This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft File: LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft (raw, json) Hash identifier: FgfP18MGCQoq2K5rd31cg/eFKcAiOAJq194R8u18uiU= Subject key identifier: 76:83:A9:FC:1B:72:B5:01:9B:5A:B4:66:34:20:56:E0:C3:7E:57:93 Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Certificate serial: 019BF42BFD1B3AE7AC0A77DA3FA3421A7153 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft Manifest number: 0FFD Signing time: Sun 25 Jan 2026 08:01:22 +0000 Manifest this update: Sun 25 Jan 2026 08:01:22 +0000 Manifest next update: Mon 26 Jan 2026 08:01:22 +0000 Files and hashes: 1: 09L29M524JtLa5ZgogkXLXq_qVQ.roa (hash: vbKviP/C/Uh8p10yamrn572MJG8g6MCiVwGfvH2mWcc=) 2: D00cPnw9bB2d9TgFOhC3-ze0kjc.roa (hash: Eda6JMILzSRldxKlV9x3LrbQjTPVxeDmflNgD3foIJw=) 3: FZ0mvZ6nlWmx1w_9Za_qEWaADFU.roa (hash: 7kl9KDxPJEASyvH7OdKvIjFJHuZjV30ozyUUxOj1fRk=) 4: LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl (hash: i50uZvBtkfhkTNzciA8hkGDaO/Do6bP5x0AepoS1wHI=) 5: RC6auerhl88_6riv7dybqchIS5U.roa (hash: SeZbnHyJbUAAlR1IcpsGOJobNmygz8xGZkv6xW1FK8g=) 6: Wun6Qz2Qs6STNSC80NWGPAsClFU.roa (hash: SDa0Mk7cpLMkML2EEhK8WxoKcKFzNItBMeoOxjoeTuQ=) 7: f2CUBwukbS4Jl9DUVNEKEFyrD0Q.roa (hash: L6OXByGU2WQtLD8gRQiiCN4AJSkVRktzmevEzCGDIRA=) 8: iXtfcu1KWtIb45p4L3Zc91aLHD4.roa (hash: EUrm6WcBA5Xj7RQU2eVwJ+wwhrqRBn/zb3ljF1u1Jf8=) 9: oWpY7lVUZc4xkdONXBsk7LY9VzQ.roa (hash: uJkG/PD9fhtu8O1FWieSoNSOr5gkaN8jlwYl8rtNjFA=) 10: s2Ypy54WuhCWz54ggPtUGzQB9Y8.roa (hash: Cr4q6do/gJppREcmAQon0odH+YuL+eSFq022BhIG/4E=) 11: uCPERwsuvyXpYR4y_BXupFIJXt4.roa (hash: jbxXtknnk4DV3WL6pnrxlE1uxvDz9l+QZBW7wpDD5fM=) 12: wj6F-GbnlJ5PgQSNTpZExJxm390.roa (hash: YVJH3yfABwb076P/mjMjg3bUoVEsCOXMqF23WBWbaWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:fd:1b:3a:e7:ac:0a:77:da:3f:a3:42:1a:71:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Validity Not Before: Jan 25 08:01:22 2026 GMT Not After : Jan 26 08:01:22 2026 GMT Subject: CN=7683a9fc1b72b5019b5ab466342056e0c37e5793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1e:65:a2:a5:75:f9:0f:6f:13:fd:e0:3a:da: 80:de:16:0a:96:16:c3:f8:b3:ae:50:4d:56:f7:c4: cc:f6:34:b5:b8:26:3d:da:85:78:7f:db:8a:ad:47: dd:e6:fc:8f:bc:29:91:25:5f:5a:3b:c9:21:2d:74: 94:6d:48:33:84:de:49:5a:d1:aa:95:89:9a:1a:5e: ec:72:94:58:d6:99:a9:d9:c3:ca:02:2c:fc:36:6e: c5:50:38:3d:04:b5:d9:fc:fa:7f:a5:eb:22:28:e1: fc:62:23:3a:5f:64:7a:34:6f:06:8c:6b:91:0e:80: 02:be:fc:6e:09:71:bb:24:29:9b:e7:ce:43:2c:f5: 43:63:31:31:a3:8b:1d:21:0d:b9:5c:71:7a:34:d7: 5b:39:b9:e4:86:ad:59:15:8b:73:6d:18:0e:64:9a: 2d:fc:86:e3:f8:81:04:0b:7d:e3:60:18:35:19:10: ce:da:c1:74:69:da:89:74:a4:b8:8f:49:58:46:fd: