This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft File: lqKMzDCRW1xzEoCowcpn_mAJVO4.mft (raw, json) Hash identifier: UMdlFHL8mF9gEZtCip6YbvsGkftIj9ExFGTOv+eEzN4= Subject key identifier: FE:EA:0F:83:CA:E3:FB:23:D1:C0:22:D0:AC:69:64:A9:C5:41:F2:DD Authority key identifier: 96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE Certificate issuer: /CN=96a28ccc30915b5c731280a8c1ca67fe600954ee Certificate serial: 019C4321D1F53DDE0365079576C1CC2E9744 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft Manifest number: 088C Signing time: Mon 09 Feb 2026 16:00:15 +0000 Manifest this update: Mon 09 Feb 2026 16:00:15 +0000 Manifest next update: Tue 10 Feb 2026 16:00:15 +0000 Files and hashes: 1: lqKMzDCRW1xzEoCowcpn_mAJVO4.crl (hash: KwG4r33nQY1tTdgaLyRy3dFiL49hO1OGzyDc6b+sy1I=) 2: tpEzmPn6Emv4oxeWEF0eNzB9vks.roa (hash: lobNcn+6RzeUxnDnoUeGrIRglUEmt1L2WBn8rml/ud0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:d1:f5:3d:de:03:65:07:95:76:c1:cc:2e:97:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96a28ccc30915b5c731280a8c1ca67fe600954ee Validity Not Before: Feb 9 16:00:15 2026 GMT Not After : Feb 10 16:00:15 2026 GMT Subject: CN=feea0f83cae3fb23d1c022d0ac6964a9c541f2dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:01:42:66:3c:f7:ba:9f:77:ae:c9:41:a7:57: 13:69:56:90:3e:4a:1e:4c:67:e4:c7:80:88:57:c3: 04:d3:8e:c2:80:20:43:01:e0:48:15:4a:f4:17:f9: 2f:33:05:fa:e8:0f:95:99:8c:53:f1:c4:10:d6:91: f6:a4:a9:c9:ee:66:9b:e7:68:c9:27:d7:4a:ac:d4: 8f:4c:a7:da:a6:c7:e1:df:df:bc:4e:3e:7d:24:d3: cc:dd:73:68:2b:3f:2c:b9:99:88:35:4b:49:cc:ed: 57:55:e3:45:6f:1f:21:e1:90:c6:04:22:4f:af:0f: b5:fe:e5:e0:75:75:10:28:1c:5d:1e:cb:f7:2d:6b: 7f:a8:09:6f:92:97:d3:e7:10:03:ad:8c:99:86:3e: 89:2d:b1:d8:06:8d:56:34:84:68:f7:85:6b:a6:0f: 3f:c4:0e:7f:db:49:43:93:6c:83:ce:d0:cc:a3:24: d5:85:85:54:4e:60:38:0f:e2:a8:e6:14:cd:f1:ff: 64:65:16:c9:f5:d4:0a:7a:05:97:68:e6:ad:89:c7: d7:5f:02:be:15:17:df:95:e0:d6:bf:86:4a:4e:67: fd:ce:99:8c:6f:9a:f1:39:cf:1d:da:4a:f2:9c:3b: 86:08:fa:58:21:84:85:a2:d6:34:d4:ba:77:fb:b2: 50:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:EA:0F:83:CA:E3:FB:23:D1:C0:22:D0:AC:69:64:A9:C5:41:F2:DD X509v3 Authority Key Identifier: keyid:96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:44:32:c8:11:cb:ce:17:2c:e6:3f:19:f5:89:f2:df:67:87: 40:e4:38:96:c5:32:51:63:95:8a:5d:5e:0d:4f:e7:8a:72:6f: 