This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft File: LkX41ix0LqB9y_jFfVjM9dKOPrk.mft (raw, json) Hash identifier: XKHEAmMjmRpMm96Akyri02CtcRgHErcxWe+qLXFEf4c= Subject key identifier: B8:3E:07:A7:74:D7:44:EF:FA:47:32:4F:C6:78:BF:1C:78:DB:C5:73 Authority key identifier: 2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9 Certificate issuer: /CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9 Certificate serial: 019BF650C6112D5B9EB0F2E75E264AFAE395 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft Manifest number: 177A Signing time: Sun 25 Jan 2026 18:00:47 +0000 Manifest this update: Sun 25 Jan 2026 18:00:47 +0000 Manifest next update: Mon 26 Jan 2026 18:00:47 +0000 Files and hashes: 1: 3F0Eyl_fFWBZccM3jI1k4TCeJvI.roa (hash: 1mvJ1d/O7KfiqZVWH2l7EuJBCJuW/AroLmAMi43n5kw=) 2: LkX41ix0LqB9y_jFfVjM9dKOPrk.crl (hash: cp7CmU+oy+lzRLvu2656q8igFDByheMC3W/B10QAlPQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:c6:11:2d:5b:9e:b0:f2:e7:5e:26:4a:fa:e3:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9 Validity Not Before: Jan 25 18:00:47 2026 GMT Not After : Jan 26 18:00:47 2026 GMT Subject: CN=b83e07a774d744effa47324fc678bf1c78dbc573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:23:8b:9c:17:9f:2f:84:08:09:e2:c6:58:5c: 8c:d0:69:d8:cd:f8:a9:e8:f3:07:3e:ff:3b:94:25: d3:4f:d1:08:b9:d2:fd:1e:01:72:8c:8e:11:ef:09: dd:fa:d5:99:1f:57:22:30:52:b1:90:f2:7c:27:39: 4f:87:09:96:6c:b3:36:d5:d0:b9:32:c6:e0:c8:f1: b3:9f:d1:1c:c1:2e:67:5c:bf:66:8a:ce:2c:48:9b: 64:bd:30:41:ed:7b:db:f8:5c:a8:aa:05:02:9f:19: 62:b0:92:4e:79:91:0e:f0:5b:55:f3:f6:72:39:40: 1d:31:7f:10:bb:63:a8:cf:73:48:a6:eb:f9:cb:c1: 52:b2:44:55:c5:1d:fb:e7:a7:df:23:f3:f9:19:d9: f1:6d:43:5d:68:72:7e:9e:bd:00:5d:c4:be:e6:01: 17:3a:d5:cf:e3:09:9e:22:c8:10:9d:2f:75:13:53: 6a:d9:c7:56:34:3c:4d:36:c7:40:ae:fc:46:f8:a3: eb:80:0c:92:66:ea:ba:af:df:06:55:58:8f:70:6f: 9d:a2:1c:85:87:0b:68:d0:02:62:59:1b:e0:bd:7a: d3:9e:89:38:38:57:8a:59:db:ed:b0:f2:ae:c1:3f: 2e:8f:92:16:17:e9:e6:f9:5e:61:80:f5:6e:32:d2: f0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3E:07:A7:74:D7:44:EF:FA:47:32:4F:C6:78:BF:1C:78:DB:C5:73 X509v3 Authority Key Identifier: keyid:2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:8b:e5:ef:ba:da:d1:99:cb:e6:6b:4b:df:40:80:da:0f:65: 26:02:32:03:77:52:84:d4:5c:1e:53:34:37:0b:2f:88:4d:70: 