This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft File: LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft (raw, json) Hash identifier: UQuUXtF4CJyc8faUCKwHgL1Rn2OoZO9kPt4yItn56uo= Subject key identifier: AC:71:19:5E:AA:DF:DC:D0:1D:C4:78:1F:DB:BE:7B:F1:13:A9:56:46 Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98 Certificate issuer: /CN=2c96946c501ddf48696da2cf110fdceb286fac98 Certificate serial: 019BFC52EA4D9089BE07DEB025F6B81CF2E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft Manifest number: 17FD Signing time: Mon 26 Jan 2026 22:00:50 +0000 Manifest this update: Mon 26 Jan 2026 22:00:50 +0000 Manifest next update: Tue 27 Jan 2026 22:00:50 +0000 Files and hashes: 1: CKkhc8E_ns4Dckr55-sXJCzWGB0.roa (hash: dtTiqDZrVtVn2PVu7BlGNI9CP1Mb6StSs0eabpwin2M=) 2: Jz-voqtmr6s9l-17wwWOzkPklP4.roa (hash: 0KYzp44vVJK8KCX44xgQuMur9j5UVfh+V8DoZ5sxES4=) 3: LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl (hash: Fs2zK8yLGPpGr8q3CGhvUN8pH/1a4aOK/WbKHcabVmk=) 4: MTa7VSUqDJwEl7oEr7GhdYOFMKY.roa (hash: 2hNdTBr4lmu2OZCRv/tSslRqxk8YhgCeLiKSZjOlWDI=) 5: XGLoZ1t3WE712vezFdNpPyi4F9M.roa (hash: qwmyAr6rGmu+/cVj8nXEo+36zXFkr8LlX1oRfxoChFQ=) 6: gGIqjOk7g2PlsS-LqhKTvWucpIY.roa (hash: W502vrehV9CtMQIyWcS05BwV8XiwYtXO1sMXV5IcC2E=) 7: q4XekdpB8TJEjFPDt8ccc_PZPoY.roa (hash: PjKWv/0KNDEM4pTyCe/55FuN+l88tsgTGIft6oTHhlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:52:ea:4d:90:89:be:07:de:b0:25:f6:b8:1c:f2:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98 Validity Not Before: Jan 26 22:00:50 2026 GMT Not After : Jan 27 22:00:50 2026 GMT Subject: CN=ac71195eaadfdcd01dc4781fdbbe7bf113a95646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d9:20:0a:43:2c:07:06:0f:2b:2a:18:05:85: 57:89:34:f9:ba:61:a7:f2:ac:11:45:c3:35:94:af: 92:48:65:8a:fb:44:9b:32:68:af:d3:f9:e7:20:e0: d5:4b:e7:46:c3:60:d1:95:9e:39:09:d0:8f:38:cf: d9:74:5c:95:9e:c5:78:17:90:5f:05:d5:9c:a4:35: 07:e6:63:89:d1:5d:3a:0d:16:80:a5:63:35:17:bb: 24:95:88:60:04:4d:9c:26:57:94:e9:31:34:e2:2c: 9f:a3:a9:d8:b9:a0:1c:2b:3a:56:32:d3:87:bd:38: 6c:ab:bd:ee:56:51:e0:2c:34:bb:97:df:6a:36:7a: ed:73:d5:00:28:80:87:ca:19:60:0e:a8:3a:71:8a: 22:cb:77:eb:ee:7e:86:44:81:5e:83:4d:fb:76:a2: 64:f3:9e:7b:0d:78:3b:12:96:cf:f1:5b:2f:ef:f4: 81:05:b9:1b:a5:57:5a:e3:11:12:e5:b6:bb:2b:00: aa:55:92:90:09:48:bc:76:6f:36:5d:74:c2:95:9d: 51:96:46:fe:8e:86:17:5e:c8:ae:fc:11:f7:80:e7: cb:bd:ef:5d:32:a4:6c:d3:a3:f8:cc:b9:f1:f8:57: 25:03:3f:3f:5a:aa:6a:4c:ea:9d:3e:9c:96:44:52: 01:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:71:19:5E:AA:DF:DC:D0:1D:C4:78:1F:DB:BE:7B:F1:13:A9:56:46 