This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/00aea9-b0af-4a74-be6a-41e91a54a275/1/LUuu4_cib9zqPiKIu-eZlm11_rM.mft File: LUuu4_cib9zqPiKIu-eZlm11_rM.mft (raw, json) Hash identifier: XntNu7wdkx1ckUsAw8x9+q5y9JH1YMNbv0yIoCMcfu4= Subject key identifier: 32:C9:82:DB:EB:40:1D:75:7A:6F:1D:9F:52:4E:2D:6E:71:F6:4B:86 Authority key identifier: 2D:4B:AE:E3:F7:22:6F:DC:EA:3E:22:88:BB:E7:99:96:6D:75:FE:B3 Certificate issuer: /CN=2d4baee3f7226fdcea3e2288bbe799966d75feb3 Certificate serial: 019C42B49DA0617B71A3CB25EA003DC172AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUuu4_cib9zqPiKIu-eZlm11_rM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/00aea9-b0af-4a74-be6a-41e91a54a275/1/LUuu4_cib9zqPiKIu-eZlm11_rM.mft Manifest number: 0C Signing time: Mon 09 Feb 2026 14:00:58 +0000 Manifest this update: Mon 09 Feb 2026 14:00:58 +0000 Manifest next update: Tue 10 Feb 2026 14:00:58 +0000 Files and hashes: 1: LUuu4_cib9zqPiKIu-eZlm11_rM.crl (hash: 5AcWFTbSi2ypY6EqwKS1FVWHF2fQyXYdmRyLMUuDrIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/00aea9-b0af-4a74-be6a-41e91a54a275/1/LUuu4_cib9zqPiKIu-eZlm11_rM.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/00aea9-b0af-4a74-be6a-41e91a54a275/1/LUuu4_cib9zqPiKIu-eZlm11_rM.mft rsync://rpki.ripe.net/repository/DEFAULT/LUuu4_cib9zqPiKIu-eZlm11_rM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:9d:a0:61:7b:71:a3:cb:25:ea:00:3d:c1:72:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d4baee3f7226fdcea3e2288bbe799966d75feb3 Validity Not Before: Feb 9 14:00:58 2026 GMT Not After : Feb 10 14:00:58 2026 GMT Subject: CN=32c982dbeb401d757a6f1d9f524e2d6e71f64b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e9:84:99:25:7c:b7:f4:d3:7b:a5:e2:11:7a: c6:6d:bf:ad:bf:b1:68:31:a2:7d:00:0f:a2:fd:c7: b9:65:b2:57:74:bb:21:8b:39:92:88:75:b2:76:bb: 8a:17:25:e4:24:16:ec:fa:60:6f:4d:8b:0a:c6:22: 47:6f:39:20:68:f6:50:1f:bb:e6:c9:5d:da:86:eb: 5d:5e:23:e3:da:38:16:97:53:98:61:38:5e:94:be: f6:17:75:1f:21:93:d1:27:c1:82:4d:ab:35:e1:6b: 03:db:f6:10:43:6c:91:c1:be:b2:9e:95:a7:58:d2: 91:66:9e:98:7d:43:d0:40:0c:a0:46:6b:17:45:ed: a6:46:5f:e7:2a:55:44:16:ac:a8:30:09:93:26:35: 73:16:5d:f9:8e:4e:04:df:a7:c0:8d:b0:88:b0:cc: 40:1f:31:c7:f4:7b:21:f3:07:28:66:7e:ff:48:07: df:43:85:57:27:7e:62:2a:d1:29:e7:f4:fd:4f:06: 53:14:39:b6:33:9f:fa:d9:2b:87:52:1a:f4:b9:45: 4d:26:96:13:a1:ae:da:19:9d:25:a1:a2:7a:63:31: 49:7a:89:15:08:80:24:ef:cf:8b:6f:45:0f:a3:0e: 56:f2:2b:83:72:30:5f:76:9f:5b:60:0c:a2:d1:8a: 61:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C9:82:DB:EB:40:1D:75:7A:6F:1D:9F:52:4E:2D:6E:71:F6:4B:86 X509v3 Authority Key Identifier: