This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.mft File: lkptHqRrxAuqMavE9ByQZn7-Nu0.mft (raw, json) Hash identifier: XhxmFw2elhN7BBOEuN3XZkvdKaj0WVLhvgcD+OVxxJg= Subject key identifier: 56:27:E7:1E:50:4C:3F:04:18:8A:00:F9:5C:DB:66:6D:FC:EE:BB:A7 Authority key identifier: 96:4A:6D:1E:A4:6B:C4:0B:AA:31:AB:C4:F4:1C:90:66:7E:FE:36:ED Certificate issuer: /CN=964a6d1ea46bc40baa31abc4f41c90667efe36ed Certificate serial: 019C4133EF086B4E0FFA14AE83E9F35115BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkptHqRrxAuqMavE9ByQZn7-Nu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.mft Manifest number: 08DB Signing time: Mon 09 Feb 2026 07:00:48 +0000 Manifest this update: Mon 09 Feb 2026 07:00:48 +0000 Manifest next update: Tue 10 Feb 2026 07:00:48 +0000 Files and hashes: 1: lkptHqRrxAuqMavE9ByQZn7-Nu0.crl (hash: hWF+UIflRY6hUPvcFNANlxSdyh8vv4SYAoxKPF/aAmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.mft rsync://rpki.ripe.net/repository/DEFAULT/lkptHqRrxAuqMavE9ByQZn7-Nu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:ef:08:6b:4e:0f:fa:14:ae:83:e9:f3:51:15:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=964a6d1ea46bc40baa31abc4f41c90667efe36ed Validity Not Before: Feb 9 07:00:48 2026 GMT Not After : Feb 10 07:00:48 2026 GMT Subject: CN=5627e71e504c3f04188a00f95cdb666dfceebba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:52:4a:cb:d9:90:5f:f3:ae:1c:ca:37:72:a7: c5:3a:90:0a:bf:d4:6d:3a:08:2f:50:29:49:c1:0c: d4:37:a5:70:f3:d0:3a:93:b1:ed:ff:39:7e:d1:2b: e7:3a:61:da:5f:c8:2c:6a:75:74:3e:9a:a7:bc:d8: c7:2e:c9:3b:c7:53:cf:be:9a:e4:73:ab:3e:be:3c: bc:88:bd:72:94:d7:d4:16:3f:5a:b5:1f:09:35:56: cc:3e:25:e8:91:aa:a9:4c:13:c0:62:7b:ce:33:b4: 82:d6:d5:72:ca:c9:11:44:78:27:5a:b1:ed:1b:82: 8a:9b:4c:d6:82:3b:b7:46:e8:18:a6:17:3e:80:99: c5:47:3b:7a:c1:65:5e:09:35:cf:c8:da:eb:7e:95: f2:8e:48:5b:2e:d0:e6:d3:e8:d2:4d:6e:56:8e:5b: 83:ee:e7:36:24:5c:e6:0e:65:07:50:5d:4e:05:3c: 35:17:29:f7:41:57:80:7f:12:45:22:75:12:88:bf: bd:9e:08:3a:d9:64:e5:1a:91:48:b0:ea:f1:4c:da: 73:86:98:ec:89:b4:92:25:54:64:70:e3:8c:cf:66: 5a:c5:68:44:14:e3:cb:11:27:6d:d3:10:f6:20:c6: ef:ad:c3:c1:6a:7d:ac:e4:66:07:54:88:e7:50:1d: ca:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:27:E7:1E:50:4C:3F:04:18:8A:00:F9:5C:DB:66:6D:FC:EE:BB:A7 X509v3 Authority Key Identifier: keyid:96:4A:6D:1E:A4:6B:C4:0B:AA:31:AB:C4:F4:1C:90:66:7E:FE:36:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkptHqRrxAuqMavE9ByQZn7-Nu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:ba:94:f6:fe:74:88:9d:21:04:55:b3:48:2e:7e:30:af:74: