This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft File: LO_eMLilizIqQx8IKe1P8ztarBg.mft (raw, json) Hash identifier: q3iTNoYOcTPlmc5WD3tpwzKIhiIjKpWe0nH6zr72oCo= Subject key identifier: FA:A0:5C:0B:12:5A:78:E2:FF:FF:24:07:6E:37:17:36:F3:C1:F8:07 Authority key identifier: 2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18 Certificate issuer: /CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18 Certificate serial: 019BFB7753C53FE51306E0A0BD340083F542 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 18:00:59 +0000 Manifest this update: Mon 26 Jan 2026 18:00:59 +0000 Manifest next update: Tue 27 Jan 2026 18:00:59 +0000 Files and hashes: 1: LO_eMLilizIqQx8IKe1P8ztarBg.crl (hash: 0B/T6t6DHArqw6pIZO0/+maABmT40fso1tfXWIsCNZ4=) 2: riStBl-2mLLI1xTkjtqgzstCOrU.roa (hash: hf9I5Mw3LW7ngdtmYTFwt2Y1Syg1s0AmbFlrIM3a+Ns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 18:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:53:c5:3f:e5:13:06:e0:a0:bd:34:00:83:f5:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18 Validity Not Before: Jan 26 18:00:59 2026 GMT Not After : Jan 27 18:00:59 2026 GMT Subject: CN=faa05c0b125a78e2ffff24076e371736f3c1f807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:61:ef:41:32:9c:ce:22:10:1d:7b:f3:47:5c: fa:af:78:cb:d5:46:c0:d4:b2:b9:71:88:73:79:7a: a5:8e:3d:93:8a:43:27:b5:c0:54:01:30:a2:45:85: 18:f6:75:69:ab:60:18:a5:d4:08:b7:d5:b9:b6:18: 30:cf:05:ec:dc:57:9f:f4:84:87:d4:d0:8a:36:cd: ab:96:7f:0e:5c:9f:30:0a:81:d2:cb:98:4d:32:c6: ba:d2:a5:c7:f4:08:7f:56:07:b7:13:d7:ca:64:5b: 93:7e:78:89:9b:91:1e:e8:82:c3:85:99:ac:12:4e: c2:a5:45:29:e8:f0:c1:53:07:52:05:55:a2:09:2b: 99:71:99:b9:86:df:d2:d7:e0:e3:72:43:18:72:3f: f8:58:72:e2:f8:47:15:d9:be:a9:93:6a:6c:13:33: f2:97:af:f0:35:96:b9:51:af:e9:63:ed:fa:78:1a: 7d:29:91:70:f3:80:9b:ee:91:58:a0:2c:7b:cf:1e: 5c:fe:1e:eb:db:d9:74:6a:9c:25:13:24:e1:3b:a5: f0:28:ed:33:a9:53:67:68:a1:5b:4f:3c:f8:c0:d1: b3:57:2b:76:00:7e:12:cf:85:a5:89:a3:7b:c1:18: 81:9a:76:f6:35:f6:7a:c5:e9:f1:30:fc:9e:ff:fc: cf:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A0:5C:0B:12:5A:78:E2:FF:FF:24:07:6E:37:17:36:F3:C1:F8:07 X509v3 Authority Key Identifier: keyid:2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:57:0d:7c:a8:12:4f:dc:4e:23:24:98:66:02:3a:75:74:db: d1:cd:e0:df:a1:f3:c8:5f:85:ed:9f:19:e3:6b:13:94:42:01: 