X509v3 Authority Key Identifier: keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:cf:38:55:48:68:80:ce:e4:a3:1f:40:4c:9e:03:de:b0:e3: 3f:70:75:5d:a3:4b:c5:5c:68:d1:f8:57:a5:87:03:38:ee:50: 4b:d4:71:a2:38:ab:8d:87:61:e6:be:2b:12:7b:dd:fb:c5:69: c5:b1:e6:b9:62:cc:73:da:88:4f:97:4b:73:a9:bd:fe:37:0d: 5b:ee:90:85:af:19:d8:e1:af:53:95:98:4e:e9:75:d4:20:94: 2f:a2:13:d1:a0:1f:10:f4:c3:db:89:94:e9:22:98:64:1c:4b: 33:d7:52:82:70:4b:2a:77:5f:96:0f:cf:89:7b:fa:c2:77:ca: 0a:56:94:b5:db:af:d6:1a:d8:86:e7:17:a7:96:99:f9:b4:9b: e2:2c:43:7d:98:4c:2d:5a:fa:dd:7d:f7:ee:65:c0:02:87:91: 93:41:b4:2c:80:75:ee:60:3f:a6:5a:6b:56:b7:69:4b:a5:f7: 18:6a:a7:6f:52:fb:d3:22:51:ab:12:bb:e4:6e:b9:f0:2c:ca: 37:fe:68:19:1d:cf:63:49:4b:7c:3a:73:58:e2:fe:6e:01:30: 64:e4:bd:ed:82:65:ee:cc:ee:af:3b:ed:57:07:e1:53:75:23: 5b:fe:29:1a:03:92:32:63:db:35:d1:97:f4:ad:d1:c8:6f:9a: f8:e6:ae:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8UupNkIm+B96wJfa4HPLoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjOTY5NDZjNTAxZGRmNDg2OTZkYTJjZjExMGZkY2ViMjg2 ZmFjOTgwHhcNMjYwMTI2MjIwMDUwWhcNMjYwMTI3MjIwMDUwWjAzMTEwLwYDVQQD EyhhYzcxMTk1ZWFhZGZkY2QwMWRjNDc4MWZkYmJlN2JmMTEzYTk1NjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdkgCkMsBwYPKyoYBYVXiTT5umGn 8qwRRcM1lK+SSGWK+0SbMmiv0/nnIODVS+dGw2DRlZ45CdCPOM/ZdFyVnsV4F5Bf BdWcpDUH5mOJ0V06DRaApWM1F7sklYhgBE2cJleU6TE04iyfo6nYuaAcKzpWMtOH vThsq73uVlHgLDS7l99qNnrtc9UAKICHyhlgDqg6cYoiy3fr7n6GRIFeg037dqJk 8557DXg7EpbP8Vsv7/SBBbkbpVda4xES5ba7KwCqVZKQCUi8dm82XXTClZ1Rlkb+ joYXXsiu/BH3gOfLve9dMqRs06P4zLnx+FclAz8/WqpqTOqdPpyWRFIBzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxxGV6q39zQHcR4H9u+e/ETqVZGMB8GA1UdIwQY MBaAFCyWlGxQHd9IaW2izxEP3Osob6yYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEphVWJGQWQzMGhwYmFMUEVRX2M2eWh2ckpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGZlZjgtZDJkZi00ZjdhLTkyYjQt N2Y5NzBhM2FmOWNkLzEvTEphVWJGQWQzMGhwYmFMUEVRX2M2eWh2ckpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wNGZlZjgtZDJkZi00ZjdhLTkyYjQtN2Y5NzBhM2FmOWNk LzEvTEphVWJGQWQzMGhwYmFMUEVRX2M2eWh2ckpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjs84VUho gM7kox9ATJ4D3rDjP3B1XaNLxVxo0fhXpYcDOO5QS9RxojirjYdh5r4rEnvd+8Vp xbHmuWLMc9qIT5dLc6m9/jcNW+6Qha8Z2OGvU5WYTul11CCUL6IT0aAfEPTD24mU 6SKYZBxLM9dSgnBLKndflg/PiXv6wnfKClaUtduv1hrYhucXp5aZ+bSb4ixDfZhM LVr63X337mXAAoeRk0G0LIB17mA/plprVrdpS6X3GGqnb1L70yJRqxK75G658CzK N/5oGR3PY0lLfDpzWOL+bgEwZOS97YJl7szurzvtVwfhU3UjW/4pGgOSMmPbNdGX 9K3RyG+a+OauCQ== -----END CERTIFICATE-----Generated at Tue Jan 27 03:58:29 2026 by rpki-client