This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft File: LVI5glUpDjKGgNboyAzZGPhkF4Q.mft (raw, json) Hash identifier: nFbmkioNEFBds3rscUTMe+0kQWVhR0O2f6g8lB8Fuao= Subject key identifier: 5E:74:B6:7C:AD:4D:F8:90:43:04:67:EE:94:B4:E9:C4:2B:0C:72:2F Authority key identifier: 2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84 Certificate issuer: /CN=2d52398255290e328680d6e8c80cd918f8641784 Certificate serial: 019BF4D0356D17059C7DE7EDDC8857A00273 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft Manifest number: 150D Signing time: Sun 25 Jan 2026 11:00:44 +0000 Manifest this update: Sun 25 Jan 2026 11:00:44 +0000 Manifest next update: Mon 26 Jan 2026 11:00:44 +0000 Files and hashes: 1: JJJqBn2vrMXP7kngEan0imFBrIE.roa (hash: KnDyBCr49BTGq3A5Ah9xTrAKORQ9HlD3KaBetAPGdn4=) 2: LVI5glUpDjKGgNboyAzZGPhkF4Q.crl (hash: XHWT2WCwv4/3XiBRuY60ZMW9wXwNW17glkiwVs3B0Gw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:35:6d:17:05:9c:7d:e7:ed:dc:88:57:a0:02:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d52398255290e328680d6e8c80cd918f8641784 Validity Not Before: Jan 25 11:00:44 2026 GMT Not After : Jan 26 11:00:44 2026 GMT Subject: CN=5e74b67cad4df890430467ee94b4e9c42b0c722f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:53:50:ad:a5:a6:b1:2d:fb:f6:a8:c9:d2:00: 4b:c7:b1:2d:e4:6e:e8:ea:5c:2b:ef:33:2d:77:e4: fe:49:81:bb:ec:7e:83:d8:d5:bd:4e:fe:0d:bf:b1: 7f:36:22:92:e7:2b:61:23:bf:24:7f:3d:d7:6c:07: 18:60:cc:09:54:a2:20:7a:32:d2:f2:7d:44:2b:27: 02:19:bb:73:e6:e9:e2:e3:c3:b3:51:26:04:bc:61: b4:f1:84:e3:97:d5:a2:e6:7d:72:e4:42:25:c3:01: bf:56:ed:50:1c:fb:ff:59:6b:14:69:c8:5e:d0:71: ed:f2:6b:8c:ba:09:0c:d1:1f:1c:55:40:a0:b8:a7: da:d4:3d:0d:c1:91:26:89:8c:de:da:63:75:7d:8a: 95:82:31:fd:65:cf:a6:f6:8c:8e:05:09:71:1c:5a: 04:ae:ef:34:23:a4:6d:71:4a:07:11:dd:51:05:05: 36:1e:84:b2:13:9d:11:66:da:9f:68:4e:cc:6b:30: b2:49:73:5e:a1:01:e1:f5:bd:a9:b3:c9:c6:b5:34: 0a:5e:2c:4d:b9:43:fa:83:74:25:e0:ae:b8:fa:d9: b4:8d:52:5e:0b:30:03:ef:fe:c2:c0:ca:9a:ff:8e: 80:89:bf:b0:ff:1f:5d:0d:dd:e1:1e:d6:08:4c:31: 6d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:74:B6:7C:AD:4D:F8:90:43:04:67:EE:94:B4:E9:C4:2B:0C:72:2F X509v3 Authority Key Identifier: keyid:2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:01:68:ba:0f:c6:db:7d:70:77:0c:8f:1a:0b:96:33:e5:c2: 7b:03:53:66:39:e3:86:d8:b1:49:de:e6:18:44:35:3a:5b:29: 