This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft File: LZrhAubK20caMKDIWTPgOQvy-co.mft (raw, json) Hash identifier: /3YL2RI+sDy93flfI7HVs2MvzE6XoZ8uqd6GYBY7ysQ= Subject key identifier: 6C:1A:45:6C:F9:B8:8C:91:B4:D1:66:E6:C8:BE:8B:B1:81:2A:51:27 Authority key identifier: 2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA Certificate issuer: /CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca Certificate serial: 019BFCC0B92D55031F6AD6F755A4B8302967 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft Manifest number: 0DDA Signing time: Tue 27 Jan 2026 00:00:47 +0000 Manifest this update: Tue 27 Jan 2026 00:00:47 +0000 Manifest next update: Wed 28 Jan 2026 00:00:47 +0000 Files and hashes: 1: LZrhAubK20caMKDIWTPgOQvy-co.crl (hash: Y7TIq3M+2DM1irAuiVItHOnKrvA3gb4n49Xqg3LWUq8=) 2: y2taGqw2UEDAKG5TCLDBWFLjqEw.roa (hash: tK8h1c2C7RZoKF8ADN3Dd1e3mCsCEmC4/YVEGzes/WY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c0:b9:2d:55:03:1f:6a:d6:f7:55:a4:b8:30:29:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca Validity Not Before: Jan 27 00:00:47 2026 GMT Not After : Jan 28 00:00:47 2026 GMT Subject: CN=6c1a456cf9b88c91b4d166e6c8be8bb1812a5127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b0:5c:1c:bd:b0:8f:4a:06:38:b9:0f:fe:08: 4b:83:a5:bd:cd:e1:04:75:e1:1f:15:97:85:d5:b0: 8c:27:26:49:d8:55:b7:1a:cb:21:1d:99:6f:b6:8b: 92:98:a9:8a:11:68:86:72:7e:04:bf:69:d7:de:7c: ff:fa:35:58:c2:3e:84:b0:8e:68:70:86:6e:5e:56: 73:30:3d:5b:5d:77:e0:b6:7b:ad:2e:4a:27:68:a5: cc:14:54:d6:f8:ed:15:03:51:18:5e:19:f2:32:d8: 13:1f:9e:9c:a8:2e:89:60:d8:c5:61:ec:ff:3e:57: ce:f6:11:30:39:9c:d7:03:22:a9:cc:d7:81:d8:37: c5:0a:ad:0c:f2:15:5a:01:f1:47:a9:24:d1:ef:b5: b5:af:e6:b4:28:e1:80:9e:a9:ca:2c:d5:f1:89:ba: 11:0c:b2:46:47:7d:91:d9:01:a4:af:25:69:eb:3f: b4:49:df:b5:b3:f6:ba:04:42:c9:8a:7e:7f:1b:79: 9c:53:8e:f2:19:8e:50:be:d0:f0:fd:1f:77:b7:f7: ec:1a:82:04:8b:5a:1e:7b:6d:6e:fd:ea:19:04:1c: 6a:19:5d:c6:e9:00:e5:45:0d:20:ec:7e:46:a0:c9: 1a:39:86:06:4e:94:17:93:a1:9f:c9:aa:df:be:63: 39:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:1A:45:6C:F9:B8:8C:91:B4:D1:66:E6:C8:BE:8B:B1:81:2A:51:27 X509v3 Authority Key Identifier: keyid:2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:7b:15:cb:24:dd:ec:28:8d:c4:0c:cd:7d:75:21:af:2e:08: f9:9f:09:7a:74:e3:2e:3d:a8:92:58:b5:13:70:d4:74:3d:aa: 