This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft File: LpRuQzNsoql56Z31z11tXnFVgy0.mft (raw, json) Hash identifier: ZZhh01QEkbYLX3xbzHQKSqgzE9caDzrgeWni8fNwEkg= Subject key identifier: 5C:9A:43:A6:AC:2F:8D:F3:8C:FC:94:44:15:EE:F0:95:A6:9D:D2:A2 Authority key identifier: 2E:94:6E:43:33:6C:A2:A9:79:E9:9D:F5:CF:5D:6D:5E:71:55:83:2D Certificate issuer: /CN=2e946e43336ca2a979e99df5cf5d6d5e7155832d Certificate serial: 019C432209BBE874A7FC0EAFBA1E5E4F9632 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft Manifest number: 0AA8 Signing time: Mon 09 Feb 2026 16:00:30 +0000 Manifest this update: Mon 09 Feb 2026 16:00:30 +0000 Manifest next update: Tue 10 Feb 2026 16:00:30 +0000 Files and hashes: 1: LpRuQzNsoql56Z31z11tXnFVgy0.crl (hash: xAFpKhq3/VWOJ7ydAFeggyRb/c1JXx32Wm2PfGpVeM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.crl rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:09:bb:e8:74:a7:fc:0e:af:ba:1e:5e:4f:96:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e946e43336ca2a979e99df5cf5d6d5e7155832d Validity Not Before: Feb 9 16:00:30 2026 GMT Not After : Feb 10 16:00:30 2026 GMT Subject: CN=5c9a43a6ac2f8df38cfc944415eef095a69dd2a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e9:f6:05:c6:a2:10:3a:43:1b:bc:b3:8e:c2: 3e:a6:74:a8:94:2d:7e:c2:42:3e:b0:c6:2c:fa:ef: e5:96:cf:d3:42:b8:c6:d0:30:20:0b:59:25:07:46: b7:c9:d9:ef:1a:0b:30:df:e3:ba:1e:2e:c0:85:57: bc:30:51:02:4c:0a:b2:df:5c:65:ee:90:fe:b3:3e: ad:e9:dc:f8:24:0e:7d:5a:21:91:2c:13:83:04:66: 5d:89:88:10:ae:4e:22:ac:14:bb:a4:0c:e0:f1:a5: cb:af:53:aa:64:23:88:38:58:7d:fc:7a:77:34:06: 71:0c:ef:a3:7f:02:a2:72:b2:c4:19:a5:ec:6e:72: 9d:05:cb:bd:1f:00:db:e2:1d:c7:1d:8a:95:67:87: 6a:b4:78:49:a0:4c:a5:f2:89:bb:a0:02:47:dc:7a: aa:f6:46:9c:97:74:74:65:bb:fe:21:a7:68:cb:57: ca:3e:34:84:81:c7:ee:3b:df:9e:ae:96:32:2e:0f: 98:2c:b8:e2:5d:5f:e3:68:16:2c:c7:9d:36:27:38: df:63:88:65:05:e9:08:44:42:c4:e1:5c:81:09:3b: 24:6a:d9:a2:b8:c2:97:88:9b:93:de:0f:02:c8:eb: 40:72:a8:ce:ca:c8:6e:d5:5e:7a:fc:1b:46:fc:b9: 4a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:9A:43:A6:AC:2F:8D:F3:8C:FC:94:44:15:EE:F0:95:A6:9D:D2:A2 X509v3 Authority Key Identifier: keyid:2E:94:6E:43:33:6C:A2:A9:79:E9:9D:F5:CF:5D:6D:5E:71:55:83:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:f9:1d:be:4f:14:9a:1e:aa:8a:60:4d:61:05:c5:f1:4e:12: 0b:55:ff:5c:97:04:cc:ba:7e:e4:75:fb:2a:7e:d6:62:3d:49: 