This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft File: LxrJ8JTYMY8wiNymgwGGX0YF6do.mft (raw, json) Hash identifier: huuG8bmZ78+D1/Z4+4rpe3HG9bRdCBk12nTpfquQOSY= Subject key identifier: 20:62:42:3E:35:7C:F8:9D:0D:03:79:66:9C:9F:58:F6:2B:6B:DE:08 Authority key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA Certificate issuer: /CN=2f1ac9f094d8318f3088dca68301865f4605e9da Certificate serial: 019BFA2E6CD3081811585EE0DA5B041D6F97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft Manifest number: 11B2 Signing time: Mon 26 Jan 2026 12:01:45 +0000 Manifest this update: Mon 26 Jan 2026 12:01:45 +0000 Manifest next update: Tue 27 Jan 2026 12:01:45 +0000 Files and hashes: 1: LxrJ8JTYMY8wiNymgwGGX0YF6do.crl (hash: d1EO97JNdSQZuvEG43r3xCaUWnS+WlUgZtr9iBHl4tg=) 2: R4EyQfq47lKcSi7lGsbXI4F8tPI.roa (hash: tdmT4SygVfTwG2tATcY87tl2PKsMrLDS/k3VojLg3Q0=) 3: U2Z1XV8o3uSKFqctNf3JUk-H5Ts.roa (hash: FRVvHMEadriOkR83sQ2tDLvX3mVKMsDHHQh/IgHBVFQ=) 4: UYxFngClnykqTHTfuXuiS4afmY0.roa (hash: qhH8eU5uzACUHVTAmy6bDaqx30+kPSiCPRvL6eNWthc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2e:6c:d3:08:18:11:58:5e:e0:da:5b:04:1d:6f:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f1ac9f094d8318f3088dca68301865f4605e9da Validity Not Before: Jan 26 12:01:45 2026 GMT Not After : Jan 27 12:01:45 2026 GMT Subject: CN=2062423e357cf89d0d0379669c9f58f62b6bde08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f9:da:26:6f:54:9b:a9:38:11:78:44:a7:be: e7:f7:a1:02:43:9c:25:0b:52:f6:1e:5e:0e:ed:41: 28:02:87:1b:02:88:d8:ae:8f:5f:33:45:5a:9e:80: 6b:5c:0b:31:a9:bb:e7:4d:52:6e:7f:0b:bb:94:f4: 73:ba:e7:4d:18:d2:a1:f7:ef:a9:0a:35:20:f2:b7: a2:46:f7:93:f0:b4:97:97:f8:e2:d8:4b:37:4f:5c: 6d:f2:c4:64:81:e0:2d:ff:39:aa:f5:30:01:e6:c2: 69:e8:3e:db:b4:fc:47:5c:a9:b2:6a:0e:23:9d:8c: fa:9d:78:28:71:b0:af:1d:d7:cb:68:3d:2c:58:fd: a5:86:33:2e:d1:4b:f0:ac:c1:40:ae:68:6a:fc:14: b8:5d:40:77:8d:e5:e3:1c:0a:68:4a:b8:cf:96:d9: 33:5d:a0:0a:54:0f:fe:15:c7:65:37:fb:f1:a9:66: 62:12:48:c9:20:3b:6e:0d:80:97:9f:d1:82:e5:ad: 30:d9:4e:5c:a5:31:1e:9b:1e:6a:95:15:b4:c7:68: 87:d5:99:27:c7:6f:a0:28:50:8b:40:8d:9f:7d:09: 0c:4a:4d:de:25:87:8f:a1:66:2e:75:a2:02:29:e2: 33:67:3f:25:d2:2d:ec:c6:65:50:3e:2f:9e:fc:f5: fb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:62:42:3E:35:7C:F8:9D:0D:03:79:66:9C:9F:58:F6:2B:6B:DE:08 X509v3 Authority Key Identifier: keyid:2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:08:21:15:2e:1a:1a:7d:0b:04:af:df:79:7c:14:49:da:7c: 