This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft File: LKyEzuxXs1-jlTSuIwCa6oICOao.mft (raw, json) Hash identifier: pIVtnDkIoAccTNoh/CPnQ2qk97bdwWSHIwKGUXPLYTw= Subject key identifier: 9B:FD:1A:0E:FF:2D:02:EB:06:FB:06:C7:98:22:53:BA:9D:AE:C5:40 Authority key identifier: 2C:AC:84:CE:EC:57:B3:5F:A3:95:34:AE:23:00:9A:EA:82:02:39:AA Certificate issuer: /CN=2cac84ceec57b35fa39534ae23009aea820239aa Certificate serial: 019C443488119CA8982866CA7FB6E17E0496 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKyEzuxXs1-jlTSuIwCa6oICOao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft Manifest number: 0A37 Signing time: Mon 09 Feb 2026 21:00:19 +0000 Manifest this update: Mon 09 Feb 2026 21:00:19 +0000 Manifest next update: Tue 10 Feb 2026 21:00:19 +0000 Files and hashes: 1: Aqd9W6cfpHLafzRO-ayl_GNgqe0.roa (hash: F2Adog2BirH6Gouzr8SZxmAWeuEuTARSmlF0Zm/Q4fY=) 2: LKyEzuxXs1-jlTSuIwCa6oICOao.crl (hash: Ve9zA/Ze5SW4YEmFEsiO6MnH5T8dQj3WaHm6cW4e27g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.crl rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft rsync://rpki.ripe.net/repository/DEFAULT/LKyEzuxXs1-jlTSuIwCa6oICOao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:88:11:9c:a8:98:28:66:ca:7f:b6:e1:7e:04:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cac84ceec57b35fa39534ae23009aea820239aa Validity Not Before: Feb 9 21:00:19 2026 GMT Not After : Feb 10 21:00:19 2026 GMT Subject: CN=9bfd1a0eff2d02eb06fb06c7982253ba9daec540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ab:00:b1:07:aa:25:8d:24:3d:f9:3a:dc:01: 79:15:5e:ed:1e:ca:2b:af:fc:cf:88:aa:a3:10:22: a6:65:86:6c:af:a5:69:e2:25:62:38:51:79:64:f6: 38:38:cb:80:1d:66:a9:ce:c1:1f:74:d1:a1:a0:8a: ba:19:cf:02:dc:3c:90:48:c8:c0:7e:b2:8a:32:77: 75:52:d3:01:7f:7c:d3:c5:66:10:90:71:b9:b8:49: 09:6d:a4:18:00:ce:33:81:d4:20:3b:7f:4f:1e:d7: 84:51:bc:11:6b:23:00:ef:10:d3:af:92:f8:4d:da: 7e:03:9f:d1:17:81:f6:6b:d0:3b:07:3c:3a:e2:22: 9c:44:4b:59:35:d4:8c:be:5a:9e:ce:d5:d6:3b:bc: 47:79:80:58:95:cc:67:80:d7:ec:28:0f:d7:e3:6c: ba:71:aa:df:97:53:69:99:4a:16:c2:e1:95:05:63: 66:6e:f2:3f:11:9d:ca:a5:73:b6:31:0d:b3:81:82: 8c:3c:a2:a8:02:93:15:59:de:a5:ce:88:c4:ff:43: 76:4a:d9:6a:fd:ec:89:d6:40:d6:fb:5e:69:ac:b3: a4:00:ef:ca:08:ae:9f:27:43:b5:3f:47:29:2d:2d: b6:0c:33:7d:f8:f1:4d:19:9b:bc:3a:eb:92:c7:b2: d4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:FD:1A:0E:FF:2D:02:EB:06:FB:06:C7:98:22:53:BA:9D:AE:C5:40 X509v3 Authority Key Identifier: keyid:2C:AC:84:CE:EC:57:B3:5F:A3:95:34:AE:23:00:9A:EA:82:02:39:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKyEzuxXs1-jlTSuIwCa6oICOao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ca:c5:3d:9f:e1:44:fd:f9:96:b8:17:0f:26:12:1f:f3:df: d0:07:e6:45:e2:d6:c4:59:ce:86:b9:96:4b:bb:2c:38:b5:3a: 29:20:92:26:5e:40:a0:a0:9e:ac:64:08:12:e5:a1:7e:a8:e5: 42:29:17:06:1c:5e:85:57:31:b2:54:99:19:dc:5e:67:b9:72: 26:26:ff:0d:04:fc:15:fc:94:b4:10:1a:42:c0:8e:e2:e7:34: b9:16:ec:d2:3e:4d:9b:e4:f1:dc:70:7f:bd:83:2a:2c:82:36: 77:3e:5e:77:b3:7b:4e:0a:67:3a:bb:a2:fb:c8:e7:1e:01:0a: 36:d3:58:e0:22:77:e0:20:b7:30:fe:88:30:5c:74:22:9e:7b: 2b:3e:a4:fa:19:7b:1e:1c:33:52:28:8c:87:ee:91:b9:4e:43: 36:60:91:1a:40:61:d2:8a:fa:ae:99:42:9f:9a:43:dc:7c:1d: da:af:3c:e4:77:d2:be:88:a4:af:f8:c6:ac:f7:c6:fc:73:6c: 44:90:11:72:38:21:41:7a:cb:93:b7:5e:fa:7c:0b:a5:ee:c0: e7:63:b9:bc:e2:db:ba:6a:4c:9c:6e:ab:a4:b8:fd:7a:47:d8: 50:aa:f5:ef:e4:70:ed:bf:47:1e:21:b6:60:4a:92:75:8a:88: 87:86:26:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENIgRnKiYKGbKf7bhfgSWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYWM4NGNlZWM1N2IzNWZhMzk1MzRhZTIzMDA5YWVhODIw MjM5YWEwHhcNMjYwMjA5MjEwMDE5WhcNMjYwMjEwMjEwMDE5WjAzMTEwLwYDVQQD Eyg5YmZkMWEwZWZmMmQwMmViMDZmYjA2Yzc5ODIyNTNiYTlkYWVjNTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtasAsQeqJY0kPfk63AF5FV7tHsor r/zPiKqjECKmZYZsr6Vp4iViOFF5ZPY4OMuAHWapzsEfdNGhoIq6Gc8C3DyQSMjA frKKMnd1UtMBf3zTxWYQkHG5uEkJbaQYAM4zgdQgO39PHteEUbwRayMA7xDTr5L4 Tdp+A5/RF4H2a9A7Bzw64iKcREtZNdSMvlqeztXWO7xHeYBYlcxngNfsKA/X42y6 carfl1NpmUoWwuGVBWNmbvI/EZ3KpXO2MQ2zgYKMPKKoApMVWd6lzojE/0N2Stlq /eyJ1kDW+15prLOkAO/KCK6fJ0O1P0cpLS22DDN9+PFNGZu8OuuSx7LUswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJv9Gg7/LQLrBvsGx5giU7qdrsVAMB8GA1UdIwQY MBaAFCyshM7sV7Nfo5U0riMAmuqCAjmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEt5RXp1eFhzMS1qbFRTdUl3Q2E2b0lDT2FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82ODdjZDUtNjM0NS00ZjY0LWJlNDYt ZWRlNzBjOGVkNTEzLzEvTEt5RXp1eFhzMS1qbFRTdUl3Q2E2b0lDT2FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC82ODdjZDUtNjM0NS00ZjY0LWJlNDYtZWRlNzBjOGVkNTEz LzEvTEt5RXp1eFhzMS1qbFRTdUl3Q2E2b0lDT2FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsrFPZ/h RP35lrgXDyYSH/Pf0AfmReLWxFnOhrmWS7ssOLU6KSCSJl5AoKCerGQIEuWhfqjl QikXBhxehVcxslSZGdxeZ7lyJib/DQT8FfyUtBAaQsCO4uc0uRbs0j5Nm+Tx3HB/ vYMqLII2dz5ed7N7TgpnOrui+8jnHgEKNtNY4CJ34CC3MP6IMFx0Ip57Kz6k+hl7 HhwzUiiMh+6RuU5DNmCRGkBh0or6rplCn5pD3Hwd2q885HfSvoikr/jGrPfG/HNs RJARcjghQXrLk7de+nwLpe7A52O5vOLbumpMnG6rpLj9ekfYUKr17+Rw7b9HHiG2 YEqSdYqIh4Ymgw== -----END CERTIFICATE-----Generated at Mon Feb 9 23:53:06 2026 by rpki-client