This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft File: lxpsuy325_rMxYU7pUAPH0cOqxY.mft (raw, json) Hash identifier: dWC/vTKgU+12fnckZgao50GwKFqrn0Hi7jAKPGh0FH0= Subject key identifier: 41:5F:CB:A3:51:BC:94:CD:DE:80:56:02:0E:41:7D:BD:A3:03:CE:88 Authority key identifier: 97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16 Certificate issuer: /CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16 Certificate serial: 019BFD2E7CC364AEBDCDEED661C6F2D519CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft Manifest number: 17EE Signing time: Tue 27 Jan 2026 02:00:40 +0000 Manifest this update: Tue 27 Jan 2026 02:00:40 +0000 Manifest next update: Wed 28 Jan 2026 02:00:40 +0000 Files and hashes: 1: ZF0nGmPtxtkDUZtYeSMT07Pwz_c.roa (hash: q2DrD4GQJdtgGN/2Czf9hDRS5eBg2LiwOsSKK4NE0Ks=) 2: k6BAsgY_7U_KIwQG-JQSaHDxB9c.roa (hash: mykJoSrib037xaFcqg06p/Ay95dFVkUOY6oQwzMXt3Y=) 3: lxpsuy325_rMxYU7pUAPH0cOqxY.crl (hash: TVKR5LAVLVjfPeKiNF28Ivm7SFN8E+Xt1sAwot9E/cg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 02:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:2e:7c:c3:64:ae:bd:cd:ee:d6:61:c6:f2:d5:19:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16 Validity Not Before: Jan 27 02:00:40 2026 GMT Not After : Jan 28 02:00:40 2026 GMT Subject: CN=415fcba351bc94cdde8056020e417dbda303ce88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:27:4d:d0:0b:51:2b:50:11:7a:b0:ff:e7:42: b4:94:3e:53:97:25:04:d4:99:86:b9:6c:29:e1:c3: e1:ed:75:0f:e8:f9:7e:d6:f5:ca:96:67:89:2e:07: 31:82:1d:ee:f8:73:a5:d6:65:f2:60:5f:08:68:3b: ec:88:bb:3d:9a:88:94:da:43:8e:8b:db:4b:04:be: 57:77:07:cb:da:ba:7b:20:2a:1e:1c:96:5b:9a:5c: 66:77:1d:f3:2f:52:cb:e1:7a:36:ac:bb:b9:eb:9b: 8b:d4:84:de:ee:f1:5b:87:69:e9:1c:32:f9:f5:3d: ad:61:59:ab:3d:3a:9a:e5:3a:d3:d1:a2:72:20:f2: 43:89:90:f0:f1:47:ed:67:ad:f0:fe:b7:41:79:eb: 7e:fe:9b:c6:cc:d0:c3:57:02:f9:62:25:ec:84:9d: 11:57:d6:2b:a6:8a:97:7b:8f:00:a5:c1:69:8f:d7: 7e:d4:3d:f1:36:fc:79:b7:d5:8a:11:b0:c5:4b:c9: 6e:09:38:0b:d9:ea:4f:4b:f2:76:a8:9c:5a:df:25: ed:a2:27:86:54:dd:66:60:8f:2f:be:4d:a7:94:d7: 35:39:83:0d:f3:24:3b:f4:7f:26:b2:e3:ba:b3:bc: 9c:eb:c0:84:00:bb:18:3f:1b:f8:3e:19:20:03:4f: 24:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:5F:CB:A3:51:BC:94:CD:DE:80:56:02:0E:41:7D:BD:A3:03:CE:88 X509v3 Authority Key Identifier: keyid:97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:76:19:a0:75:72:ed:cb:0b:28:4c:3d:61:55:10:b1:80:9a: d9:70:d9:10:ad:6d:b8:1f:fc:71:ab:a1:ed:20:8b:28:d3:a4: ab:4e:e0:32:92:32:4c:6d:11:94:30:8f:78:0c:27:ee:56:64: f7:cd:93:03:c2:79:7e:eb:a6:e7:30:26:83:15:45:72:fc:b8: e3:39:c9:e7:43:f3:5b:ee:8d:46:f2:f1:f3:dc:c0:4e:bb:12: d7:66:6a:0f:90:f4:e7:bb:f5:5f:dd:49:50:b7:cc:80:e0:4e: 69:e5:75:9a:4f:86:35:93:8d:f8:e7:f4:dc:db:f5:7b:75:be: b1:7a:d8:56:ea:1b:7b:9c:38:53:ea:92:32:f4:4b:f9:c0:e7: 54:dd:dc:61:bd:ea:08:0b:25:d2:69:4b:e3:5d:72:c5:c9:d9: 48:43:9e:08:60:d3:d0:10:7e:24:f8:ad:1f:f0:a7:24:19:b5: 30:c7:cf:15:45:59:be:bf:48:48:5c:06:11:a6:2f:18:5d:08: d9:55:4d:6b:b0:a1:7b:db:73:53:12:65:c0:ce:8c:2a:e4:3e: b5:65:a5:c8:37:dd:7b:9d:48:9b:c2:24:72:da:02:cd:91:53: dd:21:71:4d:cf:c8:38:54:a6:9d:b0:a4:c3:56:54:e6:f9:98: c8:cb:e2:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9LnzDZK69ze7WYcby1RnKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MWE2Y2JiMmRmNmU3ZmFjY2M1ODUzYmE1NDAwZjFmNDcw ZWFiMTYwHhcNMjYwMTI3MDIwMDQwWhcNMjYwMTI4MDIwMDQwWjAzMTEwLwYDVQQD Eyg0MTVmY2JhMzUxYmM5NGNkZGU4MDU2MDIwZTQxN2RiZGEzMDNjZTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSdN0AtRK1ARerD/50K0lD5TlyUE 1JmGuWwp4cPh7XUP6Pl+1vXKlmeJLgcxgh3u+HOl1mXyYF8IaDvsiLs9moiU2kOO i9tLBL5XdwfL2rp7ICoeHJZbmlxmdx3zL1LL4Xo2rLu565uL1ITe7vFbh2npHDL5 9T2tYVmrPTqa5TrT0aJyIPJDiZDw8UftZ63w/rdBeet+/pvGzNDDVwL5YiXshJ0R V9YrpoqXe48ApcFpj9d+1D3xNvx5t9WKEbDFS8luCTgL2epPS/J2qJxa3yXtoieG VN1mYI8vvk2nlNc1OYMN8yQ79H8msuO6s7yc68CEALsYPxv4PhkgA08kIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFfy6NRvJTN3oBWAg5Bfb2jA86IMB8GA1UdIwQY MBaAFJcabLst9uf6zMWFO6VADx9HDqsWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHhwc3V5MzI1X3JNeFlVN3BVQVBIMGNPcXhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS83ZDNmMDAtZDQ4Yy00MTZmLTkxOWUt ZGMwMzg5ZjkxNjdkLzEvbHhwc3V5MzI1X3JNeFlVN3BVQVBIMGNPcXhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS83ZDNmMDAtZDQ4Yy00MTZmLTkxOWUtZGMwMzg5ZjkxNjdk LzEvbHhwc3V5MzI1X3JNeFlVN3BVQVBIMGNPcXhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt3YZoHVy 7csLKEw9YVUQsYCa2XDZEK1tuB/8cauh7SCLKNOkq07gMpIyTG0RlDCPeAwn7lZk 982TA8J5fuum5zAmgxVFcvy44znJ50PzW+6NRvLx89zATrsS12ZqD5D057v1X91J ULfMgOBOaeV1mk+GNZON+Of03Nv1e3W+sXrYVuobe5w4U+qSMvRL+cDnVN3cYb3q CAsl0mlL411yxcnZSEOeCGDT0BB+JPitH/CnJBm1MMfPFUVZvr9ISFwGEaYvGF0I 2VVNa7Che9tzUxJlwM6MKuQ+tWWlyDfde51Im8IkctoCzZFT3SFxTc/IOFSmnbCk w1ZU5vmYyMvioQ== -----END CERTIFICATE-----Generated at Tue Jan 27 11:52:47 2026 by rpki-client