This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft File: LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft (raw, json) Hash identifier: 7ZUiKM5Fbpj6DFNAioOFzFeLIHefEc0R0VRsHvzYtHY= Subject key identifier: B7:CA:55:70:39:09:26:78:A6:77:1D:75:E1:E6:FF:43:CE:05:7B:86 Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Certificate serial: 019C45474EDD1157DB7F562B837F83DDBAB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft Manifest number: 1027 Signing time: Tue 10 Feb 2026 02:00:26 +0000 Manifest this update: Tue 10 Feb 2026 02:00:26 +0000 Manifest next update: Wed 11 Feb 2026 02:00:26 +0000 Files and hashes: 1: 09L29M524JtLa5ZgogkXLXq_qVQ.roa (hash: vbKviP/C/Uh8p10yamrn572MJG8g6MCiVwGfvH2mWcc=) 2: D00cPnw9bB2d9TgFOhC3-ze0kjc.roa (hash: Eda6JMILzSRldxKlV9x3LrbQjTPVxeDmflNgD3foIJw=) 3: FZ0mvZ6nlWmx1w_9Za_qEWaADFU.roa (hash: 7kl9KDxPJEASyvH7OdKvIjFJHuZjV30ozyUUxOj1fRk=) 4: LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl (hash: i2rQu5CpZbDb8KxARKOC0TGDogsciSIW9Nufh3cPi98=) 5: RC6auerhl88_6riv7dybqchIS5U.roa (hash: SeZbnHyJbUAAlR1IcpsGOJobNmygz8xGZkv6xW1FK8g=) 6: Wun6Qz2Qs6STNSC80NWGPAsClFU.roa (hash: SDa0Mk7cpLMkML2EEhK8WxoKcKFzNItBMeoOxjoeTuQ=) 7: f2CUBwukbS4Jl9DUVNEKEFyrD0Q.roa (hash: L6OXByGU2WQtLD8gRQiiCN4AJSkVRktzmevEzCGDIRA=) 8: iXtfcu1KWtIb45p4L3Zc91aLHD4.roa (hash: EUrm6WcBA5Xj7RQU2eVwJ+wwhrqRBn/zb3ljF1u1Jf8=) 9: oWpY7lVUZc4xkdONXBsk7LY9VzQ.roa (hash: uJkG/PD9fhtu8O1FWieSoNSOr5gkaN8jlwYl8rtNjFA=) 10: s2Ypy54WuhCWz54ggPtUGzQB9Y8.roa (hash: Cr4q6do/gJppREcmAQon0odH+YuL+eSFq022BhIG/4E=) 11: uCPERwsuvyXpYR4y_BXupFIJXt4.roa (hash: jbxXtknnk4DV3WL6pnrxlE1uxvDz9l+QZBW7wpDD5fM=) 12: wj6F-GbnlJ5PgQSNTpZExJxm390.roa (hash: YVJH3yfABwb076P/mjMjg3bUoVEsCOXMqF23WBWbaWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:45:47:4e:dd:11:57:db:7f:56:2b:83:7f:83:dd:ba:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Validity Not Before: Feb 10 02:00:26 2026 GMT Not After : Feb 11 02:00:26 2026 GMT Subject: CN=b7ca557039092678a6771d75e1e6ff43ce057b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:06:fd:fd:ca:cb:7d:4f:1d:7d:1d:7c:c4:44: 5a:20:77:43:05:94:69:13:a8:67:65:e8:0e:3c:de: 2c:34:a5:08:5b:60:09:ee:d9:14:87:cd:54:05:3d: 9d:21:87:ab:23:f5:95:34:0a:d3:81:62:4d:34:1e: 55:64:84:f1:5e:42:14:97:c2:93:4a:48:d2:7a:bf: 88:c4:02:d6:b1:b0:38:dd:9c:16:d0:25:1c:dc:c9: ba:5d:6d:08:c1:16:e3:76:97:46:75:b4:1b:4a:77: 2f:db:18:4b:2f:f4:68:20:e5:f6:7d:dc:85:c0:85: e8:9d:ca:c2:5e:54:a3:68:c7:8e:5c:97:57:01:3b: 10:9e:c5:b1:92:6e:40:7e:70:95:6b:52:62:62:b2: bb:1b:51:3d:78:24:8c:c7:ac:63:77:f2:2f:c7:f0: 3e:23:08:25:dd:03:9e:09:3d:88:ca:6d:0d:92:a5: 22:a8:fd:5a:5e:12:d7:e8:af:f0:68:2b:fe:4c:06: 