This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft File: LwvxBgr5ORfa-1aagMzsnbCKdsU.mft (raw, json) Hash identifier: xMV7+2sgVaQc9YoiwZr3ezI6hRWAZDUaY+lq8VlBKUE= Subject key identifier: 8F:F2:63:4D:AC:2A:26:C1:66:94:F7:14:3F:0F:D7:66:28:BC:48:CC Authority key identifier: 2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5 Certificate issuer: /CN=2f0bf1060af93917dafb569a80ccec9db08a76c5 Certificate serial: 019BF49922016F950B9BDDDBF1E4915306C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft Manifest number: 1323 Signing time: Sun 25 Jan 2026 10:00:34 +0000 Manifest this update: Sun 25 Jan 2026 10:00:34 +0000 Manifest next update: Mon 26 Jan 2026 10:00:34 +0000 Files and hashes: 1: LwvxBgr5ORfa-1aagMzsnbCKdsU.crl (hash: x2BMhB4SFJXoMGQUOnme5S9XTENxas+8zRAzRwskmsA=) 2: mFiXzHrxbxRLCdJjqMjDV1qXsf0.roa (hash: xj8BfUXzJ6HgdFsCYVaF06L0rsBxHlnBN9flZ6X2gpQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:22:01:6f:95:0b:9b:dd:db:f1:e4:91:53:06:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f0bf1060af93917dafb569a80ccec9db08a76c5 Validity Not Before: Jan 25 10:00:34 2026 GMT Not After : Jan 26 10:00:34 2026 GMT Subject: CN=8ff2634dac2a26c16694f7143f0fd76628bc48cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c8:8a:05:ad:0e:45:c7:74:b8:3d:fd:37:70: e3:1a:68:ae:b1:79:98:c1:f8:6c:eb:fe:22:b5:36: 33:4f:6d:23:d9:cf:2c:7d:f2:d4:f7:3b:d5:26:fa: 0c:cd:16:6f:f6:a7:6a:a5:a8:d7:37:b3:de:36:a2: 6e:d2:98:03:ae:e6:e4:d8:55:21:6b:e8:2f:d1:b7: 99:0d:32:1c:9b:7c:4b:da:0c:53:20:11:84:c1:de: 4b:ce:71:68:e0:50:1d:25:d0:9c:b5:41:07:68:2a: a4:b8:8e:2a:b5:a3:43:77:b0:d2:40:eb:0c:c0:60: c1:6c:3a:50:9c:13:03:54:b0:8e:c6:2f:52:65:4a: 23:51:cb:1b:8e:df:ac:c1:05:ba:74:ca:b8:2b:6d: 30:05:ba:8f:cb:0c:38:b4:28:de:e3:cf:9a:2b:67: fe:d6:69:1c:77:14:5a:89:c0:b9:97:cd:de:f7:62: 6b:f4:22:d6:5a:bf:21:5a:57:fc:bf:89:7d:f6:b1: 63:90:2e:fd:0b:8d:5d:f7:34:94:af:f2:dd:5a:9f: d1:0a:a3:e8:2d:53:00:9a:59:2e:85:3f:68:3f:b6: c3:af:72:86:11:83:d9:6c:d9:58:76:54:06:fe:46: 15:fe:cf:1c:a2:c9:9c:1b:bf:46:31:40:bc:f7:3a: b3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F2:63:4D:AC:2A:26:C1:66:94:F7:14:3F:0F:D7:66:28:BC:48:CC X509v3 Authority Key Identifier: keyid:2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:51:e0:2e:6c:5b:0b:97:d9:19:44:b0:a8:a5:23:b7:33:e8: c3:ff:7c:13:9d:13:38:2e:37:b0:d3:69:9d:1a:73:e9:42:51: 