This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft File: LWX13HhD9bdmifNquRag2ZS5l5w.mft (raw, json) Hash identifier: pNRvvlYJbCbkup3K+9LMrQgIJycNdTCxgZB0L9Bsn1c= Subject key identifier: 1A:BD:26:8A:DB:6F:42:64:FB:8F:FB:93:6E:39:9A:2D:12:18:6A:8A Authority key identifier: 2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C Certificate issuer: /CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c Certificate serial: 019BFB404D808C015414ACB54E28854DC8C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft Manifest number: 05F0 Signing time: Mon 26 Jan 2026 17:00:53 +0000 Manifest this update: Mon 26 Jan 2026 17:00:53 +0000 Manifest next update: Tue 27 Jan 2026 17:00:53 +0000 Files and hashes: 1: LWX13HhD9bdmifNquRag2ZS5l5w.crl (hash: Ny71WSYPqhqs0G6YU+AEukrR8sJvj8WPnvTMQYRAOQs=) 2: v3xovZ6ex1RS8yXpvjTxnMF_a-4.roa (hash: x4aNx2jmSAXUPJWnM7IfmYiwoUK7G3tuxZu7KLeQ7ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:40:4d:80:8c:01:54:14:ac:b5:4e:28:85:4d:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c Validity Not Before: Jan 26 17:00:53 2026 GMT Not After : Jan 27 17:00:53 2026 GMT Subject: CN=1abd268adb6f4264fb8ffb936e399a2d12186a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:32:28:9e:9f:77:08:23:b4:4f:b1:59:60:ab: f7:06:93:a3:c4:92:d7:fa:12:be:6a:0b:38:5e:4c: 89:11:39:23:2d:45:d4:aa:b4:43:c6:b4:ef:08:05: 5d:04:64:05:cd:45:f1:20:62:73:d4:a1:23:17:b9: 96:05:81:18:ec:61:b7:64:6d:05:2d:2a:d4:ac:b0: 5c:5d:50:1c:ea:82:c0:d9:d4:41:bd:10:b3:2a:7b: 32:b2:bb:45:53:87:d9:89:e0:1b:75:7f:01:63:60: 99:99:e4:12:3f:5c:82:2c:d7:c2:ed:ad:4c:3d:ae: 2e:70:60:92:be:1e:0c:14:cf:36:91:91:22:a2:9b: 59:41:52:f7:25:c7:fd:4c:f0:41:23:60:3a:d9:10: 2b:c0:ed:ed:9f:87:16:1e:85:79:e4:e2:4b:ce:ac: 36:c8:95:63:55:8c:07:6d:a8:f6:7e:89:c7:b8:e0: b0:2d:6a:6a:4d:99:5d:d5:b8:d7:a7:d6:cc:e8:30: a5:ce:0c:88:bd:05:a2:aa:20:56:a5:5c:d4:1b:72: df:47:c7:86:e1:97:ad:bd:45:be:d4:bf:3f:7f:88: 7a:e7:65:c8:1f:d8:e0:7b:78:52:89:34:61:a2:3a: 79:6d:64:e4:11:2c:cd:b6:58:d1:52:55:c1:cb:35: 3b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BD:26:8A:DB:6F:42:64:FB:8F:FB:93:6E:39:9A:2D:12:18:6A:8A X509v3 Authority Key Identifier: keyid:2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ea:d5:14:57:59:69:6b:49:4d:11:99:a0:7d:f0:40:0a:12: f2:31:2a:d6:6a:e0:4d:d1:56:c1:18:2a:2f:48:ef:d1:7c:97: 