This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft File: l0kuzDe64rn4HaApOFgX1DPFBGc.mft (raw, json) Hash identifier: d00SK5LiSkUp/40SRFGHPGXsSpusIVyQiiE/46MKDwM= Subject key identifier: F6:5B:EE:5B:F4:84:0D:69:FE:18:FD:4C:F7:E8:15:25:DE:AE:B0:F2 Authority key identifier: 97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67 Certificate issuer: /CN=97492ecc37bae2b9f81da029385817d433c50467 Certificate serial: 019C41A176E091E93069931D93B57D5EBEF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft Manifest number: 0D0B Signing time: Mon 09 Feb 2026 09:00:26 +0000 Manifest this update: Mon 09 Feb 2026 09:00:26 +0000 Manifest next update: Tue 10 Feb 2026 09:00:26 +0000 Files and hashes: 1: Xw0tG7wkuJ53SwbNc0cLbPMmcp4.roa (hash: Q04fJI0pywOQvv0zS/yBZaHryv+3l7wVIcVq1qKuHZI=) 2: l0kuzDe64rn4HaApOFgX1DPFBGc.crl (hash: ie5tpv2gVXZEl0ipy0Nk6SMxDVF7pQXe3heTRnG6ciw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:76:e0:91:e9:30:69:93:1d:93:b5:7d:5e:be:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97492ecc37bae2b9f81da029385817d433c50467 Validity Not Before: Feb 9 09:00:26 2026 GMT Not After : Feb 10 09:00:26 2026 GMT Subject: CN=f65bee5bf4840d69fe18fd4cf7e81525deaeb0f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:14:a6:f2:ab:ee:04:73:75:20:15:2b:eb:cf: 7e:73:53:65:35:90:98:9a:76:72:f1:33:92:45:25: 48:21:8e:9b:78:b0:d2:5d:2c:f5:ba:d2:40:b5:c7: d6:51:c4:48:d4:61:b9:aa:cb:37:a6:59:5f:94:5b: 2d:80:df:78:a9:74:f0:d3:00:85:40:ad:58:ef:51: 4b:08:f0:9a:55:70:50:b4:3a:e7:67:dc:12:84:79: 50:bf:c1:13:30:d5:a4:7b:28:c1:17:9f:a9:ff:83: dc:45:fa:06:31:a6:e3:17:ef:df:d3:89:53:3f:f2: 67:e7:f2:f6:36:d5:3f:ea:88:10:b0:92:c8:06:95: 01:6c:a5:8c:88:b2:45:33:47:68:46:93:93:0c:27: 6d:4f:b2:34:ef:a1:f8:e3:d0:5e:35:cf:3a:a0:bf: 73:84:01:b2:4a:4d:60:00:5c:0f:7b:56:68:da:73: 71:ca:98:83:af:b1:5d:2d:d5:be:24:06:08:57:30: ff:5b:a6:3a:ae:f9:96:41:31:89:86:de:6b:8e:d1: c3:43:21:d4:f2:c7:8a:64:c0:bc:61:d0:2b:19:5b: 47:62:06:f0:b8:5e:19:db:78:9b:e2:c2:a5:c2:7a: 26:6d:74:20:61:c0:0e:31:eb:8a:a4:7e:09:49:58: a2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:5B:EE:5B:F4:84:0D:69:FE:18:FD:4C:F7:E8:15:25:DE:AE:B0:F2 X509v3 Authority Key Identifier: keyid:97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:47:54:54:91:7b:89:0a:e4:cf:dd:31:e0:28:5b:cb:41:96: 06:ae:18:50:65:3a:e4:ee:13:4a:79:4a:29:66:e5:4c:3f:a5: