This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft File: l-y52NNIlBZmfumV9fTiGje2-fg.mft (raw, json) Hash identifier: lr3Zsxf878wbwa/oSY9+FDccX0ylcagb8QbQDSDf8rk= Subject key identifier: B5:AE:89:EA:0B:30:82:54:0C:31:10:45:0F:8C:20:D7:93:8A:75:74 Authority key identifier: 97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8 Certificate issuer: /CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8 Certificate serial: 019C4322846934FEE0CC080B234BEFFD6FF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft Manifest number: 089A Signing time: Mon 09 Feb 2026 16:01:01 +0000 Manifest this update: Mon 09 Feb 2026 16:01:01 +0000 Manifest next update: Tue 10 Feb 2026 16:01:01 +0000 Files and hashes: 1: D4QkBgdPUCYkDN2lY5ivsqhXB8M.roa (hash: jViXNh0mGGwVxxVrUk5eRxQ1z7TU/R1eWWRkMk+2l7U=) 2: l-y52NNIlBZmfumV9fTiGje2-fg.crl (hash: 7lWtKcpw/ejI9c/Fyp97bcfZAH5uo4QLhNeR+Isw9+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:84:69:34:fe:e0:cc:08:0b:23:4b:ef:fd:6f:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8 Validity Not Before: Feb 9 16:01:01 2026 GMT Not After : Feb 10 16:01:01 2026 GMT Subject: CN=b5ae89ea0b3082540c3110450f8c20d7938a7574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6e:b3:ab:1f:34:65:83:6e:91:66:3d:a1:17: 10:ab:00:c9:14:60:73:78:d6:50:ae:10:f6:0a:66: 60:e3:f0:65:44:4e:8f:73:d9:30:00:b1:ac:c1:2a: 1d:28:1f:34:20:f7:17:a5:de:3f:6b:39:05:3e:4e: e6:44:92:c2:0e:64:91:ee:0a:91:3b:3b:ae:11:0f: 09:44:5c:80:8d:19:b4:42:3a:7d:19:69:b3:0c:08: fb:30:45:e7:cb:46:99:11:b5:6d:ed:dc:c9:c5:7f: 7c:1d:74:77:32:e4:91:e1:94:fc:18:f2:1d:63:d7: ee:6c:ad:15:8d:5f:5a:ff:d3:4a:44:c2:5d:f7:d4: 5c:58:c0:a3:b3:95:54:2a:09:b0:a7:9b:91:78:a4: 4d:69:1f:12:67:4c:6c:51:c9:c6:aa:3a:75:85:08: 8f:94:c5:1e:4e:dd:ce:6d:08:0a:36:8e:a0:58:a0: 56:20:d7:2d:f5:72:3e:41:49:5b:32:f8:dc:cf:f8: c5:9f:64:fa:76:71:84:59:8a:b4:d9:5d:14:f4:7f: a7:0d:49:a6:2b:b1:46:66:2e:f0:d4:62:91:34:75: e9:89:06:85:22:f9:f4:6e:14:32:26:e3:b5:85:7b: 28:0b:25:93:60:c2:5f:78:7a:aa:ad:fc:e4:f8:21: fe:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AE:89:EA:0B:30:82:54:0C:31:10:45:0F:8C:20:D7:93:8A:75:74 X509v3 Authority Key Identifier: keyid:97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:00:9b:14:1a:4f:d0:dc:cd:08:cb:14:ff:f1:21:ee:d8:9c: e2:ee:e7:5a:9b:72:5a:9d:2e:8a:52:4e:6c:68:7e:60:ac:a2: d9:40:cb:5c:00:f7:52:d6:36:67:13:fa:d2:2f:f7:5a:70:a2: 82:1c:e2:ad:5f:55:96:21:98:a2:7e:86:65:23:b1:04:4d:f6: 96:c9:19:2e:64:28:18:59:3c:a2:ef:a7:34:9a:0f:30:7c:0f: f2:d6:85:b2:b6:78:56:cf:a5:55:9c:6d:06:f7:c5:cf:85:47: e1:c1:e9:2e:f6:b9:72:9e:4f:f6:87:b6:b3:3d:70:27:ae:9c: 67:3a:75:de:7b:99:67:e6:9d:7b:13:ca:f3:38:67:b3:8b:6d: dc:84:87:6d:86:39:89:cf:36:e9:fb:4b:ee:59:a8:87:45:47: dd:55:ec:6c:be:6c:db:a4:f8:db:c1:c0:6b:d0:af:3c:86:a6: bd:ed:eb:1e:35:dc:74:24:09:27:a8:34:70:54:43:9b:73:dd: 08:a3:8c:9f:2f:89:2e:46:b9:5e:e3:01:da:46:34:aa:74:8c: a7:97:03:d0:f5:95:c8:dd:47:a8:6e:2a:1d:36:51:b9:75:e9: 50:15:f9:82:b5:56:37:85:4d:78:94:60:1b:19:89:ab:e9:d5: b7:e3:ac:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIoRpNP7gzAgLI0vv/W/xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ZWNiOWQ4ZDM0ODk0MTY2NjdlZTk5NWY1ZjRlMjFhMzdi NmY5ZjgwHhcNMjYwMjA5MTYwMTAxWhcNMjYwMjEwMTYwMTAxWjAzMTEwLwYDVQQD EyhiNWFlODllYTBiMzA4MjU0MGMzMTEwNDUwZjhjMjBkNzkzOGE3NTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAym6zqx80ZYNukWY9oRcQqwDJFGBz eNZQrhD2CmZg4/BlRE6Pc9kwALGswSodKB80IPcXpd4/azkFPk7mRJLCDmSR7gqR OzuuEQ8JRFyAjRm0Qjp9GWmzDAj7MEXny0aZEbVt7dzJxX98HXR3MuSR4ZT8GPId Y9fubK0VjV9a/9NKRMJd99RcWMCjs5VUKgmwp5uReKRNaR8SZ0xsUcnGqjp1hQiP lMUeTt3ObQgKNo6gWKBWINct9XI+QUlbMvjcz/jFn2T6dnGEWYq02V0U9H+nDUmm K7FGZi7w1GKRNHXpiQaFIvn0bhQyJuO1hXsoCyWTYMJfeHqqrfzk+CH+4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWuieoLMIJUDDEQRQ+MINeTinV0MB8GA1UdIwQY MBaAFJfsudjTSJQWZn7plfX04ho3tvn4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbC15NTJOTklsQlptZnVtVjlmVGlHamUyLWZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NzUwZWUtMWJiYi00NTcwLWJiODMt NTlkOWQ0OGVhM2IxLzEvbC15NTJOTklsQlptZnVtVjlmVGlHamUyLWZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80NzUwZWUtMWJiYi00NTcwLWJiODMtNTlkOWQ0OGVhM2Ix LzEvbC15NTJOTklsQlptZnVtVjlmVGlHamUyLWZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQCbFBpP 0NzNCMsU//Eh7tic4u7nWptyWp0uilJObGh+YKyi2UDLXAD3UtY2ZxP60i/3WnCi ghzirV9VliGYon6GZSOxBE32lskZLmQoGFk8ou+nNJoPMHwP8taFsrZ4Vs+lVZxt BvfFz4VH4cHpLva5cp5P9oe2sz1wJ66cZzp13nuZZ+adexPK8zhns4tt3ISHbYY5 ic826ftL7lmoh0VH3VXsbL5s26T428HAa9CvPIamve3rHjXcdCQJJ6g0cFRDm3Pd CKOMny+JLka5XuMB2kY0qnSMp5cD0PWVyN1HqG4qHTZRuXXpUBX5grVWN4VNeJRg GxmJq+nVt+OsgA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:40 2026 by rpki-client