This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft File: leN5E1KsgsnSB0NCTNxhcAlvT68.mft (raw, json) Hash identifier: IGUThs9LoBfMUZ6V+a3yB/jlBL9IEMNh6WPwZvOfGRk= Subject key identifier: D7:DA:DA:39:96:F5:41:A4:07:32:F3:01:21:35:E4:38:CC:6C:23:49 Authority key identifier: 95:E3:79:13:52:AC:82:C9:D2:07:43:42:4C:DC:61:70:09:6F:4F:AF Certificate issuer: /CN=95e3791352ac82c9d20743424cdc6170096f4faf Certificate serial: 019C4322D80E20ABDABD4C0EBC1FAF29408C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leN5E1KsgsnSB0NCTNxhcAlvT68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 16:01:22 +0000 Manifest this update: Mon 09 Feb 2026 16:01:22 +0000 Manifest next update: Tue 10 Feb 2026 16:01:22 +0000 Files and hashes: 1: leN5E1KsgsnSB0NCTNxhcAlvT68.crl (hash: 4DnaKzLWgsmYkMA6cyK9ToUGTSnYAVvYolwfVNJ3VFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.crl rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft rsync://rpki.ripe.net/repository/DEFAULT/leN5E1KsgsnSB0NCTNxhcAlvT68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:d8:0e:20:ab:da:bd:4c:0e:bc:1f:af:29:40:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95e3791352ac82c9d20743424cdc6170096f4faf Validity Not Before: Feb 9 16:01:22 2026 GMT Not After : Feb 10 16:01:22 2026 GMT Subject: CN=d7dada3996f541a40732f3012135e438cc6c2349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bc:34:36:9e:fd:c1:52:10:70:7b:50:bb:7d: f7:b6:90:35:0e:35:ea:28:03:f2:ec:ef:1c:e9:14: f8:d4:44:4c:0e:15:e4:39:39:16:43:aa:f4:b4:37: b8:1d:20:9b:6a:c4:6b:a3:b9:e1:80:a3:72:30:08: ee:fb:f9:e5:2a:2b:3a:d7:6f:7e:33:fe:5d:76:91: 9f:fd:b5:e9:b1:e0:b5:b2:26:58:a3:e1:6d:db:7f: 56:49:6b:90:c5:c9:25:75:15:ab:0a:2f:8f:c1:79: 92:b2:7e:e1:37:00:03:ed:37:2b:af:57:e7:70:90: d8:dd:e7:c4:7b:8b:4a:14:53:57:84:ae:00:68:9a: 14:96:05:55:a1:4c:40:8f:f1:c1:0a:a2:68:6d:1c: 20:03:98:63:c8:3a:08:1d:83:4d:be:84:ef:e0:c2: 25:bc:c9:a1:44:af:47:f3:26:5a:e7:f5:22:42:d8: e0:5a:66:32:3d:4f:a9:c6:ff:de:bc:6d:a1:eb:b1: f7:24:62:2e:78:b8:36:f4:11:c3:86:c6:f2:be:d1: 15:72:02:09:3c:ce:a0:e5:39:de:ae:9b:aa:bc:8e: d8:88:c5:fe:0c:39:33:6a:46:a5:39:34:fc:03:9d: b5:a2:7b:fd:10:65:50:67:5d:95:8b:f8:22:5d:46: 6a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:DA:DA:39:96:F5:41:A4:07:32:F3:01:21:35:E4:38:CC:6C:23:49 X509v3 Authority Key Identifier: keyid:95:E3:79:13:52:AC:82:C9:D2:07:43:42:4C:DC:61:70:09:6F:4F:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leN5E1KsgsnSB0NCTNxhcAlvT68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:5f:24:a8:d2:c7:cc:f1:58:2c:41:1f:ba:be:52:61:39:0e: 