This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft File: LrlwnvMbddaOIgiqvyosPD2Hb8E.mft (raw, json) Hash identifier: eQ6+UX1F7gictFXxZhE6bXxAsI6F5RokScYp4yLASGA= Subject key identifier: 04:32:E5:03:D7:83:9B:45:96:DE:46:36:F6:A2:DB:81:33:06:9E:6A Authority key identifier: 2E:B9:70:9E:F3:1B:75:D6:8E:22:08:AA:BF:2A:2C:3C:3D:87:6F:C1 Certificate issuer: /CN=2eb9709ef31b75d68e2208aabf2a2c3c3d876fc1 Certificate serial: 019C41A1D487F10A7A7B86DA28A785383CB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 09:00:50 +0000 Manifest this update: Mon 09 Feb 2026 09:00:50 +0000 Manifest next update: Tue 10 Feb 2026 09:00:50 +0000 Files and hashes: 1: LrlwnvMbddaOIgiqvyosPD2Hb8E.crl (hash: yeq5TvpNclT3SsQMU9GmM1noxfR80YlRAa5Rqi4IGkk=) 2: xE7QTqbNdhn5gknQPHHkIzofK-E.roa (hash: llDvi2taRSF2NctjRtmwTyGFIoc+gbx6y6MnqNFwqu8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.crl rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:d4:87:f1:0a:7a:7b:86:da:28:a7:85:38:3c:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2eb9709ef31b75d68e2208aabf2a2c3c3d876fc1 Validity Not Before: Feb 9 09:00:50 2026 GMT Not After : Feb 10 09:00:50 2026 GMT Subject: CN=0432e503d7839b4596de4636f6a2db8133069e6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:be:14:1f:58:53:4a:f1:1f:27:92:31:4d:0b: 23:e5:db:56:36:a6:53:f1:b1:39:90:10:fd:82:d4: f3:9c:d0:42:d9:e7:3c:ca:3c:d0:15:fc:62:b9:95: 1e:91:4d:42:06:a2:7d:2b:45:30:c9:4d:92:7f:9d: 38:1b:26:be:18:50:3b:e7:3e:94:88:6a:8b:58:30: 46:23:8e:31:58:64:85:9c:2d:e1:99:30:4f:5b:ab: 65:9d:85:93:c7:b3:37:ce:bf:de:0b:1e:ee:e3:84: aa:12:cb:7d:8c:a4:1a:4b:be:62:78:c6:c6:ad:b9: f4:0a:10:70:96:7e:d2:f0:e2:59:88:4f:7c:a6:66: 1c:da:ae:6d:70:04:22:57:98:3b:47:8c:b9:2e:92: 12:66:8b:8c:c9:0a:07:ac:ec:d3:c5:42:02:12:8a: 88:90:8c:ab:4d:51:e7:ed:d8:ae:d3:bc:c3:93:08: 2d:b9:65:21:36:da:4d:ee:2a:3f:dd:dc:44:22:db: 9b:e1:6d:4b:0e:21:8d:fc:60:cc:fc:4c:57:59:6b: 59:e9:16:bf:23:24:4e:a8:d3:16:ba:ad:a7:2f:d6: 51:10:6a:28:a6:9f:ed:47:d7:08:e3:60:60:c4:05: d5:34:0f:aa:d2:d5:5f:b4:5d:0d:fc:cb:69:17:8b: 14:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:32:E5:03:D7:83:9B:45:96:DE:46:36:F6:A2:DB:81:33:06:9E:6A X509v3 Authority Key Identifier: keyid:2E:B9:70:9E:F3:1B:75:D6:8E:22:08:AA:BF:2A:2C:3C:3D:87:6F:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:30:ad:4e:30:4e:00:dd:5d:5d:6b:e9:a6:2d:18:fb:f3:fb: