This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft File: lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft (raw, json) Hash identifier: 72j1uZ/grRhT+XmtVC7Tihha4ZllKJv0r+P/2SgV10I= Subject key identifier: 2B:72:5B:8C:3A:5B:AA:2E:67:D6:F1:F2:DF:0E:7A:43:5B:57:89:79 Authority key identifier: 94:DB:4B:1E:9E:D6:8B:B5:C3:32:28:AE:30:E9:CD:D2:52:B3:2F:B8 Certificate issuer: /CN=94db4b1e9ed68bb5c33228ae30e9cdd252b32fb8 Certificate serial: 019C424621F242FE6AA6838032A2EE20E660 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 12:00:18 +0000 Manifest this update: Mon 09 Feb 2026 12:00:18 +0000 Manifest next update: Tue 10 Feb 2026 12:00:18 +0000 Files and hashes: 1: K-cjaXfz6hrAFe5r_hKzME7n-j0.roa (hash: c/D1oKxdYXnN+dp7p3G40OM2dsMHZRlxo/zdopbIxGs=) 2: lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl (hash: I4N4YV1wk0sj92PKbbMq3v93GxSi3lyF9tl52sKBXQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:21:f2:42:fe:6a:a6:83:80:32:a2:ee:20:e6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94db4b1e9ed68bb5c33228ae30e9cdd252b32fb8 Validity Not Before: Feb 9 12:00:18 2026 GMT Not After : Feb 10 12:00:18 2026 GMT Subject: CN=2b725b8c3a5baa2e67d6f1f2df0e7a435b578979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:be:b0:fc:9f:67:bd:b1:b7:7a:0a:c2:86:76: 01:01:59:1a:ce:45:97:42:d3:b4:6d:94:dd:05:26: ea:20:4f:e6:45:53:95:6a:3c:02:9c:4d:92:c9:60: ba:81:70:f7:25:21:44:89:4b:ef:f9:7d:92:58:9e: df:e3:fa:75:43:4e:bd:c2:86:36:a1:da:a7:45:16: 33:b7:3d:3e:36:70:49:d2:83:18:cb:bc:d0:78:df: 31:38:f8:e1:b7:3e:6b:87:43:83:a7:61:ef:bf:94: af:6f:36:ee:c9:ea:b6:df:41:3d:30:b9:1c:26:12: 89:65:28:29:a5:93:fe:c3:e9:37:0b:8d:fc:d0:81: e5:ff:00:f8:90:11:ff:0a:4b:5e:35:8a:ac:3c:51: c7:b9:5f:6f:e6:86:c5:f7:58:94:9a:f8:22:8f:4b: 1c:8d:f6:1e:95:be:8c:dc:c1:89:c0:64:d3:c5:0a: f2:e7:44:5d:5f:41:3a:ec:48:07:37:b7:5a:3a:e7: 97:4e:b8:6c:1f:de:4f:56:4e:68:de:82:d6:e1:0d: 8f:5a:a9:ea:bf:72:30:c3:8f:00:03:eb:b1:02:20: 51:bb:f4:46:c9:54:96:98:0b:43:1d:71:eb:af:68: a7:ae:29:b7:e0:80:ae:f3:e0:0d:d7:89:66:6e:14: e1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:72:5B:8C:3A:5B:AA:2E:67:D6:F1:F2:DF:0E:7A:43:5B:57:89:79 X509v3 Authority Key Identifier: keyid:94:DB:4B:1E:9E:D6:8B:B5:C3:32:28:AE:30:E9:CD:D2:52:B3:2F:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:36:4d:20:ba:82:6f:d1:08:93:09:45:43:aa:d5:58:5e:02: 