This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft File: LJl56ji5293KdLe_pzdotXv_wS8.mft (raw, json) Hash identifier: jsCv9l1Eq06zWyqDKFFrve9NsKCnojjXeoo2/hvZDMc= Subject key identifier: 97:B1:5A:CE:7C:46:87:99:80:2D:53:84:B2:BB:55:6E:93:A4:72:1B Authority key identifier: 2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F Certificate issuer: /CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f Certificate serial: 019BFB09728F42E10456564705B11DB45427 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft Manifest number: 0A73 Signing time: Mon 26 Jan 2026 16:00:58 +0000 Manifest this update: Mon 26 Jan 2026 16:00:58 +0000 Manifest next update: Tue 27 Jan 2026 16:00:58 +0000 Files and hashes: 1: LJl56ji5293KdLe_pzdotXv_wS8.crl (hash: 0kr6kLZu1hvRJO+mUOUEwXwHyujw/olPxmbYrkAYsDM=) 2: Zg9CXZORRCkEDfIdrbdV2Z1djOE.roa (hash: ijvg+VbGDbhkZ0TpavVaie8pzYXStI3SVZx3OuXIsaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:72:8f:42:e1:04:56:56:47:05:b1:1d:b4:54:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f Validity Not Before: Jan 26 16:00:58 2026 GMT Not After : Jan 27 16:00:58 2026 GMT Subject: CN=97b15ace7c468799802d5384b2bb556e93a4721b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:21:c0:1b:2b:ad:3d:7c:3e:74:1b:32:a5:f2: 4e:58:66:3d:56:21:c7:bd:3b:c9:dc:81:69:71:ed: d2:13:40:72:3a:c1:84:b4:9f:8e:f4:9c:5a:e8:25: ed:39:53:73:39:61:99:21:21:cf:ac:3b:a0:b3:63: 87:93:32:29:42:80:e9:d3:51:57:6a:f0:49:69:eb: f3:a9:a8:39:25:0b:35:a6:70:51:da:ee:6c:55:98: ce:74:f9:d4:28:66:71:94:a7:b5:10:2e:a6:96:4a: d3:3d:16:0c:c0:b4:ac:58:33:45:fd:ce:b4:b0:06: 6c:47:11:c4:87:65:e6:c6:ca:b1:ac:df:63:78:b2: 3c:f5:51:02:7f:08:de:c4:6c:36:25:4f:e3:78:64: fa:64:8f:ff:94:6b:c7:72:ea:09:80:7c:cc:40:5f: 0e:07:a9:c4:82:f0:0f:0f:88:eb:fe:6d:d8:65:e6: d4:50:77:ae:7d:3a:63:7f:ad:09:6e:cc:77:e7:e9: a5:14:b6:50:b7:d1:af:0d:44:ab:83:22:02:b4:cb: bb:9d:f5:f8:e0:86:13:45:94:99:1b:ad:7a:ff:aa: 3e:c8:88:60:73:96:46:6a:fd:8f:85:0e:af:27:7d: df:61:c0:32:c4:4f:12:3d:78:f5:99:2c:70:dc:2c: de:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B1:5A:CE:7C:46:87:99:80:2D:53:84:B2:BB:55:6E:93:A4:72:1B X509v3 Authority Key Identifier: keyid:2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:45:d6:27:ac:75:29:fe:06:b5:5d:2f:e9:48:5e:c8:37:3a: 43:15:c9:9d:69:8f:3e:6a:d5:ef:0b:75:6d:82:b3:3f:e1:59: 