92:af:0c:e7:07:f9:7f:e2:dd:dc:59:dd:91:b2:2a: e6:ac:46:43:6e:29:7e:4b:18:a7:22:53:0e:b6:08: 4b:b2:ad:b8:4b:70:a7:8c:0d:65:8f:5a:ac:8f:00: ab:2d:2e:a6:40:53:c0:60:f4:cb:d2:70:c9:29:ff: 7f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CA:55:70:39:09:26:78:A6:77:1D:75:E1:E6:FF:43:CE:05:7B:86 X509v3 Authority Key Identifier: keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:7a:52:d2:b6:9d:ef:f3:49:34:7f:4e:84:a0:31:50:64:6b: d8:6e:62:e2:c2:88:f7:85:18:6e:45:66:bd:7a:14:a8:3b:dc: 20:4f:aa:9d:71:a8:44:3f:c7:c6:08:da:83:67:62:ed:e3:17: 38:62:0e:ab:29:23:20:a8:5f:1c:16:b3:67:5e:b0:e6:82:5c: 9d:15:e4:45:bf:88:42:a9:75:ff:11:a9:3c:e8:ca:60:44:5d: af:db:a5:4f:70:cd:0e:d3:0b:b4:d3:d7:8e:66:4c:73:eb:77: 0e:a1:1a:b6:b4:f1:95:42:de:a5:e3:1d:54:91:d0:44:29:59: 30:00:07:1e:53:3f:fc:a9:f0:99:48:30:7d:e6:0e:46:30:23: e3:99:65:d9:e1:c8:06:7a:7f:51:cf:47:2e:16:bf:a0:99:e2: 92:a0:72:ad:7e:cc:0b:d9:85:59:6a:e6:07:f4:e4:d3:6c:73: c9:f4:ca:a6:f0:9a:7c:a1:37:9b:9a:9f:24:a4:b8:74:39:ef: 16:81:2a:1d:71:99:3f:1c:94:ec:fd:91:4d:c9:82:6a:bc:5a: fa:8e:22:36:73:64:eb:b3:7b:c2:58:3f:01:c1:fc:5e:10:f7: ee:67:ce:4d:16:d1:eb:ef:2e:a2:09:ea:8e:35:d6:23:e3:37: 7b:8b:7f:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxFR07dEVfbf1Yrg3+D3bq2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMzY4YjBhZWM2YzdmZDQ4ZDBkOTZiNDA3N2EyM2Y5MDZh ODZhNDgwHhcNMjYwMjEwMDIwMDI2WhcNMjYwMjExMDIwMDI2WjAzMTEwLwYDVQQD EyhiN2NhNTU3MDM5MDkyNjc4YTY3NzFkNzVlMWU2ZmY0M2NlMDU3Yjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswb9/crLfU8dfR18xERaIHdDBZRp E6hnZegOPN4sNKUIW2AJ7tkUh81UBT2dIYerI/WVNArTgWJNNB5VZITxXkIUl8KT SkjSer+IxALWsbA43ZwW0CUc3Mm6XW0IwRbjdpdGdbQbSncv2xhLL/RoIOX2fdyF wIXoncrCXlSjaMeOXJdXATsQnsWxkm5AfnCVa1JiYrK7G1E9eCSMx6xjd/Ivx/A+ Iwgl3QOeCT2Iym0NkqUiqP1aXhLX6K/waCv+TAaSrwznB/l/4t3cWd2RsirmrEZD bil+SxinIlMOtghLsq24S3CnjA1lj1qsjwCrLS6mQFPAYPTL0nDJKf9/TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLfKVXA5CSZ4pncddeHm/0POBXuGMB8GA1UdIwQY MBaAFC42iwrsbH/UjQ2WtAd6I/kGqGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQt MTQyN2RkMTZlZmE0LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQtMTQyN2RkMTZlZmE0 LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALHpS0rad 7/NJNH9OhKAxUGRr2G5i4sKI94UYbkVmvXoUqDvcIE+qnXGoRD/Hxgjag2di7eMX OGIOqykjIKhfHBazZ16w5oJcnRXkRb+IQql1/xGpPOjKYERdr9ulT3DNDtMLtNPX jmZMc+t3DqEatrTxlULepeMdVJHQRClZMAAHHlM//KnwmUgwfeYORjAj45ll2eHI Bnp/Uc9HLha/oJnikqByrX7MC9mFWWrmB/Tk02xzyfTKpvCafKE3m5qfJKS4dDnv FoEqHXGZPxyU7P2RTcmCarxa+o4iNnNk67N7wlg/AcH8XhD37mfOTRbR6+8uognq jjXWI+M3e4t/Sg== -----END CERTIFICATE-----Generated at Tue Feb 10 08:40:04 2026 by rpki-client