5d:fb:d2:b8:57:87:7c:a4:bd:8b:0e:dd:c6:85:b8:e5:67:94: 76:d9:a3:75:1e:46:4d:54:b2:f5:6b:1d:bb:ed:2d:16:b4:ce: 5b:df:e9:c3:b5:ca:59:82:a5:2b:34:d2:bd:27:c4:76:0d:17: 3b:74:db:4e:1b:86:26:9b:4d:f8:d5:4b:51:07:43:25:4d:56: 27:44:f5:57:0e:45:d4:0e:02:45:6d:e0:a3:4a:c2:b5:02:08: 22:bd:21:0b:81:ce:26:c4:f5:3e:2d:47:10:8a:d7:ed:c4:56: b1:bd:cd:26:0f:78:57:e1:5d:05:4c:87:9c:30:b7:d2:16:0d: 62:76:e1:f6:18:b8:d4:1f:03:da:51:11:0a:b3:35:3b:4a:aa: 0c:01:d9:3e:6e:87:70:57:bb:29:f3:33:95:10:40:24:c0:41: 88:46:a2:8d:4e:f8:73:d0:90:dc:13:b0:2f:92:03:e7:70:ca: 10:55:ed:ce:b1:2f:5f:93:1d:7c:12:f8:ac:2a:ad:55:35:2a: a3:70:aa:4d:4b:ff:86:94:b9:2c:65:c6:2b:67:80:34:76:fe: 4f:69:89:01:5d:16:c8:2e:91:4e:78:d8:70:c0:ab:d0:d0:b4: af:a3:a1:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRiHyQv5qpoOAMqLuIOZgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZGI0YjFlOWVkNjhiYjVjMzMyMjhhZTMwZTljZGQyNTJi MzJmYjgwHhcNMjYwMjA5MTIwMDE4WhcNMjYwMjEwMTIwMDE4WjAzMTEwLwYDVQQD EygyYjcyNWI4YzNhNWJhYTJlNjdkNmYxZjJkZjBlN2E0MzViNTc4OTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb6w/J9nvbG3egrChnYBAVkazkWX QtO0bZTdBSbqIE/mRVOVajwCnE2SyWC6gXD3JSFEiUvv+X2SWJ7f4/p1Q069woY2 odqnRRYztz0+NnBJ0oMYy7zQeN8xOPjhtz5rh0ODp2Hvv5Svbzbuyeq230E9MLkc JhKJZSgppZP+w+k3C4380IHl/wD4kBH/CkteNYqsPFHHuV9v5obF91iUmvgij0sc jfYelb6M3MGJwGTTxQry50RdX0E67EgHN7daOueXTrhsH95PVk5o3oLW4Q2PWqnq v3Iww48AA+uxAiBRu/RGyVSWmAtDHXHrr2inrim34ICu8+AN14lmbhThnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtyW4w6W6ouZ9bx8t8OekNbV4l5MB8GA1UdIwQY MBaAFJTbSx6e1ou1wzIorjDpzdJSsy+4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbE50TEhwN1dpN1hETWlpdU1Pbk4wbEt6TDdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yMGY4MDUtZGY2My00NjMxLTk5YmQt YTI1NjE3NzczOWM2LzEvbE50TEhwN1dpN1hETWlpdU1Pbk4wbEt6TDdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8yMGY4MDUtZGY2My00NjMxLTk5YmQtYTI1NjE3NzczOWM2 LzEvbE50TEhwN1dpN1hETWlpdU1Pbk4wbEt6TDdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDZNILqC b9EIkwlFQ6rVWF4CXfvSuFeHfKS9iw7dxoW45WeUdtmjdR5GTVSy9Wsdu+0tFrTO W9/pw7XKWYKlKzTSvSfEdg0XO3TbThuGJptN+NVLUQdDJU1WJ0T1Vw5F1A4CRW3g o0rCtQIIIr0hC4HOJsT1Pi1HEIrX7cRWsb3NJg94V+FdBUyHnDC30hYNYnbh9hi4 1B8D2lERCrM1O0qqDAHZPm6HcFe7KfMzlRBAJMBBiEaijU74c9CQ3BOwL5ID53DK EFXtzrEvX5MdfBL4rCqtVTUqo3CqTUv/hpS5LGXGK2eANHb+T2mJAV0WyC6RTnjY cMCr0NC0r6Oh2A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:43 2026 by rpki-client