67:17:2c:d5:27:80:5e:49:77:23:23:b9:dc:66:7a:01:0d:c1: 1d:64:36:d6:01:1e:48:78:3f:2f:f6:ef:7e:a1:a3:31:34:4a: a3:19:23:da:07:0f:04:9d:8e:dc:99:0c:c7:da:59:45:2a:f5: 4a:a0:d8:c1:8e:3a:45:de:9f:54:aa:d9:65:2e:60:25:8e:9e: 97:fe:40:d7:c8:95:d4:5d:d5:3f:2a:62:ba:2b:ce:b8:b6:76: 2c:ba:ff:2a:cf:ad:cc:97:db:49:f3:15:21:57:9c:a9:83:20: 42:e2:24:1a:de:0d:42:75:1c:45:52:ff:ec:36:fb:63:34:eb: 2b:d7:1d:fe:22:02:66:97:5d:71:a2:51:68:80:93:ad:ab:6b: c5:bd:8d:28:3c:fb:6a:f0:02:7a:00:47:af:f1:6d:84:2d:6f: d3:be:11:69:c3:01:d0:7c:6b:af:db:b7:14:1f:81:b6:85:36: 1e:78:fa:61:ad:9d:80:9a:45:53:cf:04:2c:48:ca:bc:96:93: 9d:e8:c0:7a:61:ad:63:1e:9b:c5:b9:cc:d2:94:88:66:09:9e: 5f:6d:fd:5e:7b:c7:0e:bf:58:8f:e6:51:db:04:4d:47:b7:10: 8a:be:bd:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDItgOIKvavUwOvB+vKUCMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZTM3OTEzNTJhYzgyYzlkMjA3NDM0MjRjZGM2MTcwMDk2 ZjRmYWYwHhcNMjYwMjA5MTYwMTIyWhcNMjYwMjEwMTYwMTIyWjAzMTEwLwYDVQQD EyhkN2RhZGEzOTk2ZjU0MWE0MDczMmYzMDEyMTM1ZTQzOGNjNmMyMzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7w0Np79wVIQcHtQu333tpA1DjXq KAPy7O8c6RT41ERMDhXkOTkWQ6r0tDe4HSCbasRro7nhgKNyMAju+/nlKis6129+ M/5ddpGf/bXpseC1siZYo+Ft239WSWuQxckldRWrCi+PwXmSsn7hNwAD7Tcrr1fn cJDY3efEe4tKFFNXhK4AaJoUlgVVoUxAj/HBCqJobRwgA5hjyDoIHYNNvoTv4MIl vMmhRK9H8yZa5/UiQtjgWmYyPU+pxv/evG2h67H3JGIueLg29BHDhsbyvtEVcgIJ PM6g5TnerpuqvI7YiMX+DDkzakalOTT8A521onv9EGVQZ12Vi/giXUZqYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfa2jmW9UGkBzLzASE15DjMbCNJMB8GA1UdIwQY MBaAFJXjeRNSrILJ0gdDQkzcYXAJb0+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGVONUUxS3Nnc25TQjBOQ1ROeGhjQWx2VDY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xYTQ3MmYtYTEzNy00MmM5LWFjOWYt NGMyYzBjOGYyNDYyLzEvbGVONUUxS3Nnc25TQjBOQ1ROeGhjQWx2VDY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8xYTQ3MmYtYTEzNy00MmM5LWFjOWYtNGMyYzBjOGYyNDYy LzEvbGVONUUxS3Nnc25TQjBOQ1ROeGhjQWx2VDY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEl8kqNLH zPFYLEEfur5SYTkOZxcs1SeAXkl3IyO53GZ6AQ3BHWQ21gEeSHg/L/bvfqGjMTRK oxkj2gcPBJ2O3JkMx9pZRSr1SqDYwY46Rd6fVKrZZS5gJY6el/5A18iV1F3VPypi uivOuLZ2LLr/Ks+tzJfbSfMVIVecqYMgQuIkGt4NQnUcRVL/7Db7YzTrK9cd/iIC ZpddcaJRaICTratrxb2NKDz7avACegBHr/FthC1v074RacMB0Hxrr9u3FB+BtoU2 Hnj6Ya2dgJpFU88ELEjKvJaTnejAemGtYx6bxbnM0pSIZgmeX239XnvHDr9Yj+ZR 2wRNR7cQir69ow== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:49 2026 by rpki-client