This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft File: LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft (raw, json) Hash identifier: Q7gnFEVj6RFEjLG+AFAuiBsUwbScktWpUdXaH2tipUQ= Subject key identifier: A3:5B:0B:00:DE:5A:8B:3F:F2:83:18:90:1A:4A:D6:0E:5D:33:12:6B Authority key identifier: 2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6 Certificate issuer: /CN=2cb4291df97963c5a9b732b1396f0f1c887504d6 Certificate serial: 019C42B46DDFE99A4F57D0E6C9947BA7CCAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft Manifest number: 0C3B Signing time: Mon 09 Feb 2026 14:00:46 +0000 Manifest this update: Mon 09 Feb 2026 14:00:46 +0000 Manifest next update: Tue 10 Feb 2026 14:00:46 +0000 Files and hashes: 1: LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl (hash: MdAhRhLwCWEzDenq7BfXhyIRhWIiqIDi5lpBkIhkj2E=) 2: z_i2HLAe207eqqdf1Xix5ENRMe4.roa (hash: ztqjP6xacDo+JPNkJa5MSwjbXr7h1+BJzgwfqlxxQ4Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:6d:df:e9:9a:4f:57:d0:e6:c9:94:7b:a7:cc:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cb4291df97963c5a9b732b1396f0f1c887504d6 Validity Not Before: Feb 9 14:00:46 2026 GMT Not After : Feb 10 14:00:46 2026 GMT Subject: CN=a35b0b00de5a8b3ff28318901a4ad60e5d33126b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f7:a9:2a:fd:ac:55:cc:82:7b:60:67:d9:b6: c3:cb:da:40:79:56:a7:cd:ce:78:26:25:bd:e2:cf: a9:1f:bc:14:1f:e9:e8:86:71:42:cb:43:a6:0b:ed: 1a:62:4c:31:5d:cb:59:c2:24:57:85:7d:cc:ed:22: 6e:a0:0d:dd:65:66:31:ec:c3:e0:4a:3c:6c:ba:ff: 76:0a:3f:ea:80:78:32:f6:38:33:d4:77:b0:cc:b2: d8:61:2c:e2:29:a6:bf:e4:f7:0d:be:6f:72:a4:b5: e8:80:7b:f2:fd:42:a2:be:bb:42:6e:25:66:82:3d: 44:70:a1:d2:d8:40:e5:3a:cf:06:d7:e2:f2:91:87: 44:ab:96:f0:f6:2d:d2:4a:8b:2d:c0:46:18:56:df: 81:e7:56:73:3a:5e:7a:56:90:3f:68:bd:64:96:3c: 6e:4c:53:8d:c6:22:af:52:21:2a:03:57:e6:e8:02: c6:0f:59:4d:3f:f9:82:94:da:80:09:fb:1a:7d:be: 1f:96:69:91:81:d5:dd:6a:19:58:7d:96:d5:aa:8b: 9e:f2:93:59:63:11:02:88:7e:0e:32:b1:d8:5f:63: 57:95:05:57:60:62:a1:de:2c:26:f6:83:c2:67:45: a8:5c:a5:29:02:a7:33:ea:54:0b:d3:9a:77:98:3c: fd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:5B:0B:00:DE:5A:8B:3F:F2:83:18:90:1A:4A:D6:0E:5D:33:12:6B X509v3 Authority Key Identifier: keyid:2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:63:d0:ee:0c:de:cf:6b:2b:f7:f6:49:0d:08:9e:a7:0f:b6: fd:08:c6:cf:05:f4:53:02:16:16:56:40:c8:23:fe:51:70:da: fc:74:38:19:2c:59:c0:aa:98:dd:9a:38:dd:5e:42:9b:84:b3: de:f1:9c:9e:e3:ac:b9:ba:43:1b:dd:39:f7:34:79:a1:7e:a3: 5a:c7:fc:14:fd:29:3e:7f:e8:4c:27:55:7b:b8:60:e0:c3:e0: 91:1b:9a:c2:a8:a2:e6:71:45:c5:a1:0c:9a:5c:7f:80:1b:8a: ce:db:a8:8a:8e:2a:b1:d7:b1:72:51:39:14:8d:90:3c:04:55: 8e:91:8b:fb:9d:20:bc:e4:42:93:16:63:2d:dc:99:46:c7:ee: 74:41:c1:b8:48:84:12:1e:d4:b2:59:0d:99:48:80:10:6c:e3: 3c:99:2d:a8:6d:63:2c:1d:ed:5a:14:f2:1f:69:59:b9:fe:ad: fd:14:e1:ee:c6:1e:8c:60:08:9a:41:8c:78:7a:62:5b:60:3a: cc:2a:9d:4e:14:df:3f:b9:e7:d5:a9:46:89:5c:1f:95:f5:fc: 75:d8:04:6a:57:af:f9:92:e1:c4:73:0f:90:3f:98:ce:f7:e5: 8f:a8:ec:2e:6e:7c:89:9f:9c:03:1d:0b:0a:15:90:7a:dd:f8: d7:f4:69:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtG3f6ZpPV9DmyZR7p8yuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYjQyOTFkZjk3OTYzYzVhOWI3MzJiMTM5NmYwZjFjODg3 NTA0ZDYwHhcNMjYwMjA5MTQwMDQ2WhcNMjYwMjEwMTQwMDQ2WjAzMTEwLwYDVQQD EyhhMzViMGIwMGRlNWE4YjNmZjI4MzE4OTAxYTRhZDYwZTVkMzMxMjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/epKv2sVcyCe2Bn2bbDy9pAeVan zc54JiW94s+pH7wUH+nohnFCy0OmC+0aYkwxXctZwiRXhX3M7SJuoA3dZWYx7MPg Sjxsuv92Cj/qgHgy9jgz1HewzLLYYSziKaa/5PcNvm9ypLXogHvy/UKivrtCbiVm gj1EcKHS2EDlOs8G1+LykYdEq5bw9i3SSostwEYYVt+B51ZzOl56VpA/aL1kljxu TFONxiKvUiEqA1fm6ALGD1lNP/mClNqACfsafb4flmmRgdXdahlYfZbVqoue8pNZ YxECiH4OMrHYX2NXlQVXYGKh3iwm9oPCZ0WoXKUpAqcz6lQL05p3mDz99QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKNbCwDeWos/8oMYkBpK1g5dMxJrMB8GA1UdIwQY MBaAFCy0KR35eWPFqbcysTlvDxyIdQTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTExRcEhmbDVZOFdwdHpLeE9XOFBISWgxQk5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9mOTY4NGUtMDllMi00OWNjLTg1MWQt YWY0YzA2ZjMxYWZmLzEvTExRcEhmbDVZOFdwdHpLeE9XOFBISWgxQk5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9mOTY4NGUtMDllMi00OWNjLTg1MWQtYWY0YzA2ZjMxYWZm LzEvTExRcEhmbDVZOFdwdHpLeE9XOFBISWgxQk5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2PQ7gze z2sr9/ZJDQiepw+2/QjGzwX0UwIWFlZAyCP+UXDa/HQ4GSxZwKqY3Zo43V5Cm4Sz 3vGcnuOsubpDG9059zR5oX6jWsf8FP0pPn/oTCdVe7hg4MPgkRuawqii5nFFxaEM mlx/gBuKztuoio4qsdexclE5FI2QPARVjpGL+50gvORCkxZjLdyZRsfudEHBuEiE Eh7UslkNmUiAEGzjPJktqG1jLB3tWhTyH2lZuf6t/RTh7sYejGAImkGMeHpiW2A6 zCqdThTfP7nn1alGiVwflfX8ddgEalev+ZLhxHMPkD+Yzvflj6jsLm58iZ+cAx0L ChWQet341/Rpcg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:48 2026 by rpki-client