This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft File: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft (raw, json) Hash identifier: GC/MYak92cuipiyS6/zt94w5jYDVdRDhApgCJL8yyFA= Subject key identifier: EE:2C:61:14:A7:C0:C3:11:DC:8E:74:40:E5:C7:36:3B:42:26:E4:0D Authority key identifier: 2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66 Certificate issuer: /CN=2f102815d27e6511746d4a3e9fd1359cd982a866 Certificate serial: 019C43C71F98FCE9E805902C6FDCCD674BAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft Manifest number: 0C8E Signing time: Mon 09 Feb 2026 19:00:49 +0000 Manifest this update: Mon 09 Feb 2026 19:00:49 +0000 Manifest next update: Tue 10 Feb 2026 19:00:49 +0000 Files and hashes: 1: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl (hash: NsVox1G7MPqTr+yH7MQGh0uugXpViuXWn/7mnErFKiQ=) 2: kV7AwnkXYKEJUo_QQveMLFjR1Q0.roa (hash: SX4oJ6iuf50pvLJFbaFInsRNowHDyi5Eu+2bcodIAMI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:1f:98:fc:e9:e8:05:90:2c:6f:dc:cd:67:4b:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f102815d27e6511746d4a3e9fd1359cd982a866 Validity Not Before: Feb 9 19:00:49 2026 GMT Not After : Feb 10 19:00:49 2026 GMT Subject: CN=ee2c6114a7c0c311dc8e7440e5c7363b4226e40d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e2:80:d7:fc:4a:b8:3a:e9:c0:63:48:24:f3: 9c:47:7d:73:5d:c4:99:1d:1d:62:3e:71:6a:74:96: ae:0e:9c:66:0f:54:73:b1:28:62:97:7a:ba:24:db: 42:4f:ae:1a:5d:ce:c2:37:a4:3d:92:3b:9a:5d:3d: 02:0d:ee:58:37:83:ba:cf:fa:bf:b2:d0:97:b2:24: 99:df:c9:5e:18:00:c8:6c:e6:46:64:46:01:df:49: d6:79:af:55:2b:1f:a8:65:26:20:33:8f:1e:59:2d: 7b:9f:7a:3d:e7:0f:23:b7:5e:3a:ee:de:e3:00:ae: fd:54:42:cb:b1:0f:2b:24:68:c7:50:f3:f6:42:c5: 31:37:cb:19:ef:be:c3:c6:b8:83:96:34:b8:8f:67: fd:97:0a:0e:a7:df:0e:43:a4:61:d2:53:86:ce:73: 66:52:2a:f6:41:57:11:2d:b7:08:ee:fd:bb:d5:ed: cd:ab:9a:44:31:29:33:e3:00:89:d4:cd:90:83:54: a4:d5:c1:6f:f5:46:37:02:ad:65:7e:c4:d0:9d:f7: 54:54:1e:c9:d5:67:3c:d5:0a:06:fe:8c:0b:87:bc: 6e:09:7d:62:88:81:6f:a5:b5:66:6c:3c:46:81:d6: 64:d8:1f:fc:65:89:01:49:f2:ca:43:3c:84:11:4c: 96:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2C:61:14:A7:C0:C3:11:DC:8E:74:40:E5:C7:36:3B:42:26:E4:0D X509v3 Authority Key Identifier: keyid:2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:77:66:73:17:e2:93:53:84:b0:4d:0e:fb:c0:19:e7:ee:d2: 