This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft File: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft (raw, json) Hash identifier: WFQ3Sg+SzecRSVVVuQ6WXs/3i5z7ZK29+spDhDwtW3I= Subject key identifier: DF:E7:05:D0:9E:CD:DE:EE:13:AF:28:15:C4:C4:E6:1F:72:46:1F:3E Authority key identifier: FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4 Certificate issuer: /CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4 Certificate serial: 019C43FDE9F8D1428E9C1E42DD468DE9876F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft Manifest number: 15B2 Signing time: Mon 09 Feb 2026 20:00:39 +0000 Manifest this update: Mon 09 Feb 2026 20:00:39 +0000 Manifest next update: Tue 10 Feb 2026 20:00:39 +0000 Files and hashes: 1: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl (hash: fgJ1ParMNVKIHQFySq0ks+Rz8lqudL0p/b9oKWF2TmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:e9:f8:d1:42:8e:9c:1e:42:dd:46:8d:e9:87:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4 Validity Not Before: Feb 9 20:00:39 2026 GMT Not After : Feb 10 20:00:39 2026 GMT Subject: CN=dfe705d09ecddeee13af2815c4c4e61f72461f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b7:45:ec:c4:1c:10:d4:fc:e0:82:11:bb:e7: 32:f3:56:c1:0f:7c:3d:70:84:d0:e1:5e:12:28:12: 17:10:09:44:9d:d0:12:0f:a6:31:48:86:bc:63:97: 22:39:10:33:59:ac:e8:de:7a:56:b8:ec:2f:ad:31: 67:e0:e4:b9:91:5f:40:26:b2:25:15:2e:34:8d:f1: 2d:b5:01:54:52:c4:4a:e2:6e:b1:14:f5:ad:97:78: 02:37:7b:c4:56:ab:3d:3b:ba:49:b8:1f:a6:04:8d: f1:be:fd:c5:b4:f9:d5:d8:55:0b:49:2f:bd:c7:a2: c1:d6:12:06:40:4a:d5:a4:c7:fc:c8:32:40:89:aa: 35:7f:0d:15:ed:0c:61:23:77:1c:51:1f:dd:de:ef: f6:0e:ac:d4:d7:7f:18:6c:3c:f8:7d:60:92:1b:f2: 38:cf:29:25:16:b1:34:f4:d7:10:89:4b:be:7c:f6: 5a:4e:f9:e1:73:d4:6c:17:2a:0b:b8:d6:48:18:21: f1:60:9f:49:7b:f3:37:b0:e3:05:fb:55:ff:c6:d6: db:7e:86:0d:6a:f5:a6:f6:82:fb:df:47:71:f1:60: a0:c6:6f:4e:02:de:db:36:47:26:7e:56:a7:54:d6: b8:87:85:e3:0f:fc:da:2a:ca:4e:1f:e0:dd:5b:26: 93:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E7:05:D0:9E:CD:DE:EE:13:AF:28:15:C4:C4:E6:1F:72:46:1F:3E X509v3 Authority Key Identifier: keyid:FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:40:b6:17:48:ac:f5:81:9a:53:e9:2d:1e:7f:c2:ea:b5:cb: ff:3a:88:4f:a1:6d:fd:33:a4:09:2e:79:69:b3:ac:fc:81:d6: 56:18:ea:6b:ca:8a:ca:db:d7:03:ab:cf:81:ac:20:05:7b:2e: e4:e5:39:e7:8d:72:d9:a3:19:c1:da:48:2e:80:ba:80:27:77: ee:10:2f:fa:96:a1:8c:73:18:e9:cb:42:b0:f9:0a:c8:96:04: ea:9c:73:a8:3b:58:d9:1c:aa:6e:3e:df:02:13:80:f4:c8:4c: 17:fb:79:5c:43:b6:89:ad:e4:4f:43:c7:03:f0:f1:f8:e0:8a: 8d:a8:ff:2f:27:c4:62:ec:f8:a9:06:4e:0e:2e:6b:f3:e6:74: ef:41:f8:ca:6e:db:f1:6a:c7:97:69:04:bf:c5:6f:a9:b0:6a: 9b:bd:5c:c9:a8:10:7c:ce:ef:e6:20:8a:74:6c:72:1a:31:d3: 1f:8d:de:2f:0f:a0:2f:9e:6b:d1:3e:e0:4f:50:3a:ef:bb:c2: 5a:35:1b:9f:bb:1a:b3:4e:ed:8e:c8:02:d7:f7:61:10:87:02: de:8b:8d:9e:26:45:e1:2e:ef:fb:19:b8:2e:cc:b1:bf:84:ee: 9a:0c:9b:33:34:1a:5e:cb:47:84:aa:79:43:da:e9:b9:41:84: 52:85:35:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/en40UKOnB5C3UaN6YdvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYjMyOTlmMDVjMjBkNjM5NTljZTc3ODFiNWE4ZTA3MmY1 N2NjYjQwHhcNMjYwMjA5MjAwMDM5WhcNMjYwMjEwMjAwMDM5WjAzMTEwLwYDVQQD EyhkZmU3MDVkMDllY2RkZWVlMTNhZjI4MTVjNGM0ZTYxZjcyNDYxZjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrdF7MQcENT84IIRu+cy81bBD3w9 cITQ4V4SKBIXEAlEndASD6YxSIa8Y5ciORAzWazo3npWuOwvrTFn4OS5kV9AJrIl FS40jfEttQFUUsRK4m6xFPWtl3gCN3vEVqs9O7pJuB+mBI3xvv3FtPnV2FULSS+9 x6LB1hIGQErVpMf8yDJAiao1fw0V7QxhI3ccUR/d3u/2DqzU138YbDz4fWCSG/I4 zyklFrE09NcQiUu+fPZaTvnhc9RsFyoLuNZIGCHxYJ9Je/M3sOMF+1X/xtbbfoYN avWm9oL730dx8WCgxm9OAt7bNkcmflanVNa4h4XjD/zaKspOH+DdWyaTxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/nBdCezd7uE68oFcTE5h9yRh8+MB8GA1UdIwQY MBaAFPyzKZ8Fwg1jlZzneBtajgcvV8y0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0xNcG53WENEV09Wbk9kNEcxcU9CeTlYekxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9mZDUyZjctMGZmYS00ZjFkLTlkMDIt MTQ3ZDQ4NmY0MDUwLzEvX0xNcG53WENEV09Wbk9kNEcxcU9CeTlYekxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9mZDUyZjctMGZmYS00ZjFkLTlkMDItMTQ3ZDQ4NmY0MDUw LzEvX0xNcG53WENEV09Wbk9kNEcxcU9CeTlYekxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtkC2F0is 9YGaU+ktHn/C6rXL/zqIT6Ft/TOkCS55abOs/IHWVhjqa8qKytvXA6vPgawgBXsu 5OU5541y2aMZwdpILoC6gCd37hAv+pahjHMY6ctCsPkKyJYE6pxzqDtY2Ryqbj7f AhOA9MhMF/t5XEO2ia3kT0PHA/Dx+OCKjaj/LyfEYuz4qQZODi5r8+Z070H4ym7b 8WrHl2kEv8VvqbBqm71cyagQfM7v5iCKdGxyGjHTH43eLw+gL55r0T7gT1A677vC WjUbn7sas07tjsgC1/dhEIcC3ouNniZF4S7v+xm4Lsyxv4TumgybMzQaXstHhKp5 Q9rpuUGEUoU10g== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:15 2026 by rpki-client