This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft File: L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft (raw, json) Hash identifier: QTF43qQut3SrA1B8W9OHdlcS0mCO+64ViU+W7tUQn9k= Subject key identifier: 7F:4B:CD:94:2A:C5:4C:73:0B:B4:FD:AD:A5:7E:D9:D5:2C:95:CC:92 Authority key identifier: 2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01 Certificate issuer: /CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901 Certificate serial: 019C421052D924434958C6658E9DC8597DC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft Manifest number: 17F9 Signing time: Mon 09 Feb 2026 11:01:31 +0000 Manifest this update: Mon 09 Feb 2026 11:01:31 +0000 Manifest next update: Tue 10 Feb 2026 11:01:31 +0000 Files and hashes: 1: L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl (hash: G7mpx6xB76YwmmTxm3l9A6Ctpq85OHhyKWGCZ0+tsRE=) 2: dfRokVERntavg7crGxooophhw2o.roa (hash: dzmKtO5BwwS+q/g1dZDUTHyL/+SV4Ar/R5p2e9o6kHE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:52:d9:24:43:49:58:c6:65:8e:9d:c8:59:7d:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901 Validity Not Before: Feb 9 11:01:31 2026 GMT Not After : Feb 10 11:01:31 2026 GMT Subject: CN=7f4bcd942ac54c730bb4fdada57ed9d52c95cc92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6a:5e:14:fa:f9:45:c4:c8:43:59:c5:59:77: ac:29:39:68:8d:e8:59:33:61:b0:ea:14:31:04:ec: e5:5d:e3:fe:93:79:4d:d4:a9:9f:02:df:6f:78:de: 13:e4:fc:1a:af:1e:66:2d:f7:93:36:e3:54:d9:86: 42:e8:24:62:6d:8b:38:ce:11:fe:4f:c2:af:3c:b0: 3f:46:b2:83:ae:b3:ed:7d:06:29:93:71:d8:a7:dc: 7f:3a:b4:76:a7:a3:4a:ee:29:12:e9:6a:ea:f5:05: 4d:05:1d:0b:7f:bf:99:91:d9:b1:71:ea:a3:5f:56: 9a:eb:a9:74:f5:33:53:8f:ef:51:cb:8f:7c:91:12: 4f:16:34:24:35:6f:52:da:45:0f:51:43:f7:3a:3d: 29:d3:de:86:12:ec:fc:f9:21:5a:81:c3:c8:9f:c6: f3:32:5f:bf:e3:9b:83:4a:cf:cc:44:9b:a1:3b:89: ab:d5:76:5d:01:94:67:96:7b:58:65:9e:f2:fe:50: 39:98:fc:56:ac:f6:05:09:7d:96:aa:b1:56:b9:51: 36:20:d7:b5:b6:2e:76:76:7f:f2:5c:56:f1:b8:83: fb:25:75:b3:b9:ab:b9:83:c7:85:2f:f3:ea:e6:e8: fb:43:49:97:db:15:ac:cb:06:85:ad:e5:a2:5e:5c: 09:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:4B:CD:94:2A:C5:4C:73:0B:B4:FD:AD:A5:7E:D9:D5:2C:95:CC:92 X509v3 Authority Key Identifier: keyid:2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:77:5c:1f:81:ed:2e:a3:82:74:ff:89:9e:5a:fd:b3:ac:18: df:8d:47:4f:37:f1:96:d5:57:36:25:0c:ee:c2:09:f3:ca:89: 