2f:71:8e:08:35:8e:50:81:0f:9b:b5:22:69:7f:58:62:00:f5: 49:c7:d7:33:cd:f5:cd:4e:8a:a0:6a:e0:57:76:21:1c:e5:f8: 10:72:87:38:48:b2:e9:69:97:ac:c5:a4:71:7f:c5:1f:cc:db: 48:bf:98:a4:8e:66:5b:dd:96:f6:5c:41:67:b9:5e:70:83:f6: 75:a2:92:90:0d:f1:ee:e0:d7:90:15:ca:53:60:34:31:08:ec: 07:66:83:b2:ff:ae:f6:6c:9e:17:7c:38:4a:f6:e3:02:cf:ee: 21:25:9e:56:da:7f:90:08:4c:13:5d:30:e9:8d:25:05:e8:1a: 33:19:db:f7:1f:99:42:28:34:3b:75:cd:b5:8e:34:67:b3:14: 61:ee:ca:88:71:a8:cf:db:fb:d3:63:ad:02:15:ea:e7:16:18: ed:5f:37:96:73:a6:ca:4f:d7:bc:f8:05:82:01:e0:d9:71:ab: 8c:c0:fa:ef:93:f0:58:4c:dd:1b:9f:dc:a3:70:8c:94:68:d4: 81:1b:d0:f1:dc:4f:4b:13:e5:f9:5d:aa:2b:46:38:b7:c5:cc: 2d:63:2b:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UMYRLVuesPLnXiZK+uOVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNDVmOGQ2MmM3NDJlYTA3ZGNiZjhjNTdkNThjY2Y1ZDI4 ZTNlYjkwHhcNMjYwMTI1MTgwMDQ3WhcNMjYwMTI2MTgwMDQ3WjAzMTEwLwYDVQQD EyhiODNlMDdhNzc0ZDc0NGVmZmE0NzMyNGZjNjc4YmYxYzc4ZGJjNTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCOLnBefL4QICeLGWFyM0GnYzfip 6PMHPv87lCXTT9EIudL9HgFyjI4R7wnd+tWZH1ciMFKxkPJ8JzlPhwmWbLM21dC5 MsbgyPGzn9EcwS5nXL9mis4sSJtkvTBB7Xvb+FyoqgUCnxlisJJOeZEO8FtV8/Zy OUAdMX8Qu2Ooz3NIpuv5y8FSskRVxR3756ffI/P5GdnxbUNdaHJ+nr0AXcS+5gEX OtXP4wmeIsgQnS91E1Nq2cdWNDxNNsdArvxG+KPrgAySZuq6r98GVViPcG+dohyF hwto0AJiWRvgvXrTnok4OFeKWdvtsPKuwT8uj5IWF+nm+V5hgPVuMtLwyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLg+B6d010Tv+kcyT8Z4vxx428VzMB8GA1UdIwQY MBaAFC5F+NYsdC6gfcv4xX1YzPXSjj65MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGtYNDFpeDBMcUI5eV9qRmZWak05ZEtPUHJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8zMjc3NDItODE1Ni00ZmE0LTliZDUt MjEyMGZkMDU3NWZmLzEvTGtYNDFpeDBMcUI5eV9qRmZWak05ZEtPUHJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8zMjc3NDItODE1Ni00ZmE0LTliZDUtMjEyMGZkMDU3NWZm LzEvTGtYNDFpeDBMcUI5eV9qRmZWak05ZEtPUHJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWYvl77ra 0ZnL5mtL30CA2g9lJgIyA3dShNRcHlM0NwsviE1wL3GOCDWOUIEPm7UiaX9YYgD1 ScfXM831zU6KoGrgV3YhHOX4EHKHOEiy6WmXrMWkcX/FH8zbSL+YpI5mW92W9lxB Z7lecIP2daKSkA3x7uDXkBXKU2A0MQjsB2aDsv+u9myeF3w4SvbjAs/uISWeVtp/ kAhME10w6Y0lBegaMxnb9x+ZQig0O3XNtY40Z7MUYe7KiHGoz9v702OtAhXq5xYY 7V83lnOmyk/XvPgFggHg2XGrjMD675PwWEzdG5/co3CMlGjUgRvQ8dxPSxPl+V2q K0Y4t8XMLWMrjQ== -----END CERTIFICATE-----Generated at Mon Jan 26 03:32:55 2026 by rpki-client