This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft File: Li8BGtqu7EZbGCrucJw2fIfljzg.mft (raw, json) Hash identifier: G8mbmN3os0CGy3DUn1mFdPIwQ+yS8xNXnfkmi3FgFYQ= Subject key identifier: 25:BA:61:17:C9:00:D2:CF:19:7E:CA:D8:CC:01:BF:02:43:3E:52:11 Authority key identifier: 2E:2F:01:1A:DA:AE:EC:46:5B:18:2A:EE:70:9C:36:7C:87:E5:8F:38 Certificate issuer: /CN=2e2f011adaaeec465b182aee709c367c87e58f38 Certificate serial: 019C446B7209FD04AC97443D3AB98AD17763 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft Manifest number: 0C1D Signing time: Mon 09 Feb 2026 22:00:17 +0000 Manifest this update: Mon 09 Feb 2026 22:00:17 +0000 Manifest next update: Tue 10 Feb 2026 22:00:17 +0000 Files and hashes: 1: Li8BGtqu7EZbGCrucJw2fIfljzg.crl (hash: swv6qekkKlCoW0yqbRiizsFYliMUVTYfutirRvokmFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:72:09:fd:04:ac:97:44:3d:3a:b9:8a:d1:77:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e2f011adaaeec465b182aee709c367c87e58f38 Validity Not Before: Feb 9 22:00:17 2026 GMT Not After : Feb 10 22:00:17 2026 GMT Subject: CN=25ba6117c900d2cf197ecad8cc01bf02433e5211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:68:61:2c:1c:a1:4d:cc:03:c1:7a:dd:ae:68: fe:8b:5d:d4:11:7c:fd:1f:14:a4:f4:ba:ea:f6:ea: d2:dc:71:30:cb:3e:2a:f0:49:23:26:80:ef:82:3c: c5:cc:01:38:b4:38:42:6a:1d:11:77:61:eb:8f:4f: 0a:d1:ed:e6:db:43:31:23:0f:76:61:6e:e6:73:26: 24:5c:e9:e4:02:8f:7d:ed:ae:e9:f4:5f:87:cc:d5: c0:04:ea:2f:9b:f3:60:9e:2d:6c:5e:50:15:c1:bf: 72:59:93:7e:2c:13:ac:11:dd:c4:a9:41:f2:60:92: 04:39:c5:3e:4b:90:67:55:94:8e:b7:d7:d2:e6:67: 9a:3a:c1:ba:2f:59:bc:3b:53:68:9c:4e:29:28:e2: be:7d:45:8f:6a:af:20:8d:5d:c1:61:d4:21:93:2d: dc:dc:2d:7e:78:c7:c9:2b:88:6c:37:44:4c:f7:cd: e1:db:48:db:ae:53:37:1f:da:fe:d0:a0:67:c9:7b: d1:07:c5:a9:8f:a8:8f:8f:d0:41:85:7a:64:aa:a1: 32:4b:71:f0:b0:dd:6d:67:23:22:f6:9f:99:e1:05: 3f:fc:fe:89:24:c3:2b:e5:f5:e9:d3:84:d5:5b:a0: fa:5f:9d:57:e6:75:d7:67:4d:7d:fb:7b:73:6f:3b: fc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:BA:61:17:C9:00:D2:CF:19:7E:CA:D8:CC:01:BF:02:43:3E:52:11 X509v3 Authority Key Identifier: keyid:2E:2F:01:1A:DA:AE:EC:46:5B:18:2A:EE:70:9C:36:7C:87:E5:8F:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:9b:88:35:2f:b2:d1:89:de:6f:9c:ec:92:3a:c1:23:da:1e: ae:7c:1c:b3:fb:55:4c:a2:0d:9d:12:7b:3e:04:15:0e:b4:ca: b2:34:39:19:f6:48:d0:4d:c1:8f:e0:26:55:4b:74:14:b3:5e: 21:a8:dd:5e:4c:a3:39:18:79:c0:a8:8b:c3:85:60:09:9b:51: eb:2d:63:3c:e4:47:38:a5:3e:c1:d8:4e:bb:1e:ad:95:7f:20: c6:f0:b7:35:86:0a:89:d4:7c:ca:09:88:cb:95:8d:a1:ba:9a: 68:26:32:62:4c:a5:07:c7:da:2d:56:cf:6a:e3:6d:25:9e:6d: 0f:98:14:4a:b7:83:0b:b4:44:2d:6b:79:29:07:32:c2:38:60: ac:83:37:4c:0c:41:13:f9:af:0a:06:e0:0a:bc:ba:21:56:72: 6b:8d:ac:d7:55:03:a9:7a:a9:bb:de:9c:13:f9:8d:5c:36:10: 61:1c:59:12:f0:23:0d:df:61:be:3e:b3:79:f7:5a:84:dc:02: dc:c1:f0:3d:a0:7c:22:83:79:6e:ba:38:ad:fa:a3:f7:fb:b3: 4c:9e:f0:1e:ed:3e:4a:2f:d9:fc:37:ad:11:35:ee:4e:11:a5: 07:d3:5e:68:5b:9b:cb:7d:25:3b:87:64:2b:44:6f:e8:a4:99: 84:62:46:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa3IJ/QSsl0Q9OrmK0XdjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMmYwMTFhZGFhZWVjNDY1YjE4MmFlZTcwOWMzNjdjODdl NThmMzgwHhcNMjYwMjA5MjIwMDE3WhcNMjYwMjEwMjIwMDE3WjAzMTEwLwYDVQQD EygyNWJhNjExN2M5MDBkMmNmMTk3ZWNhZDhjYzAxYmYwMjQzM2U1MjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGhhLByhTcwDwXrdrmj+i13UEXz9 HxSk9Lrq9urS3HEwyz4q8EkjJoDvgjzFzAE4tDhCah0Rd2Hrj08K0e3m20MxIw92 YW7mcyYkXOnkAo997a7p9F+HzNXABOovm/Ngni1sXlAVwb9yWZN+LBOsEd3EqUHy YJIEOcU+S5BnVZSOt9fS5meaOsG6L1m8O1NonE4pKOK+fUWPaq8gjV3BYdQhky3c 3C1+eMfJK4hsN0RM983h20jbrlM3H9r+0KBnyXvRB8Wpj6iPj9BBhXpkqqEyS3Hw sN1tZyMi9p+Z4QU//P6JJMMr5fXp04TVW6D6X51X5nXXZ019+3tzbzv8gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCW6YRfJANLPGX7K2MwBvwJDPlIRMB8GA1UdIwQY MBaAFC4vARraruxGWxgq7nCcNnyH5Y84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGk4Qkd0cXU3RVpiR0NydWNKdzJmSWZsanpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lZDU0NTItMzllMi00M2JiLTk2NDQt MjIyYmFmOTUzYjQ0LzEvTGk4Qkd0cXU3RVpiR0NydWNKdzJmSWZsanpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lZDU0NTItMzllMi00M2JiLTk2NDQtMjIyYmFmOTUzYjQ0 LzEvTGk4Qkd0cXU3RVpiR0NydWNKdzJmSWZsanpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJuINS+y 0Yneb5zskjrBI9oernwcs/tVTKINnRJ7PgQVDrTKsjQ5GfZI0E3Bj+AmVUt0FLNe IajdXkyjORh5wKiLw4VgCZtR6y1jPORHOKU+wdhOux6tlX8gxvC3NYYKidR8ygmI y5WNobqaaCYyYkylB8faLVbPauNtJZ5tD5gUSreDC7RELWt5KQcywjhgrIM3TAxB E/mvCgbgCry6IVZya42s11UDqXqpu96cE/mNXDYQYRxZEvAjDd9hvj6zefdahNwC 3MHwPaB8IoN5bro4rfqj9/uzTJ7wHu0+Si/Z/DetETXuThGlB9NeaFuby30lO4dk K0Rv6KSZhGJGZA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:48:46 2026 by rpki-client