This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft File: LuliCJJdg2-NA30XmYCoOhsME0I.mft (raw, json) Hash identifier: 4Z5MW5GLlagpqc0BSwaZf9YlSHHvTppmbUa4nMyTw/Q= Subject key identifier: E4:8E:6E:A6:DE:81:3F:C1:20:B8:EF:E4:45:66:78:A9:5C:9C:79:D2 Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42 Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342 Certificate serial: 019BFCF7F287120DD6AA26ED90263AE933E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft Manifest number: 17ED Signing time: Tue 27 Jan 2026 01:01:06 +0000 Manifest this update: Tue 27 Jan 2026 01:01:06 +0000 Manifest next update: Wed 28 Jan 2026 01:01:06 +0000 Files and hashes: 1: 08zs1vez5T3OxmoffP4v4xK9YRM.roa (hash: uy8J25dlMEzvaPv80sYDbmqCg6sB5jPeyau+AuQ0+dM=) 2: 1k_gsLYQzZ2auoJeJkWUzu7Ie1o.roa (hash: QopUlfrOmMWf3HhqNYkuS7EjOhnM84v1jbZHx5PFkcs=) 3: LuliCJJdg2-NA30XmYCoOhsME0I.crl (hash: vF+xMuS6pvobmdCGF9P4oySQrJ4vqZwzUj36prt1OHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f7:f2:87:12:0d:d6:aa:26:ed:90:26:3a:e9:33:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342 Validity Not Before: Jan 27 01:01:06 2026 GMT Not After : Jan 28 01:01:06 2026 GMT Subject: CN=e48e6ea6de813fc120b8efe4456678a95c9c79d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8f:12:23:68:5e:ae:91:52:d0:64:01:a8:57: f9:2d:a9:ff:12:92:cd:d0:ba:1f:f3:7d:1e:5e:a1: 4e:eb:17:aa:10:45:e7:9b:71:98:ae:87:cf:5d:ac: dd:a3:7e:30:04:22:10:6e:97:be:ad:ad:6b:ae:e2: 41:95:e6:20:70:e2:87:cf:c3:13:53:31:62:1e:35: fd:ce:aa:fd:66:2f:ea:34:7b:83:d0:48:28:c0:55: 53:ab:ee:25:1f:c3:36:7e:93:05:da:53:23:e3:8f: 63:63:8f:15:15:9e:1a:46:ce:87:93:e4:67:8b:f4: ed:bd:ad:14:62:44:d5:2c:09:34:9f:07:1e:9c:40: f5:38:cf:2a:2d:dd:78:eb:45:f6:ff:df:8d:72:31: 9e:41:da:e0:48:0e:a1:27:88:5e:a3:d4:84:6b:27: f2:af:a7:66:12:e9:2f:66:22:9e:56:76:cd:7b:75: 17:e9:cc:be:11:e9:fc:1e:57:5a:9e:5b:4b:3f:24: 4c:6d:66:3b:54:66:64:64:ed:e2:fe:44:bd:64:bd: 25:74:c8:90:4f:9a:c4:5c:13:b9:65:41:5d:69:39: e2:b1:fb:79:1d:c2:8e:38:41:a8:98:8b:c5:50:f2: e0:28:00:03:57:46:bd:7c:fb:74:1d:65:09:c1:2d: 4f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:8E:6E:A6:DE:81:3F:C1:20:B8:EF:E4:45:66:78:A9:5C:9C:79:D2 X509v3 Authority Key Identifier: keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:48:4a:83:ca:9f:c5:f0:09:f3:47:7f:ab:3a:04:61:7e:7c: 