This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft File: LRFywcc_lxqfsuibeRcgDFAO5Ac.mft (raw, json) Hash identifier: b3zq0hV+LjiT7AzmowbDeZrrxCeRygEUVCb6HEHozdA= Subject key identifier: E0:47:23:BC:9C:AE:34:9B:CB:4D:43:85:BA:76:FE:6E:18:E2:11:02 Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07 Certificate issuer: /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407 Certificate serial: 019BF574CDF59F70B0D2CA0C761E03E5FFB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft Manifest number: 17FA Signing time: Sun 25 Jan 2026 14:00:31 +0000 Manifest this update: Sun 25 Jan 2026 14:00:31 +0000 Manifest next update: Mon 26 Jan 2026 14:00:31 +0000 Files and hashes: 1: 1-UNFmXWJaLztiP7uL4Flu5cWIl0.roa (hash: PHuC6x6Gg7qDirj9Kp/Ed4/YHHnXQMz+G2GImQ1QRoo=) 2: LRFywcc_lxqfsuibeRcgDFAO5Ac.crl (hash: dleB/ncuNNZBZuTzAIyahdws5k1yyn9vDQZK+LAcpko=) 3: XiSpk1i5DugMLOQC8LxlXZ3OXzg.roa (hash: wXcCGl7A0eNH0SjdToQ3CeO3hMfYdUgUl2ywslHJLk8=) 4: jOc0A4_zXbowF82veAUOIKe9Ne8.roa (hash: bXjJbqhuxy4y4KRd5WS8EX9U1EZsxkaBclHAHLgkkYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:74:cd:f5:9f:70:b0:d2:ca:0c:76:1e:03:e5:ff:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407 Validity Not Before: Jan 25 14:00:31 2026 GMT Not After : Jan 26 14:00:31 2026 GMT Subject: CN=e04723bc9cae349bcb4d4385ba76fe6e18e21102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e3:c0:00:4a:4c:53:8c:f5:d4:8a:5b:69:cb: c5:01:1d:65:35:e6:97:9a:4a:c2:f9:b9:86:58:de: fa:84:f0:6f:8f:35:e0:a8:22:f3:8b:78:28:be:71: bb:aa:17:60:c0:6b:54:61:bc:d0:ce:65:95:07:2f: c0:30:f3:04:43:0c:35:34:6c:26:d4:d9:c9:2a:4b: 12:f2:81:fa:f3:41:7a:8d:81:69:7a:87:39:d4:6c: 54:fd:74:c1:4a:44:55:48:7b:10:52:8a:d1:fb:15: 78:14:9d:d3:13:39:c1:e9:16:bf:51:44:a3:bb:5b: 9a:55:27:8b:d5:0b:b6:ae:f2:9b:8b:b5:15:5c:c2: 31:bf:6a:c8:fa:07:78:40:b7:b0:ae:94:f1:e5:b4: 00:f6:a5:79:6d:19:51:bf:3c:9c:72:7b:0c:4b:cd: 9b:17:ca:5c:be:68:3a:57:55:f9:b9:d9:ac:2c:81: f4:a6:8d:ce:d3:1e:fd:3c:72:95:67:08:3f:90:1a: 49:6b:3b:c2:e8:86:f8:cd:b3:55:f7:83:e9:07:57: 74:da:bd:f3:37:ff:31:2b:6e:6a:70:8a:b2:9f:9f: 46:de:86:81:02:e6:ee:00:c5:a7:c1:1a:eb:70:ff: 86:ff:ce:fd:f3:39:77:79:69:90:f8:34:07:bd:99: cb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:47:23:BC:9C:AE:34:9B:CB:4D:43:85:BA:76:FE:6E:18:E2:11:02 X509v3 Authority Key Identifier: keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:06:aa:a9:17:78:d4:3d:c1:07:c3:8f:6a:e6:fe:f2:ee:0c: 