This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft File: Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft (raw, json) Hash identifier: xdLSROY1/IUV2tirCpmb2xhVxh/kTnkHgVAAsHmcwc8= Subject key identifier: BA:AB:C7:A0:C8:8B:95:EE:C9:8C:06:A8:1F:76:0C:88:BC:D0:6D:27 Authority key identifier: 2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B Certificate issuer: /CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b Certificate serial: 019C42EB587EDC1BB6D67A5E08EA639404C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft Manifest number: 121C Signing time: Mon 09 Feb 2026 15:00:45 +0000 Manifest this update: Mon 09 Feb 2026 15:00:45 +0000 Manifest next update: Tue 10 Feb 2026 15:00:45 +0000 Files and hashes: 1: Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl (hash: fJj9zevArcw4smFUI2qb902k8zOqY3cCttLW+4E/aZE=) 2: cxkSmIpEvqEgX4ngmD4597AK9SA.roa (hash: DfRU/sR9mUrJtx0wMuwQ4hVIgyHyvsCZqXVQHIZbmPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:58:7e:dc:1b:b6:d6:7a:5e:08:ea:63:94:04:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b Validity Not Before: Feb 9 15:00:45 2026 GMT Not After : Feb 10 15:00:45 2026 GMT Subject: CN=baabc7a0c88b95eec98c06a81f760c88bcd06d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:65:ed:a3:a1:ff:e0:f3:5c:b6:b3:0e:13:e6: 2a:38:f1:52:9b:8f:f9:bb:86:20:bf:ca:bb:e7:06: 7b:14:3f:9b:b8:43:97:06:8a:5a:78:50:3d:12:a0: 29:7d:bb:f7:fa:31:68:be:cc:ef:1e:14:1a:59:9b: 21:88:da:c6:91:3f:94:b7:8e:0a:34:79:6a:34:f2: 7a:99:3a:7e:e1:c1:71:76:66:8c:e9:b8:8c:17:0e: d7:62:c9:36:50:c2:7e:c1:b8:bd:a1:9c:d3:8d:c8: 6c:6f:ae:01:8a:5a:6d:c1:f8:fd:d2:dc:e2:4d:0a: 22:d5:b5:1c:35:bd:56:e3:fe:1e:d7:5f:e6:de:4d: 3c:10:61:dc:6b:a7:d7:de:6d:50:0c:95:17:f9:e3: f3:ba:25:e6:54:1d:b2:da:97:90:aa:35:d7:25:4d: 25:fe:6d:43:da:09:83:83:92:bd:14:cd:6b:aa:d3: 95:ab:0c:75:f5:96:ec:82:b1:54:19:70:9d:32:ff: 65:35:52:0e:a1:46:e0:10:22:36:7b:37:84:73:e2: d9:a9:2b:7d:28:da:42:5b:24:13:3d:02:cb:c6:43: 96:57:68:d0:5a:4b:d7:64:83:db:c9:7e:65:17:ef: 9f:28:35:0d:8b:60:9d:92:21:cf:0b:59:b5:53:f1: 8c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AB:C7:A0:C8:8B:95:EE:C9:8C:06:A8:1F:76:0C:88:BC:D0:6D:27 X509v3 Authority Key Identifier: keyid:2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:c9:f9:ec:f4:25:32:12:42:9a:bb:1c:0b:4d:80:ad:0b:02: 88:8e:9b:15:cd:65:29:99:8a:dc:7e:30:c1:ea:68:8c:f6:cc: 