a4:98:6e:95:4a:6f:93:df:8f:7e:15:66:3e:dc:38:e4:97:88: 09:24:0d:39:5d:0d:51:e9:3d:b9:50:12:c2:80:af:db:a8:6b: ca:0c:8e:ec:72:2c:a3:7e:02:54:e8:09:d6:c7:52:f8:10:5c: ab:19:4c:98:ce:d5:04:9f:72:4c:42:97:f0:4d:b6:2a:a3:40: 1a:87:1a:d7:a7:3c:8c:02:a9:75:58:ee:95:00:45:35:1d:34: c7:2f:6a:b0:a4:53:70:8f:20:bf:93:b6:b3:3b:9c:a5:27:7b: 0a:ed:f2:29:24:55:ab:46:94:41:4b:75:db:8e:cc:60:9b:72: fb:d7:98:85:84:ff:3e:71:ea:3d:ac:02:59:b6:8b:8e:c7:41: 01:70:fa:d0:d0:2f:cc:7f:9b:d7:18:75:93:48:a6:24:80:c2: 7d:62:25:d5:dc:34:86:dc:0f:51:1c:6d:55:ea:91:d6:84:1c: 87:57:2e:f5:4a:25:34:4d:a9:a3:37:be:f2:09:f9:59:cc:ef: 1d:0a:e0:6e:96:5e:b5:f0:cb:3a:99:16:25:a3:c8:de:7b:ec: 29:11:a5:cb:d4:70:28:25:4d:96:a1:c9:e3:99:85:00:2b:59: 45:d6:77:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBodSH8Qp6e4baKKeFODy2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYjk3MDllZjMxYjc1ZDY4ZTIyMDhhYWJmMmEyYzNjM2Q4 NzZmYzEwHhcNMjYwMjA5MDkwMDUwWhcNMjYwMjEwMDkwMDUwWjAzMTEwLwYDVQQD EygwNDMyZTUwM2Q3ODM5YjQ1OTZkZTQ2MzZmNmEyZGI4MTMzMDY5ZTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL4UH1hTSvEfJ5IxTQsj5dtWNqZT 8bE5kBD9gtTznNBC2ec8yjzQFfxiuZUekU1CBqJ9K0UwyU2Sf504Gya+GFA75z6U iGqLWDBGI44xWGSFnC3hmTBPW6tlnYWTx7M3zr/eCx7u44SqEst9jKQaS75ieMbG rbn0ChBwln7S8OJZiE98pmYc2q5tcAQiV5g7R4y5LpISZouMyQoHrOzTxUICEoqI kIyrTVHn7diu07zDkwgtuWUhNtpN7io/3dxEItub4W1LDiGN/GDM/ExXWWtZ6Ra/ IyROqNMWuq2nL9ZREGoopp/tR9cI42BgxAXVNA+q0tVftF0N/MtpF4sUpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQy5QPXg5tFlt5GNvai24EzBp5qMB8GA1UdIwQY MBaAFC65cJ7zG3XWjiIIqr8qLDw9h2/BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHJsd252TWJkZGFPSWdpcXZ5b3NQRDJIYjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84ZDNjM2ItNjA2OS00Y2QxLTg5YjEt Y2VjMzVjNDUzYzVlLzEvTHJsd252TWJkZGFPSWdpcXZ5b3NQRDJIYjhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84ZDNjM2ItNjA2OS00Y2QxLTg5YjEtY2VjMzVjNDUzYzVl LzEvTHJsd252TWJkZGFPSWdpcXZ5b3NQRDJIYjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzCtTjBO AN1dXWvppi0Y+/P7pJhulUpvk9+PfhVmPtw45JeICSQNOV0NUek9uVASwoCv26hr ygyO7HIso34CVOgJ1sdS+BBcqxlMmM7VBJ9yTEKX8E22KqNAGoca16c8jAKpdVju lQBFNR00xy9qsKRTcI8gv5O2szucpSd7Cu3yKSRVq0aUQUt1247MYJty+9eYhYT/ PnHqPawCWbaLjsdBAXD60NAvzH+b1xh1k0imJIDCfWIl1dw0htwPURxtVeqR1oQc h1cu9UolNE2poze+8gn5WczvHQrgbpZetfDLOpkWJaPI3nvsKRGly9RwKCVNlqHJ 45mFACtZRdZ3EQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:01 2026 by rpki-client