69:b9:df:60:62:ad:9f:c8:aa:ba:77:66:83:d7:4f:c6:39:79: 67:a4:e5:05:1b:85:81:e8:ae:f6:c7:51:e2:e8:8b:ff:ee:36: be:66:61:a7:61:f7:e7:6e:88:c4:f9:75:da:42:11:f1:fd:ca: 8a:46:c4:3c:04:77:8b:27:8f:f5:35:0f:90:06:50:9c:8a:5c: 5a:78:3e:6a:fb:c0:e0:a4:a9:0c:a5:2f:bc:18:d1:e2:2a:c7: c8:9c:ca:7b:05:db:b0:cb:cc:19:70:98:08:c4:bc:f4:74:11: f2:28:44:f4:bc:98:bf:ba:1e:2a:71:1c:5f:2a:bb:7f:b6:97: 53:c2:e2:bc:54:19:f0:34:a1:06:46:7f:5d:5b:5b:f7:5e:e0: e3:29:52:09:89:56:23:91:6f:27:40:be:70:9a:46:a4:04:bb: 0b:48:9c:cb:91:b5:17:76:46:6c:3d:0d:95:58:e7:3f:38:47: 29:ef:a9:ea:55:aa:e9:5c:f3:fc:4e:98:54:f2:37:0e:4c:4d: 9c:eb:4e:4e:7e:d1:af:00:6a:70:9e:96:b3:6f:0a:76:4c:94: 4c:42:01:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7QE2AjAFUFKy1TiiFTcjAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNjVmNWRjNzg0M2Y1Yjc2Njg5ZjM2YWI5MTZhMGQ5OTRi OTk3OWMwHhcNMjYwMTI2MTcwMDUzWhcNMjYwMTI3MTcwMDUzWjAzMTEwLwYDVQQD EygxYWJkMjY4YWRiNmY0MjY0ZmI4ZmZiOTM2ZTM5OWEyZDEyMTg2YThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzIonp93CCO0T7FZYKv3BpOjxJLX +hK+ags4XkyJETkjLUXUqrRDxrTvCAVdBGQFzUXxIGJz1KEjF7mWBYEY7GG3ZG0F LSrUrLBcXVAc6oLA2dRBvRCzKnsysrtFU4fZieAbdX8BY2CZmeQSP1yCLNfC7a1M Pa4ucGCSvh4MFM82kZEioptZQVL3Jcf9TPBBI2A62RArwO3tn4cWHoV55OJLzqw2 yJVjVYwHbaj2fonHuOCwLWpqTZld1bjXp9bM6DClzgyIvQWiqiBWpVzUG3LfR8eG 4ZetvUW+1L8/f4h652XIH9jge3hSiTRhojp5bWTkESzNtljRUlXByzU7UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBq9Jorbb0Jk+4/7k245mi0SGGqKMB8GA1UdIwQY MBaAFC1l9dx4Q/W3ZonzarkWoNmUuZecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFdYMTNIaEQ5YmRtaWZOcXVSYWcyWlM1bDV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84NTBhZjgtNDhkNS00Mjk3LTlkYmUt OGU2MzNlMGYwNzlkLzEvTFdYMTNIaEQ5YmRtaWZOcXVSYWcyWlM1bDV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni84NTBhZjgtNDhkNS00Mjk3LTlkYmUtOGU2MzNlMGYwNzlk LzEvTFdYMTNIaEQ5YmRtaWZOcXVSYWcyWlM1bDV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+rVFFdZ aWtJTRGZoH3wQAoS8jEq1mrgTdFWwRgqL0jv0XyXabnfYGKtn8iqundmg9dPxjl5 Z6TlBRuFgeiu9sdR4uiL/+42vmZhp2H3526IxPl12kIR8f3KikbEPAR3iyeP9TUP kAZQnIpcWng+avvA4KSpDKUvvBjR4irHyJzKewXbsMvMGXCYCMS89HQR8ihE9LyY v7oeKnEcXyq7f7aXU8LivFQZ8DShBkZ/XVtb917g4ylSCYlWI5FvJ0C+cJpGpAS7 C0icy5G1F3ZGbD0NlVjnPzhHKe+p6lWq6Vzz/E6YVPI3DkxNnOtOTn7RrwBqcJ6W s28KdkyUTEIBag== -----END CERTIFICATE-----Generated at Tue Jan 27 01:18:39 2026 by rpki-client