This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft File: LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft (raw, json) Hash identifier: pE3axXlkzfcOQqE453e+F/5EGDo2L590CMwCqqaEB9I= Subject key identifier: 45:CE:64:F3:37:DF:D4:56:98:51:95:0C:53:62:9C:AE:F6:0D:70:04 Authority key identifier: 2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1 Certificate issuer: /CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1 Certificate serial: 019BA2D989D786D0865C1F4C7F9DEEA77961 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft Manifest number: 17C0 Signing time: Fri 09 Jan 2026 13:02:04 +0000 Manifest this update: Fri 09 Jan 2026 13:02:04 +0000 Manifest next update: Sat 10 Jan 2026 13:02:04 +0000 Files and hashes: 1: Ec0ted5ZLWfXwjz0K7rWlMUFoyI.roa (hash: f/yVcWuNTpI+P5LWDRS17H6SYZW8qcj9ImBeOhCMaec=) 2: LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl (hash: yC32eyy76Vnz3A1Khzubs5sycWep8oV6t0FZXEZMZxU=) 3: PhCS65LruV3U6b8Ca6Z7Oo-MbY0.roa (hash: RoukLN17HEVFuKCJd4uqal1toMgfNC1RsX/IX0RX0fY=) 4: ZR8BONNdXKWp1MwsG4mK6VjTQHs.roa (hash: /U4sk1hEfw6QielSTTSNVHXW385f6r5x3U3PzQsHic0=) 5: qVl9UPtcOfv2GnXxXOewgnePOCY.roa (hash: Ls9yx6jQRN+6skTSMeFCiw+2fZmjJYWCP94aDC2pEzQ=) 6: ww1PQxdbKvTQH6rQL3Nf89Au6Os.roa (hash: qw3dBH90auYZSvCUgIiKsoKHtmICDEf0vkVYNxSJ9/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:d9:89:d7:86:d0:86:5c:1f:4c:7f:9d:ee:a7:79:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1 Validity Not Before: Jan 9 13:02:04 2026 GMT Not After : Jan 10 13:02:04 2026 GMT Subject: CN=45ce64f337dfd4569851950c53629caef60d7004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:91:b1:a7:40:ea:52:08:c8:c0:e0:54:6b:85: 1e:46:2f:7c:b6:e5:5a:d8:43:a8:0a:70:33:00:e4: f2:11:ac:a4:14:93:f0:bd:b0:bd:b8:42:b5:d8:c6: 07:21:d8:16:0f:ec:b3:6c:ce:75:14:47:ed:ef:cc: 9f:63:f9:25:ca:03:c5:56:b1:24:61:0a:ea:6c:84: 43:e9:3e:2f:76:b0:8f:fe:eb:4e:d2:41:56:d0:17: 66:35:75:cb:76:ea:ea:67:11:b7:15:cc:0c:82:4a: 68:40:1c:ac:3e:3e:fa:d3:6a:27:eb:79:35:8d:e0: 3f:82:92:50:47:ff:74:13:60:bb:21:c5:25:87:20: fc:c2:a9:fb:cd:0e:9e:28:43:24:03:7e:0c:66:89: 94:1f:da:6c:76:e0:f2:af:2f:cd:c7:71:31:a0:b1: c3:e8:94:ea:3f:4f:da:19:dd:72:73:be:12:ef:83: a2:49:50:f9:6d:99:b9:76:b3:0e:77:65:43:00:6a: de:22:f0:c1:df:4d:bb:8e:a2:13:9f:b0:e1:c9:c0: dc:e1:b6:72:28:28:c3:5d:fe:8a:3f:3d:5d:2e:c3: 32:b5:09:16:9d:37:80:ce:7d:51:fb:b3:d3:f7:76: 6c:37:d6:f9:53:22:a3:f6:5d:03:4a:97:2e:ec:e6: bf:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:CE:64:F3:37:DF:D4:56:98:51:95:0C:53:62:9C:AE:F6:0D:70:04 X509v3 