This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft File: lvLaL6G8jtLyvGtwOovxU0D5fPo.mft (raw, json) Hash identifier: YYGgqLa+xc66/yGE9WgRsptcBOdH9S7+3urixxSyplg= Subject key identifier: 60:75:C6:FB:48:18:52:E6:BE:5B:6E:21:04:35:12:61:71:54:95:6C Authority key identifier: 96:F2:DA:2F:A1:BC:8E:D2:F2:BC:6B:70:3A:8B:F1:53:40:F9:7C:FA Certificate issuer: /CN=96f2da2fa1bc8ed2f2bc6b703a8bf15340f97cfa Certificate serial: 019C424665ECDFA8C0BC9966E977E49C308F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft Manifest number: 0BED Signing time: Mon 09 Feb 2026 12:00:35 +0000 Manifest this update: Mon 09 Feb 2026 12:00:35 +0000 Manifest next update: Tue 10 Feb 2026 12:00:35 +0000 Files and hashes: 1: hDVYn_Cqke4-sU20IyVPJrrTGIs.roa (hash: aIes+pqXbeivjOHzkJRTZPV5B1wddYada+DAKnLqkQU=) 2: lvLaL6G8jtLyvGtwOovxU0D5fPo.crl (hash: cFIJtQbb7JPHIo7mmOZWykkDT7yiunSsfEbo9gaAYl4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:65:ec:df:a8:c0:bc:99:66:e9:77:e4:9c:30:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96f2da2fa1bc8ed2f2bc6b703a8bf15340f97cfa Validity Not Before: Feb 9 12:00:35 2026 GMT Not After : Feb 10 12:00:35 2026 GMT Subject: CN=6075c6fb481852e6be5b6e21043512617154956c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cf:3f:91:89:3a:6e:18:0f:a6:18:9b:b6:f5: 36:83:a3:de:bc:ec:81:0a:b0:41:30:a6:cf:a3:86: e0:67:02:5a:dc:69:8d:7f:c1:5c:36:33:f3:e6:f4: 44:7b:ca:6f:90:01:83:8b:82:ea:d3:3e:9a:b2:43: 28:cd:ed:bf:cf:a2:83:51:cf:09:66:8c:59:84:8f: d3:a6:0e:03:42:1d:91:c3:3d:ad:d0:66:42:a7:df: 4b:7c:b9:70:e0:80:8f:8f:30:b1:f3:17:79:a3:e9: a3:aa:d3:95:14:44:9e:c8:e6:6e:18:73:03:74:3e: 9c:9d:39:bb:b5:4f:b1:ba:10:25:80:0c:6b:1b:44: 3c:3e:04:cf:bc:7d:60:ad:2a:d8:42:88:bb:1b:ec: 5c:65:5c:5c:6c:0d:75:6c:2f:af:e8:23:8c:de:1e: 8c:df:13:aa:39:08:87:de:c1:da:03:1d:60:52:2f: 5c:2f:b3:87:4b:79:d8:8a:0e:14:5b:0c:bd:32:c1: 46:6d:8a:36:60:a8:00:51:b6:15:20:22:d1:3f:70: 0e:6d:1d:e5:f9:42:b2:79:3c:2d:34:b9:24:94:61: ab:71:4b:84:ab:cd:23:b1:81:de:3c:57:6e:9a:c0: 17:19:53:06:a3:57:c2:30:cb:c0:32:bc:dc:7d:2b: d2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:75:C6:FB:48:18:52:E6:BE:5B:6E:21:04:35:12:61:71:54:95:6C X509v3 Authority Key Identifier: keyid:96:F2:DA:2F:A1:BC:8E:D2:F2:BC:6B:70:3A:8B:F1:53:40:F9:7C:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:c6:8c:d5:b2:a7:0e:4b:ae:cc:7e:32:e0:90:48:a1:5c:c9: 