This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft File: L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft (raw, json) Hash identifier: vZxlGmGNl4gxfJ4cZXDI5O7hhpm9Ei1Y280gLqnJQcs= Subject key identifier: 9D:7E:2E:A9:F5:C2:FE:DC:E6:CD:09:B3:1F:F3:6C:A1:CC:40:7D:57 Authority key identifier: 2F:57:A3:4B:05:8A:AF:A0:A7:63:12:4A:7D:5D:41:87:F4:FA:AB:AC Certificate issuer: /CN=2f57a34b058aafa0a763124a7d5d4187f4faabac Certificate serial: 019C42465ECB93FAF19D6CBECFE8D51BB75E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 12:00:33 +0000 Manifest this update: Mon 09 Feb 2026 12:00:33 +0000 Manifest next update: Tue 10 Feb 2026 12:00:33 +0000 Files and hashes: 1: L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl (hash: eJdC04WHkAw2a1wkEBClNSrlsrtzuBOi0m8zzCTgNy4=) 2: aw5b-GS78H33XXfacv-uPagCZEM.roa (hash: WE8zP14TgI7idwZsYOKIvyET3IUB8iBRDb7tO1zrfRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:5e:cb:93:fa:f1:9d:6c:be:cf:e8:d5:1b:b7:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f57a34b058aafa0a763124a7d5d4187f4faabac Validity Not Before: Feb 9 12:00:33 2026 GMT Not After : Feb 10 12:00:33 2026 GMT Subject: CN=9d7e2ea9f5c2fedce6cd09b31ff36ca1cc407d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a3:31:f7:68:0f:63:3f:cc:31:11:20:8b:8c: 03:ce:c7:1e:e4:ce:d7:23:78:a4:6f:6c:55:12:7c: 8c:b8:00:74:de:4b:60:1f:11:59:d5:2b:8a:4d:8b: 1a:f5:74:7f:c8:de:cf:d2:40:88:aa:93:18:fc:8f: cd:b6:56:0b:49:b9:09:61:66:93:05:04:fe:08:17: 4f:ea:27:bd:ef:27:cd:61:36:97:5f:14:64:0d:6a: f6:c3:6a:9f:4c:4c:8b:d5:e6:e7:67:97:27:98:f4: c3:cf:c6:d1:ef:c6:b6:c9:17:97:be:70:0b:1b:d8: 26:26:f0:b0:13:86:df:eb:0e:e1:95:c9:41:0c:19: 82:56:4f:f8:04:90:6f:7a:e8:14:5d:25:f8:1f:69: 43:91:2f:1d:bc:fd:dd:5e:7e:4d:2c:ec:50:0c:d2: 6c:8d:d9:c9:f7:e8:5e:2f:c8:aa:b6:15:ba:e9:61: 5b:90:37:24:cf:9c:55:51:b0:2e:3b:ba:85:3d:02: b0:50:d6:72:c2:eb:fe:b8:ec:f8:35:4a:15:f9:e9: 9b:75:f8:e4:2c:c7:33:93:c2:d7:9b:e3:67:36:45: 83:ec:2a:d4:07:0b:af:ec:6e:5a:20:50:65:04:da: c8:c1:9f:f0:86:be:d3:6c:19:14:c0:91:e3:35:aa: 6d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:7E:2E:A9:F5:C2:FE:DC:E6:CD:09:B3:1F:F3:6C:A1:CC:40:7D:57 X509v3 Authority Key Identifier: keyid:2F:57:A3:4B:05:8A:AF:A0:A7:63:12:4A:7D:5D:41:87:F4:FA:AB:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:b2:72:59:14:80:a1:b9:32:ed:bb:bf:fb:56:8b:f1:66:b8: 