9f:77:81:59:1d:40:34:1f:c2:cc:5d:b9:99:d7:6e:7f:96:72: 69:4a:ef:22:d2:d5:7c:2f:51:b3:9c:93:c9:e4:12:4b:4e:84: 6b:2e:f2:a5:32:d0:b3:a8:ca:99:5d:a9:eb:e7:35:8f:21:6b: 26:f3:53:c8:69:73:59:3b:2b:a2:47:2c:97:9f:a3:ca:d4:4c: a1:ff:82:27:cc:6c:fd:c2:05:bc:82:d2:af:e9:ab:9a:98:2a: 6f:06:1a:fc:15:8b:03:72:f2:27:c1:52:d0:11:c5:8f:8c:ed: 7a:5e:d1:5f:21:e1:02:c8:81:39:89:c2:97:9f:f5:31:c2:95: ac:03:86:59:e2:cb:81:e1:48:b8:7d:4e:c1:5d:39:02:70:b2: 30:52:53:7c:91:4f:58:5e:63:2c:71:54:d2:27:5a:63:60:a9: 10:92:83:1a:d9:7d:5a:55:3c:9c:af:28:fc:2a:5a:bd:e5:d6: aa:52:2e:36:67:41:02:2f:d5:f5:3f:d9:01:67:60:72:6d:7d: e1:16:a0:ad:93:69:3d:00:0b:8c:4e:50:93:70:be:a5:65:c3: 93:98:68:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CXKPQuEEVlZHBbEdtFQnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjOTk3OWVhMzhiOWRiZGRjYTc0YjdiZmE3Mzc2OGI1N2Jm ZmMxMmYwHhcNMjYwMTI2MTYwMDU4WhcNMjYwMTI3MTYwMDU4WjAzMTEwLwYDVQQD Eyg5N2IxNWFjZTdjNDY4Nzk5ODAyZDUzODRiMmJiNTU2ZTkzYTQ3MjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yHAGyutPXw+dBsypfJOWGY9ViHH vTvJ3IFpce3SE0ByOsGEtJ+O9Jxa6CXtOVNzOWGZISHPrDugs2OHkzIpQoDp01FX avBJaevzqag5JQs1pnBR2u5sVZjOdPnUKGZxlKe1EC6mlkrTPRYMwLSsWDNF/c60 sAZsRxHEh2XmxsqxrN9jeLI89VECfwjexGw2JU/jeGT6ZI//lGvHcuoJgHzMQF8O B6nEgvAPD4jr/m3YZebUUHeufTpjf60Jbsx35+mlFLZQt9GvDUSrgyICtMu7nfX4 4IYTRZSZG616/6o+yIhgc5ZGav2PhQ6vJ33fYcAyxE8SPXj1mSxw3CzevwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJexWs58RoeZgC1ThLK7VW6TpHIbMB8GA1UdIwQY MBaAFCyZeeo4udvdynS3v6c3aLV7/8EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEpsNTZqaTUyOTNLZExlX3B6ZG90WHZfd1M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82MTU1ZjAtNGRjYi00OGNlLWE0ZWQt YWMzMzJmOGQ4YzQ4LzEvTEpsNTZqaTUyOTNLZExlX3B6ZG90WHZfd1M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC82MTU1ZjAtNGRjYi00OGNlLWE0ZWQtYWMzMzJmOGQ4YzQ4 LzEvTEpsNTZqaTUyOTNLZExlX3B6ZG90WHZfd1M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0kXWJ6x1 Kf4GtV0v6UheyDc6QxXJnWmPPmrV7wt1bYKzP+FZn3eBWR1ANB/CzF25mdduf5Zy aUrvItLVfC9Rs5yTyeQSS06Eay7ypTLQs6jKmV2p6+c1jyFrJvNTyGlzWTsrokcs l5+jytRMof+CJ8xs/cIFvILSr+mrmpgqbwYa/BWLA3LyJ8FS0BHFj4ztel7RXyHh AsiBOYnCl5/1McKVrAOGWeLLgeFIuH1OwV05AnCyMFJTfJFPWF5jLHFU0idaY2Cp EJKDGtl9WlU8nK8o/CpaveXWqlIuNmdBAi/V9T/ZAWdgcm194RagrZNpPQALjE5Q k3C+pWXDk5homQ== -----END CERTIFICATE-----Generated at Mon Jan 26 17:49:31 2026 by rpki-client