This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft File: Lg4zjXPnWEaEVmMvW8quB68NhzE.mft (raw, json) Hash identifier: pOP+yz6reJaeuodP8/aHFoWexjtOU63coZ/efwUP76g= Subject key identifier: 22:62:7B:10:49:E7:F9:68:1C:DC:3C:F7:1A:8A:92:C1:B7:34:C4:07 Authority key identifier: 2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31 Certificate issuer: /CN=2e0e338d73e758468456632f5bcaae07af0d8731 Certificate serial: 019C427DC53B4B831BA0D87E79025360DAC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft Manifest number: 17D2 Signing time: Mon 09 Feb 2026 13:01:04 +0000 Manifest this update: Mon 09 Feb 2026 13:01:04 +0000 Manifest next update: Tue 10 Feb 2026 13:01:04 +0000 Files and hashes: 1: Lg4zjXPnWEaEVmMvW8quB68NhzE.crl (hash: RHV15EQQWUB1b7BtctRHfUm+kJJYyC0rIgisp90Tu/I=) 2: hs1mGbyytLZUcmmoRa1vmUrBtV0.roa (hash: Q7jJNRLIE/XZCLjYqKH3txSs09Wat8XFnoEvxouvOI8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:c5:3b:4b:83:1b:a0:d8:7e:79:02:53:60:da:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e0e338d73e758468456632f5bcaae07af0d8731 Validity Not Before: Feb 9 13:01:04 2026 GMT Not After : Feb 10 13:01:04 2026 GMT Subject: CN=22627b1049e7f9681cdc3cf71a8a92c1b734c407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e5:8d:f5:4a:08:fc:f4:1a:be:f2:54:d7:f0: c5:2d:56:10:7e:a4:cb:96:a1:70:52:07:ae:25:d2: 51:64:e9:4b:bb:bf:d5:48:5c:6a:22:ed:c6:92:72: fe:dc:0e:ec:84:db:31:f2:a9:f8:08:5d:cc:99:a9: 72:ac:4e:61:74:ba:e2:4a:e5:f3:0c:03:9d:5a:f9: 99:ca:2e:7b:43:0b:21:e6:7d:da:90:64:8e:2a:09: f8:ff:90:7d:27:02:23:56:4d:ae:d8:01:e7:04:a6: 47:14:71:f7:8e:de:80:58:3f:5b:47:c1:d4:10:87: b1:79:eb:d0:15:f8:9d:8c:e2:64:77:84:60:a0:7e: c4:9b:f8:1b:33:b7:45:fa:85:b5:f4:ec:16:79:c4: e1:2d:87:f8:0e:ce:71:57:09:9b:8a:c1:07:d6:bb: f3:eb:14:2e:8a:45:87:26:7f:68:e4:bb:b4:18:fc: e5:a1:4e:a7:46:19:28:8a:dc:ee:51:5c:22:a9:76: 1d:c9:98:61:54:5c:42:a9:c4:d7:d6:89:d3:b0:43: bd:a0:fb:31:9b:7f:ed:75:be:14:f3:8c:5a:05:7a: 4e:4c:42:ea:cf:b6:ba:26:e6:8a:d0:03:c2:7c:81: 37:4f:c1:a0:48:3a:24:40:24:55:62:70:ba:0f:87: 6a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:62:7B:10:49:E7:F9:68:1C:DC:3C:F7:1A:8A:92:C1:B7:34:C4:07 X509v3 Authority Key Identifier: keyid:2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:1e:73:4e:b5:3b:30:37:3b:6e:a1:19:41:7c:ee:f0:f3:3f: 1c:88:57:7e:e4:59:80:95:2e:75:58:ea:a9:89:91:1f:ae:8c: 