This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft File: LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft (raw, json) Hash identifier: uu39ZkLDEOn9gPAKpMZKtlxtJUxtY4TNokodEeXtS6Y= Subject key identifier: DD:BF:A1:98:CF:96:9B:A1:9D:A8:86:E5:5D:11:F5:38:CA:85:01:62 Authority key identifier: 2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27 Certificate issuer: /CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827 Certificate serial: 019C427E0C1367900B65D04D81ABE307C7C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 13:01:22 +0000 Manifest this update: Mon 09 Feb 2026 13:01:22 +0000 Manifest next update: Tue 10 Feb 2026 13:01:22 +0000 Files and hashes: 1: H7ajP4k-tqBkc1AdtIseOiAFeNw.roa (hash: XfKJzAL0fK4z62zRzcfP/LqBvxxrItwe2ueGA3MJylY=) 2: LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl (hash: p7FR7KknvJqD3nLY/YVPnA03uGAG2pMt1ZGYSVanfP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:0c:13:67:90:0b:65:d0:4d:81:ab:e3:07:c7:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827 Validity Not Before: Feb 9 13:01:22 2026 GMT Not After : Feb 10 13:01:22 2026 GMT Subject: CN=ddbfa198cf969ba19da886e55d11f538ca850162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3c:76:64:c7:79:f1:6d:dd:ee:b4:97:7f:50: db:2b:5f:7a:76:0a:1f:34:31:d9:07:6e:8f:89:1c: 6f:e0:95:4e:f5:d3:1c:e5:ee:06:cb:25:c2:7a:f9: 8c:f4:60:4a:53:2a:6c:10:97:57:32:9e:f6:fd:b4: 0a:ce:33:99:b1:37:3c:0c:a0:d3:71:46:3d:47:b9: 39:9a:09:c4:93:a0:58:28:4b:25:da:64:a0:85:53: 4d:14:af:0d:a4:8b:c8:3b:a0:cf:df:44:8e:45:d4: 6b:61:16:d8:75:ca:fb:a1:ec:2d:e5:0e:86:ca:47: fe:b6:22:73:1a:0c:82:29:60:66:33:c1:ce:ca:af: 14:97:47:3c:2a:f9:c7:12:26:4b:07:2f:d9:83:4e: 67:32:f5:3f:62:b9:69:43:68:8b:7c:70:9a:1b:ec: 86:54:4d:5d:91:88:46:c0:ef:4c:a9:66:15:32:30: a9:f0:7c:37:1f:27:b2:db:df:c9:49:df:24:30:f2: 81:5e:53:60:1e:56:46:d5:53:ae:a1:23:f3:fe:c1: 49:e8:90:b7:51:14:24:eb:33:cc:a5:02:32:cd:cb: 77:24:2f:b9:5b:2b:29:7f:40:8f:72:d2:a4:87:32: 71:9b:55:a5:5e:3d:b0:74:28:ec:6e:46:65:80:ae: 3d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:BF:A1:98:CF:96:9B:A1:9D:A8:86:E5:5D:11:F5:38:CA:85:01:62 X509v3 Authority Key Identifier: keyid:2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:91:52:5a:e4:e8:78:e1:d6:df:54:1a:3c:73:b3:7b:2d:c6: 0e:f2:42:29:79:9f:3e:de:0f:95:b5:52:40:c7:cb:90:01:8a: 79:4c:68:2a:ad:97:b5:1f:98:81:7a:29:11:c2:73:c0:bb:04: be:46:6f:01:4f:ae:d8:fd:45:b9:cf:25:52:a4:ad:67:7f:20: e0:c7:9d:73:76:34:e7:26:c0:c1:8f:b9:a9:9d:12:d1:88:24: e5:12:66:1d:9c:63:5a:46:c4:5c:f0:33:04:4c:9f:45:2d:d3: 79:47:62:05:f9:53:2c:2f:01:b8:fc:e2:a0:bc:3b:70:e4:43: a4:b7:90:c0:5c:e3:8e:28:30:9d:a8:a6:a5:b0:53:ae:bd:3e: f9:7a:c4:a8:00:5c:73:8b:82:f4:bb:61:8c:0e:a8:af:c6:fb: 9e:9b:71:64:60:50:0f:12:d7:5a:94:21:0e:49:93:83:00:85: 43:4b:b5:9e:36:ab:2d:a0:3d:fb:44:1a:a3:a2:7d:f4:72:5d: 78:01:cb:ac:0c:00:9c:5d:2c:f0:3b:ca:c7:4e:3a:f8:73:85: e8:64:61:fc:aa:67:17:ab:b8:22:7a:cd:c4:02:35:b1:3f:4a: 93:5e:4f:73:2a:74:67:08:cc:f6:be:d2:d1:78:22:ca:2b:41: c1:0f:3b:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfgwTZ5ALZdBNgavjB8fFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkYzljYjUzMDJkOGQxM2ZlOTFlODBmNWNiZDFmYmFjYmMw MTQ4MjcwHhcNMjYwMjA5MTMwMTIyWhcNMjYwMjEwMTMwMTIyWjAzMTEwLwYDVQQD EyhkZGJmYTE5OGNmOTY5YmExOWRhODg2ZTU1ZDExZjUzOGNhODUwMTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDx2ZMd58W3d7rSXf1DbK196dgof NDHZB26PiRxv4JVO9dMc5e4GyyXCevmM9GBKUypsEJdXMp72/bQKzjOZsTc8DKDT cUY9R7k5mgnEk6BYKEsl2mSghVNNFK8NpIvIO6DP30SORdRrYRbYdcr7oewt5Q6G ykf+tiJzGgyCKWBmM8HOyq8Ul0c8KvnHEiZLBy/Zg05nMvU/YrlpQ2iLfHCaG+yG VE1dkYhGwO9MqWYVMjCp8Hw3Hyey29/JSd8kMPKBXlNgHlZG1VOuoSPz/sFJ6JC3 URQk6zPMpQIyzct3JC+5Wyspf0CPctKkhzJxm1WlXj2wdCjsbkZlgK49AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2/oZjPlpuhnaiG5V0R9TjKhQFiMB8GA1UdIwQY MBaAFC3Jy1MC2NE/6R6A9cvR+6y8AUgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGNuTFV3TFkwVF9wSG9EMXk5SDdyTHdCU0NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jY2M4MDgtMTRiYi00OTRkLTk5Yzgt MmYxMWE2NTE5NjJiLzEvTGNuTFV3TFkwVF9wSG9EMXk5SDdyTHdCU0NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9jY2M4MDgtMTRiYi00OTRkLTk5YzgtMmYxMWE2NTE5NjJi LzEvTGNuTFV3TFkwVF9wSG9EMXk5SDdyTHdCU0NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJFSWuTo eOHW31QaPHOzey3GDvJCKXmfPt4PlbVSQMfLkAGKeUxoKq2XtR+YgXopEcJzwLsE vkZvAU+u2P1Fuc8lUqStZ38g4Medc3Y05ybAwY+5qZ0S0Ygk5RJmHZxjWkbEXPAz BEyfRS3TeUdiBflTLC8BuPzioLw7cORDpLeQwFzjjigwnaimpbBTrr0++XrEqABc c4uC9LthjA6or8b7nptxZGBQDxLXWpQhDkmTgwCFQ0u1njarLaA9+0Qao6J99HJd eAHLrAwAnF0s8DvKx046+HOF6GRh/KpnF6u4InrNxAI1sT9Kk15Pcyp0ZwjM9r7S 0XgiyitBwQ87FA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:05 2026 by rpki-client