This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft File: LkX41ix0LqB9y_jFfVjM9dKOPrk.mft (raw, json) Hash identifier: RkfTl6q7XT7w61am4l15KvECbIMeVMB/lJuEMqtnSrs= Subject key identifier: 50:4F:AA:50:B4:87:2E:3B:82:FC:7A:34:63:EA:87:41:30:B0:4E:EF Authority key identifier: 2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9 Certificate issuer: /CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9 Certificate serial: 019C03D651AA22D851EB153E2049CDC8A727 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft Manifest number: 1781 Signing time: Wed 28 Jan 2026 09:01:43 +0000 Manifest this update: Wed 28 Jan 2026 09:01:43 +0000 Manifest next update: Thu 29 Jan 2026 09:01:43 +0000 Files and hashes: 1: 3F0Eyl_fFWBZccM3jI1k4TCeJvI.roa (hash: 1mvJ1d/O7KfiqZVWH2l7EuJBCJuW/AroLmAMi43n5kw=) 2: LkX41ix0LqB9y_jFfVjM9dKOPrk.crl (hash: Vt5pMzNt/AMzdSUgC8LgkIkX4zWvkzMj77/oM+n1Als=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:03:d6:51:aa:22:d8:51:eb:15:3e:20:49:cd:c8:a7:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9 Validity Not Before: Jan 28 09:01:43 2026 GMT Not After : Jan 29 09:01:43 2026 GMT Subject: CN=504faa50b4872e3b82fc7a3463ea874130b04eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:62:39:f8:a4:32:91:19:ab:d3:df:fe:76:b4: 8f:fd:3d:50:74:bf:44:c9:50:e7:63:c9:69:e6:53: 03:41:70:22:99:cd:65:cb:e3:2d:91:f7:81:81:f7: 72:a5:c7:af:89:60:78:5a:62:5c:5f:74:b4:13:96: a1:6e:5d:d7:cd:2d:13:af:04:ee:e5:51:6b:8a:9c: 0b:6f:cb:6b:d9:e0:a3:e0:72:12:26:50:4f:f2:7b: 98:33:df:34:b4:2b:9f:c6:ec:52:a7:92:82:d8:d0: ae:95:73:66:0a:5f:31:bc:80:7a:21:5a:8f:f4:83: 8f:4b:a9:24:77:6b:47:70:f6:cf:96:b3:a2:92:b8: 09:1f:2d:2b:85:d4:2c:e3:93:92:15:bd:30:e1:9a: 56:3b:86:ac:e3:a8:d3:61:d3:12:5e:31:52:b6:34: 5f:6d:98:7b:9b:c5:e3:bd:ab:6e:86:9a:6d:35:cf: c6:3b:82:f3:56:a4:80:6f:27:40:27:5b:a5:8c:1d: 12:a8:8e:e7:54:f8:cf:87:fe:f1:d7:53:67:91:67: b4:a0:95:dd:e1:16:3b:64:0b:39:8f:95:bb:18:97: cf:bc:4d:21:71:35:70:14:30:4e:47:71:28:01:5c: 97:12:e6:4e:33:8e:75:8e:f5:cd:24:28:0f:11:64: 27:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:4F:AA:50:B4:87:2E:3B:82:FC:7A:34:63:EA:87:41:30:B0:4E:EF X509v3 Authority Key Identifier: keyid:2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:62:dd:c7:0d:b3:44:f6:c8:84:0c:57:51:e0:0a:2d:7a:0d: bb:75:64:d3:06:79:0d:a1:83:e2:c4:3b:53:e6:11:35:76:8b: a7:b6:4e:29:3f:02:cf:53:b2:7d:4d:f1:fc:31:8c:3f:12:c5: b6:08:7d:72:2f:fa:81:26:f3:67:1f:98:6f:56:65:8b:36:be: 99:84:6e:c6:ca:c1:64:cd:87:f0:b1:3b:6f:b8:de:dd:a5:ef: 7f:05:50:e4:01:fa:c9:21:ee:b9:df:92:e5:17:90:c1:fc:25: 21:0d:b4:53:85:1b:c7:58:f5:39:e2:fe:34:14:7e:e5:da:54: 8f:26:b8:87:56:0e:e3:07:8b:6b:08:2c:27:f0:20:62:ba:93: 95:72:0e:88:b5:de:df:ee:3f:75:bd:37:71:15:34:c2:bd:ee: c6:6c:d6:c5:35:51:5c:55:65:cd:d9:66:81:65:b4:4c:08:65: de:ae:7c:6e:f8:7b:79:0d:ae:87:e6:45:66:5b:8c:22:bc:25: a9:03:9d:76:ae:fa:2f:21:94:19:95:ad:48:61:23:69:81:33: 8f:03:d8:06:7f:cc:8e:59:e1:6b:9b:5a:8e:75:49:f4:10:63: ed:1c:be:e4:c8:91:e7:55:44:a5:1f:ee:c3:9b:a4:41:78:df: 8f:a2:5d:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwD1lGqIthR6xU+IEnNyKcnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNDVmOGQ2MmM3NDJlYTA3ZGNiZjhjNTdkNThjY2Y1ZDI4 ZTNlYjkwHhcNMjYwMTI4MDkwMTQzWhcNMjYwMTI5MDkwMTQzWjAzMTEwLwYDVQQD Eyg1MDRmYWE1MGI0ODcyZTNiODJmYzdhMzQ2M2VhODc0MTMwYjA0ZWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmI5+KQykRmr09/+drSP/T1QdL9E yVDnY8lp5lMDQXAimc1ly+MtkfeBgfdypceviWB4WmJcX3S0E5ahbl3XzS0TrwTu 5VFripwLb8tr2eCj4HISJlBP8nuYM980tCufxuxSp5KC2NCulXNmCl8xvIB6IVqP 9IOPS6kkd2tHcPbPlrOikrgJHy0rhdQs45OSFb0w4ZpWO4as46jTYdMSXjFStjRf bZh7m8XjvatuhpptNc/GO4LzVqSAbydAJ1uljB0SqI7nVPjPh/7x11NnkWe0oJXd 4RY7ZAs5j5W7GJfPvE0hcTVwFDBOR3EoAVyXEuZOM451jvXNJCgPEWQnXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBPqlC0hy47gvx6NGPqh0EwsE7vMB8GA1UdIwQY MBaAFC5F+NYsdC6gfcv4xX1YzPXSjj65MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGtYNDFpeDBMcUI5eV9qRmZWak05ZEtPUHJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8zMjc3NDItODE1Ni00ZmE0LTliZDUt MjEyMGZkMDU3NWZmLzEvTGtYNDFpeDBMcUI5eV9qRmZWak05ZEtPUHJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8zMjc3NDItODE1Ni00ZmE0LTliZDUtMjEyMGZkMDU3NWZm LzEvTGtYNDFpeDBMcUI5eV9qRmZWak05ZEtPUHJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmLdxw2z RPbIhAxXUeAKLXoNu3Vk0wZ5DaGD4sQ7U+YRNXaLp7ZOKT8Cz1OyfU3x/DGMPxLF tgh9ci/6gSbzZx+Yb1Zliza+mYRuxsrBZM2H8LE7b7je3aXvfwVQ5AH6ySHuud+S 5ReQwfwlIQ20U4Ubx1j1OeL+NBR+5dpUjya4h1YO4weLawgsJ/AgYrqTlXIOiLXe 3+4/db03cRU0wr3uxmzWxTVRXFVlzdlmgWW0TAhl3q58bvh7eQ2uh+ZFZluMIrwl qQOddq76LyGUGZWtSGEjaYEzjwPYBn/Mjlnha5tajnVJ9BBj7Ry+5MiR51VEpR/u w5ukQXjfj6JdKg== -----END CERTIFICATE-----Generated at Wed Jan 28 17:54:43 2026 by rpki-client