0a:04:4c:35:29:b6:ef:61:f7:18:7c:5b:b5:0f:d0:01:1a:3f: aa:f6:75:18:2f:d3:2b:bd:8a:0d:f9:4c:d0:f8:44:7d:01:43: 7b:d5:79:3e:c5:1c:e8:a9:2a:60:e1:35:f6:63:dc:da:93:7b: 08:76:58:3a:66:65:6d:ce:32:60:6e:79:9f:e4:81:ca:7e:60: b3:69:f9:20:c8:13:8f:1f:27:87:da:86:6d:47:bd:a0:be:e3: 9e:20:ba:87:79:7b:b9:2a:e3:1a:e6:41:72:1e:51:1c:31:6b: 21:bb:a4:46:8b:d8:20:22:a9:16:6c:63:09:6f:8e:dc:4b:c8: a9:fa:5f:7b:a8:6b:29:a7:ca:29:c0:e3:65:ec:e8:ab:04:1d: 0d:4b:94:cb:e9:9c:27:05:a9:c1:15:92:99:4c:e6:1f:b0:38: 87:20:46:28:e4:9e:9f:cb:ce:0d:56:51:21:76:88:83:20:e6: c3:a6:34:95:fd:e0:12:79:21:24:6d:45:95:d2:e3:8f:e8:0f: 10:78:95:7a:c0:71:ec:6f:2b:3e:ea:28:c8:0f:02:1c:b4:3e: cf:00:58:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC61h+3Bu21npeCOpjlATGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMWQyNDU3ZTBiZTU0ZGM3OGZjMWY2Njg3ZGIzZTk0YjA2 OGFjOWIwHhcNMjYwMjA5MTUwMDQ1WhcNMjYwMjEwMTUwMDQ1WjAzMTEwLwYDVQQD EyhiYWFiYzdhMGM4OGI5NWVlYzk4YzA2YTgxZjc2MGM4OGJjZDA2ZDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGXto6H/4PNctrMOE+YqOPFSm4/5 u4Ygv8q75wZ7FD+buEOXBopaeFA9EqApfbv3+jFovszvHhQaWZshiNrGkT+Ut44K NHlqNPJ6mTp+4cFxdmaM6biMFw7XYsk2UMJ+wbi9oZzTjchsb64Bilptwfj90tzi TQoi1bUcNb1W4/4e11/m3k08EGHca6fX3m1QDJUX+ePzuiXmVB2y2peQqjXXJU0l /m1D2gmDg5K9FM1rqtOVqwx19ZbsgrFUGXCdMv9lNVIOoUbgECI2ezeEc+LZqSt9 KNpCWyQTPQLLxkOWV2jQWkvXZIPbyX5lF++fKDUNi2CdkiHPC1m1U/GMjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqrx6DIi5XuyYwGqB92DIi80G0nMB8GA1UdIwQY MBaAFC4dJFfgvlTcePwfZofbPpSwaKybMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGgwa1YtQy1WTng0X0I5bWg5cy1sTEJvckpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9jNzhkZjMtZmM0Ny00ZWRiLWE5YTAt OTRmZDllMjk2OWFmLzEvTGgwa1YtQy1WTng0X0I5bWg5cy1sTEJvckpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9jNzhkZjMtZmM0Ny00ZWRiLWE5YTAtOTRmZDllMjk2OWFm LzEvTGgwa1YtQy1WTng0X0I5bWg5cy1sTEJvckpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsn57PQl MhJCmrscC02ArQsCiI6bFc1lKZmK3H4wwepojPbMCgRMNSm272H3GHxbtQ/QARo/ qvZ1GC/TK72KDflM0PhEfQFDe9V5PsUc6KkqYOE19mPc2pN7CHZYOmZlbc4yYG55 n+SByn5gs2n5IMgTjx8nh9qGbUe9oL7jniC6h3l7uSrjGuZBch5RHDFrIbukRovY ICKpFmxjCW+O3EvIqfpfe6hrKafKKcDjZezoqwQdDUuUy+mcJwWpwRWSmUzmH7A4 hyBGKOSen8vODVZRIXaIgyDmw6Y0lf3gEnkhJG1FldLjj+gPEHiVesBx7G8rPuoo yA8CHLQ+zwBYMg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:08 2026 by rpki-client