2e:8b:4a:fb:df:bd:ee:f4:bd:ba:47:03:47:a3:1c:9c:e9:4a: c2:41:84:18:bb:d9:5d:8c:2a:49:93:9a:7f:45:af:0b:cb:7b: f5:24:8d:c7:38:24:66:f3:1f:3d:9f:b0:c0:2d:c1:a0:ef:85: a3:e5:5f:f4:08:95:96:26:4a:a9:5a:6a:15:a0:c2:6f:15:b4: c2:90:39:84:ab:98:f1:91:41:8a:6e:e1:32:f6:32:85:9b:a6: b8:a0:2d:ed:86:c8:53:07:53:d2:ba:57:b2:bf:4e:c1:51:f0: 91:22:2c:f8:23:1a:97:19:00:4e:72:d7:e6:ab:64:36:32:28: b3:11:d3:ab:96:75:e4:bc:f9:95:c8:e7:19:6c:45:82:10:89: af:93:20:91:06:ea:cc:ca:9d:e7:81:b5:f6:5b:73:f8:78:5f: f3:4e:a8:1e:0e:fd:63:6f:18:3d:cb:98:f5:9c:af:e7:c5:dd: 14:99:6d:a1:c8:9d:ba:43:92:8e:60:c9:0d:66:af:f6:0e:6a: 70:9a:ff:b1:17:fa:8f:23:00:e1:1c:d2:e0:1d:36:13:6d:3e: f5:4c:41:e5:49:3a:da:6e:b8:c6:f7:53:32:0e:1c:6b:80:e7: 4f:3f:17:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LmzTCBgRWF7g2lsEHW+XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMWFjOWYwOTRkODMxOGYzMDg4ZGNhNjgzMDE4NjVmNDYw NWU5ZGEwHhcNMjYwMTI2MTIwMTQ1WhcNMjYwMTI3MTIwMTQ1WjAzMTEwLwYDVQQD EygyMDYyNDIzZTM1N2NmODlkMGQwMzc5NjY5YzlmNThmNjJiNmJkZTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/naJm9Um6k4EXhEp77n96ECQ5wl C1L2Hl4O7UEoAocbAojYro9fM0VanoBrXAsxqbvnTVJufwu7lPRzuudNGNKh9++p CjUg8reiRveT8LSXl/ji2Es3T1xt8sRkgeAt/zmq9TAB5sJp6D7btPxHXKmyag4j nYz6nXgocbCvHdfLaD0sWP2lhjMu0UvwrMFArmhq/BS4XUB3jeXjHApoSrjPltkz XaAKVA/+FcdlN/vxqWZiEkjJIDtuDYCXn9GC5a0w2U5cpTEemx5qlRW0x2iH1Zkn x2+gKFCLQI2ffQkMSk3eJYePoWYudaICKeIzZz8l0i3sxmVQPi+e/PX7KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBiQj41fPidDQN5ZpyfWPYra94IMB8GA1UdIwQY MBaAFC8ayfCU2DGPMIjcpoMBhl9GBenaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHhySjhKVFlNWTh3aU55bWd3R0dYMFlGNmRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wNDE5NjgtMTVlYi00Mzg4LTk4NWEt YzIzYzgyOWRiOTM3LzEvTHhySjhKVFlNWTh3aU55bWd3R0dYMFlGNmRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wNDE5NjgtMTVlYi00Mzg4LTk4NWEtYzIzYzgyOWRiOTM3 LzEvTHhySjhKVFlNWTh3aU55bWd3R0dYMFlGNmRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALAghFS4a Gn0LBK/feXwUSdp8LotK+9+97vS9ukcDR6McnOlKwkGEGLvZXYwqSZOaf0WvC8t7 9SSNxzgkZvMfPZ+wwC3BoO+Fo+Vf9AiVliZKqVpqFaDCbxW0wpA5hKuY8ZFBim7h MvYyhZumuKAt7YbIUwdT0rpXsr9OwVHwkSIs+CMalxkATnLX5qtkNjIosxHTq5Z1 5Lz5lcjnGWxFghCJr5MgkQbqzMqd54G19ltz+Hhf806oHg79Y28YPcuY9Zyv58Xd FJltocidukOSjmDJDWav9g5qcJr/sRf6jyMA4RzS4B02E20+9UxB5Uk62m64xvdT Mg4ca4DnTz8XSA== -----END CERTIFICATE-----Generated at Mon Jan 26 22:27:40 2026 by rpki-client