8b:29:7b:8e:d1:2d:dc:3d:70:0c:9a:54:06:32:1d:5c:b8:1c: c8:56:6a:cf:f4:51:e3:43:5a:55:41:99:b9:2e:54:b8:43:57: 60:f8:c2:de:be:3d:93:39:41:a7:b7:76:b3:7a:a8:84:9a:4c: 81:0b:0d:ff:f5:fb:0e:3a:f3:61:6d:ff:e2:aa:38:85:d4:26: d8:91:d4:b6:8a:d9:88:5b:e8:86:bc:77:42:cd:3d:77:8b:0d: 40:02:52:63:9e:b2:09:19:5d:b7:41:f0:8e:2a:6b:0c:f8:9f: 30:14:15:5b:50:a8:1c:52:7e:5c:d3:31:26:f8:0a:ba:02:95: 7c:bd:b2:a9:38:cf:dd:35:21:f7:d0:1d:e2:47:fe:96:78:7c: f3:4f:e3:34:4c:8b:21:69:fb:41:97:57:cc:e5:d2:e8:df:1a: 16:c7:08:d3:ae:10:e4:1a:8f:c9:3e:fd:c1:45:0e:e7:cf:ff: 6f:2d:74:33:67:87:9d:3f:dd:ac:41:cf:5b:eb:42:b5:d2:26: 9f:ea:90:21:e5:9b:22:99:12:21:32:4c:f4:99:ac:fb:66:25: db:0e:4d:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIdH1Pd4DZQeVdsHMLpdEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YTI4Y2NjMzA5MTViNWM3MzEyODBhOGMxY2E2N2ZlNjAw OTU0ZWUwHhcNMjYwMjA5MTYwMDE1WhcNMjYwMjEwMTYwMDE1WjAzMTEwLwYDVQQD EyhmZWVhMGY4M2NhZTNmYjIzZDFjMDIyZDBhYzY5NjRhOWM1NDFmMmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAFCZjz3up93rslBp1cTaVaQPkoe TGfkx4CIV8ME047CgCBDAeBIFUr0F/kvMwX66A+VmYxT8cQQ1pH2pKnJ7mab52jJ J9dKrNSPTKfapsfh39+8Tj59JNPM3XNoKz8suZmINUtJzO1XVeNFbx8h4ZDGBCJP rw+1/uXgdXUQKBxdHsv3LWt/qAlvkpfT5xADrYyZhj6JLbHYBo1WNIRo94Vrpg8/ xA5/20lDk2yDztDMoyTVhYVUTmA4D+Ko5hTN8f9kZRbJ9dQKegWXaOaticfXXwK+ FRffleDWv4ZKTmf9zpmMb5rxOc8d2krynDuGCPpYIYSFotY01Lp3+7JQCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7qD4PK4/sj0cAi0KxpZKnFQfLdMB8GA1UdIwQY MBaAFJaijMwwkVtccxKAqMHKZ/5gCVTuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHFLTXpEQ1JXMXh6RW9Db3djcG5fbUFKVk80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82YTJhYTktMGVhMS00MGQ2LWI4YTct NjUxYjcxN2Y4YTlhLzEvbHFLTXpEQ1JXMXh6RW9Db3djcG5fbUFKVk80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS82YTJhYTktMGVhMS00MGQ2LWI4YTctNjUxYjcxN2Y4YTlh LzEvbHFLTXpEQ1JXMXh6RW9Db3djcG5fbUFKVk80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM0QyyBHL zhcs5j8Z9Yny32eHQOQ4lsUyUWOVil1eDU/ninJviyl7jtEt3D1wDJpUBjIdXLgc yFZqz/RR40NaVUGZuS5UuENXYPjC3r49kzlBp7d2s3qohJpMgQsN//X7DjrzYW3/ 4qo4hdQm2JHUtorZiFvohrx3Qs09d4sNQAJSY56yCRldt0HwjiprDPifMBQVW1Co HFJ+XNMxJvgKugKVfL2yqTjP3TUh99Ad4kf+lnh880/jNEyLIWn7QZdXzOXS6N8a FscI064Q5BqPyT79wUUO58//by10M2eHnT/drEHPW+tCtdImn+qQIeWbIpkSITJM 9Jms+2Yl2w5NCA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:26 2026 by rpki-client