This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft File: LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft (raw, json) Hash identifier: O0Fj/Ts59xo8Wf4p2Tc2oypm46x3/COWGdxPfsTLoxI= Subject key identifier: 1F:5B:BC:2E:70:03:C5:BF:B3:0B:AB:AF:47:7D:CB:40:CC:8D:E1:AD Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Certificate serial: 019AF3F706B6F6BE0EB21C245B1FCBDA3F79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft Manifest number: 0F78 Signing time: Sat 06 Dec 2025 14:00:43 +0000 Manifest this update: Sat 06 Dec 2025 14:00:43 +0000 Manifest next update: Sun 07 Dec 2025 14:00:43 +0000 Files and hashes: 1: 4BIZ08i4JPFDDHVtvlfqNMnUnIc.roa (hash: AfKuZeKZY5PYd/h5BuonLEsckMORdl0M6uVn/t5CZGA=) 2: 8gg7kQMVPMp5CW_2Zh8YAWMAQ5w.roa (hash: f3wtA4WN/DWLyQp37wYwvHxSkXSyAaxvA1pdEj3pPLE=) 3: LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl (hash: Z1UY3GY3BZ+0e6dp+4yiaYSqD9XHMj3n102dhZ+YJLw=) 4: UH8mYATqGd2LhlccdYCUKZ4JN64.roa (hash: zx6xKES79izKCK41WQG8kojfkl15CZD0vapTu3dVd94=) 5: _e53uvo6U-VwaFNUrhbZ0o9cAIk.roa (hash: 3MnafteQbEnb4/lZd7D02L0no0lOBTDc4/+MQgihXLo=) 6: cCgTb8X6pIy80V_PJ66PvKfmf8A.roa (hash: wMMFmNIatqATxNZJr23krWEqGeEpB6KiCLDJPXvnxLE=) 7: dqRWzSNCruVCqi7CqPXaFVIAZqc.roa (hash: 1yVtBaBVVLrbvd7QX7NgCFT4elTOPpbTI0QeBKDstSU=) 8: nf08bxZrXlifI-WoWt3QiOzUCYE.roa (hash: 9Fjz3WhUtYB2nXdTzmYUXTXJcsut26eiijRzx8g0Gdo=) 9: oWnKEFNDYJlrUghHRhUXP1kVdCc.roa (hash: nEmPj67OGh6UydVBXMGywfERqcOnY+HpJE/FVl2nhVw=) 10: teJ51KVPIWV36Tlu6BnhXD2AUD4.roa (hash: iirQ6/n4/0a+w6plKlxP3E2dDeNQoZhhCXUm/2+ugFU=) 11: uYLrAaJA87yT4e0DquX1mDlmRQ8.roa (hash: 85O+xlHn4GYVrvRYFmOtwhkhRxSqecs6sd012ls3OuI=) 12: z9geQajqLX4fEuy3PNQy0IwzzgY.roa (hash: JIvL3zAmwpher+kvj+pICp4mH45/hSa/ISO69pribAI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:06:b6:f6:be:0e:b2:1c:24:5b:1f:cb:da:3f:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Validity Not Before: Dec 6 14:00:43 2025 GMT Not After : Dec 7 14:00:43 2025 GMT Subject: CN=1f5bbc2e7003c5bfb30babaf477dcb40cc8de1ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8b:b9:32:a9:6b:73:b6:9d:22:0c:fd:48:61: 90:87:9d:4d:b4:5e:c6:a1:a6:71:04:9e:e7:e3:1c: 94:90:7e:0b:c6:f5:e2:12:14:f9:23:ca:7e:c4:4c: 0e:3a:cb:69:e4:6c:ee:8a:83:bc:ea:f7:31:a2:8c: e9:b5:95:b1:f2:a2:71:3a:b0:21:6f:ff:26:89:5d: b2:4e:55:0c:af:25:84:e1:e7:d5:27:59:0d:78:f4: f6:f4:ce:b0:c6:ff:a9:dd:75:c4:f1:18:ee:26:be: 1a:86:1e:da:e0:1e:b1:8b:06:1a:e2:2b:14:83:ef: 46:bc:39:78:bf:85:68:39:b5:f7:8c:89:75:ff:b1: 20:fb:07:31:a7:1d:4b:db:77:f6:09:19:76:61:0e: 48:7d:6b:b8:6f:12:46:15:f7:ec:69:ff:8f:75:25: 5b:4a:c2:6a:94:91:50:7a:7d:07:45:ce:ff:14:40: 4c:42:b5:e0:e8:db:46:68:43:72:3a:fb:71:3b:1a: 