Authority Key Identifier: keyid:2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ef:81:2c:da:78:0a:bc:a8:5f:f0:04:8e:09:19:e9:69:ba: dc:6e:b0:80:9c:97:09:78:49:44:4d:76:07:f3:4d:57:c0:b9: 01:8b:4a:9e:5e:35:ff:be:3a:48:17:6b:9b:b3:db:9f:11:ec: ad:e3:76:c0:7d:1a:8a:81:7c:e4:56:28:9e:df:c4:fe:7b:80: 30:f8:7e:e5:a9:5f:bf:fd:4f:5c:44:ab:ad:48:a1:68:21:c5: c6:42:a7:ae:9d:ce:06:b3:6c:89:1b:32:e3:77:3b:41:c4:d8: 53:42:65:ec:9a:83:ed:2e:34:22:e8:23:2a:3b:12:0a:a0:4a: fc:a1:58:71:16:e7:e7:43:4c:08:ac:5b:b6:0f:50:6c:47:f5: a3:fd:a5:fa:c0:a2:16:04:8c:30:8e:d7:93:f0:86:5f:83:d2: db:ae:5a:2f:91:ea:50:e2:6e:9f:0a:34:1e:c6:83:df:1e:1a: 83:c2:78:ed:88:2e:9a:f3:ba:da:36:85:77:79:a6:17:d1:31: 26:57:84:e1:dc:46:7e:df:9e:cf:a1:f4:ed:1a:1e:f4:48:f1: dd:af:9f:19:d4:b9:87:c6:b7:52:ae:cd:5a:8f:d5:67:e5:bd: ba:47:4c:fb:eb:4c:c0:e2:06:1c:82:3b:04:01:06:11:f5:76: 5a:a3:61:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZui2YnXhtCGXB9Mf53up3lhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjODg3MzAyZDFlNzQwZjVmOTg0ODFmYjRiN2E0NjE2OTZi ZmU1YzEwHhcNMjYwMTA5MTMwMjA0WhcNMjYwMTEwMTMwMjA0WjAzMTEwLwYDVQQD Eyg0NWNlNjRmMzM3ZGZkNDU2OTg1MTk1MGM1MzYyOWNhZWY2MGQ3MDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJGxp0DqUgjIwOBUa4UeRi98tuVa 2EOoCnAzAOTyEaykFJPwvbC9uEK12MYHIdgWD+yzbM51FEft78yfY/klygPFVrEk YQrqbIRD6T4vdrCP/utO0kFW0BdmNXXLdurqZxG3FcwMgkpoQBysPj7602on63k1 jeA/gpJQR/90E2C7IcUlhyD8wqn7zQ6eKEMkA34MZomUH9psduDyry/Nx3ExoLHD 6JTqP0/aGd1yc74S74OiSVD5bZm5drMOd2VDAGreIvDB3027jqITn7DhycDc4bZy KCjDXf6KPz1dLsMytQkWnTeAzn1R+7PT93ZsN9b5UyKj9l0DSpcu7Oa/JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXOZPM339RWmFGVDFNinK72DXAEMB8GA1UdIwQY MBaAFCyIcwLR50D1+YSB+0t6RhaWv+XBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEloekF0SG5RUFg1aElIN1MzcEdGcGFfNWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82NDViNzQtZDhmYi00NDg4LWJiZmQt YzAyOGQ5MWViYzljLzEvTEloekF0SG5RUFg1aElIN1MzcEdGcGFfNWNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS82NDViNzQtZDhmYi00NDg4LWJiZmQtYzAyOGQ5MWViYzlj LzEvTEloekF0SG5RUFg1aElIN1MzcEdGcGFfNWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACu+BLNp4 CryoX/AEjgkZ6Wm63G6wgJyXCXhJRE12B/NNV8C5AYtKnl41/746SBdrm7PbnxHs reN2wH0aioF85FYont/E/nuAMPh+5alfv/1PXESrrUihaCHFxkKnrp3OBrNsiRsy 43c7QcTYU0Jl7JqD7S40IugjKjsSCqBK/KFYcRbn50NMCKxbtg9QbEf1o/2l+sCi FgSMMI7Xk/CGX4PS265aL5HqUOJunwo0HsaD3x4ag8J47YgumvO62jaFd3mmF9Ex JleE4dxGft+ez6H07Roe9Ejx3a+fGdS5h8a3Uq7NWo/VZ+W9ukdM++tMwOIGHII7 BAEGEfV2WqNhFg== -----END CERTIFICATE-----Generated at Fri Jan 9 17:08:33 2026 by rpki-client