This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft File: _-LSEcNBNyjvBNJUQlgoqLQYHuA.mft (raw, json) Hash identifier: I0v6URkWfo0XDiqtXBteSueymGgx/ntaVfkrXeVC3/Q= Subject key identifier: 9E:F6:45:CF:31:C6:66:8B:6A:4A:64:86:60:63:ED:04:1A:C9:44:58 Authority key identifier: FF:E2:D2:11:C3:41:37:28:EF:04:D2:54:42:58:28:A8:B4:18:1E:E0 Certificate issuer: /CN=ffe2d211c3413728ef04d254425828a8b4181ee0 Certificate serial: 019C4246235C6A5C6184A1875D2D034C3E21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft Manifest number: 0759 Signing time: Mon 09 Feb 2026 12:00:18 +0000 Manifest this update: Mon 09 Feb 2026 12:00:18 +0000 Manifest next update: Tue 10 Feb 2026 12:00:18 +0000 Files and hashes: 1: _-LSEcNBNyjvBNJUQlgoqLQYHuA.crl (hash: 4R+Y0G5JRpC0gJLcmMJ/mjRHGzYqncDC8IaeDfVTdxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.crl rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:23:5c:6a:5c:61:84:a1:87:5d:2d:03:4c:3e:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffe2d211c3413728ef04d254425828a8b4181ee0 Validity Not Before: Feb 9 12:00:18 2026 GMT Not After : Feb 10 12:00:18 2026 GMT Subject: CN=9ef645cf31c6668b6a4a64866063ed041ac94458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8d:c6:81:64:f6:d7:5b:59:a2:a1:3b:c3:7d: 33:dd:dc:1d:e6:0d:84:b0:61:4b:b3:af:95:80:32: af:1c:c7:f4:a6:8c:c8:f8:8f:b6:e1:0a:bc:35:4f: 2b:96:f5:38:4f:75:9f:11:63:85:6b:c8:12:9e:f6: b0:fe:45:e1:64:58:15:cc:e8:0d:33:c7:11:f0:ca: 49:48:96:f4:88:93:a4:45:c5:2d:30:84:f6:9c:1e: 74:22:76:53:41:3b:a4:36:ef:79:ea:13:78:64:20: fe:24:33:ba:52:2d:be:19:cf:8a:4f:cb:aa:14:68: 8a:30:82:a4:33:b2:5f:cd:df:88:ac:23:a1:8a:4a: 2d:9f:97:d5:19:b3:f9:eb:a3:84:3b:1c:38:a9:94: 59:ac:2b:ac:07:5c:04:cf:33:c2:c6:2e:a1:84:41: e7:01:cb:fb:1e:60:cd:44:cf:01:72:42:a7:fb:38: a3:0e:41:3e:85:26:6c:fe:80:4b:32:6a:bf:01:d3: c3:c3:a0:9e:e7:37:aa:d5:c9:9e:b9:17:1c:a1:55: 97:9f:1b:80:fd:33:b5:df:24:08:55:82:7b:07:0a: 66:11:2d:4c:39:10:8b:66:b5:ce:b9:4a:28:82:ec: 1b:01:af:91:99:01:14:ef:c6:e2:4b:f0:a4:33:5d: ad:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F6:45:CF:31:C6:66:8B:6A:4A:64:86:60:63:ED:04:1A:C9:44:58 X509v3 Authority Key Identifier: keyid:FF:E2:D2:11:C3:41:37:28:EF:04:D2:54:42:58:28:A8:B4:18:1E:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:cf:71:97:cf:20:fc:2d:d8:fb:fd:f0:c3:a7:77:03:87:3b: b2:50:ca:6f:a9:b0:3a:0f:bd:89:b3:1f:29:32:2a:5e:a0:da: 