This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft File: L_vZ3o2JUmxaSadmwfSF8J9akWY.mft (raw, json) Hash identifier: 4Llryx3/dCmZparDxLMjoM9Oaz00xeQkqjuo7u6OAV8= Subject key identifier: B8:FE:31:FB:A4:16:D9:DA:2A:DE:4F:FB:E8:FF:24:E6:E4:3E:5B:1A Authority key identifier: 2F:FB:D9:DE:8D:89:52:6C:5A:49:A7:66:C1:F4:85:F0:9F:5A:91:66 Certificate issuer: /CN=2ffbd9de8d89526c5a49a766c1f485f09f5a9166 Certificate serial: 019C42B44EE03264576453A89505A6783591 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft Manifest number: 0ACA Signing time: Mon 09 Feb 2026 14:00:38 +0000 Manifest this update: Mon 09 Feb 2026 14:00:38 +0000 Manifest next update: Tue 10 Feb 2026 14:00:38 +0000 Files and hashes: 1: L_vZ3o2JUmxaSadmwfSF8J9akWY.crl (hash: MZWPzn09O+ehdsowuq2nuypC4f8FyRsxcaIpaOmpODY=) 2: jJ1Dm7yUqlAxAjz0gYlbX4ljvEk.roa (hash: TzMlgxV3OUMprU97ffZezJnIgPb7d7fyoeggJfBlulk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.crl rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:4e:e0:32:64:57:64:53:a8:95:05:a6:78:35:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ffbd9de8d89526c5a49a766c1f485f09f5a9166 Validity Not Before: Feb 9 14:00:38 2026 GMT Not After : Feb 10 14:00:38 2026 GMT Subject: CN=b8fe31fba416d9da2ade4ffbe8ff24e6e43e5b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:02:5c:9b:22:34:31:2f:f2:5f:1f:d3:ba:40: ff:73:38:96:b3:b0:1c:b7:7e:71:5b:79:36:52:e4: d8:4a:bd:2b:96:76:c9:6a:74:37:b8:d5:a6:4a:3c: ba:71:fb:09:82:d9:91:f6:4b:15:75:59:74:3f:91: 73:9f:5a:a8:cf:95:07:26:47:e1:90:b9:25:54:97: 02:ab:20:38:a5:ab:dd:fb:24:78:14:2e:c1:3e:cc: ce:66:af:60:08:d1:9f:f4:a7:ad:0b:6d:e4:d6:10: dc:60:ff:6e:a6:d2:b5:31:06:fe:8c:1c:42:30:30: 45:af:8d:d9:7b:08:8e:20:f1:c6:bf:03:47:32:87: 68:76:43:15:a5:1a:02:fa:c1:99:2f:1e:d9:fb:64: 57:d2:7f:96:8c:56:5c:e4:de:ab:04:ab:3c:4f:2d: 10:62:b4:96:d8:0e:c3:5d:c7:2c:56:ec:f3:8c:0b: 69:fc:e4:9b:80:7e:03:55:05:58:fa:08:c4:a3:79: 49:2a:ff:e3:f0:dc:39:d7:87:bd:2f:65:ff:59:7f: 58:77:cd:90:a8:05:bd:68:b6:72:b2:81:2a:95:a0: cf:0d:d8:c7:c0:fc:7f:da:00:24:12:95:2d:c1:25: 4f:1b:f9:44:c8:b0:f6:f9:a4:c8:cb:1b:74:3c:5b: ed:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FE:31:FB:A4:16:D9:DA:2A:DE:4F:FB:E8:FF:24:E6:E4:3E:5B:1A X509v3 Authority Key Identifier: keyid:2F:FB:D9:DE:8D:89:52:6C:5A:49:A7:66:C1:F4:85:F0:9F:5A:91:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:0e:b2:bf:fc:0f:d6:bb:8d:b5:21:c6:7f:da:74:b4:9f:a6: a7:e3:19:f8:6a:26:f5:e1:2e:1f:5b:cd:0a:a9:c1:2d:80:0c: c0:c5:a7:0c:1d:95:1a:76:6c:22:11:3b:b0:4a:14:2b:6c:18: 1c:74:52:5f:94:0c:61:3e:37:37:80:07:19:a6:65:dd:ae:77: 1f:59:b3:ed:14:5e:92:d6:74:40:2e:a4:52:c8:ad:32:91:05: 66:c6:bc:27:98:c0:19:69:4d:da:12:ea:9e:f9:17:b1:61:af: 36:6c:96:ff:77:fb:c4:cb:07:17:20:49:4b:73:5e:1a:c8:6a: 90:87:e8:87:33:c9:f2:ac:7c:c9:8d:db:98:c9:af:66:d7:b0: b3:aa:eb:83:d8:16:bc:9e:18:48:43:81:b0:1c:48:cb:e8:67: d8:69:ae:d4:d4:34:30:73:03:d7:d3:e5:da:68:21:29:6b:76: c4:ef:a5:0c:4d:e0:0a:2e:ab:f9:d1:f4:8b:61:6b:ac:af:86: d3:79:8e:53:18:7b:5f:36:7e:42:8a:f4:f7:8f:5b:c1:1f:03: 28:40:6b:87:c8:3a:36:78:b0:2a:10:d3:db:75:a8:db:4f:f7: 83:c2:21:59:b1:f5:c6:80:a6:70:ee:6c:ea:90:93:95:3f:3c: 0f:15:ac:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtE7gMmRXZFOolQWmeDWRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZmJkOWRlOGQ4OTUyNmM1YTQ5YTc2NmMxZjQ4NWYwOWY1 YTkxNjYwHhcNMjYwMjA5MTQwMDM4WhcNMjYwMjEwMTQwMDM4WjAzMTEwLwYDVQQD EyhiOGZlMzFmYmE0MTZkOWRhMmFkZTRmZmJlOGZmMjRlNmU0M2U1YjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwJcmyI0MS/yXx/TukD/cziWs7Ac t35xW3k2UuTYSr0rlnbJanQ3uNWmSjy6cfsJgtmR9ksVdVl0P5Fzn1qoz5UHJkfh kLklVJcCqyA4pavd+yR4FC7BPszOZq9gCNGf9KetC23k1hDcYP9uptK1MQb+jBxC MDBFr43ZewiOIPHGvwNHMododkMVpRoC+sGZLx7Z+2RX0n+WjFZc5N6rBKs8Ty0Q YrSW2A7DXccsVuzzjAtp/OSbgH4DVQVY+gjEo3lJKv/j8Nw514e9L2X/WX9Yd82Q qAW9aLZysoEqlaDPDdjHwPx/2gAkEpUtwSVPG/lEyLD2+aTIyxt0PFvtfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLj+MfukFtnaKt5P++j/JObkPlsaMB8GA1UdIwQY MBaAFC/72d6NiVJsWkmnZsH0hfCfWpFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTF92WjNvMkpVbXhhU2FkbXdmU0Y4Sjlha1dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8zMjA0OWMtNjM5My00MTA2LWIzMGUt MWZjMWU3M2YwNjA3LzEvTF92WjNvMkpVbXhhU2FkbXdmU0Y4Sjlha1dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8zMjA0OWMtNjM5My00MTA2LWIzMGUtMWZjMWU3M2YwNjA3 LzEvTF92WjNvMkpVbXhhU2FkbXdmU0Y4Sjlha1dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvA6yv/wP 1ruNtSHGf9p0tJ+mp+MZ+Gom9eEuH1vNCqnBLYAMwMWnDB2VGnZsIhE7sEoUK2wY HHRSX5QMYT43N4AHGaZl3a53H1mz7RRektZ0QC6kUsitMpEFZsa8J5jAGWlN2hLq nvkXsWGvNmyW/3f7xMsHFyBJS3NeGshqkIfohzPJ8qx8yY3bmMmvZtews6rrg9gW vJ4YSEOBsBxIy+hn2Gmu1NQ0MHMD19Pl2mghKWt2xO+lDE3gCi6r+dH0i2FrrK+G 03mOUxh7XzZ+Qor0949bwR8DKEBrh8g6NniwKhDT23Wo20/3g8IhWbH1xoCmcO5s 6pCTlT88DxWsEA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:25 2026 by rpki-client