This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft File: LJl56ji5293KdLe_pzdotXv_wS8.mft (raw, json) Hash identifier: GIXur3TbY+dGUiFyxmgIpsY32vSxa0P3susB6XUTRKQ= Subject key identifier: 9C:E6:B0:D9:68:23:61:0D:1C:D9:44:F8:BF:B7:D5:93:C4:A9:A2:72 Authority key identifier: 2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F Certificate issuer: /CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f Certificate serial: 019BF72D69DB7D2063AB9C6A6E562E0D261D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft Manifest number: 0A71 Signing time: Sun 25 Jan 2026 22:01:47 +0000 Manifest this update: Sun 25 Jan 2026 22:01:47 +0000 Manifest next update: Mon 26 Jan 2026 22:01:47 +0000 Files and hashes: 1: LJl56ji5293KdLe_pzdotXv_wS8.crl (hash: I1FTQFxvzdEQsvxMJECdEJuWLJMXFs7duK/QdopnJM4=) 2: Zg9CXZORRCkEDfIdrbdV2Z1djOE.roa (hash: ijvg+VbGDbhkZ0TpavVaie8pzYXStI3SVZx3OuXIsaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:69:db:7d:20:63:ab:9c:6a:6e:56:2e:0d:26:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f Validity Not Before: Jan 25 22:01:47 2026 GMT Not After : Jan 26 22:01:47 2026 GMT Subject: CN=9ce6b0d96823610d1cd944f8bfb7d593c4a9a272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:17:00:65:67:82:6a:d6:dc:4a:07:3d:96:af: 28:27:60:b8:e4:2b:a3:b2:19:6b:cb:bd:c4:79:00: 23:68:45:e1:06:03:20:d8:e3:e9:bd:e4:05:04:ca: 41:e2:08:9f:3c:45:41:f0:95:42:81:d9:e9:34:10: ff:60:6e:2c:06:d3:8a:1b:dc:e3:86:3f:d7:f7:79: 05:1c:55:78:56:42:e7:7b:7b:f5:3e:23:2a:36:53: 8c:05:26:7f:b2:11:f2:16:31:db:22:d9:b1:94:a4: 78:13:cc:40:d5:df:62:61:a5:b6:c0:8b:26:7a:db: 93:59:7e:b7:ac:3c:20:ef:6e:e2:0b:5b:f1:64:e5: 46:73:90:ef:51:c5:dc:67:7e:9b:a2:9e:57:46:85: 9a:f0:98:4d:80:7e:5a:a4:be:67:b6:19:6d:d2:15: 94:aa:15:ef:be:3d:20:0d:38:fe:69:f3:ac:7e:98: 06:2b:07:4b:81:12:7a:55:09:21:a4:79:fd:9f:84: 30:9c:7a:03:f1:e2:51:3b:38:2a:38:4b:d3:49:87: 67:bb:44:51:a5:7d:6b:6c:7e:f5:63:4b:cd:ae:2f: 0e:cf:cd:df:a8:cc:ae:e3:f0:6c:db:74:59:6b:37: 4b:73:ad:fe:0a:ea:84:90:9f:99:30:fe:77:bc:69: 40:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E6:B0:D9:68:23:61:0D:1C:D9:44:F8:BF:B7:D5:93:C4:A9:A2:72 X509v3 Authority Key Identifier: keyid:2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:10:2e:18:de:9a:06:b9:97:d8:72:bc:34:ac:3f:d0:e8:33: 70:ee:b6:6f:51:13:97:b3:99:17:4e:f1:39:7d:68:09:35:1d: a1:b0:b5:b5:25:ef:e3:be:59:ae:ac:af:7c:62:be:0f:79:47: 99:47:25:9a:54:f9:03:f4:17:7b:57:f3:49:21:3b:f8:c0:86: ae:21:c3:b7:1a:21:e3:05:da:03:57:c5:bf:7a:df:0a:9e:27: 93:c6:44:8b:0d:c9:77:a0:09:86:1d:65:19:cc:7a:ce:ea:a9: b2:8d:a8:00:e7:2a:e6:67:cb:b7:5b:0c:5b:7e:84:92:d3:73: 20:c0:81:88:db:b8:dd:77:69:55:06:61:b6:16:d9:83:73:29: df:c7:fb:ec:d1:12:b3:6d:4b:2d:82:64:ae:68:81:dd:c2:03: 72:12:f6:70:ba:fe:7a:a7:3c:21:38:74:29:de:6b:2d:fd:a5: 72:18:b3:c7:33:84:6a:a3:8c:c2:20:66:e0:b5:0c:b9:e7:2e: 2c:af:f7:82:a4:c4:18:fd:87:dd:7d:4d:1f:bd:50:50:4b:6c: 8c:e1:d3:a5:91:b0:00:a4:36:f1:5d:1f:bf:f6:47:fa:e0:76: 52:96:46:a6:d2:6c:f3:ff:1e:bd:12:e4:aa:f5:7b:3a:79:88: 2f:dd:87:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LWnbfSBjq5xqblYuDSYdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjOTk3OWVhMzhiOWRiZGRjYTc0YjdiZmE3Mzc2OGI1N2Jm ZmMxMmYwHhcNMjYwMTI1MjIwMTQ3WhcNMjYwMTI2MjIwMTQ3WjAzMTEwLwYDVQQD Eyg5Y2U2YjBkOTY4MjM2MTBkMWNkOTQ0ZjhiZmI3ZDU5M2M0YTlhMjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthcAZWeCatbcSgc9lq8oJ2C45Cuj shlry73EeQAjaEXhBgMg2OPpveQFBMpB4gifPEVB8JVCgdnpNBD/YG4sBtOKG9zj hj/X93kFHFV4VkLne3v1PiMqNlOMBSZ/shHyFjHbItmxlKR4E8xA1d9iYaW2wIsm etuTWX63rDwg727iC1vxZOVGc5DvUcXcZ36bop5XRoWa8JhNgH5apL5nthlt0hWU qhXvvj0gDTj+afOsfpgGKwdLgRJ6VQkhpHn9n4QwnHoD8eJROzgqOEvTSYdnu0RR pX1rbH71Y0vNri8Oz83fqMyu4/Bs23RZazdLc63+CuqEkJ+ZMP53vGlADQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzmsNloI2ENHNlE+L+31ZPEqaJyMB8GA1UdIwQY MBaAFCyZeeo4udvdynS3v6c3aLV7/8EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEpsNTZqaTUyOTNLZExlX3B6ZG90WHZfd1M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82MTU1ZjAtNGRjYi00OGNlLWE0ZWQt YWMzMzJmOGQ4YzQ4LzEvTEpsNTZqaTUyOTNLZExlX3B6ZG90WHZfd1M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC82MTU1ZjAtNGRjYi00OGNlLWE0ZWQtYWMzMzJmOGQ4YzQ4 LzEvTEpsNTZqaTUyOTNLZExlX3B6ZG90WHZfd1M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhAuGN6a BrmX2HK8NKw/0OgzcO62b1ETl7OZF07xOX1oCTUdobC1tSXv475ZrqyvfGK+D3lH mUclmlT5A/QXe1fzSSE7+MCGriHDtxoh4wXaA1fFv3rfCp4nk8ZEiw3Jd6AJhh1l Gcx6zuqpso2oAOcq5mfLt1sMW36EktNzIMCBiNu43XdpVQZhthbZg3Mp38f77NES s21LLYJkrmiB3cIDchL2cLr+eqc8ITh0Kd5rLf2lchizxzOEaqOMwiBm4LUMuecu LK/3gqTEGP2H3X1NH71QUEtsjOHTpZGwAKQ28V0fv/ZH+uB2UpZGptJs8/8evRLk qvV7OnmIL92Heg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:23 2026 by rpki-client