4a:08:ef:e6:c3:10:98:76:9b:3a:35:fc:68:b5:9d:d1:f4:b2: a2:11:de:6b:a5:03:db:af:de:3d:54:b8:ad:ab:dd:a4:b5:90: 36:1f:8f:61:6e:51:99:e7:fb:a7:fe:f1:67:62:ef:cb:bb:c6: 7d:28:2b:73:54:44:a9:d3:a7:63:72:f0:7d:c3:54:45:ba:ee: c4:78:c3:6b:fd:58:9e:71:31:2a:9f:f8:76:c8:d4:93:77:58: a8:2d:b0:be:b4:ec:e4:39:e8:1e:87:e0:c7:a0:61:b6:36:dc: a7:f2:a6:15:aa:09:b9:a0:84:e0:39:c4:30:a6:61:e6:d5:d8: a8:c5:c7:a1:1f:87:24:1f:c4:c6:57:36:cc:0c:48:f8:c6:b6: 21:d2:e8:12:44:ba:46:53:62:35:d0:0a:a8:88:bb:b9:8e:a6: 0e:3d:6e:6f:c3:d1:51:8e:64:62:9e:39:a3:6b:fe:e7:2a:8b: e2:95:a7:73:10:63:6d:80:97:0f:e1:fc:c8:79:26:f6:11:ec: dd:2f:d0:ca:7e:e7:14:69:87:3b:19:a2:b2:ab:ec:f9:13:04: 3f:57:0d:81:48:2d:06:c0:09:3f:db:34:33:e7:22:9d:ff:b9: 6a:46:fd:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dM31n3Cw0soMdh4D5f+0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMTE3MmMxYzczZjk3MWE5ZmIyZTg5Yjc5MTcyMDBjNTAw ZWU0MDcwHhcNMjYwMTI1MTQwMDMxWhcNMjYwMTI2MTQwMDMxWjAzMTEwLwYDVQQD EyhlMDQ3MjNiYzljYWUzNDliY2I0ZDQzODViYTc2ZmU2ZTE4ZTIxMTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOPAAEpMU4z11IpbacvFAR1lNeaX mkrC+bmGWN76hPBvjzXgqCLzi3govnG7qhdgwGtUYbzQzmWVBy/AMPMEQww1NGwm 1NnJKksS8oH680F6jYFpeoc51GxU/XTBSkRVSHsQUorR+xV4FJ3TEznB6Ra/UUSj u1uaVSeL1Qu2rvKbi7UVXMIxv2rI+gd4QLewrpTx5bQA9qV5bRlRvzyccnsMS82b F8pcvmg6V1X5udmsLIH0po3O0x79PHKVZwg/kBpJazvC6Ib4zbNV94PpB1d02r3z N/8xK25qcIqyn59G3oaBAubuAMWnwRrrcP+G/8798zl3eWmQ+DQHvZnL4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOBHI7ycrjSby01Dhbp2/m4Y4hECMB8GA1UdIwQY MBaAFC0RcsHHP5can7Lom3kXIAxQDuQHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJGeXdjY19seHFmc3VpYmVSY2dERkFPNUFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83OWFjYTktNTFkZC00ZjIyLWI0MDQt ZDUzODY2ZTkxODZhLzEvTFJGeXdjY19seHFmc3VpYmVSY2dERkFPNUFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS83OWFjYTktNTFkZC00ZjIyLWI0MDQtZDUzODY2ZTkxODZh LzEvTFJGeXdjY19seHFmc3VpYmVSY2dERkFPNUFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQaqqRd4 1D3BB8OPaub+8u4MSgjv5sMQmHabOjX8aLWd0fSyohHea6UD26/ePVS4ravdpLWQ Nh+PYW5Rmef7p/7xZ2Lvy7vGfSgrc1REqdOnY3LwfcNURbruxHjDa/1YnnExKp/4 dsjUk3dYqC2wvrTs5DnoHofgx6Bhtjbcp/KmFaoJuaCE4DnEMKZh5tXYqMXHoR+H JB/Exlc2zAxI+Ma2IdLoEkS6RlNiNdAKqIi7uY6mDj1ub8PRUY5kYp45o2v+5yqL 4pWncxBjbYCXD+H8yHkm9hHs3S/Qyn7nFGmHOxmisqvs+RMEP1cNgUgtBsAJP9s0 M+cinf+5akb9NQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:03:17 2026 by rpki-client