7b:f4:bf:c0:5f:ac:0c:6e:18:0f:6b:30:11:bd:26:a9:eb:d9: 82:9e:e2:c5:28:41:3a:eb:46:2b:0f:b0:a2:90:06:61:3f:2c: 9d:c5:6d:36:25:5d:6b:b5:34:42:1f:6b:c2:7a:16:2f:06:51: f3:63:2e:45:53:7b:f9:84:3f:d6:bf:f4:fc:ba:1a:72:9c:a5: 41:4a:a7:87:0c:3e:6c:5f:75:56:b7:de:52:01:06:b0:75:21: e2:a4:97:e2:a5:2c:e9:00:14:f7:97:9a:3e:13:53:7a:7c:22: 37:da:c9:b1:0d:30:b0:85:8e:1a:9c:99:fc:cf:77:e7:b6:65: c9:79:09:4c:0f:bb:d3:b7:78:70:09:aa:51:a3:46:bc:5e:1f: dc:b5:56:bc:10:8e:86:3d:46:3b:63:4d:7d:07:b0:49:92:b2: 7f:c7:2f:bf:e5:5e:6b:3b:41:d9:9e:49:a9:c3:82:d0:57:1f: e3:e5:5b:6d:52:d5:7a:ae:b1:88:a9:5a:4b:a9:d9:12:b0:c3: 5f:74:c4:99:e9:ba:10:11:ad:22:17:e4:1c:40:80:cf:b6:71: ec:a9:0f:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEFLZJENJWMZljp3IWX3BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNWZhYjVjOWE0ZTEzODAzMmU1YjMwMGVhM2VkZDllNGQy YjY5MDEwHhcNMjYwMjA5MTEwMTMxWhcNMjYwMjEwMTEwMTMxWjAzMTEwLwYDVQQD Eyg3ZjRiY2Q5NDJhYzU0YzczMGJiNGZkYWRhNTdlZDlkNTJjOTVjYzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGpeFPr5RcTIQ1nFWXesKTlojehZ M2Gw6hQxBOzlXeP+k3lN1KmfAt9veN4T5Pwarx5mLfeTNuNU2YZC6CRibYs4zhH+ T8KvPLA/RrKDrrPtfQYpk3HYp9x/OrR2p6NK7ikS6Wrq9QVNBR0Lf7+Zkdmxceqj X1aa66l09TNTj+9Ry498kRJPFjQkNW9S2kUPUUP3Oj0p096GEuz8+SFagcPIn8bz Ml+/45uDSs/MRJuhO4mr1XZdAZRnlntYZZ7y/lA5mPxWrPYFCX2WqrFWuVE2INe1 ti52dn/yXFbxuIP7JXWzuau5g8eFL/Pq5uj7Q0mX2xWsywaFreWiXlwJPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9LzZQqxUxzC7T9raV+2dUslcySMB8GA1UdIwQY MBaAFC9fq1yaThOAMuWzAOo+3Z5NK2kBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDEtclhKcE9FNEF5NWJNQTZqN2RuazByYVFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85MDAwZTAtNjlkOC00MTNlLWIyYTMt YWE1MmMwMGRlOWMxLzEvTDEtclhKcE9FNEF5NWJNQTZqN2RuazByYVFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi85MDAwZTAtNjlkOC00MTNlLWIyYTMtYWE1MmMwMGRlOWMx LzEvTDEtclhKcE9FNEF5NWJNQTZqN2RuazByYVFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ3dcH4Ht LqOCdP+Jnlr9s6wY341HTzfxltVXNiUM7sIJ88qJe/S/wF+sDG4YD2swEb0mqevZ gp7ixShBOutGKw+wopAGYT8sncVtNiVda7U0Qh9rwnoWLwZR82MuRVN7+YQ/1r/0 /LoacpylQUqnhww+bF91VrfeUgEGsHUh4qSX4qUs6QAU95eaPhNTenwiN9rJsQ0w sIWOGpyZ/M9357ZlyXkJTA+707d4cAmqUaNGvF4f3LVWvBCOhj1GO2NNfQewSZKy f8cvv+VeaztB2Z5JqcOC0Fcf4+VbbVLVeq6xiKlaS6nZErDDX3TEmem6EBGtIhfk HECAz7Zx7KkPrQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:40:42 2026 by rpki-client