0a:1b:0b:24:be:36:22:fe:dd:37:6c:06:6a:6f:f5:d9:51:3a: ea:43:62:cd:c3:5d:34:17:80:56:a6:a8:2e:65:b1:f4:2c:24: 41:30:d5:84:16:fa:ed:7a:35:2e:b8:f8:99:8a:8a:ca:8d:d6: 64:6c:2a:e6:24:27:df:71:dc:38:d1:7e:4a:e1:af:58:7c:16: 4d:34:38:88:91:d7:7d:8c:57:12:ea:58:39:f2:ce:54:02:45: d5:b9:3f:34:6e:5e:0f:7e:05:4a:35:57:ea:47:c5:a5:60:39: 93:6b:0e:0c:e4:b8:e8:b9:86:62:7a:09:cb:cf:a3:fc:87:b6: f1:b4:78:6b:e0:ae:9c:cc:ca:2c:20:04:b3:be:84:29:b1:2c: 03:02:6f:36:4a:4d:96:04:00:af:46:c3:95:c1:1f:4e:cb:79: 15:82:64:f3:af:ae:19:ec:60:55:11:43:4e:0c:44:88:8c:c3: 76:90:1f:57:96:0c:b5:7c:fb:9e:57:98:69:07:a7:4f:8a:10: 06:22:ed:8e:ba:4a:cb:6b:88:6c:cf:7f:60:66:1e:30:67:15: 72:04:4e:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mSIBb5ULm93b8eSRUwbBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMGJmMTA2MGFmOTM5MTdkYWZiNTY5YTgwY2NlYzlkYjA4 YTc2YzUwHhcNMjYwMTI1MTAwMDM0WhcNMjYwMTI2MTAwMDM0WjAzMTEwLwYDVQQD Eyg4ZmYyNjM0ZGFjMmEyNmMxNjY5NGY3MTQzZjBmZDc2NjI4YmM0OGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8iKBa0ORcd0uD39N3DjGmiusXmY wfhs6/4itTYzT20j2c8sffLU9zvVJvoMzRZv9qdqpajXN7PeNqJu0pgDrubk2FUh a+gv0beZDTIcm3xL2gxTIBGEwd5LznFo4FAdJdCctUEHaCqkuI4qtaNDd7DSQOsM wGDBbDpQnBMDVLCOxi9SZUojUcsbjt+swQW6dMq4K20wBbqPyww4tCje48+aK2f+ 1mkcdxRaicC5l83e92Jr9CLWWr8hWlf8v4l99rFjkC79C41d9zSUr/LdWp/RCqPo LVMAmlkuhT9oP7bDr3KGEYPZbNlYdlQG/kYV/s8cosmcG79GMUC89zqzGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/yY02sKibBZpT3FD8P12YovEjMMB8GA1UdIwQY MBaAFC8L8QYK+TkX2vtWmoDM7J2winbFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHd2eEJncjVPUmZhLTFhYWdNenNuYkNLZHNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83M2Y3MzktODFiOC00NTExLTgxYTEt YjNhMTY4MDMyMGFkLzEvTHd2eEJncjVPUmZhLTFhYWdNenNuYkNLZHNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83M2Y3MzktODFiOC00NTExLTgxYTEtYjNhMTY4MDMyMGFk LzEvTHd2eEJncjVPUmZhLTFhYWdNenNuYkNLZHNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJlHgLmxb C5fZGUSwqKUjtzPow/98E50TOC43sNNpnRpz6UJRChsLJL42Iv7dN2wGam/12VE6 6kNizcNdNBeAVqaoLmWx9CwkQTDVhBb67Xo1Lrj4mYqKyo3WZGwq5iQn33HcONF+ SuGvWHwWTTQ4iJHXfYxXEupYOfLOVAJF1bk/NG5eD34FSjVX6kfFpWA5k2sODOS4 6LmGYnoJy8+j/Ie28bR4a+CunMzKLCAEs76EKbEsAwJvNkpNlgQAr0bDlcEfTst5 FYJk86+uGexgVRFDTgxEiIzDdpAfV5YMtXz7nleYaQenT4oQBiLtjrpKy2uIbM9/ YGYeMGcVcgROAQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:25:04 2026 by rpki-client