2b:a7:7b:b2:ac:66:16:05:ff:c9:31:84:db:f1:24:c3:cd:4b: 39:c6:f3:c4:16:4c:82:f2:1a:db:6f:2c:ba:ee:48:84:3b:de: 9a:14:4c:23:05:48:a7:7b:aa:c7:85:c1:0f:51:8e:8c:5c:1b: bb:be:8b:15:c6:6e:ef:5e:ea:ab:33:64:80:fc:d4:2f:f6:28: 82:ab:c7:91:d7:7d:a1:17:92:bc:f9:0c:f5:0d:7d:3e:2f:d3: 01:c2:e7:e7:22:35:cf:54:21:4d:8b:35:83:4c:16:9b:c7:a6: ea:dd:13:bc:0b:99:76:96:6d:16:95:77:16:4a:a7:96:00:d6: 60:b7:5e:51:65:5c:c8:79:98:5b:04:4f:28:84:15:4b:a1:d4: e2:02:6a:0e:b1:49:3e:1a:46:9d:57:8d:5f:b4:17:39:14:4b: 3e:e2:99:ed:39:09:82:0e:73:e9:f6:8c:16:6a:e1:18:d2:4c: 31:23:e2:7a:ee:7a:e1:4e:db:d2:65:4b:e0:92:88:ee:3c:eb: 27:ef:ac:52:5f:44:b6:fc:92:cc:8b:26:75:f6:fe:a4:ce:88: d0:fa:66:7b:24:7b:1e:4b:2e:b8:58:be:7e:1a:a0:33:0e:22: 8d:68:f7:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxx+Y/OnoBZAsb9zNZ0utMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMTAyODE1ZDI3ZTY1MTE3NDZkNGEzZTlmZDEzNTljZDk4 MmE4NjYwHhcNMjYwMjA5MTkwMDQ5WhcNMjYwMjEwMTkwMDQ5WjAzMTEwLwYDVQQD EyhlZTJjNjExNGE3YzBjMzExZGM4ZTc0NDBlNWM3MzYzYjQyMjZlNDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeKA1/xKuDrpwGNIJPOcR31zXcSZ HR1iPnFqdJauDpxmD1RzsShil3q6JNtCT64aXc7CN6Q9kjuaXT0CDe5YN4O6z/q/ stCXsiSZ38leGADIbOZGZEYB30nWea9VKx+oZSYgM48eWS17n3o95w8jt1467t7j AK79VELLsQ8rJGjHUPP2QsUxN8sZ777DxriDljS4j2f9lwoOp98OQ6Rh0lOGznNm Uir2QVcRLbcI7v271e3Nq5pEMSkz4wCJ1M2Qg1Sk1cFv9UY3Aq1lfsTQnfdUVB7J 1Wc81QoG/owLh7xuCX1iiIFvpbVmbDxGgdZk2B/8ZYkBSfLKQzyEEUyWtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4sYRSnwMMR3I50QOXHNjtCJuQNMB8GA1UdIwQY MBaAFC8QKBXSfmURdG1KPp/RNZzZgqhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHhBb0ZkSi1aUkYwYlVvLW45RTFuTm1DcUdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hMzNmOWEtOWJjMy00MzBkLWJiN2Mt NWVjNzk0YjBlNjljLzEvTHhBb0ZkSi1aUkYwYlVvLW45RTFuTm1DcUdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9hMzNmOWEtOWJjMy00MzBkLWJiN2MtNWVjNzk0YjBlNjlj LzEvTHhBb0ZkSi1aUkYwYlVvLW45RTFuTm1DcUdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWXdmcxfi k1OEsE0O+8AZ5+7SK6d7sqxmFgX/yTGE2/Ekw81LOcbzxBZMgvIa228suu5IhDve mhRMIwVIp3uqx4XBD1GOjFwbu76LFcZu717qqzNkgPzUL/YogqvHkdd9oReSvPkM 9Q19Pi/TAcLn5yI1z1QhTYs1g0wWm8em6t0TvAuZdpZtFpV3FkqnlgDWYLdeUWVc yHmYWwRPKIQVS6HU4gJqDrFJPhpGnVeNX7QXORRLPuKZ7TkJgg5z6faMFmrhGNJM MSPieu564U7b0mVL4JKI7jzrJ++sUl9EtvySzIsmdfb+pM6I0PpmeyR7HksuuFi+ fhqgMw4ijWj3GA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:10 2026 by rpki-client