2e:2e:4e:22:91:52:dd:19:5a:b8:1d:eb:61:ca:e5:ba:77:85: d0:16:9e:01:25:8f:a2:d0:fa:b6:5e:90:bc:31:49:ed:82:87: 91:41:78:79:04:4c:75:04:31:19:38:79:ef:0c:d8:58:b9:f7: f5:e1:d8:43:18:d7:31:20:33:00:e8:7d:9a:04:c9:36:f9:cb: 8d:9e:6f:7d:25:39:4e:50:02:1a:c5:96:ba:8e:50:6c:81:c1: 67:0d:16:3d:9a:c1:83:b2:6f:e1:97:cd:8c:95:19:b6:2f:b8: 31:b9:e3:3d:ce:fc:47:f0:94:d9:bd:50:e7:82:f6:96:f3:f6: bc:56:da:60:43:83:de:6f:68:74:23:b8:f3:6e:c3:10:c9:f0: af:3b:4c:fe:c0:29:42:46:a5:a9:4c:40:a7:ae:37:de:5c:22: 3b:99:a2:88:09:18:b9:e6:8b:d5:bd:c8:e1:e5:f5:a2:e7:79: 67:54:02:37:dc:6b:dc:67:e5:c9:8a:c9:f6:e8:a6:b2:62:5e: 1f:3f:fb:6e:8f:51:d9:7d:64:9a:6c:2b:fd:56:09:bc:ac:f2: 02:d1:f0:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7d1PFP+UTBuCgvTQAg/VCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZWZkZTMwYjhhNThiMzIyYTQzMWYwODI5ZWQ0ZmYzM2I1 YWFjMTgwHhcNMjYwMTI2MTgwMDU5WhcNMjYwMTI3MTgwMDU5WjAzMTEwLwYDVQQD EyhmYWEwNWMwYjEyNWE3OGUyZmZmZjI0MDc2ZTM3MTczNmYzYzFmODA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWHvQTKcziIQHXvzR1z6r3jL1UbA 1LK5cYhzeXqljj2TikMntcBUATCiRYUY9nVpq2AYpdQIt9W5thgwzwXs3Fef9ISH 1NCKNs2rln8OXJ8wCoHSy5hNMsa60qXH9Ah/Vge3E9fKZFuTfniJm5Ee6ILDhZms Ek7CpUUp6PDBUwdSBVWiCSuZcZm5ht/S1+DjckMYcj/4WHLi+EcV2b6pk2psEzPy l6/wNZa5Ua/pY+36eBp9KZFw84Cb7pFYoCx7zx5c/h7r29l0apwlEyThO6XwKO0z qVNnaKFbTzz4wNGzVyt2AH4Sz4WliaN7wRiBmnb2NfZ6xenxMPye//zPEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqgXAsSWnji//8kB243FzbzwfgHMB8GA1UdIwQY MBaAFCzv3jC4pYsyKkMfCCntT/M7WqwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE9fZU1MaWxpeklxUXg4SUtlMVA4enRhckJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zM2EwZjktMTE3OC00YTZkLWI5NjQt ZmY3NjVmODUzMWQ1LzEvTE9fZU1MaWxpeklxUXg4SUtlMVA4enRhckJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zM2EwZjktMTE3OC00YTZkLWI5NjQtZmY3NjVmODUzMWQ1 LzEvTE9fZU1MaWxpeklxUXg4SUtlMVA4enRhckJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVcNfKgS T9xOIySYZgI6dXTb0c3g36HzyF+F7Z8Z42sTlEIBLi5OIpFS3RlauB3rYcrluneF 0BaeASWPotD6tl6QvDFJ7YKHkUF4eQRMdQQxGTh57wzYWLn39eHYQxjXMSAzAOh9 mgTJNvnLjZ5vfSU5TlACGsWWuo5QbIHBZw0WPZrBg7Jv4ZfNjJUZti+4MbnjPc78 R/CU2b1Q54L2lvP2vFbaYEOD3m9odCO4827DEMnwrztM/sApQkalqUxAp6433lwi O5miiAkYueaL1b3I4eX1oud5Z1QCN9xr3GflyYrJ9uimsmJeHz/7bo9R2X1kmmwr /VYJvKzyAtHw9Q== -----END CERTIFICATE-----Generated at Tue Jan 27 03:55:54 2026 by rpki-client