This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft File: ljmhp94G13qyrjOH3Kaaf-x2bEM.mft (raw, json) Hash identifier: qkcnk6MzFd6xld6YEvAD+RC5TkSxvn7rB7ZrdrEmCxk= Subject key identifier: 7F:74:FE:B6:AB:19:BA:49:3A:AA:9C:6B:59:08:DA:8C:F5:3C:61:0D Authority key identifier: 96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43 Certificate issuer: /CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43 Certificate serial: 019BF8081C23150E257470DB61F5BC13655E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft Manifest number: 15AA Signing time: Mon 26 Jan 2026 02:00:39 +0000 Manifest this update: Mon 26 Jan 2026 02:00:39 +0000 Manifest next update: Tue 27 Jan 2026 02:00:39 +0000 Files and hashes: 1: 9xn8Rjf1ITh6yy2pKwyE2fhFPtc.roa (hash: nHRnSyHex57iI7eioPI+DbGMbCh0HerKt1S8Mdr+02E=) 2: ljmhp94G13qyrjOH3Kaaf-x2bEM.crl (hash: HeLZ0S8zbSrNUdmdEEA9wWMCHQRxzzHaQI/XSChFemY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:1c:23:15:0e:25:74:70:db:61:f5:bc:13:65:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43 Validity Not Before: Jan 26 02:00:39 2026 GMT Not After : Jan 27 02:00:39 2026 GMT Subject: CN=7f74feb6ab19ba493aaa9c6b5908da8cf53c610d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d4:5a:7f:4c:00:f9:5b:9c:88:cb:12:91:1e: 39:74:1a:a8:dd:17:ae:fa:41:51:33:43:8a:83:53: 85:7d:53:c9:30:88:22:23:aa:d8:b6:25:5c:38:14: 62:e3:67:75:75:c4:6b:72:51:da:32:0b:d4:e3:93: 6c:b5:f3:08:d7:89:f8:38:79:35:31:91:77:8a:0c: c0:9a:80:8c:20:6c:e9:d9:e5:bf:0f:3b:fb:8d:39: eb:db:42:94:2f:95:66:22:14:dc:5e:25:78:d3:f9: 13:5c:f4:5c:16:ee:50:a1:ba:76:69:f4:3b:9b:cf: f0:36:fd:6c:8a:fb:4f:32:fd:67:67:33:26:f6:2c: 9d:73:31:4b:87:f3:ac:d8:01:71:fa:2f:bd:fd:45: 4d:2b:c8:f8:2d:ee:9e:a2:29:e7:03:11:c8:15:3d: 73:4a:62:90:4c:fd:c4:df:c5:a5:d6:c8:64:86:e2: b4:88:8c:0d:d7:57:3a:ed:37:ce:24:99:03:9f:64: 18:b5:a6:4f:06:3f:dd:03:3b:9d:fb:e3:45:e0:50: 87:1e:c8:b9:09:97:3e:88:4b:da:45:07:0e:b0:6c: d0:94:7d:67:61:af:09:88:45:06:e5:0c:47:6d:f1: f3:d0:d8:4f:20:55:65:c1:5c:f0:5f:36:8e:1e:63: c5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:74:FE:B6:AB:19:BA:49:3A:AA:9C:6B:59:08:DA:8C:F5:3C:61:0D X509v3 Authority Key Identifier: keyid:96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:61:c0:23:b4:4c:89:fb:88:27:6a:27:fd:9b:5c:ec:81:01: 2f:57:57:a6:37:bd:13:39:32:e4:ab:fd:ce:7e:17:74:a9:24: a1:63:1d:5e:69:46:95:31:e4:8e:1c:32:a5:97:8b:08:cc:d5: 66:65:c4:64:a2:e5:52:ff:b7:5e:8a:d3:1b:5c:5e:6d:c8:38: 41:e9:1a:65:30:f8:fe:af:16:e3:cb:49:fe:c9:29:6f:c9:d9: 07:3f:c3:8b:39:3c:25:64:54:9c:9d:c5:04:cd:74:bc:bd:8a: f3:32:2e:54:60:d2:db:c4:fa:05:eb:8e:0f:50:ed:42:05:f6: a2:94:fc:69:70:17:90:84:7a:d8:34:a8:9e:8f:03:9b:aa:ee: 89:d8:6f:c0:a2:f1:90:e7:a7:5f:bc:5a:b5:5b:c7:cf:f7:01: 45:c3:56:8b:bc:bd:15:51:65:8c:d4:46:08:9a:46:c8:2d:32: 07:1e:e1:68:0e:25:98:21:c4:da:ff:4a:63:d2:b1:13:e9:de: b6:b2:fd:70:a6:d5:ca:a6:9f:61:f9:ac:e7:dd:7a:b3:25:d9: 8e:da:2e:9e:be:39:ab:48:67:36:2f:48:33:8f:06:44:2b:b5: a4:32:7f:ec:37:6e:fc:19:96:24:88:80:5c:6e:35:ea:cd:77: e0:3d:93:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CBwjFQ4ldHDbYfW8E2VeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MzlhMWE3ZGUwNmQ3N2FiMmFlMzM4N2RjYTY5YTdmZWM3 NjZjNDMwHhcNMjYwMTI2MDIwMDM5WhcNMjYwMTI3MDIwMDM5WjAzMTEwLwYDVQQD Eyg3Zjc0ZmViNmFiMTliYTQ5M2FhYTljNmI1OTA4ZGE4Y2Y1M2M2MTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNRaf0wA+VuciMsSkR45dBqo3Reu +kFRM0OKg1OFfVPJMIgiI6rYtiVcOBRi42d1dcRrclHaMgvU45NstfMI14n4OHk1 MZF3igzAmoCMIGzp2eW/Dzv7jTnr20KUL5VmIhTcXiV40/kTXPRcFu5Qobp2afQ7 m8/wNv1sivtPMv1nZzMm9iydczFLh/Os2AFx+i+9/UVNK8j4Le6eoinnAxHIFT1z SmKQTP3E38Wl1shkhuK0iIwN11c67TfOJJkDn2QYtaZPBj/dAzud++NF4FCHHsi5 CZc+iEvaRQcOsGzQlH1nYa8JiEUG5QxHbfHz0NhPIFVlwVzwXzaOHmPFDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH90/rarGbpJOqqca1kI2oz1PGENMB8GA1UdIwQY MBaAFJY5oafeBtd6sq4zh9ymmn/sdmxDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGptaHA5NEcxM3F5cmpPSDNLYWFmLXgyYkVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS82Y2Q4NzAtMDk2OC00Y2VmLWE5MWQt YWYyMGZlNzkzZTY0LzEvbGptaHA5NEcxM3F5cmpPSDNLYWFmLXgyYkVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS82Y2Q4NzAtMDk2OC00Y2VmLWE5MWQtYWYyMGZlNzkzZTY0 LzEvbGptaHA5NEcxM3F5cmpPSDNLYWFmLXgyYkVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2HAI7RM ifuIJ2on/Ztc7IEBL1dXpje9Ezky5Kv9zn4XdKkkoWMdXmlGlTHkjhwypZeLCMzV ZmXEZKLlUv+3XorTG1xebcg4QekaZTD4/q8W48tJ/skpb8nZBz/Dizk8JWRUnJ3F BM10vL2K8zIuVGDS28T6BeuOD1DtQgX2opT8aXAXkIR62DSono8Dm6ruidhvwKLx kOenX7xatVvHz/cBRcNWi7y9FVFljNRGCJpGyC0yBx7haA4lmCHE2v9KY9KxE+ne trL9cKbVyqafYfms5916syXZjtounr45q0hnNi9IM48GRCu1pDJ/7Ddu/BmWJIiA XG416s134D2T4Q== -----END CERTIFICATE-----Generated at Mon Jan 26 10:57:35 2026 by rpki-client