This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft File: LubVYKCKAT8_4OZtra9v0Cvq9D8.mft (raw, json) Hash identifier: F0RkaX0ddhsqnx0HmhR9QJA/umSZo6SYoUq/cogKQvA= Subject key identifier: 2F:CF:C4:2B:D2:5D:33:22:E3:24:69:39:A6:6B:33:30:BD:A7:1F:3D Authority key identifier: 2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F Certificate issuer: /CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f Certificate serial: 019BAD937C476505B63DCE3031B77302F679 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft Manifest number: 17FF Signing time: Sun 11 Jan 2026 15:01:22 +0000 Manifest this update: Sun 11 Jan 2026 15:01:22 +0000 Manifest next update: Mon 12 Jan 2026 15:01:22 +0000 Files and hashes: 1: GVmTcHNEbySWO7WrdP4mr8RnpuA.roa (hash: KF2454R21pC10ppMz3hBXK/oA3TnttDudSwSnWRb9YE=) 2: LubVYKCKAT8_4OZtra9v0Cvq9D8.crl (hash: Q058HdGkdNcg1YUjYciFF8ZUneMJFZx8yBZVenVNj1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 15:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:93:7c:47:65:05:b6:3d:ce:30:31:b7:73:02:f6:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f Validity Not Before: Jan 11 15:01:22 2026 GMT Not After : Jan 12 15:01:22 2026 GMT Subject: CN=2fcfc42bd25d3322e3246939a66b3330bda71f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0a:16:24:98:eb:7f:9c:e9:fd:df:9a:7b:79: f9:69:18:33:5d:1a:63:f3:f8:82:3d:a4:49:30:66: f0:e8:96:15:1f:f6:87:ae:85:ac:f1:c3:72:1c:d4: 92:6e:2a:42:2a:e8:af:5e:71:92:79:cb:6e:d9:1a: 30:dd:7b:7f:68:f9:6d:2b:e9:0e:9e:39:de:59:92: b1:a1:fd:7a:27:85:d2:62:05:0c:56:a5:27:c5:8d: 6f:21:8e:88:27:91:2b:4b:4d:5d:9d:9a:87:17:73: 5f:86:3d:99:e1:07:9d:31:62:e9:02:02:86:c2:9a: 13:f2:e5:d8:00:ce:db:36:bf:fc:12:1c:c7:16:03: cb:b5:d4:64:1f:df:47:0a:d4:ba:03:f9:62:6f:96: 5e:5b:1d:1d:1c:a3:a3:dd:a5:e3:89:13:43:15:e8: ab:cd:99:8b:7e:09:b1:6c:99:d7:7b:92:20:be:d5: d9:2a:be:0a:d6:2f:7e:82:91:09:43:9a:91:30:e1: a6:f4:16:80:74:6b:d1:6a:fc:2d:43:dc:91:e0:77: 44:2c:b6:bb:01:7d:18:0e:69:9e:7e:ae:7d:01:c9: 59:9a:e8:fc:34:65:33:03:73:89:a0:5c:e5:02:40: 59:fa:6f:8f:3c:e0:f4:d6:88:62:0b:39:69:a0:30: 1a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:CF:C4:2B:D2:5D:33:22:E3:24:69:39:A6:6B:33:30:BD:A7:1F:3D X509v3 Authority Key Identifier: keyid:2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:a0:cd:8f:58:72:78:5a:ff:e8:23:d3:d0:8f:6c:f9:e1:24: 8e:5b:54:48:60:79:75:6b:7f:d0:15:74:0d:b6:48:49:5f:c9: b9:64:21:0c:93:8d:97:05:fc:7b:c0:7b:fd:02:50:59:b3:e2: 32:31:fc:bb:ae:36:f4:58:44:95:69:be:4a:97:7e:67:1b:47: f4:32:9e:be:07:14:ea:58:3e:5a:ab:3e:fc:9f:08:38:7e:b6: 3e:bd:e3:ed:46:9f:f6:30:ba:65:48:09:47:4d:6c:2a:ab:24: 72:90:99:f4:89:3d:90:27:77:67:f7:fc:1c:68:8b:07:a4:c8: 5a:e6:4a:db:74:82:84:0f:55:7b:3d:36:b0:f8:fe:60:75:79: e1:fe:cf:e9:62:3c:8a:f3:f7:42:b3:56:c8:22:3d:0e:01:d0: bc:03:71:8e:d7:34:0d:46:42:9f:af:c8:64:a4:e2:02:c0:fb: 26:66:62:c9:bf:ec:be:7b:6d:d6:0d:22:03:bc:58:d1:6e:88: 92:1f:c5:13:9a:e1:b6:ff:b0:d0:7e:01:29:f9:b0:2c:e5:e8: 61:a0:83:98:93:0e:da:9a:4a:38:d6:1e:69:9a:fe:4e:03:78: b9:ac:28:e1:88:ee:6e:60:d3:b8:40:d9:c1:e2:49:df:17:9f: 72:cd:ab:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZutk3xHZQW2Pc4wMbdzAvZ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZTZkNTYwYTA4YTAxM2YzZmUwZTY2ZGFkYWY2ZmQwMmJl YWY0M2YwHhcNMjYwMTExMTUwMTIyWhcNMjYwMTEyMTUwMTIyWjAzMTEwLwYDVQQD EygyZmNmYzQyYmQyNWQzMzIyZTMyNDY5MzlhNjZiMzMzMGJkYTcxZjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowoWJJjrf5zp/d+ae3n5aRgzXRpj 8/iCPaRJMGbw6JYVH/aHroWs8cNyHNSSbipCKuivXnGSectu2Row3Xt/aPltK+kO njneWZKxof16J4XSYgUMVqUnxY1vIY6IJ5ErS01dnZqHF3Nfhj2Z4QedMWLpAgKG wpoT8uXYAM7bNr/8EhzHFgPLtdRkH99HCtS6A/lib5ZeWx0dHKOj3aXjiRNDFeir zZmLfgmxbJnXe5IgvtXZKr4K1i9+gpEJQ5qRMOGm9BaAdGvRavwtQ9yR4HdELLa7 AX0YDmmefq59AclZmuj8NGUzA3OJoFzlAkBZ+m+PPOD01ohiCzlpoDAaiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/PxCvSXTMi4yRpOaZrMzC9px89MB8GA1UdIwQY MBaAFC7m1WCgigE/P+Dmba2vb9Ar6vQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHViVllLQ0tBVDhfNE9adHJhOXYwQ3ZxOUQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jMDBhNWItNmE1OS00MWRkLWIxM2It NzM0OTVmYzA4ZmM0LzEvTHViVllLQ0tBVDhfNE9adHJhOXYwQ3ZxOUQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9jMDBhNWItNmE1OS00MWRkLWIxM2ItNzM0OTVmYzA4ZmM0 LzEvTHViVllLQ0tBVDhfNE9adHJhOXYwQ3ZxOUQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYaDNj1hy eFr/6CPT0I9s+eEkjltUSGB5dWt/0BV0DbZISV/JuWQhDJONlwX8e8B7/QJQWbPi MjH8u6429FhElWm+Spd+ZxtH9DKevgcU6lg+Wqs+/J8IOH62Pr3j7Uaf9jC6ZUgJ R01sKqskcpCZ9Ik9kCd3Z/f8HGiLB6TIWuZK23SChA9Vez02sPj+YHV54f7P6WI8 ivP3QrNWyCI9DgHQvANxjtc0DUZCn6/IZKTiAsD7JmZiyb/svntt1g0iA7xY0W6I kh/FE5rhtv+w0H4BKfmwLOXoYaCDmJMO2ppKONYeaZr+TgN4uawo4YjubmDTuEDZ weJJ3xefcs2rQg== -----END CERTIFICATE-----Generated at Sun Jan 11 22:48:13 2026 by rpki-client