This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft File: LKYTd0lZnAPHtHLxQscZaAAGtuY.mft (raw, json) Hash identifier: 0F/4DWXrFPACv0/6p3tfOIWM50ocqm2rK4ViC/2yFZU= Subject key identifier: 6F:E6:E1:D3:1F:74:9E:71:5E:36:C7:DC:A1:2F:47:C6:62:11:25:36 Authority key identifier: 2C:A6:13:77:49:59:9C:03:C7:B4:72:F1:42:C7:19:68:00:06:B6:E6 Certificate issuer: /CN=2ca6137749599c03c7b472f142c719680006b6e6 Certificate serial: 019C4321D67B01CCCC9F06E33B858CB0F517 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft Manifest number: 14A4 Signing time: Mon 09 Feb 2026 16:00:16 +0000 Manifest this update: Mon 09 Feb 2026 16:00:16 +0000 Manifest next update: Tue 10 Feb 2026 16:00:16 +0000 Files and hashes: 1: DjKvHGkxm9JLkDzr5jJuPNohrKM.roa (hash: 4xyJPy+sZSw3rF0C0CNhWMzSFjnYCLyNFxo1nQPPkU4=) 2: LKYTd0lZnAPHtHLxQscZaAAGtuY.crl (hash: U36DZdBrz3vEwrYYySp9Z1O8DeO8mdF+XVvEzwb2kCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.crl rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:d6:7b:01:cc:cc:9f:06:e3:3b:85:8c:b0:f5:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ca6137749599c03c7b472f142c719680006b6e6 Validity Not Before: Feb 9 16:00:16 2026 GMT Not After : Feb 10 16:00:16 2026 GMT Subject: CN=6fe6e1d31f749e715e36c7dca12f47c662112536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9a:00:a7:8f:ea:f4:1f:94:8d:c2:91:2c:48: 6e:ea:1b:da:92:56:e5:dd:d8:54:c6:f3:e0:54:06: 12:33:bf:c8:94:7e:1e:da:05:72:4f:f8:a2:ac:18: ff:fa:74:29:a4:2e:f8:52:b5:b9:13:6b:b2:54:d5: f6:e0:33:58:10:ac:ce:e0:96:80:3c:cb:a7:be:75: b1:26:1d:37:3d:92:0c:bf:cc:64:1e:d2:37:a9:fa: b5:03:7d:02:4b:37:ed:73:2a:40:fe:e7:4a:d6:32: 75:3f:0d:56:b9:16:af:72:51:3f:f0:5a:c0:5c:b6: d0:95:01:43:2b:9f:f8:7c:2d:8b:3b:f0:34:61:6d: 84:07:da:b1:75:3b:da:b6:a4:4c:d1:26:a4:2e:af: 40:b7:dd:4d:66:c3:e7:84:a4:4c:88:ee:12:e3:fc: 97:1c:e6:35:ab:92:1b:ab:54:25:0f:83:bc:0b:63: 7a:7f:ba:47:83:9e:c0:b4:c4:a7:b3:0b:43:21:30: 93:a0:fe:3a:18:38:bf:b8:34:00:8a:a0:46:36:24: f2:12:c3:db:33:86:0d:a3:35:74:35:b3:8e:8f:a3: 9d:9a:8b:90:f9:fc:f9:f5:cb:03:fd:98:3c:1a:22: c0:b7:c1:83:44:31:6e:db:90:ac:66:ee:d9:4b:d4: 6c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E6:E1:D3:1F:74:9E:71:5E:36:C7:DC:A1:2F:47:C6:62:11:25:36 X509v3 Authority Key Identifier: keyid:2C:A6:13:77:49:59:9C:03:C7:B4:72:F1:42:C7:19:68:00:06:B6:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:58:eb:89:42:21:ec:0c:b1:a8:00:17:4f:db:3b:2e:7e:89: 