This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft File: LswQU0wEJcv21GXoQRT_euDwsFI.mft (raw, json) Hash identifier: XIY48xOksDwguwS/cvdrpqguSX6h9YCsYCfXdrhIyEw= Subject key identifier: 42:C4:B8:19:41:34:D2:60:84:71:E8:42:B8:26:4E:14:40:F0:AC:B2 Authority key identifier: 2E:CC:10:53:4C:04:25:CB:F6:D4:65:E8:41:14:FF:7A:E0:F0:B0:52 Certificate issuer: /CN=2ecc10534c0425cbf6d465e84114ff7ae0f0b052 Certificate serial: 019C41338CD029074801D1452A020E1987FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft Manifest number: 088E Signing time: Mon 09 Feb 2026 07:00:23 +0000 Manifest this update: Mon 09 Feb 2026 07:00:23 +0000 Manifest next update: Tue 10 Feb 2026 07:00:23 +0000 Files and hashes: 1: LswQU0wEJcv21GXoQRT_euDwsFI.crl (hash: umxPuaAVTqGFo8T+EXjL7kJzII+O+J/ZFsViuV+Vnd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:8c:d0:29:07:48:01:d1:45:2a:02:0e:19:87:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ecc10534c0425cbf6d465e84114ff7ae0f0b052 Validity Not Before: Feb 9 07:00:23 2026 GMT Not After : Feb 10 07:00:23 2026 GMT Subject: CN=42c4b8194134d2608471e842b8264e1440f0acb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:69:25:ee:f8:5c:f4:1f:15:bf:5a:63:40:bc: f7:b7:a9:20:63:00:e1:73:61:2f:89:ca:1b:20:3b: 8f:52:7b:53:a8:71:ad:af:cb:65:d0:e0:80:4b:c8: 9d:dd:75:05:3b:ab:d2:2a:5d:c0:78:f0:88:4c:18: c6:ba:08:f0:57:85:dc:58:4c:9b:7b:42:af:20:5e: a6:77:99:f3:0d:87:07:6b:d5:90:8a:99:66:50:8f: e0:f0:97:a7:92:9c:4a:af:81:f6:29:c1:c9:d8:c1: 35:2f:39:9a:13:c1:67:1a:e1:3f:0a:2e:e4:e2:24: 1f:ef:3f:29:71:23:4d:46:eb:d1:54:31:63:df:9c: 21:23:ba:55:0f:82:6c:40:3a:e6:e1:35:75:db:92: 93:10:02:c7:cc:67:2d:ea:d6:d5:af:8a:a2:fb:db: d4:46:a9:4a:cb:e1:23:6a:a3:73:0d:3c:75:66:dc: 2c:9d:30:aa:5d:2f:f0:27:0c:8b:8c:37:5e:2a:c9: c2:ca:61:ae:86:ae:06:54:ac:7b:00:6a:fa:58:05: c8:c9:5e:23:62:9e:66:c2:93:c1:77:e2:2b:81:40: e7:aa:d1:f2:95:62:03:5b:a1:04:ae:bf:3e:b5:6e: e5:98:85:2c:3b:6e:0a:b7:74:e4:1a:f9:f0:1a:66: 07:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C4:B8:19:41:34:D2:60:84:71:E8:42:B8:26:4E:14:40:F0:AC:B2 X509v3 Authority Key Identifier: keyid:2E:CC:10:53:4C:04:25:CB:F6:D4:65:E8:41:14:FF:7A:E0:F0:B0:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:32:5e:23:36:f7:e2:d4:ca:c9:b2:12:9b:67:8c:dd:fd:9f: 0a:7b:fb:22:dc:27:a1:17:4d:8a:a6:3e:0f:8e:45:c9:5e:c9: 