keyid:2D:4B:AE:E3:F7:22:6F:DC:EA:3E:22:88:BB:E7:99:96:6D:75:FE:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUuu4_cib9zqPiKIu-eZlm11_rM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/00aea9-b0af-4a74-be6a-41e91a54a275/1/LUuu4_cib9zqPiKIu-eZlm11_rM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/00aea9-b0af-4a74-be6a-41e91a54a275/1/LUuu4_cib9zqPiKIu-eZlm11_rM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:11:7d:86:ac:0e:38:78:dc:c9:b3:3f:d5:5c:9d:21:a3:cf: c2:d2:d5:5f:2c:ce:3a:c8:fd:64:8a:26:ed:0b:b9:ea:0f:6f: f7:82:80:ba:4a:bd:d5:64:1c:02:bf:d2:84:aa:6b:18:e8:d0: eb:a9:97:13:04:d7:cc:f0:5a:e7:07:d7:56:cd:b3:5b:8a:22: d8:aa:52:a2:18:53:11:1b:08:33:f4:5f:5a:a8:79:f2:8e:b1: cd:c5:85:fc:d0:5d:2c:f5:5e:b2:50:2e:43:f9:77:77:b8:cb: 7d:28:f3:2a:4b:f9:69:69:de:5c:bf:ea:dd:a8:fc:51:8f:ed: 83:2d:3e:6e:ca:81:77:ce:81:d0:1e:b9:d3:a4:5d:30:5b:44: 86:8a:1f:1f:9e:a9:49:16:5f:9c:0a:3f:da:cd:68:e6:77:53: 3c:00:88:16:47:f2:dd:53:b3:45:cb:aa:ab:63:35:63:71:40: 39:3b:6c:7e:ca:be:bd:ca:b3:49:fe:42:91:c7:c1:03:de:14: 89:30:a1:c8:1a:21:15:90:37:c2:24:5d:f7:e5:e9:50:69:9e: 6b:f3:52:dd:8e:ad:f0:24:c9:95:80:b9:e8:9e:47:77:96:cc: 36:7e:84:00:11:0a:c7:e8:62:62:99:ed:da:85:f3:c1:ff:08: 0a:78:e3:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtJ2gYXtxo8sl6gA9wXKtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNGJhZWUzZjcyMjZmZGNlYTNlMjI4OGJiZTc5OTk2NmQ3 NWZlYjMwHhcNMjYwMjA5MTQwMDU4WhcNMjYwMjEwMTQwMDU4WjAzMTEwLwYDVQQD EygzMmM5ODJkYmViNDAxZDc1N2E2ZjFkOWY1MjRlMmQ2ZTcxZjY0Yjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+mEmSV8t/TTe6XiEXrGbb+tv7Fo MaJ9AA+i/ce5ZbJXdLshizmSiHWydruKFyXkJBbs+mBvTYsKxiJHbzkgaPZQH7vm yV3ahutdXiPj2jgWl1OYYThelL72F3UfIZPRJ8GCTas14WsD2/YQQ2yRwb6ynpWn WNKRZp6YfUPQQAygRmsXRe2mRl/nKlVEFqyoMAmTJjVzFl35jk4E36fAjbCIsMxA HzHH9Hsh8wcoZn7/SAffQ4VXJ35iKtEp5/T9TwZTFDm2M5/62SuHUhr0uUVNJpYT oa7aGZ0loaJ6YzFJeokVCIAk78+Lb0UPow5W8iuDcjBfdp9bYAyi0YphWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLJgtvrQB11em8dn1JOLW5x9kuGMB8GA1UdIwQY MBaAFC1LruP3Im/c6j4iiLvnmZZtdf6zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFV1dTRfY2liOXpxUGlLSXUtZVpsbTExX3JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8wMGFlYTktYjBhZi00YTc0LWJlNmEt NDFlOTFhNTRhMjc1LzEvTFV1dTRfY2liOXpxUGlLSXUtZVpsbTExX3JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8wMGFlYTktYjBhZi00YTc0LWJlNmEtNDFlOTFhNTRhMjc1 LzEvTFV1dTRfY2liOXpxUGlLSXUtZVpsbTExX3JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWRF9hqwO OHjcybM/1VydIaPPwtLVXyzOOsj9ZIom7Qu56g9v94KAukq91WQcAr/ShKprGOjQ 66mXEwTXzPBa5wfXVs2zW4oi2KpSohhTERsIM/RfWqh58o6xzcWF/NBdLPVeslAu Q/l3d7jLfSjzKkv5aWneXL/q3aj8UY/tgy0+bsqBd86B0B6506RdMFtEhoofH56p SRZfnAo/2s1o5ndTPACIFkfy3VOzRcuqq2M1Y3FAOTtsfsq+vcqzSf5CkcfBA94U iTChyBohFZA3wiRd9+XpUGmea/NS3Y6t8CTJlYC56J5Hd5bMNn6EABEKx+hiYpnt 2oXzwf8ICnjjHA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:42 2026 by rpki-client