This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft File: LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft (raw, json) Hash identifier: wCvQDDKJ1ou8JFq0eqkTooyUZTpEBWCkAfmvPmu5jrA= Subject key identifier: 27:6C:ED:06:6C:6A:84:2C:A0:9E:C0:3B:F2:E2:3F:FE:7F:CD:FE:57 Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Certificate serial: 019B5C3FCBDF06C152DCE2D82B42201C7F83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft Manifest number: 0FAE Signing time: Fri 26 Dec 2025 20:00:43 +0000 Manifest this update: Fri 26 Dec 2025 20:00:43 +0000 Manifest next update: Sat 27 Dec 2025 20:00:43 +0000 Files and hashes: 1: 4BIZ08i4JPFDDHVtvlfqNMnUnIc.roa (hash: AfKuZeKZY5PYd/h5BuonLEsckMORdl0M6uVn/t5CZGA=) 2: 8gg7kQMVPMp5CW_2Zh8YAWMAQ5w.roa (hash: f3wtA4WN/DWLyQp37wYwvHxSkXSyAaxvA1pdEj3pPLE=) 3: LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl (hash: lX4pPdptIFOspjEH1o7GLw0D8x592da+8wPVRqHQOv4=) 4: UH8mYATqGd2LhlccdYCUKZ4JN64.roa (hash: zx6xKES79izKCK41WQG8kojfkl15CZD0vapTu3dVd94=) 5: _e53uvo6U-VwaFNUrhbZ0o9cAIk.roa (hash: 3MnafteQbEnb4/lZd7D02L0no0lOBTDc4/+MQgihXLo=) 6: cCgTb8X6pIy80V_PJ66PvKfmf8A.roa (hash: wMMFmNIatqATxNZJr23krWEqGeEpB6KiCLDJPXvnxLE=) 7: dqRWzSNCruVCqi7CqPXaFVIAZqc.roa (hash: 1yVtBaBVVLrbvd7QX7NgCFT4elTOPpbTI0QeBKDstSU=) 8: nf08bxZrXlifI-WoWt3QiOzUCYE.roa (hash: 9Fjz3WhUtYB2nXdTzmYUXTXJcsut26eiijRzx8g0Gdo=) 9: oWnKEFNDYJlrUghHRhUXP1kVdCc.roa (hash: nEmPj67OGh6UydVBXMGywfERqcOnY+HpJE/FVl2nhVw=) 10: teJ51KVPIWV36Tlu6BnhXD2AUD4.roa (hash: iirQ6/n4/0a+w6plKlxP3E2dDeNQoZhhCXUm/2+ugFU=) 11: uYLrAaJA87yT4e0DquX1mDlmRQ8.roa (hash: 85O+xlHn4GYVrvRYFmOtwhkhRxSqecs6sd012ls3OuI=) 12: z9geQajqLX4fEuy3PNQy0IwzzgY.roa (hash: JIvL3zAmwpher+kvj+pICp4mH45/hSa/ISO69pribAI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:3f:cb:df:06:c1:52:dc:e2:d8:2b:42:20:1c:7f:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Validity Not Before: Dec 26 20:00:43 2025 GMT Not After : Dec 27 20:00:43 2025 GMT Subject: CN=276ced066c6a842ca09ec03bf2e23ffe7fcdfe57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:93:b9:13:3d:4e:57:01:79:55:c8:e4:2d:11: 0d:a2:98:b3:8a:b2:cc:92:f7:a8:31:08:4e:01:ac: 73:1d:39:2a:5d:2d:5e:7b:b5:20:55:68:d9:27:c0: 00:ec:96:02:f2:6e:08:54:f9:d0:44:71:cf:70:d9: b2:c2:1a:5a:31:0f:e3:f1:33:68:64:d4:6e:6d:58: 28:a8:c2:40:bd:71:fe:0f:06:de:ef:3f:fc:ea:63: 44:9d:5d:a4:90:52:2e:5c:eb:15:77:51:b8:22:3d: 02:42:2c:fd:29:36:61:04:44:85:1f:b7:27:26:8d: 4e:2c:76:83:e9:4a:ec:1a:91:e2:44:c4:6e:ca:b0: 1e:a4:a6:4a:ea:b5:39:dd:5c:6f:c6:9e:de:7c:2e: 3f:46:bd:6a:c9:df:81:43:3d:0e:1e:e6:c2:2f:48: b8:60:ba:e4:8e:9e:25:ca:ad:cd:e1:45:a6:77:03: 