9b:46:75:c7:8e:38:30:f0:e7:af:4b:a7:0e:72:69:5c:68:4c: 9c:0d:36:80:3d:5a:aa:63:70:33:4a:f0:fb:37:e9:b7:17:f3: 79:61:9d:8b:e3:2b:f4:20:29:10:2e:9e:95:d8:d4:12:8e:16: 9b:0a:bb:7b:83:68:ae:80:20:79:eb:12:0b:30:39:d7:db:42: 61:9a:92:21:6b:6d:06:4b:a1:07:db:60:af:e2:c5:f2:d3:92: 27:68:4d:b2:47:c3:60:fb:69:05:a9:64:2a:d8:b4:3d:73:87: e9:de:ed:d4:fc:a0:de:71:0d:ff:b8:67:8b:be:d3:a7:4e:56: b4:6a:fb:ad:99:62:a9:06:ec:74:47:f9:e7:dc:a4:ab:db:f9: 0c:f2:7c:b7:f8:97:c9:b2:c9:4c:07:2f:34:28:53:aa:01:62: 5b:0b:c9:b1:f8:ad:f3:31:3d:a6:da:f8:5f:46:2b:85:cf:35: df:59:a7:24:4c:d5:1f:81:22:44:c7:34:ed:54:15:e4:6f:19: 30:f0:73:9b:44:ae:10:81:47:19:2f:af:f4:16:ec:f0:c0:3d: 05:25:97:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wLktVQMfatb3VaS4MClnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkOWFlMTAyZTZjYWRiNDcxYTMwYTBjODU5MzNlMDM5MGJm MmY5Y2EwHhcNMjYwMTI3MDAwMDQ3WhcNMjYwMTI4MDAwMDQ3WjAzMTEwLwYDVQQD Eyg2YzFhNDU2Y2Y5Yjg4YzkxYjRkMTY2ZTZjOGJlOGJiMTgxMmE1MTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7BcHL2wj0oGOLkP/ghLg6W9zeEE deEfFZeF1bCMJyZJ2FW3GsshHZlvtouSmKmKEWiGcn4Ev2nX3nz/+jVYwj6EsI5o cIZuXlZzMD1bXXfgtnutLkonaKXMFFTW+O0VA1EYXhnyMtgTH56cqC6JYNjFYez/ PlfO9hEwOZzXAyKpzNeB2DfFCq0M8hVaAfFHqSTR77W1r+a0KOGAnqnKLNXxiboR DLJGR32R2QGkryVp6z+0Sd+1s/a6BELJin5/G3mcU47yGY5QvtDw/R93t/fsGoIE i1oee21u/eoZBBxqGV3G6QDlRQ0g7H5GoMkaOYYGTpQXk6GfyarfvmM58wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGwaRWz5uIyRtNFm5si+i7GBKlEnMB8GA1UdIwQY MBaAFC2a4QLmyttHGjCgyFkz4DkL8vnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFpyaEF1YksyMGNhTUtESVdUUGdPUXZ5LWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83NTE0ZDYtNTlkZS00NjBlLThlMmYt ZmZjZWUxNTMzNTc3LzEvTFpyaEF1YksyMGNhTUtESVdUUGdPUXZ5LWNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83NTE0ZDYtNTlkZS00NjBlLThlMmYtZmZjZWUxNTMzNTc3 LzEvTFpyaEF1YksyMGNhTUtESVdUUGdPUXZ5LWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnHsVyyTd 7CiNxAzNfXUhry4I+Z8JenTjLj2okli1E3DUdD2qm0Z1x444MPDnr0unDnJpXGhM nA02gD1aqmNwM0rw+zfptxfzeWGdi+Mr9CApEC6eldjUEo4Wmwq7e4NoroAgeesS CzA519tCYZqSIWttBkuhB9tgr+LF8tOSJ2hNskfDYPtpBalkKti0PXOH6d7t1Pyg 3nEN/7hni77Tp05WtGr7rZliqQbsdEf559ykq9v5DPJ8t/iXybLJTAcvNChTqgFi WwvJsfit8zE9ptr4X0Yrhc8131mnJEzVH4EiRMc07VQV5G8ZMPBzm0SuEIFHGS+v 9Bbs8MA9BSWXcw== -----END CERTIFICATE-----Generated at Tue Jan 27 09:54:35 2026 by rpki-client