5a:55:16:76:05:85:2d:e0:87:fe:9c:13:4e:27:e7: 6f:d7:6a:98:04:39:f9:d0:51:fd:52:ac:e3:45:9d: f2:a2:de:f9:22:76:5f:07:7d:0b:60:2f:94:36:27: 42:b6:23:0a:a1:c8:f2:02:f4:76:54:20:bb:16:c8: e4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:5B:BC:2E:70:03:C5:BF:B3:0B:AB:AF:47:7D:CB:40:CC:8D:E1:AD X509v3 Authority Key Identifier: keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:da:a4:d4:09:62:02:c2:66:07:e2:4c:3f:cd:41:17:6b:74: a3:79:7a:b3:bb:d7:51:b0:93:0b:e8:3b:5f:cd:33:0d:91:35: 9c:73:1b:0f:59:e8:6c:a1:9d:3c:82:dc:06:fd:a9:2c:92:6e: 95:8a:a3:77:09:ad:d2:62:78:5e:f0:89:92:e5:9d:85:03:c8: d0:77:39:72:88:df:31:cd:df:59:e3:14:62:93:bb:e3:59:0a: 58:74:10:35:e4:45:5a:8e:86:d1:46:09:88:e5:bb:58:64:93: 42:91:88:96:35:c0:31:f0:4e:1c:10:4d:6c:60:98:02:97:fe: 29:ae:8c:c7:d5:4b:1a:01:4c:46:09:cf:2c:d4:b8:d9:80:d1: 0c:fe:11:8b:df:10:62:91:4b:ed:08:37:6a:bb:1a:dd:c1:72: ef:94:d6:1b:61:28:63:8c:17:a5:aa:55:87:90:2f:d8:96:8c: de:cb:33:35:01:98:20:1a:a1:f6:bd:01:b2:20:f1:d3:60:8a: 79:3b:58:b3:f0:65:53:c6:ab:cf:68:23:75:52:64:8c:36:13: b1:a4:84:43:d3:19:df:03:98:b5:a6:c8:d1:65:84:e5:75:7e: c4:87:f8:64:62:7d:c3:99:c6:6e:8d:df:cd:5e:8b:90:f7:37: 93:b6:75:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9wa29r4OshwkWx/L2j95MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMzY4YjBhZWM2YzdmZDQ4ZDBkOTZiNDA3N2EyM2Y5MDZh ODZhNDgwHhcNMjUxMjA2MTQwMDQzWhcNMjUxMjA3MTQwMDQzWjAzMTEwLwYDVQQD EygxZjViYmMyZTcwMDNjNWJmYjMwYmFiYWY0NzdkY2I0MGNjOGRlMWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIu5Mqlrc7adIgz9SGGQh51NtF7G oaZxBJ7n4xyUkH4LxvXiEhT5I8p+xEwOOstp5GzuioO86vcxoozptZWx8qJxOrAh b/8miV2yTlUMryWE4efVJ1kNePT29M6wxv+p3XXE8RjuJr4ahh7a4B6xiwYa4isU g+9GvDl4v4VoObX3jIl1/7Eg+wcxpx1L23f2CRl2YQ5IfWu4bxJGFffsaf+PdSVb SsJqlJFQen0HRc7/FEBMQrXg6NtGaENyOvtxOxpaVRZ2BYUt4If+nBNOJ+dv12qY BDn50FH9UqzjRZ3yot75InZfB30LYC+UNidCtiMKocjyAvR2VCC7FsjkYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9bvC5wA8W/swurr0d9y0DMjeGtMB8GA1UdIwQY MBaAFC42iwrsbH/UjQ2WtAd6I/kGqGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQt MTQyN2RkMTZlZmE0LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQtMTQyN2RkMTZlZmE0 LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb9qk1Ali AsJmB+JMP81BF2t0o3l6s7vXUbCTC+g7X80zDZE1nHMbD1nobKGdPILcBv2pLJJu lYqjdwmt0mJ4XvCJkuWdhQPI0Hc5cojfMc3fWeMUYpO741kKWHQQNeRFWo6G0UYJ iOW7WGSTQpGIljXAMfBOHBBNbGCYApf+Ka6Mx9VLGgFMRgnPLNS42YDRDP4Ri98Q YpFL7Qg3arsa3cFy75TWG2EoY4wXpapVh5Av2JaM3sszNQGYIBqh9r0BsiDx02CK eTtYs/BlU8arz2gjdVJkjDYTsaSEQ9MZ3wOYtabI0WWE5XV+xIf4ZGJ9w5nGbo3f zV6LkPc3k7Z1Pw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:28:05 2025 by rpki-client