1d:ca:6e:8c:73:fd:30:03:a6:52:81:1f:ac:f9:58:c9:81:b0: df:fc:0f:9b:d9:2c:eb:70:f6:67:df:64:e3:24:a7:a0:e3:5b: c4:b4:3f:05:47:ad:ec:12:6e:00:ca:0c:8e:5f:08:e0:3e:b7: c2:1d:c6:70:15:8d:98:29:ba:96:85:f4:08:60:62:22:21:96: 59:0f:2b:8b:c7:74:6e:7c:26:25:42:7c:3e:93:37:6d:f0:df: 27:c7:3e:e0:0d:84:41:da:5a:8f:27:72:03:f0:fd:3c:17:7f: 95:98:a6:07:9b:17:10:d4:48:6a:12:aa:ce:cf:e4:b2:25:41: 74:0c:a9:77:ef:38:c5:cb:6b:35:b1:03:2c:17:41:fb:f9:1f: 17:50:40:d0:70:eb:04:dc:38:77:54:1d:8b:93:c3:0f:f9:e1: c3:06:9a:14:e8:b4:00:73:12:02:82:0f:bf:2b:2f:f2:c9:93: 1a:80:a1:78:50:55:78:5d:63:49:17:9f:ae:af:d0:43:ae:2f: ae:ff:62:46:e8:e6:89:58:c0:a0:fd:4d:ab:31:2a:89:6c:68: d7:87:23:5e:d3:f5:d1:35:b7:ab:86:e0:12:d7:07:31:47:b5: e3:29:36:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIdZ7AczMnwbjO4WMsPUXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYTYxMzc3NDk1OTljMDNjN2I0NzJmMTQyYzcxOTY4MDAw NmI2ZTYwHhcNMjYwMjA5MTYwMDE2WhcNMjYwMjEwMTYwMDE2WjAzMTEwLwYDVQQD Eyg2ZmU2ZTFkMzFmNzQ5ZTcxNWUzNmM3ZGNhMTJmNDdjNjYyMTEyNTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJoAp4/q9B+UjcKRLEhu6hvaklbl 3dhUxvPgVAYSM7/IlH4e2gVyT/iirBj/+nQppC74UrW5E2uyVNX24DNYEKzO4JaA PMunvnWxJh03PZIMv8xkHtI3qfq1A30CSzftcypA/udK1jJ1Pw1WuRavclE/8FrA XLbQlQFDK5/4fC2LO/A0YW2EB9qxdTvatqRM0SakLq9At91NZsPnhKRMiO4S4/yX HOY1q5Ibq1QlD4O8C2N6f7pHg57AtMSnswtDITCToP46GDi/uDQAiqBGNiTyEsPb M4YNozV0NbOOj6OdmouQ+fz59csD/Zg8GiLAt8GDRDFu25CsZu7ZS9RsQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/m4dMfdJ5xXjbH3KEvR8ZiESU2MB8GA1UdIwQY MBaAFCymE3dJWZwDx7Ry8ULHGWgABrbmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEtZVGQwbFpuQVBIdEhMeFFzY1phQUFHdHVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS82ZmNmNjYtOGU4Yy00ZGJiLThjZjAt NTAxOWQyYzM4OGRiLzEvTEtZVGQwbFpuQVBIdEhMeFFzY1phQUFHdHVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS82ZmNmNjYtOGU4Yy00ZGJiLThjZjAtNTAxOWQyYzM4OGRi LzEvTEtZVGQwbFpuQVBIdEhMeFFzY1phQUFHdHVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOFjriUIh 7AyxqAAXT9s7Ln6JHcpujHP9MAOmUoEfrPlYyYGw3/wPm9ks63D2Z99k4ySnoONb xLQ/BUet7BJuAMoMjl8I4D63wh3GcBWNmCm6loX0CGBiIiGWWQ8ri8d0bnwmJUJ8 PpM3bfDfJ8c+4A2EQdpajydyA/D9PBd/lZimB5sXENRIahKqzs/ksiVBdAypd+84 xctrNbEDLBdB+/kfF1BA0HDrBNw4d1Qdi5PDD/nhwwaaFOi0AHMSAoIPvysv8smT GoCheFBVeF1jSRefrq/QQ64vrv9iRujmiVjAoP1NqzEqiWxo14cjXtP10TW3q4bg EtcHMUe14yk27A== -----END CERTIFICATE-----Generated at Tue Feb 10 01:42:55 2026 by rpki-client