This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft File: Lj7hjQl0j0bcU62UtynzERCsrDQ.mft (raw, json) Hash identifier: rwA0Ymu3Nyq7tbJSTWWIUxNSXrHx8OngWdf4osbf5KQ= Subject key identifier: A0:CA:80:46:4A:90:8B:9C:3B:27:20:F2:CC:EB:94:D9:AD:24:23:EA Authority key identifier: 2E:3E:E1:8D:09:74:8F:46:DC:53:AD:94:B7:29:F3:11:10:AC:AC:34 Certificate issuer: /CN=2e3ee18d09748f46dc53ad94b729f31110acac34 Certificate serial: 019BF53E0465AF564D5B6A92DB2C87E11BF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft Manifest number: 70 Signing time: Sun 25 Jan 2026 13:00:40 +0000 Manifest this update: Sun 25 Jan 2026 13:00:40 +0000 Manifest next update: Mon 26 Jan 2026 13:00:40 +0000 Files and hashes: 1: ChFRh5Xw0ookwnsILJ3UBdbu5y8.asa (hash: L7UykFBpSjqzqUVBMQkwTJ7cCxGIKVsQmZrcRxIm9gc=) 2: Lj7hjQl0j0bcU62UtynzERCsrDQ.crl (hash: SNlc99dxMwWNeS1pybl6oxoOirQmIRbJHPWD+p6Bc2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:04:65:af:56:4d:5b:6a:92:db:2c:87:e1:1b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e3ee18d09748f46dc53ad94b729f31110acac34 Validity Not Before: Jan 25 13:00:40 2026 GMT Not After : Jan 26 13:00:40 2026 GMT Subject: CN=a0ca80464a908b9c3b2720f2cceb94d9ad2423ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a9:41:b6:36:55:1e:f7:b7:19:01:45:07:09: 96:8b:5f:c5:49:79:1c:db:a7:91:8c:e8:3f:e4:ea: 81:05:5c:32:cd:ea:dd:a1:90:0a:e0:64:0a:99:01: b1:d4:ae:d5:93:8f:55:55:c0:12:ce:53:3e:9e:23: 8a:14:a3:4b:44:45:63:da:a6:3c:d9:cf:d6:f0:f5: b8:93:dd:80:79:10:d0:e4:8d:ae:0d:0a:df:29:39: e9:13:dc:9e:b7:9a:5f:05:04:1d:d7:e7:04:8b:9e: 2d:85:7d:1c:8a:20:10:18:5c:64:6f:87:b4:e5:eb: 63:b3:5d:2c:e2:de:64:d5:5c:10:86:f2:be:81:90: 1e:39:76:0a:c3:42:04:ec:67:c6:ab:d3:48:d9:7b: e2:0c:38:64:8c:15:e0:fc:60:31:4e:12:91:e7:06: e9:6f:bd:75:75:25:4d:e3:a4:7e:9b:4e:7b:0c:2d: 1f:e0:ee:63:30:e1:7c:04:df:46:c7:b3:94:fe:9f: 5b:e7:a2:15:f9:97:12:3e:e5:eb:e5:2d:6d:94:15: d6:88:53:8f:3f:6e:53:a0:93:f1:5c:47:54:b7:1f: af:c4:11:3c:e2:b3:4e:b5:b0:d7:26:59:53:bc:c5: 20:eb:ee:39:33:f2:00:49:41:0b:dc:b9:74:7a:89: 00:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CA:80:46:4A:90:8B:9C:3B:27:20:F2:CC:EB:94:D9:AD:24:23:EA X509v3 Authority Key Identifier: keyid:2E:3E:E1:8D:09:74:8F:46:DC:53:AD:94:B7:29:F3:11:10:AC:AC:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:75:0b:10:7a:a6:ba:3d:3a:98:01:c8:58:26:2a:d1:ea:58: 