This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft File: lhebOdHB0o9QY8qSHWAH42Phxgs.mft (raw, json) Hash identifier: Sl1vSG7VUphqbXsyf/2kw3O/Rt4wypRTMt5OsrosCC8= Subject key identifier: B4:A2:8D:3F:23:77:44:F6:28:F4:8C:3D:A9:88:6B:39:FB:AC:A3:6A Authority key identifier: 96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B Certificate issuer: /CN=96179b39d1c1d28f5063ca921d6007e363e1c60b Certificate serial: 019C41A16BE98DBEAE50D94F3EE870AE86A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 09:00:23 +0000 Manifest this update: Mon 09 Feb 2026 09:00:23 +0000 Manifest next update: Tue 10 Feb 2026 09:00:23 +0000 Files and hashes: 1: WNgi38YIBh7gSGGMAz3pOwSfPa8.roa (hash: Fi6JSkMtS00G2FM2ty185le8FKrXwlLgR3IpBCt2xCc=) 2: lhebOdHB0o9QY8qSHWAH42Phxgs.crl (hash: h/sNOcCma2jxxxIZ8jsZ1wkLQX3HRvqbdCFmg8p6GlM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:6b:e9:8d:be:ae:50:d9:4f:3e:e8:70:ae:86:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96179b39d1c1d28f5063ca921d6007e363e1c60b Validity Not Before: Feb 9 09:00:23 2026 GMT Not After : Feb 10 09:00:23 2026 GMT Subject: CN=b4a28d3f237744f628f48c3da9886b39fbaca36a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:39:cc:dc:53:8e:b1:bf:ec:9b:1f:ac:a3:78: 20:a2:4e:22:8b:44:09:1c:d0:09:0e:18:37:d1:35: 2a:97:5a:28:6e:b5:d2:f2:f1:54:f4:d3:63:08:5a: ef:76:45:ae:f9:5d:40:3d:8a:50:25:50:90:6f:03: 7c:b9:9f:0c:03:00:88:90:86:e4:93:89:aa:46:a0: 04:d1:2c:da:06:fc:7e:16:17:6e:d3:0b:38:45:9a: b9:9f:20:8c:09:ff:bf:c5:3c:91:04:81:bf:c6:e5: da:e1:f4:54:69:f5:84:1c:fc:e6:69:ea:b6:49:b9: f7:d7:78:da:ee:08:41:93:0a:70:c5:74:76:52:e3: 12:c1:e1:7b:eb:fd:e5:34:c0:d2:2d:f5:51:df:a9: 83:ee:27:d0:ee:dd:4f:1d:37:6a:01:35:b4:80:b6: 83:44:55:1a:3b:db:44:16:cd:cb:12:51:ab:c2:52: 01:be:e1:72:5e:64:4b:bf:ec:8b:36:e6:65:b4:87: 30:44:fd:dd:bc:8d:c3:82:da:3d:15:4a:36:4e:ef: 2d:b1:08:4e:76:e3:b7:e3:c1:18:a6:4c:e6:b5:c2: e7:6f:4e:3c:11:e1:c6:3e:ff:4a:75:16:f5:37:df: d2:ab:ab:68:fa:6a:56:5d:15:f1:43:84:ae:d4:bd: 54:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A2:8D:3F:23:77:44:F6:28:F4:8C:3D:A9:88:6B:39:FB:AC:A3:6A X509v3 Authority Key Identifier: keyid:96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:fc:f4:c2:32:d7:a5:75:8a:e5:4c:37:92:76:96:22:ce:06: 30:07:0a:0f:fa:0b:98:61:7c:40:a4:ac:86:6a:23:f1:26:f0: 