7d:f2:7c:8e:43:78:25:a9:55:b8:b3:b3:c6:6a:9b:1e:b1:c6: c7:74:1c:68:ef:a0:14:b1:53:f7:cc:24:c0:3b:49:24:cc:99: 49:01:2e:93:14:f3:5d:ae:50:3e:57:3a:05:3c:c6:b9:4a:fb: 96:ae:1e:87:85:4d:5f:8b:2f:09:db:95:88:e8:32:27:c7:40: 69:8d:19:24:4e:4f:7f:03:28:26:df:1f:c2:f3:9e:67:1e:5b: ee:53:58:e0:60:dd:5c:b0:8a:d3:5f:d3:bf:8d:64:42:3a:a5: af:97:29:9a:76:77:2f:cd:e2:2e:72:8b:d2:c6:d4:55:1c:cf: a9:2e:9a:df:26:dc:fa:b4:79:48:65:bc:34:4e:16:ea:32:b3: f5:ea:da:af:4e:bb:24:cd:69:eb:70:2e:1a:ab:ea:b2:da:0e: fa:2a:13:e2:76:06:09:e4:2e:e3:97:4c:8b:5f:ff:21:f9:86: 36:b2:32:70:25:9f:e9:d5:16:51:87:ae:0e:dd:d8:2d:7f:5e: b3:82:76:e6:79:a3:e7:81:6a:59:18:76:11:04:a7:78:c5:cf: 92:f6:4c:25:e2:21:10:ee:1f:d5:f2:56:00:4c:2f:a8:1b:75: b6:dd:a6:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRl7Lk/rxnWy+z+jVG7deMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNTdhMzRiMDU4YWFmYTBhNzYzMTI0YTdkNWQ0MTg3ZjRm YWFiYWMwHhcNMjYwMjA5MTIwMDMzWhcNMjYwMjEwMTIwMDMzWjAzMTEwLwYDVQQD Eyg5ZDdlMmVhOWY1YzJmZWRjZTZjZDA5YjMxZmYzNmNhMWNjNDA3ZDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKMx92gPYz/MMREgi4wDzsce5M7X I3ikb2xVEnyMuAB03ktgHxFZ1SuKTYsa9XR/yN7P0kCIqpMY/I/NtlYLSbkJYWaT BQT+CBdP6ie97yfNYTaXXxRkDWr2w2qfTEyL1ebnZ5cnmPTDz8bR78a2yReXvnAL G9gmJvCwE4bf6w7hlclBDBmCVk/4BJBveugUXSX4H2lDkS8dvP3dXn5NLOxQDNJs jdnJ9+heL8iqthW66WFbkDckz5xVUbAuO7qFPQKwUNZywuv+uOz4NUoV+embdfjk LMczk8LXm+NnNkWD7CrUBwuv7G5aIFBlBNrIwZ/whr7TbBkUwJHjNapt6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ1+Lqn1wv7c5s0Jsx/zbKHMQH1XMB8GA1UdIwQY MBaAFC9Xo0sFiq+gp2MSSn1dQYf0+qusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDFlalN3V0tyNkNuWXhKS2ZWMUJoX1Q2cTZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83ZjM1NmEtYTI1MS00YjdhLTkwNjIt MmRjZDZhMDBjYTEyLzEvTDFlalN3V0tyNkNuWXhKS2ZWMUJoX1Q2cTZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy83ZjM1NmEtYTI1MS00YjdhLTkwNjItMmRjZDZhMDBjYTEy LzEvTDFlalN3V0tyNkNuWXhKS2ZWMUJoX1Q2cTZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLJyWRSA obky7bu/+1aL8Wa4ffJ8jkN4JalVuLOzxmqbHrHGx3QcaO+gFLFT98wkwDtJJMyZ SQEukxTzXa5QPlc6BTzGuUr7lq4eh4VNX4svCduViOgyJ8dAaY0ZJE5PfwMoJt8f wvOeZx5b7lNY4GDdXLCK01/Tv41kQjqlr5cpmnZ3L83iLnKL0sbUVRzPqS6a3ybc +rR5SGW8NE4W6jKz9erar067JM1p63AuGqvqstoO+ioT4nYGCeQu45dMi1//IfmG NrIycCWf6dUWUYeuDt3YLX9es4J25nmj54FqWRh2EQSneMXPkvZMJeIhEO4f1fJW AEwvqBt1tt2mkA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:26 2026 by rpki-client