6b:28:ff:d1:f0:b6:d9:28:a1:f4:93:cb:d7:75:d2:a8:aa:6e: a8:df:ef:fb:f5:1b:cf:0b:eb:b0:a2:80:8b:51:32:17:f5:41: c8:6b:4d:c7:90:4f:32:c1:98:36:c3:f8:c2:a9:77:32:7b:44: 8e:f7:10:d3:26:95:50:11:b1:96:e1:b8:23:9e:ef:4e:9b:8f: a3:d3:29:83:09:84:12:df:ee:5a:8b:9b:06:9a:5c:9e:cb:f6: 8f:80:89:d1:b6:1e:71:fa:31:ad:76:4d:1d:2e:99:2b:bd:f7: 27:62:3a:c3:44:1d:be:8c:a8:13:46:b4:78:85:c9:9c:4d:ca: 1b:45:eb:e6:24:8a:97:ea:c6:6c:25:af:23:78:a4:a0:fb:bc: 17:66:48:22:f1:51:74:7d:b2:7f:cf:bb:eb:02:ac:77:e9:06: 7e:ce:b4:20:2c:0b:c4:63:85:b4:08:ec:63:65:0b:58:84:b3: b4:c8:c5:57:0e:f1:98:20:77:96:94:50:8b:62:89:61:2a:00: 64:47:ac:eb:a7:c3:54:9e:54:a2:90:d4:40:e7:67:30:35:5d: 18:1a:e9:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00DVtFwWcfeft3IhXoAJzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNTIzOTgyNTUyOTBlMzI4NjgwZDZlOGM4MGNkOTE4Zjg2 NDE3ODQwHhcNMjYwMTI1MTEwMDQ0WhcNMjYwMTI2MTEwMDQ0WjAzMTEwLwYDVQQD Eyg1ZTc0YjY3Y2FkNGRmODkwNDMwNDY3ZWU5NGI0ZTljNDJiMGM3MjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlNQraWmsS379qjJ0gBLx7Et5G7o 6lwr7zMtd+T+SYG77H6D2NW9Tv4Nv7F/NiKS5ythI78kfz3XbAcYYMwJVKIgejLS 8n1EKycCGbtz5uni48OzUSYEvGG08YTjl9Wi5n1y5EIlwwG/Vu1QHPv/WWsUache 0HHt8muMugkM0R8cVUCguKfa1D0NwZEmiYze2mN1fYqVgjH9Zc+m9oyOBQlxHFoE ru80I6RtcUoHEd1RBQU2HoSyE50RZtqfaE7MazCySXNeoQHh9b2ps8nGtTQKXixN uUP6g3Ql4K64+tm0jVJeCzAD7/7CwMqa/46Aib+w/x9dDd3hHtYITDFtJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF50tnytTfiQQwRn7pS06cQrDHIvMB8GA1UdIwQY MBaAFC1SOYJVKQ4yhoDW6MgM2Rj4ZBeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFZJNWdsVXBEaktHZ05ib3lBelpHUGhrRjRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mY2QzYzMtZjQ5NS00ZDIxLWE4YjAt NDkwNjFmZmZkMDJhLzEvTFZJNWdsVXBEaktHZ05ib3lBelpHUGhrRjRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9mY2QzYzMtZjQ5NS00ZDIxLWE4YjAtNDkwNjFmZmZkMDJh LzEvTFZJNWdsVXBEaktHZ05ib3lBelpHUGhrRjRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWgFoug/G 231wdwyPGguWM+XCewNTZjnjhtixSd7mGEQ1Olspayj/0fC22Sih9JPL13XSqKpu qN/v+/UbzwvrsKKAi1EyF/VByGtNx5BPMsGYNsP4wql3MntEjvcQ0yaVUBGxluG4 I57vTpuPo9MpgwmEEt/uWoubBppcnsv2j4CJ0bYecfoxrXZNHS6ZK733J2I6w0Qd voyoE0a0eIXJnE3KG0Xr5iSKl+rGbCWvI3ikoPu8F2ZIIvFRdH2yf8+76wKsd+kG fs60ICwLxGOFtAjsY2ULWISztMjFVw7xmCB3lpRQi2KJYSoAZEes66fDVJ5UopDU QOdnMDVdGBrpnA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:52 2026 by rpki-client