0b:20:3f:ad:cf:99:39:02:24:e1:55:22:20:1a:6e:74:db:23: 2e:9f:17:a6:c3:52:d2:9d:7b:e2:dd:fb:aa:09:ca:0c:96:3c: c4:34:84:c6:76:1c:73:5c:91:06:f7:52:70:57:44:44:44:f2: 04:22:a0:00:94:47:63:0f:33:14:f9:5a:db:7d:ca:82:d9:b4: 17:fd:02:1f:6f:2b:f6:3a:de:48:af:2f:09:95:d8:9a:a7:67: 7d:aa:ee:2e:46:c4:c1:1e:58:49:71:5e:08:7b:4a:a3:10:a7: 21:ae:20:a3:51:f2:a6:f4:4f:d9:f5:95:35:2e:48:92:38:38: f9:f0:43:d2:83:f7:03:ea:bf:24:f4:64:41:c7:ba:2d:d6:1c: 3b:4d:22:00:94:cb:80:05:74:44:92:c3:8e:c2:7f:d5:af:4d: d6:7c:3b:7e:aa:2d:fe:9f:d7:f1:b5:ee:38:ec:ea:3a:26:3f: 1d:03:60:64:4d:68:56:22:88:26:ab:57:8f:5f:27:96:7c:28: c7:d4:20:4f:b2:8a:97:53:d0:be:dd:6e:6e:c7:0f:7a:02:db: fe:e1:cc:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoWvpjb6uUNlPPuhwroamMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MTc5YjM5ZDFjMWQyOGY1MDYzY2E5MjFkNjAwN2UzNjNl MWM2MGIwHhcNMjYwMjA5MDkwMDIzWhcNMjYwMjEwMDkwMDIzWjAzMTEwLwYDVQQD EyhiNGEyOGQzZjIzNzc0NGY2MjhmNDhjM2RhOTg4NmIzOWZiYWNhMzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDnM3FOOsb/smx+so3ggok4ii0QJ HNAJDhg30TUql1oobrXS8vFU9NNjCFrvdkWu+V1APYpQJVCQbwN8uZ8MAwCIkIbk k4mqRqAE0SzaBvx+Fhdu0ws4RZq5nyCMCf+/xTyRBIG/xuXa4fRUafWEHPzmaeq2 Sbn313ja7ghBkwpwxXR2UuMSweF76/3lNMDSLfVR36mD7ifQ7t1PHTdqATW0gLaD RFUaO9tEFs3LElGrwlIBvuFyXmRLv+yLNuZltIcwRP3dvI3Dgto9FUo2Tu8tsQhO duO348EYpkzmtcLnb048EeHGPv9KdRb1N9/Sq6to+mpWXRXxQ4Su1L1UOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSijT8jd0T2KPSMPamIazn7rKNqMB8GA1UdIwQY MBaAFJYXmznRwdKPUGPKkh1gB+Nj4cYLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGhlYk9kSEIwbzlRWThxU0hXQUg0MlBoeGdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9jZGRmOTQtOGQ1MS00MWNkLThhNWIt YTBiNDkzMGNiZDFlLzEvbGhlYk9kSEIwbzlRWThxU0hXQUg0MlBoeGdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9jZGRmOTQtOGQ1MS00MWNkLThhNWItYTBiNDkzMGNiZDFl LzEvbGhlYk9kSEIwbzlRWThxU0hXQUg0MlBoeGdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABfz0wjLX pXWK5Uw3knaWIs4GMAcKD/oLmGF8QKSshmoj8SbwCyA/rc+ZOQIk4VUiIBpudNsj Lp8XpsNS0p174t37qgnKDJY8xDSExnYcc1yRBvdScFdERETyBCKgAJRHYw8zFPla 233Kgtm0F/0CH28r9jreSK8vCZXYmqdnfaruLkbEwR5YSXFeCHtKoxCnIa4go1Hy pvRP2fWVNS5Ikjg4+fBD0oP3A+q/JPRkQce6LdYcO00iAJTLgAV0RJLDjsJ/1a9N 1nw7fqot/p/X8bXuOOzqOiY/HQNgZE1oViKIJqtXj18nlnwox9QgT7KKl1PQvt1u bscPegLb/uHMHw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:34 2026 by rpki-client