This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft File: LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft (raw, json) Hash identifier: QTN8LxG+23Nz17c0kY/uTXvDQdt3HP5T9PEPoJv5s5g= Subject key identifier: 33:2E:29:A5:C0:BC:98:64:B4:79:CF:8E:EE:EB:50:CE:1F:E9:CC:A9 Authority key identifier: 2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF Certificate issuer: /CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df Certificate serial: 019BD8467D0598AFF966D311CC1932C9A731 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft Manifest number: 17DC Signing time: Mon 19 Jan 2026 22:00:56 +0000 Manifest this update: Mon 19 Jan 2026 22:00:56 +0000 Manifest next update: Tue 20 Jan 2026 22:00:56 +0000 Files and hashes: 1: 7SVxOyfDTdVmUsWmgURrDRQqatM.roa (hash: kbRt8SjM7r5zHztQmiuG8W05HbVb928re2uT+S2QpLY=) 2: IWFu4PcIHs7L8thEAkF3lVO_2XI.roa (hash: 4zilbczhiZchZfoj7btdnHaec0KUj97xB6CgD8W5sFw=) 3: LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl (hash: OEQITlRttVXIf4Md+WgewcHKywPWloeV4RBfEDN1188=) 4: lDkFS134PLdNwq1XhPeVSuXWQw0.roa (hash: sWC1chnNML5lu5ldTASbLUnaff4GQPJ6rkXZBHVvz6g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 22:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:46:7d:05:98:af:f9:66:d3:11:cc:19:32:c9:a7:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df Validity Not Before: Jan 19 22:00:56 2026 GMT Not After : Jan 20 22:00:56 2026 GMT Subject: CN=332e29a5c0bc9864b479cf8eeeeb50ce1fe9cca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:9b:1b:09:13:39:65:10:16:d4:d8:ab:28:fb: f7:71:2d:bb:c5:c0:f8:3b:df:19:93:a0:43:58:59: 4c:9a:4a:31:2f:dd:a2:49:89:9b:31:1a:6e:4b:05: db:05:da:fd:c7:e1:f9:08:24:2a:e4:08:5a:4e:a5: 72:c5:1d:4c:67:32:ac:f1:9f:bc:6e:2d:fa:d6:36: d9:db:6b:df:e3:e5:7a:81:7e:4b:5a:34:7e:5f:87: 05:94:00:2f:32:51:ff:84:bd:b4:d7:21:18:e8:39: 0b:56:dd:2e:9f:12:71:35:be:56:fa:98:e4:86:1a: 29:f0:3f:44:13:22:45:78:4f:8f:59:f0:67:fc:32: ff:bd:00:a0:f8:42:16:32:ad:92:52:bc:4d:38:50: 2f:47:1d:3c:2b:7d:c4:8d:86:0d:6d:cd:09:46:9a: a2:b5:fc:f6:d1:1d:ee:86:aa:9f:42:c2:65:9a:6d: 6a:4e:60:64:06:80:e8:0b:2f:01:d2:50:19:c8:70: ea:e0:d3:45:db:97:3a:62:b4:d4:c4:28:8d:39:d3: 56:db:5a:01:c2:81:25:47:d4:ae:e7:91:38:ab:48: ea:2b:04:6d:aa:25:35:57:14:95:90:9e:b2:63:b7: f4:3d:6b:5a:38:d5:ba:df:b3:43:8e:3b:8e:5f:f7: b7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2E:29:A5:C0:BC:98:64:B4:79:CF:8E:EE:EB:50:CE:1F:E9:CC:A9 X509v3 Authority Key Identifier: keyid:2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:fa:64:36:c1:f4:3d:0f:d0:b4:cc:a3:78:8b:09:bc:95:75: e1:81:69:56:59:b5:16:d1:de:cd:e0:2a:89:db:02:4d:f8:a9: 46:1a:01:b7:e2:c0:96:e8:fc:56:c7:d5:4c:9c:3c:6c:7b:f9: e7:6b:9a:2a:b3:34:4f:ef:46:32:12:d8:29:7d:58:21:84:d2: 27:ce:22:d6:f5:02:bf:97:95:14:21:7d:ee:6b:ef:2f:49:66: 70:91:2a:0b:7c:9b:76:47:60:5b:ca:fb:6b:67:4d:de:07:4b: 06:97:5c:a8:fa:28:0e:77:3f:04:e4:20:a1:54:79:77:60:fa: 59:96:11:72:39:c8:49:25:19:0d:52:18:c3:5c:eb:50:5c:10: 08:17:b1:8e:5f:2f:81:47:84:3d:5d:61:c0:5b:40:bf:12:9d: 97:e0:9f:bf:b4:5d:1b:33:2d:0e:94:7e:00:d5:0f:32:1b:94: c5:8c:07:ee:c8:6a:46:80:c8:65:12:af:18:49:dd:46:2b:b4: 15:27:13:be:19:4a:bd:cd:50:f3:ab:fb:12:3d:c1:93:53:d9: 2e:b7:1a:ee:6d:95:3f:b4:c8:dd:11:a0:6e:a4:8c:a1:95:4d: 08:33:a6:3d:63:ba:e3:14:01:27:46:ab:d4:0b:ba:84:ea:3a: ea:ad:57:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvYRn0FmK/5ZtMRzBkyyacxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmIzMzQxM2ZhYTVlNWUxZDI3OWEyYTI1ZmY4MWQ4ZDE1 MzI1ZGYwHhcNMjYwMTE5MjIwMDU2WhcNMjYwMTIwMjIwMDU2WjAzMTEwLwYDVQQD EygzMzJlMjlhNWMwYmM5ODY0YjQ3OWNmOGVlZWViNTBjZTFmZTljY2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JsbCRM5ZRAW1NirKPv3cS27xcD4 O98Zk6BDWFlMmkoxL92iSYmbMRpuSwXbBdr9x+H5CCQq5AhaTqVyxR1MZzKs8Z+8 bi361jbZ22vf4+V6gX5LWjR+X4cFlAAvMlH/hL201yEY6DkLVt0unxJxNb5W+pjk hhop8D9EEyJFeE+PWfBn/DL/vQCg+EIWMq2SUrxNOFAvRx08K33EjYYNbc0JRpqi tfz20R3uhqqfQsJlmm1qTmBkBoDoCy8B0lAZyHDq4NNF25c6YrTUxCiNOdNW21oB woElR9Su55E4q0jqKwRtqiU1VxSVkJ6yY7f0PWtaONW637NDjjuOX/e3uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMuKaXAvJhktHnPju7rUM4f6cypMB8GA1UdIwQY MBaAFC5rM0E/ql5eHSeaKiX/gdjRUyXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1zelFULXFYbDRkSjVvcUpmLUIyTkZUSmQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hY2NkZTgtZjQ2Zi00ZWY5LTk0YWYt OGRkODFlNGIzZTMzLzEvTG1zelFULXFYbDRkSjVvcUpmLUIyTkZUSmQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9hY2NkZTgtZjQ2Zi00ZWY5LTk0YWYtOGRkODFlNGIzZTMz LzEvTG1zelFULXFYbDRkSjVvcUpmLUIyTkZUSmQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcfpkNsH0 PQ/QtMyjeIsJvJV14YFpVlm1FtHezeAqidsCTfipRhoBt+LAluj8VsfVTJw8bHv5 52uaKrM0T+9GMhLYKX1YIYTSJ84i1vUCv5eVFCF97mvvL0lmcJEqC3ybdkdgW8r7 a2dN3gdLBpdcqPooDnc/BOQgoVR5d2D6WZYRcjnISSUZDVIYw1zrUFwQCBexjl8v gUeEPV1hwFtAvxKdl+Cfv7RdGzMtDpR+ANUPMhuUxYwH7shqRoDIZRKvGEndRiu0 FScTvhlKvc1Q86v7Ej3Bk1PZLrca7m2VP7TI3RGgbqSMoZVNCDOmPWO64xQBJ0ar 1Au6hOo66q1X+g== -----END CERTIFICATE-----Generated at Tue Jan 20 07:36:17 2026 by rpki-client