ad:e8:ad:06:ce:70:f7:bb:5a:d6:cf:82:34:a7:6e:9b:1f:f9: e0:6e:cd:57:cc:82:e6:a8:cb:63:eb:37:05:f5:9e:7b:a0:ba: 44:f3:e3:4f:a4:c2:a0:62:4a:a0:3b:d6:2a:42:79:82:31:1e: 27:ad:1a:b7:a8:e9:e2:39:f5:02:2f:41:46:73:5f:26:3b:2e: 02:c2:85:33:7a:39:26:7a:97:8d:29:7a:a4:f3:8b:8a:6d:63: 20:e2:fd:26:f9:d5:ac:37:f5:fe:a0:d6:19:c8:88:cc:4f:d4: 5f:6d:18:ec:b7:a5:a6:3b:da:08:b2:8b:96:bc:be:b6:ae:6f: 28:f7:42:27:62:0a:d9:8f:9a:f7:32:38:e1:f7:b4:f2:3f:36: a6:a5:d3:e6:46:6b:04:2b:c8:4f:60:bd:9c:a9:0d:62:22:07: 5c:71:d7:0d:7f:76:17:3e:a6:cf:78:b7:1a:f5:1d:fa:02:cd: 65:91:b8:98:14:17:da:fd:94:94:7c:30:ab:84:42:b1:f5:5f: 6b:e7:0a:5d:70:7c:d2:64:53:ca:02:65:a0:5e:f0:48:e8:70: b1:66:54:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoXbgkekwaZMdk7V9Xr71MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NDkyZWNjMzdiYWUyYjlmODFkYTAyOTM4NTgxN2Q0MzNj NTA0NjcwHhcNMjYwMjA5MDkwMDI2WhcNMjYwMjEwMDkwMDI2WjAzMTEwLwYDVQQD EyhmNjViZWU1YmY0ODQwZDY5ZmUxOGZkNGNmN2U4MTUyNWRlYWViMGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hSm8qvuBHN1IBUr689+c1NlNZCY mnZy8TOSRSVIIY6beLDSXSz1utJAtcfWUcRI1GG5qss3pllflFstgN94qXTw0wCF QK1Y71FLCPCaVXBQtDrnZ9wShHlQv8ETMNWkeyjBF5+p/4PcRfoGMabjF+/f04lT P/Jn5/L2NtU/6ogQsJLIBpUBbKWMiLJFM0doRpOTDCdtT7I076H449BeNc86oL9z hAGySk1gAFwPe1Zo2nNxypiDr7FdLdW+JAYIVzD/W6Y6rvmWQTGJht5rjtHDQyHU 8seKZMC8YdArGVtHYgbwuF4Z23ib4sKlwnombXQgYcAOMeuKpH4JSViiBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZb7lv0hA1p/hj9TPfoFSXerrDyMB8GA1UdIwQY MBaAFJdJLsw3uuK5+B2gKThYF9QzxQRnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDBrdXpEZTY0cm40SGFBcE9GZ1gxRFBGQkdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82NzA4YWEtZjZkZi00YzRkLTkyYmQt ZTlmMWM1OTFjZWRjLzEvbDBrdXpEZTY0cm40SGFBcE9GZ1gxRFBGQkdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS82NzA4YWEtZjZkZi00YzRkLTkyYmQtZTlmMWM1OTFjZWRj LzEvbDBrdXpEZTY0cm40SGFBcE9GZ1gxRFBGQkdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo0dUVJF7 iQrkz90x4Chby0GWBq4YUGU65O4TSnlKKWblTD+lreitBs5w97ta1s+CNKdumx/5 4G7NV8yC5qjLY+s3BfWee6C6RPPjT6TCoGJKoDvWKkJ5gjEeJ60at6jp4jn1Ai9B RnNfJjsuAsKFM3o5JnqXjSl6pPOLim1jIOL9JvnVrDf1/qDWGciIzE/UX20Y7Lel pjvaCLKLlry+tq5vKPdCJ2IK2Y+a9zI44fe08j82pqXT5kZrBCvIT2C9nKkNYiIH XHHXDX92Fz6mz3i3GvUd+gLNZZG4mBQX2v2UlHwwq4RCsfVfa+cKXXB80mRTygJl oF7wSOhwsWZU/g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:26 2026 by rpki-client