This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft File: lxru6oeY927JpDTnVjfs2IEJLsI.mft (raw, json) Hash identifier: nBEmPZNuO7+a+FO7Z0385UuoffoY8hDjNopvG9IljQE= Subject key identifier: CD:BF:32:ED:71:23:E3:40:C5:D3:8E:8E:AA:0C:FD:73:5C:87:38:22 Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2 Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2 Certificate serial: 019BF83F2ACDEF5987D31716589B60E379C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 03:00:47 +0000 Manifest this update: Mon 26 Jan 2026 03:00:47 +0000 Manifest next update: Tue 27 Jan 2026 03:00:47 +0000 Files and hashes: 1: 9g8xNFb2G40vpUgQ83M1qATo9IM.roa (hash: XlOOaS5ddXCcXrWbzYLtTuliD0nsTkmll8658pyGZu4=) 2: cJ3CSy6b-K7_SvDOoh-SHmO50AI.roa (hash: ima6XXFyVR9RW0ytt/Ct7dNcbu+58VazOZOWGhgX3kc=) 3: jM-7nkDS5qjlb3w33JvghnsyuJw.roa (hash: d7SlxGUeBLsKibMsNC4PiGRQBSGoyvgsjw7sV20/+lM=) 4: lxru6oeY927JpDTnVjfs2IEJLsI.crl (hash: LFuuw0vpvT8KwmTKksnOSGuQNJJdghbFRFnvxJZDzUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:2a:cd:ef:59:87:d3:17:16:58:9b:60:e3:79:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2 Validity Not Before: Jan 26 03:00:47 2026 GMT Not After : Jan 27 03:00:47 2026 GMT Subject: CN=cdbf32ed7123e340c5d38e8eaa0cfd735c873822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:85:b1:10:13:da:60:17:c9:aa:a8:b0:64:fb: 75:d6:7d:ca:3e:de:ab:de:e5:00:c5:74:86:a4:c8: 78:13:92:c9:42:41:4c:06:dc:7b:25:1c:30:a1:c9: 1d:55:cb:37:55:cd:d2:e9:b6:d2:bc:85:ac:74:db: 63:56:89:fb:c8:bd:39:d3:a2:52:1c:61:95:f6:8a: 28:33:37:56:f3:cd:54:39:23:5f:fe:fa:14:97:50: 44:31:c0:c5:af:5b:9a:e7:05:84:9e:6e:8c:b9:4b: 33:0e:c3:54:c2:d3:de:f5:fb:c7:85:a0:65:13:10: 94:38:2c:f9:29:c3:ac:33:fb:75:6f:74:d9:c0:1c: 58:59:94:50:ab:67:75:7e:32:9b:02:a6:99:3b:2b: 90:9b:08:70:9d:3a:c0:87:f4:55:a2:54:c4:1c:a4: 18:1d:f8:ef:5e:3c:6e:02:9e:5d:47:40:d0:b5:3e: 89:23:85:43:09:ba:97:94:cb:1f:0f:32:68:b0:16: 35:15:59:a1:4a:c7:93:a2:d7:4c:14:bc:e1:78:26: b8:85:50:83:4d:94:53:db:e4:ea:88:54:48:22:d1: ce:de:bc:71:b7:88:8f:9d:e2:de:3e:c7:c1:5b:88: a3:a5:1c:18:dd:be:38:e7:11:3f:8e:4e:3c:2e:a3: 7b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:BF:32:ED:71:23:E3:40:C5:D3:8E:8E:AA:0C:FD:73:5C:87:38:22 X509v3 Authority Key Identifier: keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:15:19:f7:31:6e:7b:4d:03:13:1f:9f:c6:3a:59:5f:24:90: 