This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft File: LM5dUfp1u7btlipBZu9vhjCgJYE.mft (raw, json) Hash identifier: JE4ubqH5xmVhe1cw2zaE9LSX21Yy1Pz4P6GWr6VIvd4= Subject key identifier: F1:8E:D5:37:3A:34:E9:B2:75:5E:FE:3D:E9:D6:20:46:48:8C:90:BA Authority key identifier: 2C:CE:5D:51:FA:75:BB:B6:ED:96:2A:41:66:EF:6F:86:30:A0:25:81 Certificate issuer: /CN=2cce5d51fa75bbb6ed962a4166ef6f8630a02581 Certificate serial: 019BA346E39D88FE0244C590BCEB976791DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft Manifest number: 145C Signing time: Fri 09 Jan 2026 15:01:30 +0000 Manifest this update: Fri 09 Jan 2026 15:01:30 +0000 Manifest next update: Sat 10 Jan 2026 15:01:30 +0000 Files and hashes: 1: LM5dUfp1u7btlipBZu9vhjCgJYE.crl (hash: SkXwpkIRJy7nSmnafANypINO9vY6xy9/5RoOfH3aFrU=) 2: ulHcF8o9upOt3omwt_sTVpJfwKA.roa (hash: cxld0IHdim93K+ke3CtdijW4abesqWwczehLq/YKea0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 14:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a3:46:e3:9d:88:fe:02:44:c5:90:bc:eb:97:67:91:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cce5d51fa75bbb6ed962a4166ef6f8630a02581 Validity Not Before: Jan 9 15:01:30 2026 GMT Not After : Jan 10 15:01:30 2026 GMT Subject: CN=f18ed5373a34e9b2755efe3de9d62046488c90ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:20:fe:25:9e:12:51:ff:b6:86:a6:62:70:6b: e5:ed:32:76:fa:b3:b9:b6:c1:3e:38:c3:21:1b:6a: 31:cc:8a:7f:99:d5:c5:ee:db:12:a3:b2:3b:bc:cd: d7:ef:09:9c:73:65:f0:d4:09:77:98:bd:d3:b4:96: 1a:d4:f3:58:71:a4:cc:75:f9:68:24:a2:ef:0a:52: 1f:9c:c4:44:81:1d:46:a2:2a:03:e8:83:6c:16:23: 31:c7:8c:a0:02:f0:7d:6d:6a:6c:1c:d1:b8:d3:de: 85:d6:35:96:cb:cb:f8:3a:9a:5e:bd:9d:4e:25:71: c9:20:cd:ad:e5:05:18:2a:97:d1:9c:33:35:a5:7f: 09:19:9b:d2:09:d3:86:55:84:4d:76:23:33:8f:1d: 4f:a2:aa:2a:86:c6:d4:22:80:cd:3c:22:60:88:d2: 93:2b:6f:c9:24:df:a9:ff:e2:f2:49:97:cb:23:8e: 7a:73:a2:24:48:b7:4d:52:e0:67:c5:9b:10:d2:1f: ad:47:70:92:5a:bb:ad:e5:b7:42:bb:02:53:75:58: 02:60:fd:4d:ad:06:85:53:97:7d:77:db:43:95:0c: 29:af:bc:bb:d5:fe:d4:4a:56:d9:b8:98:71:da:9f: b2:87:45:3e:f8:eb:9d:8d:f2:bb:80:27:9b:d4:e3: 40:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:8E:D5:37:3A:34:E9:B2:75:5E:FE:3D:E9:D6:20:46:48:8C:90:BA X509v3 Authority Key Identifier: keyid:2C:CE:5D:51:FA:75:BB:B6:ED:96:2A:41:66:EF:6F:86:30:A0:25:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:fe:28:f5:c8:f7:65:46:ce:b2:65:7a:0b:5a:1e:f7:8e:09: f1:5f:b2:80:26:ab:96:9d:89:1e:4d:f4:a8:eb:f4:2b:d7:99: 11:30:92:01:d5:01:27:5f:2d:e4:e4:42:78:03:cd:de:e6:e8: 34:d2:1e:d2:77:8b:73:8f:5e:9b:cb:de:46:53:df:84:50:9e: ef:6b:7c:41:47:8a:84:f9:ba:80:7a:3d:8a:20:da:c0:eb:3c: 2a:58:88:1b:dd:b6:bf:6f:68:0a:7a:3a:db:83:36:35:63:9d: c5:06:74:71:c5:81:da:de:b5:3c:0f:83:f3:56:6a:9c:a4:ab: e7:88:f1:6a:f4:31:36:e8:52:ba:21:e1:a0:29:22:89:11:9f: 22:5d:16:11:f8:75:25:ab:bf:f8:09:55:c7:1d:34:5d:5b:4e: e9:1e:c0:6a:ad:22:c7:f2:b0:51:de:08:57:57:71:34:e1:6a: a5:de:11:17:8a:5d:36:f9:f9:ce:7d:32:40:20:18:93:13:1f: be:f1:12:25:01:9f:ff:1f:7f:e9:43:e8:01:a1:3f:10:41:4f: 48:e3:dc:19:17:0f:80:9a:43:65:48:28:71:dc:7b:d4:57:ad: 2d:4f:fd:fc:a3:19:65:67:76:ae:83:b6:20:01:69:6b:85:39: 59:af:2d:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZujRuOdiP4CRMWQvOuXZ5HeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjY2U1ZDUxZmE3NWJiYjZlZDk2MmE0MTY2ZWY2Zjg2MzBh MDI1ODEwHhcNMjYwMTA5MTUwMTMwWhcNMjYwMTEwMTUwMTMwWjAzMTEwLwYDVQQD EyhmMThlZDUzNzNhMzRlOWIyNzU1ZWZlM2RlOWQ2MjA0NjQ4OGM5MGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyD+JZ4SUf+2hqZicGvl7TJ2+rO5 tsE+OMMhG2oxzIp/mdXF7tsSo7I7vM3X7wmcc2Xw1Al3mL3TtJYa1PNYcaTMdflo JKLvClIfnMREgR1GoioD6INsFiMxx4ygAvB9bWpsHNG4096F1jWWy8v4OppevZ1O JXHJIM2t5QUYKpfRnDM1pX8JGZvSCdOGVYRNdiMzjx1PoqoqhsbUIoDNPCJgiNKT K2/JJN+p/+LySZfLI456c6IkSLdNUuBnxZsQ0h+tR3CSWrut5bdCuwJTdVgCYP1N rQaFU5d9d9tDlQwpr7y71f7USlbZuJhx2p+yh0U++OudjfK7gCeb1ONA/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGO1Tc6NOmydV7+PenWIEZIjJC6MB8GA1UdIwQY MBaAFCzOXVH6dbu27ZYqQWbvb4YwoCWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE01ZFVmcDF1N2J0bGlwQlp1OXZoakNnSllFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8yYjVlZDYtM2E3Yy00NjMxLWI0OWQt YmY1NWI4YjE2NjljLzEvTE01ZFVmcDF1N2J0bGlwQlp1OXZoakNnSllFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8yYjVlZDYtM2E3Yy00NjMxLWI0OWQtYmY1NWI4YjE2Njlj LzEvTE01ZFVmcDF1N2J0bGlwQlp1OXZoakNnSllFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABP4o9cj3 ZUbOsmV6C1oe944J8V+ygCarlp2JHk30qOv0K9eZETCSAdUBJ18t5ORCeAPN3ubo NNIe0neLc49em8veRlPfhFCe72t8QUeKhPm6gHo9iiDawOs8KliIG922v29oCno6 24M2NWOdxQZ0ccWB2t61PA+D81ZqnKSr54jxavQxNuhSuiHhoCkiiRGfIl0WEfh1 Jau/+AlVxx00XVtO6R7Aaq0ix/KwUd4IV1dxNOFqpd4RF4pdNvn5zn0yQCAYkxMf vvESJQGf/x9/6UPoAaE/EEFPSOPcGRcPgJpDZUgocdx71FetLU/9/KMZZWd2roO2 IAFpa4U5Wa8tpw== -----END CERTIFICATE-----Generated at Fri Jan 9 23:48:05 2026 by rpki-client