This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft File: LUhz5ui-T503ZBhPE-V1D4xh9os.mft (raw, json) Hash identifier: ENQk96kMJNCNsIZlC7J2rOPCbqvz6vvgILq+A6MvK/4= Subject key identifier: EF:8D:7D:26:37:FD:11:7F:85:16:A4:BE:C4:BC:4F:E9:B1:E8:FE:6C Authority key identifier: 2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B Certificate issuer: /CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b Certificate serial: 019BB3953B89DF952533AF968D80D90394C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft Manifest number: 0DB1 Signing time: Mon 12 Jan 2026 19:01:00 +0000 Manifest this update: Mon 12 Jan 2026 19:01:00 +0000 Manifest next update: Tue 13 Jan 2026 19:01:00 +0000 Files and hashes: 1: LUhz5ui-T503ZBhPE-V1D4xh9os.crl (hash: 8/GroXAhuSCXiXGGa3CkqDKwD736Xoc7dm4hJ5wFwkQ=) 2: MDbmuyuCNpEGg70tUNib047bzYM.roa (hash: aRny3LR/3U87kr9DfyYwPngDlU1/98VG3ukh37CaHsI=) 3: vLaBL3FQDXYxCxa5QCEYQSKizbk.roa (hash: bow5STBCMw0saR4ctONz11ABlaiag4hx4EvsTW2vQ+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:95:3b:89:df:95:25:33:af:96:8d:80:d9:03:94:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b Validity Not Before: Jan 12 19:01:00 2026 GMT Not After : Jan 13 19:01:00 2026 GMT Subject: CN=ef8d7d2637fd117f8516a4bec4bc4fe9b1e8fe6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4c:25:18:aa:26:33:42:b4:07:af:a2:cd:9a: 92:64:c8:a3:55:40:bb:53:04:fc:91:b9:f8:a0:81: 91:17:04:e9:a2:a7:64:ee:b9:6d:a7:88:10:d7:50: 7c:f1:62:00:77:37:92:a3:45:1d:6f:4b:8d:46:44: 63:29:4d:a0:84:92:8b:ee:7b:0e:87:8d:ca:8c:c4: 1e:c8:0e:10:5e:08:df:59:22:15:86:49:5b:ef:a9: 9e:e8:67:40:92:38:f1:b1:b2:d7:a8:12:2b:55:f8: 6d:20:70:09:77:90:fe:c3:c2:f9:f3:a2:97:c7:74: 10:96:2d:a4:ca:7a:4e:45:2c:1d:12:1b:1b:02:92: 5d:11:39:d1:5c:74:32:71:1b:51:5d:2b:d4:91:4c: 19:e5:bc:64:36:08:d6:8e:3f:fd:99:07:ab:e8:26: e9:4d:5d:e5:1d:b5:1f:df:a8:35:11:c1:9c:64:56: 7b:60:e4:2f:e7:29:95:ae:d1:7e:4c:2a:2b:15:02: 57:62:80:8d:fc:38:c6:8e:1d:61:47:4b:db:2d:c4: 57:d6:88:60:b0:75:b7:06:ac:01:9e:67:fe:c1:4c: b5:66:f4:9a:32:98:f3:f3:f3:ec:66:46:73:f0:b7: 3c:f7:a1:fe:45:4b:81:b1:23:b7:7c:a9:47:ab:cc: 35:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:8D:7D:26:37:FD:11:7F:85:16:A4:BE:C4:BC:4F:E9:B1:E8:FE:6C X509v3 Authority Key Identifier: keyid:2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:77:16:12:01:33:0d:24:66:66:54:12:96:73:7d:41:c9:c9: 65:83:13:52:57:49:c1:4f:1b:92:46:46:92:38:01:18:67:c7: b1:b0:2f:15:88:5d:dc:b1:4c:d5:df:8e:16:b8:74:59:4b:21: dd:e6:55:45:34:80:40:40:4b:f3:72:c7:d3:dd:a0:53:f4:64: 46:92:c3:d5:c1:38:09:97:98:9f:b0:58:92:05:cf:36:4c:93: d8:e4:dc:f1:d8:68:0b:c0:bf:7f:62:17:28:6a:64:c8:7b:b4: 68:15:2d:38:db:24:3e:e4:ca:bb:60:4d:66:a2:cd:d6:76:09: 81:ef:fe:6c:f3:f9:8e:1a:2b:85:2a:07:ae:35:cc:70:7c:fa: 80:da:99:e5:c3:14:69:6d:22:5d:d8:bc:cb:99:2a:1b:dd:29: 51:b7:8f:82:3e:94:50:4f:80:0c:c9:f4:ad:9d:84:e4:04:bd: e0:27:47:ad:d2:22:61:0a:2a:af:02:f7:86:ac:41:27:64:41: 29:b4:9b:99:a3:b8:25:0e:b3:b4:a0:4d:ee:39:4a:94:43:a8: df:63:6b:37:c8:b4:a4:14:97:33:66:67:84:3c:4c:60:29:4d: 5a:03:13:92:5c:55:cc:0c:9d:f6:d4:5a:a5:b3:49:c8:6c:1e: 68:09:40:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuzlTuJ35UlM6+WjYDZA5TFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNDg3M2U2ZThiZTRmOWQzNzY0MTg0ZjEzZTU3NTBmOGM2 MWY2OGIwHhcNMjYwMTEyMTkwMTAwWhcNMjYwMTEzMTkwMTAwWjAzMTEwLwYDVQQD EyhlZjhkN2QyNjM3ZmQxMTdmODUxNmE0YmVjNGJjNGZlOWIxZThmZTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0wlGKomM0K0B6+izZqSZMijVUC7 UwT8kbn4oIGRFwTpoqdk7rltp4gQ11B88WIAdzeSo0Udb0uNRkRjKU2ghJKL7nsO h43KjMQeyA4QXgjfWSIVhklb76me6GdAkjjxsbLXqBIrVfhtIHAJd5D+w8L586KX x3QQli2kynpORSwdEhsbApJdETnRXHQycRtRXSvUkUwZ5bxkNgjWjj/9mQer6Cbp TV3lHbUf36g1EcGcZFZ7YOQv5ymVrtF+TCorFQJXYoCN/DjGjh1hR0vbLcRX1ohg sHW3BqwBnmf+wUy1ZvSaMpjz8/PsZkZz8Lc896H+RUuBsSO3fKlHq8w1vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+NfSY3/RF/hRakvsS8T+mx6P5sMB8GA1UdIwQY MBaAFC1Ic+bovk+dN2QYTxPldQ+MYfaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80N2I0MTMtNjQxNi00MDJhLWI1ZTEt NjU5NmQ1MDM2MzYyLzEvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80N2I0MTMtNjQxNi00MDJhLWI1ZTEtNjU5NmQ1MDM2MzYy LzEvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3cWEgEz DSRmZlQSlnN9QcnJZYMTUldJwU8bkkZGkjgBGGfHsbAvFYhd3LFM1d+OFrh0WUsh 3eZVRTSAQEBL83LH092gU/RkRpLD1cE4CZeYn7BYkgXPNkyT2OTc8dhoC8C/f2IX KGpkyHu0aBUtONskPuTKu2BNZqLN1nYJge/+bPP5jhorhSoHrjXMcHz6gNqZ5cMU aW0iXdi8y5kqG90pUbePgj6UUE+ADMn0rZ2E5AS94CdHrdIiYQoqrwL3hqxBJ2RB KbSbmaO4JQ6ztKBN7jlKlEOo32NrN8i0pBSXM2ZnhDxMYClNWgMTklxVzAyd9tRa pbNJyGweaAlAbg== -----END CERTIFICATE-----Generated at Mon Jan 12 22:47:09 2026 by rpki-client