This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft File: Lj7hjQl0j0bcU62UtynzERCsrDQ.mft (raw, json) Hash identifier: Ex62eFA0uRbaMs4RDjEc6n7+S/4hugu49kdIgJeYO4k= Subject key identifier: 7D:10:8E:BB:74:97:BE:02:94:8E:87:B6:40:58:01:14:9E:F0:4A:0E Authority key identifier: 2E:3E:E1:8D:09:74:8F:46:DC:53:AD:94:B7:29:F3:11:10:AC:AC:34 Certificate issuer: /CN=2e3ee18d09748f46dc53ad94b729f31110acac34 Certificate serial: 019C1BDE37201109BA06B37B06DE73AF5E9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft Manifest number: 84 Signing time: Mon 02 Feb 2026 01:01:13 +0000 Manifest this update: Mon 02 Feb 2026 01:01:13 +0000 Manifest next update: Tue 03 Feb 2026 01:01:13 +0000 Files and hashes: 1: ChFRh5Xw0ookwnsILJ3UBdbu5y8.asa (hash: L7UykFBpSjqzqUVBMQkwTJ7cCxGIKVsQmZrcRxIm9gc=) 2: Lj7hjQl0j0bcU62UtynzERCsrDQ.crl (hash: j+PkAR2zzRjXNONNnbQMIbKjV9ZVd2qOpFOOV2IW/s8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 19:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:de:37:20:11:09:ba:06:b3:7b:06:de:73:af:5e:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e3ee18d09748f46dc53ad94b729f31110acac34 Validity Not Before: Feb 2 01:01:13 2026 GMT Not After : Feb 3 01:01:13 2026 GMT Subject: CN=7d108ebb7497be02948e87b6405801149ef04a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b9:3c:ae:7d:93:73:98:fb:05:7e:68:92:81: 06:a4:4f:e4:56:50:67:04:b7:1f:7e:07:ea:ad:b7: 15:5d:59:29:39:7e:56:51:da:62:9d:ff:31:88:0b: 1d:02:1a:0a:51:d4:a4:7a:6d:f2:e5:ad:aa:1d:04: 6e:11:a9:b8:b1:c2:fd:c7:5c:fb:ea:ec:94:f7:4c: a9:be:0d:a8:f8:48:5b:16:a1:21:09:3a:b5:79:5b: 39:4f:37:f2:c9:4e:0d:e9:71:c7:d4:2d:a2:d3:17: 28:de:23:9a:c1:7f:39:af:74:94:43:dc:c5:3e:fd: 5f:71:bf:f7:5d:e9:8c:4c:2b:7e:c5:c3:4e:0a:22: 51:2c:21:7d:f9:e0:ef:d4:ea:f7:f3:8e:95:58:14: 1e:2b:0d:62:10:7f:a5:12:6b:a6:cb:ba:39:7d:1d: 19:d0:5b:d5:dd:46:ca:3e:64:51:8e:70:a5:b4:59: 14:cf:05:5c:0b:21:6a:6d:7e:d7:5d:ed:39:80:ec: 91:09:74:c8:2c:2f:56:9e:55:2c:a8:33:04:14:86: 6e:28:f5:23:6a:d1:b7:cf:29:22:4f:93:a9:b6:6e: 54:ce:ef:a5:7a:83:44:d4:e6:83:0f:94:c5:a4:28: a5:76:f4:88:89:25:84:9c:7e:24:4c:0f:5b:33:cb: ec:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:10:8E:BB:74:97:BE:02:94:8E:87:B6:40:58:01:14:9E:F0:4A:0E X509v3 Authority Key Identifier: keyid:2E:3E:E1:8D:09:74:8F:46:DC:53:AD:94:B7:29:F3:11:10:AC:AC:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:5c:c3:85:13:95:fa:bb:27:de:71:14:b7:66:df:08:e8:b9: 