4e:cd:41:fa:89:a6:6e:4f:d7:a1:26:96:bb:3c:aa:be:18:10: a0:7b:1c:5f:74:0a:b8:b3:b1:2d:4e:e3:63:2e:de:ca:64:f7: a6:b0:8a:55:e1:26:78:70:a5:45:c8:aa:44:89:f4:92:37:d5: bc:33:7c:84:b2:4e:a3:17:92:c9:0b:e7:80:ea:5f:1e:38:22: 92:e5:89:42:44:98:57:4a:7c:b8:f5:54:91:a4:13:38:53:28: f1:1d:ce:01:7b:a2:d9:60:35:e2:36:bb:76:a2:63:00:70:a4: 3e:e4:b6:11:32:b7:c7:1c:40:28:d5:d7:c7:36:d8:cf:19:09: 91:b6:ed:72:56:1c:95:fa:68:a2:ab:ba:ee:ab:0e:83:52:f1: f6:92:15:98:35:4e:7d:4f:f9:34:c3:66:8a:71:45:1a:ea:7f: 0e:3d:a2:c3:7f:40:96:fe:c5:3b:8a:77:56:93:42:9b:3f:6a: 5e:e7:36:6a:2e:cc:eb:55:1d:1c:d9:ef:82:3c:ee:99:11:45: 20:4a:0d:cf:62:09:49:79:2e:cb:61:59:f6:cf:26:58:71:99: d9:cf:4c:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRiNcalxhhKGHXS0DTD4hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZTJkMjExYzM0MTM3MjhlZjA0ZDI1NDQyNTgyOGE4YjQx ODFlZTAwHhcNMjYwMjA5MTIwMDE4WhcNMjYwMjEwMTIwMDE4WjAzMTEwLwYDVQQD Eyg5ZWY2NDVjZjMxYzY2NjhiNmE0YTY0ODY2MDYzZWQwNDFhYzk0NDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto3GgWT211tZoqE7w30z3dwd5g2E sGFLs6+VgDKvHMf0pozI+I+24Qq8NU8rlvU4T3WfEWOFa8gSnvaw/kXhZFgVzOgN M8cR8MpJSJb0iJOkRcUtMIT2nB50InZTQTukNu956hN4ZCD+JDO6Ui2+Gc+KT8uq FGiKMIKkM7Jfzd+IrCOhikotn5fVGbP566OEOxw4qZRZrCusB1wEzzPCxi6hhEHn Acv7HmDNRM8BckKn+zijDkE+hSZs/oBLMmq/AdPDw6Ce5zeq1cmeuRccoVWXnxuA /TO13yQIVYJ7BwpmES1MORCLZrXOuUooguwbAa+RmQEU78biS/CkM12tbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ72Rc8xxmaLakpkhmBj7QQayURYMB8GA1UdIwQY MBaAFP/i0hHDQTco7wTSVEJYKKi0GB7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXy1MU0VjTkJOeWp2Qk5KVVFsZ29xTFFZSHVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9jNDk4MmMtYjRhNS00Y2FkLTg5MWEt OGZkMTAzYjhjYzg5LzEvXy1MU0VjTkJOeWp2Qk5KVVFsZ29xTFFZSHVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9jNDk4MmMtYjRhNS00Y2FkLTg5MWEtOGZkMTAzYjhjYzg5 LzEvXy1MU0VjTkJOeWp2Qk5KVVFsZ29xTFFZSHVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmM9xl88g /C3Y+/3ww6d3A4c7slDKb6mwOg+9ibMfKTIqXqDaTs1B+ommbk/XoSaWuzyqvhgQ oHscX3QKuLOxLU7jYy7eymT3prCKVeEmeHClRciqRIn0kjfVvDN8hLJOoxeSyQvn gOpfHjgikuWJQkSYV0p8uPVUkaQTOFMo8R3OAXui2WA14ja7dqJjAHCkPuS2ETK3 xxxAKNXXxzbYzxkJkbbtclYclfpooqu67qsOg1Lx9pIVmDVOfU/5NMNminFFGup/ Dj2iw39Alv7FO4p3VpNCmz9qXuc2ai7M61UdHNnvgjzumRFFIEoNz2IJSXkuy2FZ 9s8mWHGZ2c9M1Q== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:41 2026 by rpki-client