This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft File: lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft (raw, json) Hash identifier: Lo2P1nukvuuWvtJtszddG2dmaC0o/dDn6JokHU5yBjs= Subject key identifier: 69:DF:A0:DC:20:3B:00:22:BB:B2:42:63:3E:3A:14:50:6F:9F:C2:27 Authority key identifier: 94:A9:EA:A9:D7:1B:7C:51:C9:B4:BB:EA:68:19:B3:7F:F5:29:1D:59 Certificate issuer: /CN=94a9eaa9d71b7c51c9b4bbea6819b37ff5291d59 Certificate serial: 019C427E197D5B8C93489A7B8D8311F4AB0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft Manifest number: 0526 Signing time: Mon 09 Feb 2026 13:01:26 +0000 Manifest this update: Mon 09 Feb 2026 13:01:26 +0000 Manifest next update: Tue 10 Feb 2026 13:01:26 +0000 Files and hashes: 1: lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl (hash: kzYX80Wj0LLoKMsUnJx42OxH++Zxk1kDKW3rOAevrgw=) 2: mP9cK1RwU1pjVezxiqGqeS_0jfQ.roa (hash: +NdnMWckAu9KkO1maMu0xEAp7z5Y14BHcgqlI8aDarY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:19:7d:5b:8c:93:48:9a:7b:8d:83:11:f4:ab:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94a9eaa9d71b7c51c9b4bbea6819b37ff5291d59 Validity Not Before: Feb 9 13:01:26 2026 GMT Not After : Feb 10 13:01:26 2026 GMT Subject: CN=69dfa0dc203b0022bbb242633e3a14506f9fc227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ad:35:a2:6c:82:9d:10:dd:f8:e5:5b:ec:3a: 0a:01:e9:a9:09:89:6e:b9:17:b3:b2:0a:f6:95:81: 40:92:4b:ac:cf:2f:7a:20:6a:ee:82:ba:7d:33:12: ac:de:21:66:c0:6c:a2:65:a2:27:b6:4d:d4:49:3f: 6a:97:12:ca:ae:ff:8a:22:dd:fb:2a:bc:98:e7:cb: cf:da:8a:1e:50:01:27:79:84:ca:56:59:54:b8:47: 5c:cb:5d:43:1e:2f:36:1a:1f:64:10:6e:b6:36:c6: 34:94:51:b3:32:2f:01:ea:16:20:79:8f:72:22:64: 81:92:12:3a:c6:f1:fd:07:65:c3:ab:95:2c:1a:20: f7:b4:87:fa:1f:c9:69:42:a8:c5:72:bc:ad:5f:ac: 6d:c1:5e:43:ee:41:92:84:8e:1c:90:f4:63:93:60: 2f:98:e2:fb:4b:b3:69:a6:dc:a0:66:6d:b6:5a:0c: a5:0f:c5:dd:eb:a4:15:d3:9c:82:81:ba:41:38:7d: f9:3d:2b:e6:af:98:08:95:7f:7e:5b:a8:66:54:b8: 55:0e:f6:cf:52:0b:df:a9:3a:2a:3d:fa:19:22:60: 35:91:5f:63:e2:a4:06:d2:8b:65:07:1d:d9:b4:57: 1d:0c:74:82:cf:0a:d9:2d:69:5c:07:40:5b:b1:fc: 42:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DF:A0:DC:20:3B:00:22:BB:B2:42:63:3E:3A:14:50:6F:9F:C2:27 X509v3 Authority Key Identifier: keyid:94:A9:EA:A9:D7:1B:7C:51:C9:B4:BB:EA:68:19:B3:7F:F5:29:1D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:37:25:d9:74:71:ba:78:4b:d3:ff:d7:95:4c:f8:a3:49:48: 