00:aa:2e:ca:43:23:da:fe:92:d7:88:6b:91:91:a8:5e:85:6c: 36:38:7e:df:e0:81:1e:0c:46:48:d8:5b:1e:35:88:ec:ab:ab: 76:60:da:18:4f:90:04:97:f8:7f:db:5b:21:2d:7d:21:fd:38: eb:6c:94:24:7b:ab:40:8b:f7:4d:0f:0c:74:82:82:c8:39:d1: bd:4b:e3:b7:7c:5f:c0:62:d1:af:68:96:41:8b:21:f0:9e:27: 1f:03:00:26:5d:76:34:7b:26:a9:96:d3:66:01:a1:4d:a9:e3: 06:18:fc:bd:2f:de:53:13:8d:33:62:22:87:57:7d:41:6d:2a: 6d:58:8e:07:df:f2:8e:54:bd:5b:bf:ea:ec:3c:57:f0:40:76: 22:cc:4c:44:e5:ac:93:3a:e1:28:a4:62:67:b5:26:7b:cc:83: 16:9e:b0:c0:ce:b3:ea:d8:e0:63:87:1b:fb:ea:44:1e:dd:73: 45:24:e4:0f:b3:b9:2e:9c:81:61:81:07:5b:a3:9f:03:f2:2b: bf:05:4b:c7:7b:05:67:27:20:82:82:06:b6:17:31:6a:3f:dd: a6:7d:6f:b6:23:9d:3a:fc:35:62:31:59:96:b9:0b:c2:52:07: 70:8f:42:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PgRlr1ZNW2qS2yyH4Rv5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlM2VlMThkMDk3NDhmNDZkYzUzYWQ5NGI3MjlmMzExMTBh Y2FjMzQwHhcNMjYwMTI1MTMwMDQwWhcNMjYwMTI2MTMwMDQwWjAzMTEwLwYDVQQD EyhhMGNhODA0NjRhOTA4YjljM2IyNzIwZjJjY2ViOTRkOWFkMjQyM2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqlBtjZVHve3GQFFBwmWi1/FSXkc 26eRjOg/5OqBBVwyzerdoZAK4GQKmQGx1K7Vk49VVcASzlM+niOKFKNLREVj2qY8 2c/W8PW4k92AeRDQ5I2uDQrfKTnpE9yet5pfBQQd1+cEi54thX0ciiAQGFxkb4e0 5etjs10s4t5k1VwQhvK+gZAeOXYKw0IE7GfGq9NI2XviDDhkjBXg/GAxThKR5wbp b711dSVN46R+m057DC0f4O5jMOF8BN9Gx7OU/p9b56IV+ZcSPuXr5S1tlBXWiFOP P25ToJPxXEdUtx+vxBE84rNOtbDXJllTvMUg6+45M/IASUEL3Ll0eokAPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDKgEZKkIucOycg8szrlNmtJCPqMB8GA1UdIwQY MBaAFC4+4Y0JdI9G3FOtlLcp8xEQrKw0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGo3aGpRbDBqMGJjVTYyVXR5bnpFUkNzckRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mZDQ5OTktN2UwZS00YmI3LWFiYTkt ZDg0ODY5ZmY5NTYxLzEvTGo3aGpRbDBqMGJjVTYyVXR5bnpFUkNzckRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9mZDQ5OTktN2UwZS00YmI3LWFiYTktZDg0ODY5ZmY5NTYx LzEvTGo3aGpRbDBqMGJjVTYyVXR5bnpFUkNzckRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu3ULEHqm uj06mAHIWCYq0epYAKouykMj2v6S14hrkZGoXoVsNjh+3+CBHgxGSNhbHjWI7Kur dmDaGE+QBJf4f9tbIS19If0462yUJHurQIv3TQ8MdIKCyDnRvUvjt3xfwGLRr2iW QYsh8J4nHwMAJl12NHsmqZbTZgGhTanjBhj8vS/eUxONM2Iih1d9QW0qbViOB9/y jlS9W7/q7DxX8EB2IsxMROWskzrhKKRiZ7Ume8yDFp6wwM6z6tjgY4cb++pEHt1z RSTkD7O5LpyBYYEHW6OfA/IrvwVLx3sFZycggoIGthcxaj/dpn1vtiOdOvw1YjFZ lrkLwlIHcI9Cbw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:18 2026 by rpki-client