39:c5:41:bd:22:96:33:b4:13:a2:e0:cc:ff:4a:b6:6b:0f:e3: 93:03:4c:cb:9e:00:7f:0d:3e:a7:df:05:51:a7:d0:96:ac:5a: 21:fd:f1:a3:11:7e:0a:24:f5:79:17:3c:42:55:9b:f9:2c:c4: 62:72:f9:55:04:cb:3d:23:b6:3c:71:66:80:2b:06:4f:b4:13: 3b:e5:11:b8:ad:e4:a0:80:2d:97:32:f6:ff:95:99:b3:34:b5: fb:2f:e5:64:3a:91:20:f1:e8:cf:13:8c:d5:6d:ae:eb:e7:dd: 48:a0:de:e8:82:82:6a:f6:c1:e9:27:1f:95:1e:e1:6b:79:d3: 23:97:a7:f7:7b:c5:0f:59:b2:e2:15:78:4b:7c:2f:07:bb:ba: d6:ff:0a:f4:05:8d:c9:86:f5:f7:66:24:ba:05:fa:13:2c:44: 51:c9:07:c6:96:32:6d:30:ec:ba:59:a1:31:5a:3d:79:28:24: 8f:c5:f1:47:d8:ef:a9:e3:2b:25:f3:5b:a6:91:1c:7a:96:1f: 31:43:84:42:0c:f7:b3:2f:cd:f6:f3:be:8c:dd:96:22:6a:c5: 2c:79:0d:9d:68:a2:df:87:f4:ce:bf:a0:06:bb:c9:2a:ae:db: 22:53:49:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwb3jcgEQm6BrN7Bt5zr16dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlM2VlMThkMDk3NDhmNDZkYzUzYWQ5NGI3MjlmMzExMTBh Y2FjMzQwHhcNMjYwMjAyMDEwMTEzWhcNMjYwMjAzMDEwMTEzWjAzMTEwLwYDVQQD Eyg3ZDEwOGViYjc0OTdiZTAyOTQ4ZTg3YjY0MDU4MDExNDllZjA0YTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7k8rn2Tc5j7BX5okoEGpE/kVlBn BLcffgfqrbcVXVkpOX5WUdpinf8xiAsdAhoKUdSkem3y5a2qHQRuEam4scL9x1z7 6uyU90ypvg2o+EhbFqEhCTq1eVs5TzfyyU4N6XHH1C2i0xco3iOawX85r3SUQ9zF Pv1fcb/3XemMTCt+xcNOCiJRLCF9+eDv1Or3846VWBQeKw1iEH+lEmumy7o5fR0Z 0FvV3UbKPmRRjnCltFkUzwVcCyFqbX7XXe05gOyRCXTILC9WnlUsqDMEFIZuKPUj atG3zykiT5Optm5Uzu+leoNE1OaDD5TFpCildvSIiSWEnH4kTA9bM8vsRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0Qjrt0l74ClI6HtkBYARSe8EoOMB8GA1UdIwQY MBaAFC4+4Y0JdI9G3FOtlLcp8xEQrKw0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGo3aGpRbDBqMGJjVTYyVXR5bnpFUkNzckRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mZDQ5OTktN2UwZS00YmI3LWFiYTkt ZDg0ODY5ZmY5NTYxLzEvTGo3aGpRbDBqMGJjVTYyVXR5bnpFUkNzckRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9mZDQ5OTktN2UwZS00YmI3LWFiYTktZDg0ODY5ZmY5NTYx LzEvTGo3aGpRbDBqMGJjVTYyVXR5bnpFUkNzckRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADlzDhROV +rsn3nEUt2bfCOi5OcVBvSKWM7QTouDM/0q2aw/jkwNMy54Afw0+p98FUafQlqxa If3xoxF+CiT1eRc8QlWb+SzEYnL5VQTLPSO2PHFmgCsGT7QTO+URuK3koIAtlzL2 /5WZszS1+y/lZDqRIPHozxOM1W2u6+fdSKDe6IKCavbB6ScflR7ha3nTI5en93vF D1my4hV4S3wvB7u61v8K9AWNyYb192YkugX6EyxEUckHxpYybTDsulmhMVo9eSgk j8XxR9jvqeMrJfNbppEcepYfMUOEQgz3sy/N9vO+jN2WImrFLHkNnWii34f0zr+g BrvJKq7bIlNJ5g== -----END CERTIFICATE-----Generated at Mon Feb 2 04:45:26 2026 by rpki-client