c8:22:d9:67:a0:dd:2d:c6:86:da:6c:38:4a:f5:64: 3c:9d:08:19:14:32:82:9e:11:2f:f0:ef:3a:f5:07: b7:78:04:3b:df:78:35:b3:6f:98:f9:fc:e8:b5:28: 89:0d:e2:eb:4c:a4:19:cb:fb:8d:e0:93:71:d0:40: f9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:83:A9:FC:1B:72:B5:01:9B:5A:B4:66:34:20:56:E0:C3:7E:57:93 X509v3 Authority Key Identifier: keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:57:08:6e:90:e5:45:ef:cc:2f:c0:1e:80:db:84:b0:e0:a3: ed:3f:22:e7:a0:38:fe:3c:3f:51:92:fa:6d:8c:68:bf:29:c0: 0d:09:43:12:95:b2:83:dd:34:ea:60:ee:84:db:c1:2b:31:15: 38:9f:ba:b6:c3:0e:ca:10:57:76:66:cd:e6:a1:f3:af:3f:67: 95:d9:9c:ac:db:82:30:ab:d9:88:0c:c1:cd:a6:97:bf:6f:99: e5:b6:17:ee:e9:ea:fa:00:4a:3e:59:ec:3a:4e:c7:4b:7d:03: 0e:35:d4:cd:7d:c7:49:3b:8f:bb:f7:a6:ca:80:54:da:fb:03: a3:e8:a5:6b:51:85:a0:d1:d2:d8:6a:64:1f:15:68:e0:fd:73: 9d:d8:21:e4:b8:ab:b0:2c:e8:9f:2a:fc:55:58:93:53:3f:81: fd:fb:c2:60:c5:07:98:48:ba:33:d8:e2:55:f9:e1:66:da:25: 29:2b:63:a2:46:a9:12:77:77:2d:c2:1e:cd:27:53:3f:75:ca: c1:26:2c:bf:29:51:32:29:68:ab:91:c8:ef:c3:b3:aa:ee:42: 51:5d:2f:60:aa:44:86:52:c9:8e:46:2f:41:1c:03:8e:09:94: 15:3b:98:26:b8:e2:5a:90:19:f0:cf:23:91:2c:cc:32:f8:cb: 5f:2b:68:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K/0bOuesCnfaP6NCGnFTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMzY4YjBhZWM2YzdmZDQ4ZDBkOTZiNDA3N2EyM2Y5MDZh ODZhNDgwHhcNMjYwMTI1MDgwMTIyWhcNMjYwMTI2MDgwMTIyWjAzMTEwLwYDVQQD Eyg3NjgzYTlmYzFiNzJiNTAxOWI1YWI0NjYzNDIwNTZlMGMzN2U1NzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2h5loqV1+Q9vE/3gOtqA3hYKlhbD +LOuUE1W98TM9jS1uCY92oV4f9uKrUfd5vyPvCmRJV9aO8khLXSUbUgzhN5JWtGq lYmaGl7scpRY1pmp2cPKAiz8Nm7FUDg9BLXZ/Pp/pesiKOH8YiM6X2R6NG8GjGuR DoACvvxuCXG7JCmb585DLPVDYzExo4sdIQ25XHF6NNdbObnkhq1ZFYtzbRgOZJot /Ibj+IEEC33jYBg1GRDO2sF0adqJdKS4j0lYRv3IItlnoN0txobabDhK9WQ8nQgZ FDKCnhEv8O869Qe3eAQ733g1s2+Y+fzotSiJDeLrTKQZy/uN4JNx0ED58QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHaDqfwbcrUBm1q0ZjQgVuDDfleTMB8GA1UdIwQY MBaAFC42iwrsbH/UjQ2WtAd6I/kGqGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQt MTQyN2RkMTZlZmE0LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQtMTQyN2RkMTZlZmE0 LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqlcIbpDl Re/ML8AegNuEsOCj7T8i56A4/jw/UZL6bYxovynADQlDEpWyg9006mDuhNvBKzEV OJ+6tsMOyhBXdmbN5qHzrz9nldmcrNuCMKvZiAzBzaaXv2+Z5bYX7unq+gBKPlns Ok7HS30DDjXUzX3HSTuPu/emyoBU2vsDo+ila1GFoNHS2GpkHxVo4P1zndgh5Lir sCzonyr8VViTUz+B/fvCYMUHmEi6M9jiVfnhZtolKStjokapEnd3LcIezSdTP3XK wSYsvylRMiloq5HI78Ozqu5CUV0vYKpEhlLJjkYvQRwDjgmUFTuYJrjiWpAZ8M8j kSzMMvjLXyto8w== -----END CERTIFICATE-----Generated at Sun Jan 25 16:24:44 2026 by rpki-client