This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft File: laR6hTtVKHanG3Vw0AFOBktDgPs.mft (raw, json) Hash identifier: 6+iUIFlDacgq72tdTPzVX0K7UnK9bXpX3v+hGlgd2As= Subject key identifier: ED:F0:B2:AA:82:58:C8:E6:A8:92:CC:01:C7:00:75:D4:7C:42:B1:1A Authority key identifier: 95:A4:7A:85:3B:55:28:76:A7:1B:75:70:D0:01:4E:06:4B:43:80:FB Certificate issuer: /CN=95a47a853b552876a71b7570d0014e064b4380fb Certificate serial: 019C4322331B245EA7FC5093C405485B1229 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft Manifest number: 09B8 Signing time: Mon 09 Feb 2026 16:00:40 +0000 Manifest this update: Mon 09 Feb 2026 16:00:40 +0000 Manifest next update: Tue 10 Feb 2026 16:00:40 +0000 Files and hashes: 1: laR6hTtVKHanG3Vw0AFOBktDgPs.crl (hash: fGayQxwJTVXW4mGNwCaMyYoTwkp3dOt2UT/W7HPfE14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.crl rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:33:1b:24:5e:a7:fc:50:93:c4:05:48:5b:12:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a47a853b552876a71b7570d0014e064b4380fb Validity Not Before: Feb 9 16:00:40 2026 GMT Not After : Feb 10 16:00:40 2026 GMT Subject: CN=edf0b2aa8258c8e6a892cc01c70075d47c42b11a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e4:f6:a1:f2:ca:47:57:2a:53:be:fe:e4:b7: a6:18:7f:33:26:99:4e:48:1e:27:df:4d:40:74:27: 1f:c5:39:00:6f:49:a5:ea:68:d1:2d:02:3f:f9:cc: a0:f7:40:bf:8c:ba:d5:0d:2e:99:46:a6:f5:5f:df: b9:3e:08:fe:40:29:c8:8d:df:d1:8b:9e:67:7a:db: 5a:af:58:8e:7c:3e:84:fc:ed:64:de:b5:4b:27:1b: 5d:e5:73:54:b4:87:cd:ff:10:09:aa:ca:d9:8a:69: 30:e0:90:50:ac:59:80:f2:27:e8:31:6c:c4:df:b5: 8e:1e:28:81:0d:bc:2c:ad:a7:aa:74:90:0f:ce:86: 81:fd:15:ef:4c:de:89:c9:b8:a1:ae:96:be:22:c2: e2:7b:05:35:e0:5b:e0:59:c9:39:7d:24:03:cb:38: 50:2d:b1:1d:64:6c:b7:ef:22:75:86:64:8f:ce:84: a3:63:53:29:59:83:1d:62:bb:dc:a7:72:93:4a:87: b9:3f:ae:31:30:4b:73:fb:d7:66:d7:4f:d9:04:d1: 35:6a:e8:3f:52:c7:7e:6e:35:2d:01:66:5c:e9:1e: 17:46:b4:58:82:51:08:6d:13:f0:f0:50:7a:5e:8c: 17:1e:a7:bc:89:df:73:22:ad:f5:56:f0:a6:69:d6: eb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F0:B2:AA:82:58:C8:E6:A8:92:CC:01:C7:00:75:D4:7C:42:B1:1A X509v3 Authority Key Identifier: keyid:95:A4:7A:85:3B:55:28:76:A7:1B:75:70:D0:01:4E:06:4B:43:80:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:fb:1c:da:a0:27:36:80:76:84:1d:7c:7c:f1:a2:70:4b:c1: ed:ef:59:5f:d0:e8:12:7c:f5:4b:3c:7b:a7:4f:5a:4d:e3:ac: b2:b6:5c:13:03:3d:88:79:6d:0c:2a:ba:0c:38:5b:bb:94:68: 3c:c4:54:21:f1:9e:a5:0c:77:95:5a:8f:51:e4:b4:90:c7:00: 28:ba:4a:3a:7c:b8:b7:0a:82:b7:b4:5c:26:44:5e:3f:56:c8: 84:5c:22:36:c7:e8:c3:e2:5a:68:96:06:21:d8:53:f2:b9:0b: 1d:c1:d3:75:66:13:c2:41:58:1c:94:8b:85:bd:f1:11:c5:d9: 11:db:17:2b:55:8c:1c:6e:b2:90:f7:e6:34:f1:76:82:73:a5: e1:d5:27:de:de:ae:52:01:67:e0:ef:9b:85:be:bf:31:e4:f2: e4:3c:57:23:ab:ea:e6:20:b0:0b:c8:5e:3a:15:c7:79:ed:18: 22:59:f2:32:df:7b:bc:4f:90:22:eb:4e:53:e3:ea:b8:80:73: 38:9b:c1:3f:d3:d4:ba:b6:f6:06:60:cc:15:52:76:88:3a:ee: c1:0e:86:0d:df:34:6f:59:8d:75:e9:d7:a4:7e:6a:ce:bc:c1: 75:fe:e4:1a:e4:3b:ab:b7:91:7f:60:4f:24:37:67:cc:ec:ed: f1:b8:f9:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIjMbJF6n/FCTxAVIWxIpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YTQ3YTg1M2I1NTI4NzZhNzFiNzU3MGQwMDE0ZTA2NGI0 MzgwZmIwHhcNMjYwMjA5MTYwMDQwWhcNMjYwMjEwMTYwMDQwWjAzMTEwLwYDVQQD EyhlZGYwYjJhYTgyNThjOGU2YTg5MmNjMDFjNzAwNzVkNDdjNDJiMTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+T2ofLKR1cqU77+5LemGH8zJplO SB4n301AdCcfxTkAb0ml6mjRLQI/+cyg90C/jLrVDS6ZRqb1X9+5Pgj+QCnIjd/R i55nettar1iOfD6E/O1k3rVLJxtd5XNUtIfN/xAJqsrZimkw4JBQrFmA8ifoMWzE 37WOHiiBDbwsraeqdJAPzoaB/RXvTN6Jybihrpa+IsLiewU14FvgWck5fSQDyzhQ LbEdZGy37yJ1hmSPzoSjY1MpWYMdYrvcp3KTSoe5P64xMEtz+9dm10/ZBNE1aug/ Usd+bjUtAWZc6R4XRrRYglEIbRPw8FB6XowXHqe8id9zIq31VvCmadbrqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO3wsqqCWMjmqJLMAccAddR8QrEaMB8GA1UdIwQY MBaAFJWkeoU7VSh2pxt1cNABTgZLQ4D7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGFSNmhUdFZLSGFuRzNWdzBBRk9Ca3REZ1BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yNjdmYTMtNjIxZi00NmIzLWFhZGIt ZTg2NWZkOWE2MjJmLzEvbGFSNmhUdFZLSGFuRzNWdzBBRk9Ca3REZ1BzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8yNjdmYTMtNjIxZi00NmIzLWFhZGItZTg2NWZkOWE2MjJm LzEvbGFSNmhUdFZLSGFuRzNWdzBBRk9Ca3REZ1BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2fsc2qAn NoB2hB18fPGicEvB7e9ZX9DoEnz1Szx7p09aTeOssrZcEwM9iHltDCq6DDhbu5Ro PMRUIfGepQx3lVqPUeS0kMcAKLpKOny4twqCt7RcJkReP1bIhFwiNsfow+JaaJYG IdhT8rkLHcHTdWYTwkFYHJSLhb3xEcXZEdsXK1WMHG6ykPfmNPF2gnOl4dUn3t6u UgFn4O+bhb6/MeTy5DxXI6vq5iCwC8heOhXHee0YIlnyMt97vE+QIutOU+PquIBz OJvBP9PUurb2BmDMFVJ2iDruwQ6GDd80b1mNdenXpH5qzrzBdf7kGuQ7q7eRf2BP JDdnzOzt8bj5hg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:50 2026 by rpki-client