This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
File: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft (raw, json)
Hash identifier: TiejdJ4QXG28gjUAuhlulmElwDryOREufGrjEie/WIA=
Subject key identifier: FD:91:49:04:AC:F2:29:F6:CF:A2:C8:E1:28:24:89:B1:73:0C:4B:7F
Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Certificate issuer: /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Certificate serial: 019BF72D9BC14D255C9C7CE0FB7A0DD555A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
Manifest number: 0717
Signing time: Sun 25 Jan 2026 22:01:59 +0000
Manifest this update: Sun 25 Jan 2026 22:01:59 +0000
Manifest next update: Mon 26 Jan 2026 22:01:59 +0000
Files and hashes: 1: 3Zjg2_-T_SKWole5MQIdOn_TSEI.roa (hash: gV5NqofX6YNLndJ4yA1f9o61XcTolj0zsbUTR/C+cws=)
2: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl (hash: jpiYwvCBSBu5WtjqWPrHLjl9q3krkyJ4kxFh3V+JvR4=)
3: X-IMHZO2Sd5gZEJtndneD0fWreY.roa (hash: bfcFN5Xio94TqA5R1A/qDWjqIpl0U94c2LxTtPv9KNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:2d:9b:c1:4d:25:5c:9c:7c:e0:fb:7a:0d:d5:55:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Validity
Not Before: Jan 25 22:01:59 2026 GMT
Not After : Jan 26 22:01:59 2026 GMT
Subject: CN=fd914904acf229f6cfa2c8e1282489b1730c4b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fb:de:28:c1:5f:bc:c9:8b:2c:54:f9:5f:44:
23:11:0e:16:ed:ac:8e:d4:16:c4:b4:b8:f0:c0:31:
7f:f4:0b:bb:45:42:1c:ac:7b:08:64:a6:b7:d2:7e:
8c:29:cb:fa:a3:e4:ca:8d:0d:19:e2:24:39:25:2e:
25:88:aa:7b:cb:a3:fa:1d:2b:81:af:1a:1f:37:83:
87:04:7d:0a:38:c4:d4:50:12:cd:34:2b:69:50:da:
07:11:b5:f4:5f:17:b1:c2:db:77:ff:66:bd:2a:32:
84:92:e0:06:49:9f:fa:0d:dd:86:bb:54:d5:12:e4:
dd:11:1d:bc:51:05:94:02:62:48:cd:f1:f3:ba:e4:
dc:f5:b0:29:cb:c5:e0:b5:44:34:44:76:f9:19:df:
0a:5b:51:fe:49:b6:81:34:b7:c7:25:90:30:cb:c9:
e8:65:d0:c6:3e:2d:c8:81:1c:0e:04:a6:59:a8:f5:
51:69:26:e6:33:3c:c0:06:84:3e:3e:7e:70:3a:59:
08:8d:b4:62:b0:7e:44:e6:ca:9d:b6:87:f9:c4:93:
e3:01:e1:0f:8c:92:cb:80:b6:f5:82:0e:0a:be:70:
1f:70:0c:80:22:ae:e7:06:39:27:fa:17:be:bf:e0:
ef:d9:60:e0:7c:56:60:a7:ea:5c:9e:85:be:ef:07:
e5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:91:49:04:AC:F2:29:F6:CF:A2:C8:E1:28:24:89:B1:73:0C:4B:7F
X509v3 Authority Key Identifier:
keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:43:41:6b:d0:fb:d1:82:a1:fe:e3:f4:70:56:a4:f6:05:5c:
c5:8c:b1:96:14:44:31:c1:a0:13:2d:4e:89:54:df:19:50:5f:
24:65:b9:4a:bc:b7:a8:ad:79:4a:da:8b:02:21:b8:26:1b:35:
ca:35:92:a3:53:19:e6:6f:f4:c3:e6:fc:51:f7:6c:ad:ed:5f:
7b:18:b8:d4:c6:3b:76:7e:06:05:ef:ac:0a:81:af:d0:ba:89:
b7:ba:57:e4:05:d3:44:5f:1e:89:6f:44:e2:e8:72:c5:bb:af:
fc:dd:85:ec:07:82:bc:d6:07:e1:b1:43:96:ea:ed:9d:4d:d7:
ff:01:74:54:13:02:c2:0d:c5:b7:7c:2a:a6:40:c8:71:3c:e9:
0b:3e:07:39:a3:74:e4:8d:24:0c:1d:08:f5:b5:d4:61:80:63:
b3:d7:e8:d6:36:c3:22:1f:23:d3:6b:c8:38:6a:a7:c2:14:05:
8e:e5:eb:6e:aa:b7:f2:d9:34:c7:ae:3f:51:9a:b6:de:e9:5a:
d8:83:f5:cd:f1:17:56:77:aa:72:eb:86:ac:6e:0e:ed:c8:ca:
6b:e0:dd:ba:51:b4:6b:f8:d1:a2:d5:59:76:80:b9:9c:ad:24:
dd:74:bf:1b:4a:15:71:a6:7a:d2:7c:35:5d:b0:1a:0a:e0:ff:
2f:dc:20:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:32:01 2026 by rpki-client