: 24:eb:c9:9d:66:09:c5:71:0a:23:00:7a:86:07:42:c8:f4:bd: c4:52:59:62:b6:6e:b7:85:2e:0a:70:3e:c8:5a:27:81:d0:e2: e8:dc:41:48:28:43:de:67:d4:b1:8e:05:73:a7:45:e8:72:c1: 6f:15:5d:f8:a9:8d:aa:d8:db:37:11:58:c0:ef:38:b1:49:b4: ff:98:8e:b2:81:c2:d6:94:ce:3b:1b:2a:40:40:75:ae:74:4a: 67:a9:a3:77:98:2e:0c:71:73:a3:4c:31:fa:96:24:ed:8c:c9: d6:89:d3:ea:e2:86:a9:14:6f:31:a3:27:a9:19:56:35:1a:fe: 00:ea:03:f3:ca:ba:35:3c:84:70:d1:b5:99:22:fe:50:f2:14: 25:c8:a1:22:6f:8f:38:e8:fd:e7:3c:3c:7c:1e:ab:0f:c4:57: d1:ea:eb:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B17Gw9KHGkJg/nFqlKDtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMThhYTFmNTVkNjM1Yzk2MjA0Y2E3OWE4Mjk5M2ZiY2Vj MTUxMmMwHhcNMjYwMTI1MTIwMDU5WhcNMjYwMTI2MTIwMDU5WjAzMTEwLwYDVQQD EygwM2U4YmYwNDVjYzU4ZWU0YzI2MDVkNGMxMTI3M2Y0OWVmNmRkNjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV50YkLUxflNGUZ7tcHjPM1wa6T6 TAZTKbPHd2Yih/lWB4q8hYVQwKPU77o2cUZA89m6DZEs5g/dhK8AqklLfTUShxqn VLpA1H9dSGz+SgXIoIE8Jhn6rF0o824YDXDO88Bcqc1d899CUa5rlGbO9QG6U4mZ QZNuFl6k8maX3fn0gO4Uev2fYid9G8jk46vrz6GmdzAVgGzfF41GO5KvN10R/lkO CQuGmGDYMMMY22D9KkqsSsn1b5WRW5QW+dRmD5OEJll37j1kbEKecIs0Z8C/gvFN EBqEP7I9HP1DkauOXApFt1uAjqy5HjPOJYK1/oKER4M9kEx9YW551dPQVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPovwRcxY7kwmBdTBEnP0nvbdYNMB8GA1UdIwQY MBaAFC8Yqh9V1jXJYgTKeagpk/vOwVEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHhpcUgxWFdOY2xpQk1wNXFDbVQtODdCVVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81MmU5OTctNmQ5YS00NWFlLWE3YzIt MGQyMDVmYjFhZDA1LzEvTHhpcUgxWFdOY2xpQk1wNXFDbVQtODdCVVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81MmU5OTctNmQ5YS00NWFlLWE3YzItMGQyMDVmYjFhZDA1 LzEvTHhpcUgxWFdOY2xpQk1wNXFDbVQtODdCVVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFhpymqFx kYkRcdKi7pAjSHjP5J4FvAAAloGdy29EOgK6zWIHnZ8G939sj4F0cQ3QF6X8HTY7 RU2JcoSuutMpR8Nty1HFqwVx8hqG9hYs6sPwCjuKRrV3KxM4JOvJnWYJxXEKIwB6 hgdCyPS9xFJZYrZut4UuCnA+yFongdDi6NxBSChD3mfUsY4Fc6dF6HLBbxVd+KmN qtjbNxFYwO84sUm0/5iOsoHC1pTOOxsqQEB1rnRKZ6mjd5guDHFzo0wx+pYk7YzJ 1onT6uKGqRRvMaMnqRlWNRr+AOoD88q6NTyEcNG1mSL+UPIUJcihIm+POOj95zw8 fB6rD8RX0err/Q== -----END CERTIFICATE-----Generated at Sun Jan 25 17:51:47 2026 by rpki-client