54:75:51:14:4e:57:bc:2a:b6:74:23:53:80:49:06:82:aa:0e: 53:7c:ab:09:c0:76:45:5c:3c:1e:a8:b6:ed:fd:d3:69:f7:89: 75:5c:08:c6:21:47:e9:4b:bd:32:c8:e7:dc:c3:63:7b:c9:48: 2c:6f:3c:ed:cd:e8:2a:51:88:c1:c0:7b:a1:54:97:e6:46:2d: 10:cb:20:a6:b8:f7:1b:38:52:a9:6e:e3:ce:67:79:e5:5b:33: 51:c2:bb:96:b9:78:d5:c3:3b:36:45:96:58:cb:d2:d9:1c:cb: e3:6c:87:c3:1e:0a:53:f4:7f:fd:89:55:f3:ff:6e:03:28:81: 98:58:7d:74:5e:cc:72:46:67:d7:7b:0d:ff:84:dc:33:b8:75: 43:83:0c:03:a9:68:8a:6a:84:da:fb:f9:3a:98:3a:fc:69:a1: a2:aa:15:e4:b9:0e:95:76:f4:6c:6f:65:0a:ac:b9:76:94:8e: d3:b2:67:fe:20:2a:bc:cd:5c:ef:e3:64:b0:66:8d:da:67:a2: 68:c7:be:3f:a1:47:62:fe:f5:9e:14:bb:58:26:27:93:49:3c: 75:9f:98:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfcU7S4MboNh+eQJTYNrFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMGUzMzhkNzNlNzU4NDY4NDU2NjMyZjViY2FhZTA3YWYw ZDg3MzEwHhcNMjYwMjA5MTMwMTA0WhcNMjYwMjEwMTMwMTA0WjAzMTEwLwYDVQQD EygyMjYyN2IxMDQ5ZTdmOTY4MWNkYzNjZjcxYThhOTJjMWI3MzRjNDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOWN9UoI/PQavvJU1/DFLVYQfqTL lqFwUgeuJdJRZOlLu7/VSFxqIu3GknL+3A7shNsx8qn4CF3MmalyrE5hdLriSuXz DAOdWvmZyi57Qwsh5n3akGSOKgn4/5B9JwIjVk2u2AHnBKZHFHH3jt6AWD9bR8HU EIexeevQFfidjOJkd4RgoH7Em/gbM7dF+oW19OwWecThLYf4Ds5xVwmbisEH1rvz 6xQuikWHJn9o5Lu0GPzloU6nRhkoitzuUVwiqXYdyZhhVFxCqcTX1onTsEO9oPsx m3/tdb4U84xaBXpOTELqz7a6JuaK0APCfIE3T8GgSDokQCRVYnC6D4dqvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJiexBJ5/loHNw89xqKksG3NMQHMB8GA1UdIwQY MBaAFC4OM41z51hGhFZjL1vKrgevDYcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGc0empYUG5XRWFFVm1Ndlc4cXVCNjhOaHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy84MTExMDgtZThmNy00N2FmLWJjOGIt YTViNzgzMWE4Y2UxLzEvTGc0empYUG5XRWFFVm1Ndlc4cXVCNjhOaHpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy84MTExMDgtZThmNy00N2FmLWJjOGItYTViNzgzMWE4Y2Ux LzEvTGc0empYUG5XRWFFVm1Ndlc4cXVCNjhOaHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzB5zTrU7 MDc7bqEZQXzu8PM/HIhXfuRZgJUudVjqqYmRH66MVHVRFE5XvCq2dCNTgEkGgqoO U3yrCcB2RVw8Hqi27f3TafeJdVwIxiFH6Uu9Msjn3MNje8lILG887c3oKlGIwcB7 oVSX5kYtEMsgprj3GzhSqW7jzmd55VszUcK7lrl41cM7NkWWWMvS2RzL42yHwx4K U/R//YlV8/9uAyiBmFh9dF7MckZn13sN/4TcM7h1Q4MMA6loimqE2vv5Opg6/Gmh oqoV5LkOlXb0bG9lCqy5dpSO07Jn/iAqvM1c7+NksGaN2meiaMe+P6FHYv71nhS7 WCYnk0k8dZ+YAA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:21 2026 by rpki-client