1f:ef:00:86:0c:43:48:f5:10:73:e6:51:9f:88:b7:8d:5d:ce: 2a:ab:49:d4:7f:4b:ae:c6:60:a8:b2:de:3f:b0:8f:2e:04:a7: e4:f4:d5:17:1d:cf:e2:06:21:44:ea:e8:a1:f5:cd:7d:19:ee: 44:c1:33:41:46:b6:f4:19:65:2c:94:b0:60:1b:c2:ec:8e:09: ae:d7:30:33:37:52:8e:c8:ee:e6:35:ef:9a:c6:c7:d4:a5:2e: b1:0d:ef:9c:b0:13:16:93:b7:0c:71:2c:4f:eb:5f:b0:e9:fe: 70:4e:92:5f:30:95:fc:4f:9b:cd:d4:39:b3:80:e7:28:f4:3d: 54:6a:eb:08:b4:db:05:56:49:fe:49:5e:cd:e9:9b:dd:7d:b4: fb:6e:3f:0d:0b:38:d6:47:1d:c3:e6:88:6d:60:3f:50:66:92: af:a6:fb:ff:bf:8d:ab:16:86:8f:ea:a4:54:33:d9:1c:8b:93: a5:d0:d5:5b:72:f8:e5:fa:3a:c3:c2:ba:59:b9:27:80:0f:6e: 25:ac:99:8d:23:f5:c5:c5:98:c8:d6:a5:2d:b3:2e:46:88:75: 95:38:5e:9c:68:d1:6d:55:1a:77:5d:f6:65:88:db:29:70:dd: 88:c3:3d:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfhl9W4yTSJp7jYMR9KsKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0YTllYWE5ZDcxYjdjNTFjOWI0YmJlYTY4MTliMzdmZjUy OTFkNTkwHhcNMjYwMjA5MTMwMTI2WhcNMjYwMjEwMTMwMTI2WjAzMTEwLwYDVQQD Eyg2OWRmYTBkYzIwM2IwMDIyYmJiMjQyNjMzZTNhMTQ1MDZmOWZjMjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3K01omyCnRDd+OVb7DoKAempCYlu uRezsgr2lYFAkkuszy96IGrugrp9MxKs3iFmwGyiZaIntk3UST9qlxLKrv+KIt37 KryY58vP2ooeUAEneYTKVllUuEdcy11DHi82Gh9kEG62NsY0lFGzMi8B6hYgeY9y ImSBkhI6xvH9B2XDq5UsGiD3tIf6H8lpQqjFcrytX6xtwV5D7kGShI4ckPRjk2Av mOL7S7NpptygZm22WgylD8Xd66QV05yCgbpBOH35PSvmr5gIlX9+W6hmVLhVDvbP UgvfqToqPfoZImA1kV9j4qQG0otlBx3ZtFcdDHSCzwrZLWlcB0BbsfxCqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnfoNwgOwAiu7JCYz46FFBvn8InMB8GA1UdIwQY MBaAFJSp6qnXG3xRybS76mgZs3/1KR1ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEtucXFkY2JmRkhKdEx2cWFCbXpmX1VwSFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80NDNjNGYtNjQwNi00MDQxLWFjMTMt MzkzYWQyNWViMzQwLzEvbEtucXFkY2JmRkhKdEx2cWFCbXpmX1VwSFZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi80NDNjNGYtNjQwNi00MDQxLWFjMTMtMzkzYWQyNWViMzQw LzEvbEtucXFkY2JmRkhKdEx2cWFCbXpmX1VwSFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTcl2XRx unhL0//XlUz4o0lIH+8AhgxDSPUQc+ZRn4i3jV3OKqtJ1H9LrsZgqLLeP7CPLgSn 5PTVFx3P4gYhROroofXNfRnuRMEzQUa29BllLJSwYBvC7I4JrtcwMzdSjsju5jXv msbH1KUusQ3vnLATFpO3DHEsT+tfsOn+cE6SXzCV/E+bzdQ5s4DnKPQ9VGrrCLTb BVZJ/klezemb3X20+24/DQs41kcdw+aIbWA/UGaSr6b7/7+NqxaGj+qkVDPZHIuT pdDVW3L45fo6w8K6WbkngA9uJayZjSP1xcWYyNalLbMuRoh1lThenGjRbVUad132 ZYjbKXDdiMM9yQ== -----END CERTIFICATE-----Generated at Mon Feb 9 23:53:41 2026 by rpki-client