8d:ce:11:e8:03:2f:cf:82:8e:cf:9c:f9:93:ae:9c:3b:2d:bc: 90:54:47:f6:95:cd:27:04:44:5c:62:e0:46:19:87:33:03:23: d9:ab:a9:45:95:e3:e1:e9:a8:e3:ba:cc:b0:50:dd:85:65:6c: 1d:b5:22:c3:ab:42:bd:21:00:dc:17:91:be:da:c5:a6:b1:34: 17:fc:54:78:01:1c:46:e4:e0:bf:06:98:1b:87:8c:a6:d3:d5: 19:91:1c:e5:18:20:74:0f:3a:65:f3:89:b9:28:f0:7f:0d:c9: fb:0f:d9:10:ff:b9:4a:c9:09:85:69:70:72:fc:8a:78:f9:60: 7a:7e:0d:e7:29:2f:a8:64:24:73:30:e6:75:35:25:7b:29:11: 8a:f7:cf:f9:71:13:a6:b2:d2:4f:ec:5a:82:6a:1f:5b:51:da: 8f:62:e6:d5:b4:55:29:c0:ae:44:8d:76:b3:7a:c9:7e:30:f3: 21:c6:73:5b:c9:4f:4c:7e:ef:9b:4c:9d:de:c0:aa:13:de:93: b1:fd:95:48:09:bd:c8:e4:37:c6:14:10:6d:9c:a2:55:5d:05: a4:79:99:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIgm76HSn/A6vuh5eT5YyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlOTQ2ZTQzMzM2Y2EyYTk3OWU5OWRmNWNmNWQ2ZDVlNzE1 NTgzMmQwHhcNMjYwMjA5MTYwMDMwWhcNMjYwMjEwMTYwMDMwWjAzMTEwLwYDVQQD Eyg1YzlhNDNhNmFjMmY4ZGYzOGNmYzk0NDQxNWVlZjA5NWE2OWRkMmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtun2BcaiEDpDG7yzjsI+pnSolC1+ wkI+sMYs+u/lls/TQrjG0DAgC1klB0a3ydnvGgsw3+O6Hi7AhVe8MFECTAqy31xl 7pD+sz6t6dz4JA59WiGRLBODBGZdiYgQrk4irBS7pAzg8aXLr1OqZCOIOFh9/Hp3 NAZxDO+jfwKicrLEGaXsbnKdBcu9HwDb4h3HHYqVZ4dqtHhJoEyl8om7oAJH3Hqq 9kacl3R0Zbv+Iadoy1fKPjSEgcfuO9+erpYyLg+YLLjiXV/jaBYsx502JzjfY4hl BekIRELE4VyBCTskatmiuMKXiJuT3g8CyOtAcqjOyshu1V56/BtG/LlKNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyaQ6asL43zjPyURBXu8JWmndKiMB8GA1UdIwQY MBaAFC6UbkMzbKKpeemd9c9dbV5xVYMtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHBSdVF6TnNvcWw1NlozMXoxMXRYbkZWZ3kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy80ZjE4NWEtM2JiNS00ZDI1LTlkYzgt ZWUyOGY5NmNmMTI2LzEvTHBSdVF6TnNvcWw1NlozMXoxMXRYbkZWZ3kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy80ZjE4NWEtM2JiNS00ZDI1LTlkYzgtZWUyOGY5NmNmMTI2 LzEvTHBSdVF6TnNvcWw1NlozMXoxMXRYbkZWZ3kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArvkdvk8U mh6qimBNYQXF8U4SC1X/XJcEzLp+5HX7Kn7WYj1Jjc4R6AMvz4KOz5z5k66cOy28 kFRH9pXNJwREXGLgRhmHMwMj2aupRZXj4emo47rMsFDdhWVsHbUiw6tCvSEA3BeR vtrFprE0F/xUeAEcRuTgvwaYG4eMptPVGZEc5RggdA86ZfOJuSjwfw3J+w/ZEP+5 SskJhWlwcvyKePlgen4N5ykvqGQkczDmdTUleykRivfP+XETprLST+xagmofW1Ha j2Lm1bRVKcCuRI12s3rJfjDzIcZzW8lPTH7vm0yd3sCqE96Tsf2VSAm9yOQ3xhQQ bZyiVV0FpHmZNg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:59 2026 by rpki-client