bf:a5:c5:7d:e3:90:72:63:d1:9b:80:fa:85:e8:af:11:8d:ca: 04:66:eb:55:90:1c:ae:ba:7d:68:86:6e:9a:aa:86:02:f3:d3: 01:39:f9:65:3b:10:86:3a:8d:52:3a:10:a7:0c:64:46:60:9b: 24:31:5d:fa:c8:0f:5a:29:62:5e:fd:e7:89:b6:e5:d7:39:5f: f2:f6:75:45:57:8d:f6:f9:44:d8:dc:4c:cb:d9:b0:17:53:e4: 46:58:99:41:72:23:91:ae:3f:56:fb:2a:5f:8d:49:ce:d3:58: 18:4f:ca:a3:96:63:9e:db:06:1e:56:c0:ce:8b:1e:11:33:05: f4:70:04:70:b9:61:33:04:76:e8:8a:da:4b:d1:9a:10:23:c3: a3:c9:13:31:af:7e:44:69:f1:fe:8d:9e:7f:f2:9d:33:34:5d: 2f:19:56:a5:cf:d4:75:51:1f:3c:5b:c2:fc:5a:8e:ad:94:ca: a0:7f:96:9b:4c:9a:44:5c:85:b4:af:eb:ec:4c:74:7e:2e:57: ba:f6:25:ac:1e:9d:58:dd:83:89:76:82:32:96:2b:ab:9a:3e: 45:6f:93:30:9c:69:47:5b:06:ad:33:49:80:0b:5d:68:bc:7b: f3:06:43:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM+8Ia04P+hSug+nzURW+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NGE2ZDFlYTQ2YmM0MGJhYTMxYWJjNGY0MWM5MDY2N2Vm ZTM2ZWQwHhcNMjYwMjA5MDcwMDQ4WhcNMjYwMjEwMDcwMDQ4WjAzMTEwLwYDVQQD Eyg1NjI3ZTcxZTUwNGMzZjA0MTg4YTAwZjk1Y2RiNjY2ZGZjZWViYmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FJKy9mQX/OuHMo3cqfFOpAKv9Rt OggvUClJwQzUN6Vw89A6k7Ht/zl+0SvnOmHaX8gsanV0PpqnvNjHLsk7x1PPvprk c6s+vjy8iL1ylNfUFj9atR8JNVbMPiXokaqpTBPAYnvOM7SC1tVyyskRRHgnWrHt G4KKm0zWgju3RugYphc+gJnFRzt6wWVeCTXPyNrrfpXyjkhbLtDm0+jSTW5WjluD 7uc2JFzmDmUHUF1OBTw1Fyn3QVeAfxJFInUSiL+9ngg62WTlGpFIsOrxTNpzhpjs ibSSJVRkcOOMz2ZaxWhEFOPLESdt0xD2IMbvrcPBan2s5GYHVIjnUB3K4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFYn5x5QTD8EGIoA+VzbZm387runMB8GA1UdIwQY MBaAFJZKbR6ka8QLqjGrxPQckGZ+/jbtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGtwdEhxUnJ4QXVxTWF2RTlCeVFabjctTnUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lZGM0MWUtMzUyZS00MTJiLTlhZTYt YTA5NTFlZjdkZmNkLzEvbGtwdEhxUnJ4QXVxTWF2RTlCeVFabjctTnUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lZGM0MWUtMzUyZS00MTJiLTlhZTYtYTA5NTFlZjdkZmNk LzEvbGtwdEhxUnJ4QXVxTWF2RTlCeVFabjctTnUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLqU9v50 iJ0hBFWzSC5+MK90v6XFfeOQcmPRm4D6heivEY3KBGbrVZAcrrp9aIZumqqGAvPT ATn5ZTsQhjqNUjoQpwxkRmCbJDFd+sgPWiliXv3nibbl1zlf8vZ1RVeN9vlE2NxM y9mwF1PkRliZQXIjka4/VvsqX41JztNYGE/Ko5ZjntsGHlbAzoseETMF9HAEcLlh MwR26IraS9GaECPDo8kTMa9+RGnx/o2ef/KdMzRdLxlWpc/UdVEfPFvC/FqOrZTK oH+Wm0yaRFyFtK/r7Ex0fi5XuvYlrB6dWN2DiXaCMpYrq5o+RW+TMJxpR1sGrTNJ gAtdaLx78wZD3w== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:42 2026 by rpki-client