63:57:02:7e:37:2f:2f:76:ef:9f:fd:32:a6:34:2b: 62:b4:47:24:cb:b2:f8:c4:10:1a:09:07:67:0d:16: 4d:c3:be:cc:64:cb:80:27:cb:cb:b1:34:c5:23:1e: 11:9b:ea:51:85:ae:4b:37:0d:b9:60:b1:ce:08:d0: 0d:0a:03:25:8c:b7:19:7f:b2:b0:65:2d:9e:cc:42: d9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6C:ED:06:6C:6A:84:2C:A0:9E:C0:3B:F2:E2:3F:FE:7F:CD:FE:57 X509v3 Authority Key Identifier: keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:fa:8c:d2:07:a1:f6:49:1c:60:1e:aa:6b:31:1f:87:6f:e3: 5e:e2:d7:44:ac:8c:fc:98:c1:fd:ab:fd:49:a9:d8:fc:f7:94: 98:f0:78:2a:86:46:40:40:92:bb:1c:25:82:45:d7:ce:61:74: 3c:50:8f:eb:11:36:a7:f7:a1:f3:69:ce:1c:f1:fe:9c:33:e9: a8:17:9e:b4:5f:d4:46:da:90:5e:7b:84:7c:35:95:e7:c3:11: 1a:90:c0:49:c8:86:37:cd:16:5d:ad:6b:28:e5:6e:6a:84:a6: 93:af:2d:79:ca:25:e7:65:76:1c:37:cc:93:5b:ad:63:29:89: c6:70:f8:25:f9:78:b4:0e:44:6c:4e:63:4e:46:2c:88:fa:76: 0a:e3:d4:9c:12:ee:15:28:a3:b2:13:b4:f2:97:a1:de:ed:4b: 11:9b:e1:e7:8e:3e:da:a5:06:32:3e:fb:c2:4d:b5:18:69:2f: fa:9d:f1:9e:eb:27:7b:e7:85:d9:98:2c:83:6b:93:1d:25:b5: 43:c5:49:30:52:3c:9e:c5:da:79:bf:e4:06:e8:2a:9c:88:cb: 63:0c:28:5d:d8:9f:a4:1b:64:0b:67:51:de:4c:69:2d:fb:bd: 81:37:63:5d:e5:26:33:77:a7:0e:be:2d:76:92:17:24:cd:03: 49:84:f3:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcP8vfBsFS3OLYK0IgHH+DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMzY4YjBhZWM2YzdmZDQ4ZDBkOTZiNDA3N2EyM2Y5MDZh ODZhNDgwHhcNMjUxMjI2MjAwMDQzWhcNMjUxMjI3MjAwMDQzWjAzMTEwLwYDVQQD EygyNzZjZWQwNjZjNmE4NDJjYTA5ZWMwM2JmMmUyM2ZmZTdmY2RmZTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65O5Ez1OVwF5VcjkLRENopizirLM kveoMQhOAaxzHTkqXS1ee7UgVWjZJ8AA7JYC8m4IVPnQRHHPcNmywhpaMQ/j8TNo ZNRubVgoqMJAvXH+Dwbe7z/86mNEnV2kkFIuXOsVd1G4Ij0CQiz9KTZhBESFH7cn Jo1OLHaD6UrsGpHiRMRuyrAepKZK6rU53Vxvxp7efC4/Rr1qyd+BQz0OHubCL0i4 YLrkjp4lyq3N4UWmdwNjVwJ+Ny8vdu+f/TKmNCtitEcky7L4xBAaCQdnDRZNw77M ZMuAJ8vLsTTFIx4Rm+pRha5LNw25YLHOCNANCgMljLcZf7KwZS2ezELZKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCds7QZsaoQsoJ7AO/LiP/5/zf5XMB8GA1UdIwQY MBaAFC42iwrsbH/UjQ2WtAd6I/kGqGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQt MTQyN2RkMTZlZmE0LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQtMTQyN2RkMTZlZmE0 LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPvqM0geh 9kkcYB6qazEfh2/jXuLXRKyM/JjB/av9SanY/PeUmPB4KoZGQECSuxwlgkXXzmF0 PFCP6xE2p/eh82nOHPH+nDPpqBeetF/URtqQXnuEfDWV58MRGpDASciGN80WXa1r KOVuaoSmk68tecol52V2HDfMk1utYymJxnD4Jfl4tA5EbE5jTkYsiPp2CuPUnBLu FSijshO08peh3u1LEZvh544+2qUGMj77wk21GGkv+p3xnusne+eF2Zgsg2uTHSW1 Q8VJMFI8nsXaeb/kBugqnIjLYwwoXdifpBtkC2dR3kxpLfu9gTdjXeUmM3enDr4t dpIXJM0DSYTz7g== -----END CERTIFICATE-----Generated at Fri Dec 26 22:46:38 2025 by rpki-client