This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft File: Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft (raw, json) Hash identifier: AbmojWqC+ReIOyJMsruqK+WV07HeoUI+7yk7iTS5ia8= Subject key identifier: 55:21:55:20:82:F7:91:51:EE:7D:2C:FB:EB:07:32:CE:C4:F4:D7:88 Authority key identifier: 2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63 Certificate issuer: /CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763 Certificate serial: 019BFB77BBEF850326FA780D95DD53C75809 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft Manifest number: 01BE Signing time: Mon 26 Jan 2026 18:01:26 +0000 Manifest this update: Mon 26 Jan 2026 18:01:26 +0000 Manifest next update: Tue 27 Jan 2026 18:01:26 +0000 Files and hashes: 1: 6ShqfJ4w0dhyyxOTeWA4pIn8v2I.roa (hash: G2k5PxWvX5HN6A9EHs0dHdescyeu5uV2PhXpcj9QkhU=) 2: 6Xmtyg5P-y4wV96F2qIH5_od3vI.roa (hash: FpEP5yjI6RbBxylkXzB5ZO3HMetFO1ZWwfG0Nv3ejyU=) 3: Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl (hash: bhHkY1asWtd5c2fzw9lz/1QtTzjb7FAjuwTd+CjVWZg=) 4: nvDGi2VWUxlJY5ddjwd_81AUYcU.roa (hash: nwWq6f8Ne8jkmyjzTCC/7xkGZ6i70k+BSewMhaIlbJs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:bb:ef:85:03:26:fa:78:0d:95:dd:53:c7:58:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763 Validity Not Before: Jan 26 18:01:26 2026 GMT Not After : Jan 27 18:01:26 2026 GMT Subject: CN=5521552082f79151ee7d2cfbeb0732cec4f4d788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fc:36:e9:8f:6a:e9:cb:13:b2:76:75:b2:af: 59:43:a7:d6:80:73:a6:8e:fb:f8:0f:06:58:ec:12: 12:71:fe:c9:e8:d3:a6:27:19:97:56:91:6f:8f:3d: da:d4:42:5d:0c:b5:76:1e:37:18:d2:e3:e7:b3:00: 01:41:74:9a:a7:c6:70:0f:fd:7d:5c:11:47:07:ec: cc:cd:85:1d:7f:1b:ef:b6:36:bb:5e:59:28:d6:31: f2:ba:3f:1d:f3:58:fc:d4:86:dc:b2:ea:9c:57:88: bb:99:54:77:ba:b7:95:41:54:6b:07:fb:77:a6:95: dc:d9:f5:9e:07:f2:31:81:ee:0c:f2:e9:3f:15:9d: 5f:29:be:4b:9f:cd:fc:60:83:89:b8:03:25:65:8d: b2:b1:02:57:83:41:15:97:14:c9:0f:33:c9:34:cb: c4:48:39:86:8b:e2:71:06:80:32:a7:5f:1c:e3:87: 1d:b0:f1:f1:a1:67:07:72:41:fb:b4:96:d8:e9:10: bc:28:c9:12:45:0a:e7:fb:0a:55:dd:ea:4a:e2:d1: af:a1:fa:bd:a1:40:f7:87:96:fc:d4:18:bb:ef:94: b8:9f:62:b9:33:74:82:03:f6:34:7c:eb:f4:74:b8: c3:42:dd:74:2b:04:76:c9:54:79:74:37:8f:30:b4: 46:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:21:55:20:82:F7:91:51:EE:7D:2C:FB:EB:07:32:CE:C4:F4:D7:88 X509v3 Authority Key Identifier: keyid:2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:f4:26:92:3b:4b:14:b7:5e:33:6e:58:b9:55:7e:ea:28:3c: d2:f1:51:8c:22:74:83:13:27:7c:30:89:e2:30:86:92:c1:98: 17:5c:b1:1c:d5:79:79:e2:44:e7:a2:c5:7a:3c:41:c2:9c:e7: af:5d:8a:c6:ac:fb:df:62:51:98:ac:de:db:9e:bf:a6:6e:5d: f5:f2:df:9d:81:81:97:f2:f2:10:9e:17:c8:30:e2:3a:ee:ac: 34:c3:35:4c:df:3a:b3:3f:30:f6:0c:5e:6e:7d:86:86:cc:a1: a3:04:29:6f:1c:3f:9a:f4:57:93:e8:30:a1:ce:7c:84:d4:c9: c1:9c:c0:d5:ca:81:e6:29:60:45:9d:9c:0f:8b:d9:3a:dd:30: d2:17:3b:95:ba:c6:16:fc:bf:70:87:df:f2:7f:a8:c6:e4:ae: 44:0c:b9:00:3a:77:b0:b9:b7:d8:01:b7:02:1d:95:4e:e9:41: ba:19:b9:e9:f9:78:9d:0d:b0:57:39:f3:8e:18:d7:07:89:fc: f8:3f:50:8b:1b:39:db:27:11:19:b4:35:38:1d:c8:5e:43:6c: 2c:ca:94:41:63:4a:57:33:35:f2:3b:71:bd:ee:d0:64:1e:92: d7:db:77:ac:f2:df:1a:0e:dd:95:0d:47:be:1b:bd:d8:fb:41: ff:e6:aa:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7d7vvhQMm+ngNld1Tx1gJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlM2Q1YWRiMWQwNjQzNjliN2U0MWJhZWJkYjBlOGUxMzVk NjU3NjMwHhcNMjYwMTI2MTgwMTI2WhcNMjYwMTI3MTgwMTI2WjAzMTEwLwYDVQQD Eyg1NTIxNTUyMDgyZjc5MTUxZWU3ZDJjZmJlYjA3MzJjZWM0ZjRkNzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPw26Y9q6csTsnZ1sq9ZQ6fWgHOm jvv4DwZY7BIScf7J6NOmJxmXVpFvjz3a1EJdDLV2HjcY0uPnswABQXSap8ZwD/19 XBFHB+zMzYUdfxvvtja7Xlko1jHyuj8d81j81IbcsuqcV4i7mVR3ureVQVRrB/t3 ppXc2fWeB/Ixge4M8uk/FZ1fKb5Ln838YIOJuAMlZY2ysQJXg0EVlxTJDzPJNMvE SDmGi+JxBoAyp18c44cdsPHxoWcHckH7tJbY6RC8KMkSRQrn+wpV3epK4tGvofq9 oUD3h5b81Bi775S4n2K5M3SCA/Y0fOv0dLjDQt10KwR2yVR5dDePMLRGDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFUhVSCC95FR7n0s++sHMs7E9NeIMB8GA1UdIwQY MBaAFC49WtsdBkNpt+Qbrr2w6OE11ldjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGoxYTJ4MEdRMm0zNUJ1dXZiRG80VFhXVjJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84NzYxNWEtM2NhMy00YjViLTgxMGMt YmViZjQyZmJlODQ2LzEvTGoxYTJ4MEdRMm0zNUJ1dXZiRG80VFhXVjJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC84NzYxNWEtM2NhMy00YjViLTgxMGMtYmViZjQyZmJlODQ2 LzEvTGoxYTJ4MEdRMm0zNUJ1dXZiRG80VFhXVjJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/QmkjtL FLdeM25YuVV+6ig80vFRjCJ0gxMnfDCJ4jCGksGYF1yxHNV5eeJE56LFejxBwpzn r12Kxqz732JRmKze256/pm5d9fLfnYGBl/LyEJ4XyDDiOu6sNMM1TN86sz8w9gxe bn2GhsyhowQpbxw/mvRXk+gwoc58hNTJwZzA1cqB5ilgRZ2cD4vZOt0w0hc7lbrG Fvy/cIff8n+oxuSuRAy5ADp3sLm32AG3Ah2VTulBuhm56fl4nQ2wVznzjhjXB4n8 +D9Qixs52ycRGbQ1OB3IXkNsLMqUQWNKVzM18jtxve7QZB6S19t3rPLfGg7dlQ1H vhu92PtB/+aqQA== -----END CERTIFICATE-----Generated at Tue Jan 27 00:09:54 2026 by rpki-client