42:4f:16:a0:92:2f:f1:af:ce:db:98:03:17:04:a3:18:3e:08: df:77:8f:8e:6c:57:cc:1f:e7:0c:ab:fd:41:7f:36:33:11:e9: d5:d8:39:bf:26:48:42:8c:78:4a:30:a6:4c:66:3d:45:ab:95: e7:18:e5:5c:01:1a:3b:ae:8c:65:2b:f5:1b:c5:a5:be:cb:88: 43:cc:a3:36:be:36:13:f1:f1:77:73:70:72:e6:da:ab:7d:ed: 9a:11:fb:ee:5b:4d:cd:e7:bf:7d:e2:0e:4b:18:79:58:af:27: e8:91:85:20:0a:82:84:9d:3e:27:c4:68:0c:5e:e8:dc:68:93: c7:33:e5:02:bd:b1:2a:e2:e3:15:b0:34:07:5e:ae:4b:ff:7a: b6:16:a5:41:a8:00:48:aa:f4:41:98:30:42:46:f3:8a:30:8c: cc:75:e8:cd:67:36:22:b1:d4:ac:4c:2d:a3:d8:b0:fc:2e:0b: 4d:38:ee:6e:2c:8e:a7:e5:d6:99:ba:60:0c:6b:6d:04:71:68: 3b:6e:29:9e:0b:e3:2a:a4:13:c1:14:a2:c7:c6:c5:e0:64:3c: 3d:5b:26:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM4zQKQdIAdFFKgIOGYf/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlY2MxMDUzNGMwNDI1Y2JmNmQ0NjVlODQxMTRmZjdhZTBm MGIwNTIwHhcNMjYwMjA5MDcwMDIzWhcNMjYwMjEwMDcwMDIzWjAzMTEwLwYDVQQD Eyg0MmM0YjgxOTQxMzRkMjYwODQ3MWU4NDJiODI2NGUxNDQwZjBhY2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmkl7vhc9B8Vv1pjQLz3t6kgYwDh c2EvicobIDuPUntTqHGtr8tl0OCAS8id3XUFO6vSKl3AePCITBjGugjwV4XcWEyb e0KvIF6md5nzDYcHa9WQiplmUI/g8JenkpxKr4H2KcHJ2ME1LzmaE8FnGuE/Ci7k 4iQf7z8pcSNNRuvRVDFj35whI7pVD4JsQDrm4TV125KTEALHzGct6tbVr4qi+9vU RqlKy+EjaqNzDTx1ZtwsnTCqXS/wJwyLjDdeKsnCymGuhq4GVKx7AGr6WAXIyV4j Yp5mwpPBd+IrgUDnqtHylWIDW6EErr8+tW7lmIUsO24Kt3TkGvnwGmYHfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELEuBlBNNJghHHoQrgmThRA8KyyMB8GA1UdIwQY MBaAFC7MEFNMBCXL9tRl6EEU/3rg8LBSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHN3UVUwd0VKY3YyMUdYb1FSVF9ldUR3c0ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZmZmNGEtZjk4NC00YjFmLTliMmIt M2Q3OTJmYjkwNWVlLzEvTHN3UVUwd0VKY3YyMUdYb1FSVF9ldUR3c0ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ZmZmNGEtZjk4NC00YjFmLTliMmItM2Q3OTJmYjkwNWVl LzEvTHN3UVUwd0VKY3YyMUdYb1FSVF9ldUR3c0ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDJeIzb3 4tTKybISm2eM3f2fCnv7ItwnoRdNiqY+D45FyV7JQk8WoJIv8a/O25gDFwSjGD4I 33ePjmxXzB/nDKv9QX82MxHp1dg5vyZIQox4SjCmTGY9RauV5xjlXAEaO66MZSv1 G8WlvsuIQ8yjNr42E/Hxd3Nwcubaq33tmhH77ltNzee/feIOSxh5WK8n6JGFIAqC hJ0+J8RoDF7o3GiTxzPlAr2xKuLjFbA0B16uS/96thalQagASKr0QZgwQkbzijCM zHXozWc2IrHUrEwto9iw/C4LTTjubiyOp+XWmbpgDGttBHFoO24pngvjKqQTwRSi x8bF4GQ8PVsm+g== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:35 2026 by rpki-client