This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft File: lgYvXdsY-W14SSs1ONd0XMRxSiY.mft (raw, json) Hash identifier: 4qN9G/M09PrIdcTeNMqN6hSsWKY0AKTXEM3E6HL4u/k= Subject key identifier: 2F:4B:CF:21:93:93:53:A4:32:0B:CC:3E:42:70:C9:B7:9F:E2:8A:13 Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26 Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26 Certificate serial: 019C42100115CF8DC9C83D86DD32FE881357 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft Manifest number: 0AF2 Signing time: Mon 09 Feb 2026 11:01:10 +0000 Manifest this update: Mon 09 Feb 2026 11:01:10 +0000 Manifest next update: Tue 10 Feb 2026 11:01:10 +0000 Files and hashes: 1: 1EZE1VFle3pJk-oWHPrHHxhMMXA.roa (hash: zAz64MVhsrxCuG6UwDUxcbTbEY8PQpGcwky1pjaIQ3o=) 2: lgYvXdsY-W14SSs1ONd0XMRxSiY.crl (hash: 81un9ycKaB9Gme8RvUB10nM9ePnBaw72G6cbrLmZsFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:01:15:cf:8d:c9:c8:3d:86:dd:32:fe:88:13:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26 Validity Not Before: Feb 9 11:01:10 2026 GMT Not After : Feb 10 11:01:10 2026 GMT Subject: CN=2f4bcf21939353a4320bcc3e4270c9b79fe28a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:46:23:cd:62:58:75:82:82:ce:c4:93:d9:b8: c6:e0:f9:59:c3:59:1a:08:a8:46:bc:38:b8:56:13: 3f:f8:62:9c:9c:01:99:04:9f:78:47:5b:c7:96:b2: 26:71:da:6e:fa:ff:88:de:04:e8:c9:af:bb:33:21: 25:b4:b3:19:3c:80:ec:5c:84:c4:ba:24:d8:12:eb: e7:b2:bc:1b:f8:f8:35:54:d5:81:96:db:48:d4:75: 27:30:14:58:45:5a:75:a6:c7:fe:55:22:5e:cf:08: a1:df:42:8a:9c:7f:d7:57:44:fa:0c:fc:db:10:2e: 80:4a:78:74:2e:97:5b:98:93:11:97:bb:b3:7a:31: c6:20:71:95:77:25:e0:76:4a:f0:d9:c3:e5:4e:7d: f3:d4:8c:d7:49:84:29:f4:f9:75:3b:5c:ff:1c:4e: 7e:9f:ea:53:59:90:16:0c:a0:1f:9b:0d:3e:61:e5: 1c:56:31:ab:dc:71:ba:b0:e0:58:e3:5c:ef:cb:57: e8:d9:99:65:53:bc:4e:03:4b:02:a4:df:ea:a6:4d: 16:b8:3a:42:fa:98:c2:3b:03:67:d0:f3:2f:51:a6: 60:f5:d3:ec:c6:8a:17:ff:1e:c3:09:ee:d9:d9:27: 6a:de:00:96:46:95:91:1a:9b:a5:af:aa:2b:3f:15: aa:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4B:CF:21:93:93:53:A4:32:0B:CC:3E:42:70:C9:B7:9F:E2:8A:13 X509v3 Authority Key Identifier: keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:06:62:c9:55:3b:44:2d:18:fc:47:c8:99:fe:6c:bb:95:1c: 8a:6d:8a:d3:b0:e9:bc:fa:f8:b6:0e:33:bc:68:cd:ba:48:80: 7f:35:ac:5f:4a:59:16:6a:c8:61:63:90:82:42:af:69:b8:77: b6:75:c2:50:3b:8b:a1:e7:1d:36:ca:3a:45:f5:3c:c7:a9:ab: e0:8f:60:ee:5a:17:ab:e0:e4:1f:80:b3:5c:38:53:30:41:6e: 50:7e:f4:e4:00:86:24:ce:1e:87:1f:ac:02:f7:2d:08:6b:83: 0a:f6:06:ea:7b:db:28:3a:34:ae:85:05:2c:89:c6:63:86:19: 92:8d:63:25:c5:dc:b7:92:1e:78:18:91:13:60:14:03:3f:7a: f2:33:0d:96:6d:44:9c:dd:69:ce:35:88:12:c9:4b:c5:60:6b: 52:6a:cc:ba:fa:f8:0a:3e:f0:26:cd:a6:3a:03:85:59:4c:46: f7:e3:37:71:be:e6:56:f3:27:2d:fc:0f:a3:18:e9:f9:52:16: ec:ed:83:62:a7:3f:5c:78:12:ba:88:aa:f8:33:ef:03:6a:4e: 5b:00:3f:aa:f4:06:47:7b:0a:83:2a:7e:51:6f:ae:c8:44:39: f0:ae:31:d0:1c:78:a1:44:64:83:29:5b:d5:68:87:22:93:fd: 03:b9:8d:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEAEVz43JyD2G3TL+iBNXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MDYyZjVkZGIxOGY5NmQ3ODQ5MmIzNTM4ZDc3NDVjYzQ3 MTRhMjYwHhcNMjYwMjA5MTEwMTEwWhcNMjYwMjEwMTEwMTEwWjAzMTEwLwYDVQQD EygyZjRiY2YyMTkzOTM1M2E0MzIwYmNjM2U0MjcwYzliNzlmZTI4YTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EYjzWJYdYKCzsST2bjG4PlZw1ka CKhGvDi4VhM/+GKcnAGZBJ94R1vHlrImcdpu+v+I3gToya+7MyEltLMZPIDsXITE uiTYEuvnsrwb+Pg1VNWBlttI1HUnMBRYRVp1psf+VSJezwih30KKnH/XV0T6DPzb EC6ASnh0LpdbmJMRl7uzejHGIHGVdyXgdkrw2cPlTn3z1IzXSYQp9Pl1O1z/HE5+ n+pTWZAWDKAfmw0+YeUcVjGr3HG6sOBY41zvy1fo2ZllU7xOA0sCpN/qpk0WuDpC +pjCOwNn0PMvUaZg9dPsxooX/x7DCe7Z2Sdq3gCWRpWRGpulr6orPxWq0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9LzyGTk1OkMgvMPkJwybef4ooTMB8GA1UdIwQY MBaAFJYGL13bGPlteEkrNTjXdFzEcUomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMDU5NzUtZGE4ZS00NjBiLTllYmIt M2ZjYjVmM2YzYzU5LzEvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9lMDU5NzUtZGE4ZS00NjBiLTllYmItM2ZjYjVmM2YzYzU5 LzEvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMAZiyVU7 RC0Y/EfImf5su5Ucim2K07DpvPr4tg4zvGjNukiAfzWsX0pZFmrIYWOQgkKvabh3 tnXCUDuLoecdNso6RfU8x6mr4I9g7loXq+DkH4CzXDhTMEFuUH705ACGJM4ehx+s AvctCGuDCvYG6nvbKDo0roUFLInGY4YZko1jJcXct5IeeBiRE2AUAz968jMNlm1E nN1pzjWIEslLxWBrUmrMuvr4Cj7wJs2mOgOFWUxG9+M3cb7mVvMnLfwPoxjp+VIW 7O2DYqc/XHgSuoiq+DPvA2pOWwA/qvQGR3sKgyp+UW+uyEQ58K4x0Bx4oURkgylb 1WiHIpP9A7mNmw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:31 2026 by rpki-client