6f:d4:7e:91:54:50:ab:2e:65:9e:84:69:fa:28:63:93:78:fa: bc:43:95:f4:45:58:d3:a1:b5:f4:ee:8b:62:e9:74:74:00:7e: 5f:7b:18:b2:53:50:fa:65:d8:0c:a3:ba:21:07:8f:05:17:98: 27:38:66:da:f8:82:85:68:86:62:28:62:74:92:fa:9b:ad:6e: f9:85:6b:c2:3f:0b:b6:df:6c:42:99:55:34:84:ed:be:c2:5e: 55:b3:12:30:34:db:1f:7e:d6:60:55:41:9e:44:b3:22:a1:2e: a2:67:d1:ff:eb:e6:8d:70:c2:0a:47:d0:67:cd:c7:af:49:9a: dc:c6:ca:04:98:8c:ea:b2:cd:dc:db:a9:78:49:d5:c5:d5:66: 44:77:d5:20:95:cf:35:cf:83:00:21:6c:3d:3a:29:62:53:bc: 4c:58:ef:3a:44:9b:89:41:20:2b:b8:cc:d0:e6:a2:cf:09:6e: a8:d6:70:a2:7c:07:f7:c8:2b:c7:c1:33:b6:73:0b:9d:ed:73: 0b:51:63:97:be:60:50:c4:ec:b9:ac:f3:a4:65:69:f4:7b:a4: 9f:ed:5c:86:92:91:f8:68:3a:15:b2:4c:ea:33:57:b3:cb:3b: cc:ab:18:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4PyrN71mH0xcWWJtg43nHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MWFlZWVhODc5OGY3NmVjOWE0MzRlNzU2MzdlY2Q4ODEw OTJlYzIwHhcNMjYwMTI2MDMwMDQ3WhcNMjYwMTI3MDMwMDQ3WjAzMTEwLwYDVQQD EyhjZGJmMzJlZDcxMjNlMzQwYzVkMzhlOGVhYTBjZmQ3MzVjODczODIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYWxEBPaYBfJqqiwZPt11n3KPt6r 3uUAxXSGpMh4E5LJQkFMBtx7JRwwockdVcs3Vc3S6bbSvIWsdNtjVon7yL0506JS HGGV9oooMzdW881UOSNf/voUl1BEMcDFr1ua5wWEnm6MuUszDsNUwtPe9fvHhaBl ExCUOCz5KcOsM/t1b3TZwBxYWZRQq2d1fjKbAqaZOyuQmwhwnTrAh/RVolTEHKQY HfjvXjxuAp5dR0DQtT6JI4VDCbqXlMsfDzJosBY1FVmhSseTotdMFLzheCa4hVCD TZRT2+TqiFRIItHO3rxxt4iPneLePsfBW4ijpRwY3b445xE/jk48LqN79wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2/Mu1xI+NAxdOOjqoM/XNchzgiMB8GA1UdIwQY MBaAFJca7uqHmPduyaQ051Y37NiBCS7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHhydTZvZVk5MjdKcERUblZqZnMySUVKTHNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8xNjY5MzMtZjY4Yy00OWEwLTg4Njkt YmRmNTVkYjRhOTBhLzEvbHhydTZvZVk5MjdKcERUblZqZnMySUVKTHNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8xNjY5MzMtZjY4Yy00OWEwLTg4NjktYmRmNTVkYjRhOTBh LzEvbHhydTZvZVk5MjdKcERUblZqZnMySUVKTHNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBUZ9zFu e00DEx+fxjpZXySQb9R+kVRQqy5lnoRp+ihjk3j6vEOV9EVY06G19O6LYul0dAB+ X3sYslNQ+mXYDKO6IQePBReYJzhm2viChWiGYihidJL6m61u+YVrwj8Ltt9sQplV NITtvsJeVbMSMDTbH37WYFVBnkSzIqEuomfR/+vmjXDCCkfQZ83Hr0ma3MbKBJiM 6rLN3NupeEnVxdVmRHfVIJXPNc+DACFsPTopYlO8TFjvOkSbiUEgK7jM0Oaizwlu qNZwonwH98grx8EztnMLne1zC1Fjl75gUMTsuazzpGVp9Hukn+1chpKR+Gg6FbJM 6jNXs8s7zKsYYA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:35:48 2026 by rpki-client