08:c2:8d:0a:e2:ab:8e:2c:e7:38:73:be:43:ec:cc:4f:43:5c: 27:79:c9:6a:0b:a0:6a:22:1e:d7:36:3b:5a:c1:92:ce:1d:93: 18:9c:b3:7b:51:51:57:f4:04:84:da:8c:a7:b8:b4:79:db:61: e3:92:9c:83:14:e2:f2:4e:89:64:83:1e:70:ae:74:12:04:ca: 86:9d:25:8b:35:b8:93:15:84:19:c9:3f:ef:1a:67:7f:4a:c7: 78:a2:4c:fd:d9:dd:ad:cf:6c:98:86:91:8b:0b:7d:7e:e7:8f: 92:ce:09:7a:6d:5a:5b:eb:ca:9c:37:d4:48:1c:34:35:a5:9f: d4:eb:06:15:3c:ba:98:f3:a8:63:c0:7f:76:a4:bf:de:26:6f: ae:d2:4b:f0:8b:5d:72:2d:4f:81:60:0f:67:fc:54:a6:dc:b0: 82:d2:95:18:60:98:55:f7:29:90:25:3f:ef:78:e9:66:09:ef: a9:ca:92:88:58:b1:3c:20:69:69:6d:06:e8:e5:60:aa:e2:15: 97:e6:de:fb:fb:12:fc:7f:8c:62:19:e8:05:d2:9b:ba:98:02: 44:18:c2:13:cb:36:ee:80:3c:e6:a0:03:d8:74:0c:d9:ef:30: f3:db:6c:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRmXs36jAvJlm6XfknDCPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZjJkYTJmYTFiYzhlZDJmMmJjNmI3MDNhOGJmMTUzNDBm OTdjZmEwHhcNMjYwMjA5MTIwMDM1WhcNMjYwMjEwMTIwMDM1WjAzMTEwLwYDVQQD Eyg2MDc1YzZmYjQ4MTg1MmU2YmU1YjZlMjEwNDM1MTI2MTcxNTQ5NTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA088/kYk6bhgPphibtvU2g6PevOyB CrBBMKbPo4bgZwJa3GmNf8FcNjPz5vREe8pvkAGDi4Lq0z6askMoze2/z6KDUc8J ZoxZhI/Tpg4DQh2Rwz2t0GZCp99LfLlw4ICPjzCx8xd5o+mjqtOVFESeyOZuGHMD dD6cnTm7tU+xuhAlgAxrG0Q8PgTPvH1grSrYQoi7G+xcZVxcbA11bC+v6COM3h6M 3xOqOQiH3sHaAx1gUi9cL7OHS3nYig4UWwy9MsFGbYo2YKgAUbYVICLRP3AObR3l +UKyeTwtNLkklGGrcUuEq80jsYHePFdumsAXGVMGo1fCMMvAMrzcfSvSzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGB1xvtIGFLmvltuIQQ1EmFxVJVsMB8GA1UdIwQY MBaAFJby2i+hvI7S8rxrcDqL8VNA+Xz6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHZMYUw2RzhqdEx5dkd0d09vdnhVMEQ1ZlBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mYzQ2OTAtMDgwZi00MDE4LTg5YTEt OTNiNGZlNTE1N2VjLzEvbHZMYUw2RzhqdEx5dkd0d09vdnhVMEQ1ZlBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9mYzQ2OTAtMDgwZi00MDE4LTg5YTEtOTNiNGZlNTE1N2Vj LzEvbHZMYUw2RzhqdEx5dkd0d09vdnhVMEQ1ZlBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl8aM1bKn DkuuzH4y4JBIoVzJCMKNCuKrjiznOHO+Q+zMT0NcJ3nJagugaiIe1zY7WsGSzh2T GJyze1FRV/QEhNqMp7i0edth45KcgxTi8k6JZIMecK50EgTKhp0lizW4kxWEGck/ 7xpnf0rHeKJM/dndrc9smIaRiwt9fuePks4Jem1aW+vKnDfUSBw0NaWf1OsGFTy6 mPOoY8B/dqS/3iZvrtJL8Itdci1PgWAPZ/xUptywgtKVGGCYVfcpkCU/73jpZgnv qcqSiFixPCBpaW0G6OVgquIVl+be+/sS/H+MYhnoBdKbupgCRBjCE8s27oA85qAD 2HQM2e8w89tskQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:33 2026 by rpki-client