This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft File: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft (raw, json) Hash identifier: Yrnlc12mGovvC1TsBKQvNz1Y9WLH62xL4pVAQMGbd6Y= Subject key identifier: B9:F8:17:67:DD:8C:00:01:65:C8:B2:72:D9:2F:8B:8D:79:CD:48:62 Authority key identifier: 2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4 Certificate issuer: /CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4 Certificate serial: 019C41A23787E11882D8F28F216B2F37E8B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft Manifest number: 10CB Signing time: Mon 09 Feb 2026 09:01:15 +0000 Manifest this update: Mon 09 Feb 2026 09:01:15 +0000 Manifest next update: Tue 10 Feb 2026 09:01:15 +0000 Files and hashes: 1: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl (hash: teJWZ3vUo4yUuo3TBk0gwX78cnXTP5FdhBjl3MhflvE=) 2: qzDVPJjwkiKMmIw2RcHgiamnABM.roa (hash: xT+W6De5eWZz4XKVbRVPuP+LFXCQC6a/MFcFgjxi2KU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:37:87:e1:18:82:d8:f2:8f:21:6b:2f:37:e8:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4 Validity Not Before: Feb 9 09:01:15 2026 GMT Not After : Feb 10 09:01:15 2026 GMT Subject: CN=b9f81767dd8c000165c8b272d92f8b8d79cd4862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ca:69:ce:bb:66:d5:f1:3e:f6:d1:ff:78:bb: 21:22:ad:0b:4c:ae:d4:32:0a:fb:b6:a7:72:e0:72: 02:68:77:cf:3f:d6:0e:e0:eb:06:a0:8a:0f:f4:d5: 28:e9:36:88:7f:b3:8e:4b:fa:8c:e5:ac:41:af:e2: 39:1d:fd:8b:40:93:1b:b5:b0:9b:e3:07:f1:c6:97: e7:99:4d:fb:59:5a:0e:ac:b2:7e:db:5d:8b:81:91: 15:84:0f:d5:45:5a:84:6e:3c:d3:32:98:28:10:07: 34:53:2f:ff:7d:57:a9:c2:a2:a2:27:fb:94:c7:a5: a0:cb:6a:52:6e:04:a2:f1:80:87:35:ad:c6:e3:9c: ea:83:7b:f7:ab:aa:ba:f6:62:c0:3f:1d:4d:ac:70: cb:f8:a7:f1:bf:5a:ff:93:d0:29:52:f7:d2:5d:b1: 5f:b6:95:75:13:4e:d3:08:e7:15:8a:74:fa:bb:f7: b8:01:b3:37:93:b9:a9:f0:d9:2a:45:d3:79:32:13: 2f:fa:ee:e8:84:3c:02:0d:04:ce:53:68:bb:e8:b6: 49:0c:91:8f:56:33:8b:a9:93:07:d9:bd:6f:b5:e6: dc:5f:0c:1d:6e:f2:70:ef:e5:44:f1:97:1f:55:76: f5:fb:78:06:15:1b:98:c5:ee:ad:41:aa:33:45:2a: b1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F8:17:67:DD:8C:00:01:65:C8:B2:72:D9:2F:8B:8D:79:CD:48:62 X509v3 Authority Key Identifier: keyid:2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:42:12:c2:5f:e9:59:42:10:56:92:6f:6e:d8:1b:cc:a0:a0: b0:00:0c:81:0a:d2:c2:fc:be:32:81:f5:21:dc:f0:b2:c8:04: ef:d1:04:08:dc:c1:b3:aa:d8:6e:e8:1e:eb:c5:fc:06:e1:ba: 4b:a4:56:ed:19:96:67:73:d2:b9:e0:13:a6:3c:30:71:f8:f9: 90:dc:fe:dc:f3:1f:18:46:4d:fc:26:55:cb:ff:61:2d:ea:1c: 8f:b5:b2:39:59:0b:8f:b3:c9:00:8c:03:ad:cb:e4:9b:76:a9: 4a:40:df:a9:20:2f:2e:39:57:87:3d:d1:3d:d2:7c:9b:fa:63: bf:43:7d:28:df:95:67:2d:1e:9c:87:9a:4b:4d:19:0e:e9:75: 1d:21:dc:6a:be:2b:cb:5f:95:09:33:a7:88:ef:a7:b8:ba:c5: 30:6f:f7:58:65:d9:d5:e2:7e:12:65:09:13:8e:90:da:5d:b5: fd:c9:5d:06:f5:f8:5d:8a:71:85:45:ad:bb:7a:47:42:78:46: 31:b3:21:0a:7a:c6:f6:8f:fc:c3:3a:c9:89:37:73:f7:6a:fc: ce:30:c4:6a:78:30:2d:35:d0:36:d5:20:6b:b4:f4:74:b3:5e: 05:c8:45:aa:77:aa:55:c6:23:fc:df:5f:ef:ad:77:7d:e1:fe: 14:e4:c6:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBojeH4RiC2PKPIWsvN+i4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMjRkMDU5MmFlMTJlOTUwZDg4ZjhjNmFlMGE5MmYwYjM1 Y2QwZTQwHhcNMjYwMjA5MDkwMTE1WhcNMjYwMjEwMDkwMTE1WjAzMTEwLwYDVQQD EyhiOWY4MTc2N2RkOGMwMDAxNjVjOGIyNzJkOTJmOGI4ZDc5Y2Q0ODYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscppzrtm1fE+9tH/eLshIq0LTK7U Mgr7tqdy4HICaHfPP9YO4OsGoIoP9NUo6TaIf7OOS/qM5axBr+I5Hf2LQJMbtbCb 4wfxxpfnmU37WVoOrLJ+212LgZEVhA/VRVqEbjzTMpgoEAc0Uy//fVepwqKiJ/uU x6Wgy2pSbgSi8YCHNa3G45zqg3v3q6q69mLAPx1NrHDL+Kfxv1r/k9ApUvfSXbFf tpV1E07TCOcVinT6u/e4AbM3k7mp8NkqRdN5MhMv+u7ohDwCDQTOU2i76LZJDJGP VjOLqZMH2b1vtebcXwwdbvJw7+VE8ZcfVXb1+3gGFRuYxe6tQaozRSqxvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLn4F2fdjAABZciyctkvi415zUhiMB8GA1UdIwQY MBaAFC8k0Fkq4S6VDYj4xq4KkvCzXNDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHlUUVdTcmhMcFVOaVBqR3JncVM4TE5jME9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mOWMwMWMtN2I3Yy00ZTA0LWE4NjUt MzMxNGQxOTQwYmY5LzEvTHlUUVdTcmhMcFVOaVBqR3JncVM4TE5jME9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9mOWMwMWMtN2I3Yy00ZTA0LWE4NjUtMzMxNGQxOTQwYmY5 LzEvTHlUUVdTcmhMcFVOaVBqR3JncVM4TE5jME9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASkISwl/p WUIQVpJvbtgbzKCgsAAMgQrSwvy+MoH1IdzwssgE79EECNzBs6rYbuge68X8BuG6 S6RW7RmWZ3PSueATpjwwcfj5kNz+3PMfGEZN/CZVy/9hLeocj7WyOVkLj7PJAIwD rcvkm3apSkDfqSAvLjlXhz3RPdJ8m/pjv0N9KN+VZy0enIeaS00ZDul1HSHcar4r y1+VCTOniO+nuLrFMG/3WGXZ1eJ+EmUJE46Q2l21/cldBvX4XYpxhUWtu3pHQnhG MbMhCnrG9o/8wzrJiTdz92r8zjDEangwLTXQNtUga7T0dLNeBchFqneqVcYj/N9f 7613feH+FOTGwQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:37 2026 by rpki-client