This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft File: ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft (raw, json) Hash identifier: U1sGae5CC+aLdkWXycYPM4JpItUubWypqxfDCSPD9e8= Subject key identifier: A5:D0:F2:A7:4C:3A:B7:25:43:53:9D:23:2F:A8:DF:73:89:99:8C:90 Authority key identifier: 96:D6:69:66:FF:DA:0A:5D:0E:13:1D:13:4A:79:D9:32:05:C8:C5:50 Certificate issuer: /CN=96d66966ffda0a5d0e131d134a79d93205c8c550 Certificate serial: 019C42B40B58C8A2A6D0E9948BC5254C724C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft Manifest number: 0299 Signing time: Mon 09 Feb 2026 14:00:21 +0000 Manifest this update: Mon 09 Feb 2026 14:00:21 +0000 Manifest next update: Tue 10 Feb 2026 14:00:21 +0000 Files and hashes: 1: 8xWsq3Ksmca02iiHJdJUQxcFexE.roa (hash: 87bJiUuXc7TUv7OU+ZddkP+23jZwBuJLuJStO3EeuZU=) 2: ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl (hash: toQtW5WjM+fB3TTglko8Vr8g+9cy2ClEHICv26tly30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:0b:58:c8:a2:a6:d0:e9:94:8b:c5:25:4c:72:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96d66966ffda0a5d0e131d134a79d93205c8c550 Validity Not Before: Feb 9 14:00:21 2026 GMT Not After : Feb 10 14:00:21 2026 GMT Subject: CN=a5d0f2a74c3ab72543539d232fa8df7389998c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5a:fe:a5:4b:5d:9d:00:97:8e:ef:06:b7:3a: 56:fd:9b:98:ad:48:7c:50:06:da:d4:04:a7:d8:9f: 07:94:2c:15:c8:dc:0b:fe:f7:88:11:75:ac:b6:6f: 95:9d:17:ac:e1:39:b9:f6:48:22:99:80:8f:76:74: cd:8c:4f:a0:da:47:e1:fc:6b:23:12:0f:58:64:43: 41:d6:04:fa:c0:c9:4a:cf:fc:81:ea:cb:06:c0:35: f3:e0:a6:50:cd:6a:14:a9:02:2e:ec:68:26:24:a9: 96:4e:15:9c:3c:1a:04:f0:4c:93:7c:ad:ae:c0:ca: a4:2b:a0:8a:b7:0e:ee:e7:0d:5e:75:2b:93:40:a5: b9:fe:d6:fb:6e:e1:b4:78:0b:c3:a1:82:19:ac:41: 13:5b:fa:93:da:9e:49:e1:bf:63:c1:f6:c6:3c:c4: 44:1e:93:5c:45:cc:0d:34:cb:79:3b:41:31:90:d7: a1:eb:d7:19:cb:5f:39:b8:34:82:8f:9f:c6:83:77: 27:0e:47:2d:78:fa:6d:81:29:85:1d:9d:39:73:d6: 0b:65:03:4d:21:7b:73:da:74:df:88:9a:28:93:a7: 65:c8:df:5d:96:47:ad:98:f1:3a:b8:61:31:6a:2c: 60:38:75:82:47:5f:30:a4:81:88:f9:37:65:9b:ea: c4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D0:F2:A7:4C:3A:B7:25:43:53:9D:23:2F:A8:DF:73:89:99:8C:90 X509v3 Authority Key Identifier: keyid:96:D6:69:66:FF:DA:0A:5D:0E:13:1D:13:4A:79:D9:32:05:C8:C5:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:2b:45:9c:4d:ea:37:4f:c1:1e:b0:82:bf:34:79:ea:f1:bb: d7:21:20:33:70:34:2d:b5:5b:40:d3:92:df:2e:74:2b:23:50: e7:75:8c:af:c3:06:04:ac:4d:e7:b5:58:f8:c1:1d:fc:47:08: e0:00:71:65:9d:40:54:13:9f:3f:24:9f:5a:cd:fb:d9:fe:e2: cf:60:9b:67:d0:cb:9c:93:68:d6:38:b0:2a:7c:bc:99:3f:ee: fd:eb:3e:b6:96:d2:2e:71:0b:82:23:74:37:be:2c:6e:70:a8: 66:d8:25:e4:82:d6:c1:b8:6a:56:45:af:94:3c:50:48:19:c3: 86:5f:57:3b:0d:6e:ff:81:3d:fb:e2:a6:87:be:d7:1c:4d:c8: 02:30:8b:6d:26:82:9f:62:c7:e7:ce:5b:49:d6:72:92:61:39: 83:e4:6e:43:04:73:38:37:3f:a1:39:01:71:8b:e9:54:39:3f: d3:24:6b:64:62:f9:b1:7a:81:f1:5b:96:d8:37:1d:78:fb:92: 56:c8:31:63:f7:a0:ad:d7:96:62:3c:6f:da:a6:8e:ef:91:25: 1c:33:92:d1:58:a8:5b:d9:29:41:e9:b4:0d:78:13:ea:d6:be: 2d:e9:ef:d9:6d:80:e4:a5:d5:55:f4:5e:41:eb:05:10:80:4f: eb:11:07:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtAtYyKKm0OmUi8UlTHJMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZDY2OTY2ZmZkYTBhNWQwZTEzMWQxMzRhNzlkOTMyMDVj OGM1NTAwHhcNMjYwMjA5MTQwMDIxWhcNMjYwMjEwMTQwMDIxWjAzMTEwLwYDVQQD EyhhNWQwZjJhNzRjM2FiNzI1NDM1MzlkMjMyZmE4ZGY3Mzg5OTk4YzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVr+pUtdnQCXju8GtzpW/ZuYrUh8 UAba1ASn2J8HlCwVyNwL/veIEXWstm+VnRes4Tm59kgimYCPdnTNjE+g2kfh/Gsj Eg9YZENB1gT6wMlKz/yB6ssGwDXz4KZQzWoUqQIu7GgmJKmWThWcPBoE8EyTfK2u wMqkK6CKtw7u5w1edSuTQKW5/tb7buG0eAvDoYIZrEETW/qT2p5J4b9jwfbGPMRE HpNcRcwNNMt5O0ExkNeh69cZy185uDSCj5/Gg3cnDkctePptgSmFHZ05c9YLZQNN IXtz2nTfiJook6dlyN9dlketmPE6uGExaixgOHWCR18wpIGI+Tdlm+rE1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXQ8qdMOrclQ1OdIy+o33OJmYyQMB8GA1UdIwQY MBaAFJbWaWb/2gpdDhMdE0p52TIFyMVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHRacFp2X2FDbDBPRXgwVFNublpNZ1hJeFZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi81YjQ0MjYtYTI2Ni00M2NlLWE5ZTYt YjBlNjA1OGQ0ZGQ3LzEvbHRacFp2X2FDbDBPRXgwVFNublpNZ1hJeFZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi81YjQ0MjYtYTI2Ni00M2NlLWE5ZTYtYjBlNjA1OGQ0ZGQ3 LzEvbHRacFp2X2FDbDBPRXgwVFNublpNZ1hJeFZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsCtFnE3q N0/BHrCCvzR56vG71yEgM3A0LbVbQNOS3y50KyNQ53WMr8MGBKxN57VY+MEd/EcI 4ABxZZ1AVBOfPySfWs372f7iz2CbZ9DLnJNo1jiwKny8mT/u/es+tpbSLnELgiN0 N74sbnCoZtgl5ILWwbhqVkWvlDxQSBnDhl9XOw1u/4E9++Kmh77XHE3IAjCLbSaC n2LH585bSdZykmE5g+RuQwRzODc/oTkBcYvpVDk/0yRrZGL5sXqB8VuW2DcdePuS VsgxY/egrdeWYjxv2qaO75ElHDOS0VioW9kpQem0DXgT6ta+Lenv2W2A5KXVVfRe QesFEIBP6xEHDw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:23 2026 by rpki-client