7f:ca:dd:9b:0b:d6:1c:8a:90:85:45:22:8d:65:53:b9:8a:89: 90:49:92:79:6c:b9:2f:01:41:8e:43:40:31:24:a5:17:af:58: 20:7e:00:d1:2b:b9:fb:e8:b1:10:ba:81:5a:8e:12:2e:7c:fc: 7d:82:9d:fa:fb:ac:6d:3d:50:89:49:cb:67:b4:81:02:d1:d5: 9b:43:54:df:58:be:dd:7f:e2:7b:0f:3c:21:76:8f:1f:e9:e6: f3:46:88:fe:0c:de:bc:db:3e:84:67:74:3d:39:1c:6f:d3:0f: 66:a5:ad:f6:93:ca:6d:1c:76:f4:c0:0b:59:ae:9c:b9:0a:ae: ce:a1:50:ce:48:1c:23:f0:d0:1e:33:85:e5:40:ce:05:be:60: 4f:6d:8b:6d:be:1a:2d:e0:e8:c4:78:8e:87:15:bb:26:38:d1: 14:11:b8:18:e7:25:3a:df:42:72:57:d3:c3:da:4b:85:27:d7: c1:67:8b:62:c0:b3:d6:c3:cd:23:74:21:12:68:4c:21:63:2b: 7b:c8:2e:51:fc:4f:63:64:05:6c:0c:02:7f:e9:a5:d4:49:c7: ac:1f:46:54:85:d6:d5:c6:0d:3d:d4:b6:4b:cf:5f:ec:22:04: f6:7f:aa:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv89/KHEg3WqibtkCY66TPhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZTk2MjA4OTI1ZDgzNmY4ZDAzN2QxNzk5ODBhODNhMWIw YzEzNDIwHhcNMjYwMTI3MDEwMTA2WhcNMjYwMTI4MDEwMTA2WjAzMTEwLwYDVQQD EyhlNDhlNmVhNmRlODEzZmMxMjBiOGVmZTQ0NTY2NzhhOTVjOWM3OWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY8SI2herpFS0GQBqFf5Lan/EpLN 0Lof830eXqFO6xeqEEXnm3GYrofPXazdo34wBCIQbpe+ra1rruJBleYgcOKHz8MT UzFiHjX9zqr9Zi/qNHuD0EgowFVTq+4lH8M2fpMF2lMj449jY48VFZ4aRs6Hk+Rn i/Ttva0UYkTVLAk0nwcenED1OM8qLd1460X2/9+NcjGeQdrgSA6hJ4heo9SEayfy r6dmEukvZiKeVnbNe3UX6cy+Een8HldanltLPyRMbWY7VGZkZO3i/kS9ZL0ldMiQ T5rEXBO5ZUFdaTnisft5HcKOOEGomIvFUPLgKAADV0a9fPt0HWUJwS1PQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSObqbegT/BILjv5EVmeKlcnHnSMB8GA1UdIwQY MBaAFC7pYgiSXYNvjQN9F5mAqDobDBNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83MWM2MDgtMWNjMi00ODk5LWE1ZmEt ODQ2YWFmMGViMWFkLzEvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83MWM2MDgtMWNjMi00ODk5LWE1ZmEtODQ2YWFmMGViMWFk LzEvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdEhKg8qf xfAJ80d/qzoEYX58f8rdmwvWHIqQhUUijWVTuYqJkEmSeWy5LwFBjkNAMSSlF69Y IH4A0Su5++ixELqBWo4SLnz8fYKd+vusbT1QiUnLZ7SBAtHVm0NU31i+3X/iew88 IXaPH+nm80aI/gzevNs+hGd0PTkcb9MPZqWt9pPKbRx29MALWa6cuQquzqFQzkgc I/DQHjOF5UDOBb5gT22Lbb4aLeDoxHiOhxW7JjjRFBG4GOclOt9CclfTw9pLhSfX wWeLYsCz1sPNI3QhEmhMIWMre8guUfxPY2QFbAwCf+ml1EnHrB9GVIXW1cYNPdS2 S89f7CIE9n+qhg== -----END CERTIFICATE-----Generated at Tue Jan 27 08:51:30 2026 by rpki-client