This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft File: L8plksD-NPq-_MQ3GSh7hE1HygM.mft (raw, json) Hash identifier: Y1bZTMGwA4W5lB7s4VtJhAnOXJe4io/ppukhyBRV6HA= Subject key identifier: B9:19:AB:19:7B:B3:68:2E:A8:97:3F:B5:29:60:E8:54:20:2C:1C:51 Authority key identifier: 2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03 Certificate issuer: /CN=2fca6592c0fe34fabefcc43719287b844d47ca03 Certificate serial: 019C4246C80F03AAAE4B4B7E211E20CEABB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 12:01:00 +0000 Manifest this update: Mon 09 Feb 2026 12:01:00 +0000 Manifest next update: Tue 10 Feb 2026 12:01:00 +0000 Files and hashes: 1: 7mIA3Luhg39GWRjtxd0G6cNoiNM.roa (hash: 9RHRZDIR3eag+ugNv6r1XDMS8XWYJr2tgc2FPO+4l3Y=) 2: L8plksD-NPq-_MQ3GSh7hE1HygM.crl (hash: wd9aWqjQtRS0cgXbbn0VkV9oz/N5TORfpN4BGpH0JeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:c8:0f:03:aa:ae:4b:4b:7e:21:1e:20:ce:ab:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fca6592c0fe34fabefcc43719287b844d47ca03 Validity Not Before: Feb 9 12:01:00 2026 GMT Not After : Feb 10 12:01:00 2026 GMT Subject: CN=b919ab197bb3682ea8973fb52960e854202c1c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ef:a0:ca:68:e9:02:d5:44:2e:a3:15:8f:7e: 55:3e:b7:73:56:30:a1:f6:39:dc:83:26:5d:89:a8: 51:e8:87:8e:d5:aa:bf:f9:b9:59:0e:e9:bd:3f:be: 4c:e5:4a:d6:22:5d:a1:10:99:7e:dc:65:e1:b2:91: 43:d4:f3:54:86:28:f0:d2:56:62:9b:37:c0:a0:81: 2a:3e:15:8f:06:b7:ba:f6:05:0d:3f:e6:a9:83:2b: 09:be:46:83:f7:9e:3b:63:4e:92:a0:30:9d:28:f0: 88:c7:ba:d1:42:8f:15:16:0d:85:d2:62:73:1d:db: bb:22:f1:58:e3:b3:1e:87:2c:b2:c8:ce:ab:5a:7a: ba:a3:c0:0f:73:65:4b:cc:ec:4b:f2:4e:02:ce:c8: d3:ac:6d:02:42:e5:f9:32:e1:4c:e4:66:a4:08:ef: 0e:a8:f8:c0:91:6b:9a:14:80:9a:ad:63:4d:15:12: 20:4f:6d:d5:f9:2b:8e:69:6a:37:40:63:54:46:73: 13:4e:a3:1c:7a:3e:e0:1f:62:85:c0:a2:f8:d6:76: 0f:c5:64:cc:a8:d1:28:2f:66:b6:9d:6d:1d:c5:7c: bc:c0:b5:ee:e0:da:4a:fb:16:e7:99:a8:52:e4:6c: 8e:e4:36:47:b4:ff:54:ba:36:56:d2:92:6c:35:a2: 3f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:19:AB:19:7B:B3:68:2E:A8:97:3F:B5:29:60:E8:54:20:2C:1C:51 X509v3 Authority Key Identifier: keyid:2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:e0:a5:df:d0:9b:51:3c:8e:94:08:d8:b8:f8:fc:fc:12:2d: 2e:27:01:e4:be:1e:34:ac:fc:e6:76:ad:d6:5e:11:a1:0a:55: 7b:54:b6:e9:e6:5d:e8:06:d9:1b:16:39:86:fb:ff:a3:7e:0a: fa:c3:60:18:0a:ba:0a:ec:1c:00:2f:07:0a:33:bc:7a:6f:09: 5a:19:e1:46:9e:66:af:51:a2:da:15:36:ca:3c:9d:74:d2:8b: 65:c8:5a:47:f5:a4:f2:d9:47:a2:77:65:16:1c:1c:08:a3:23: ce:12:1e:bc:2f:6f:e1:05:85:f3:30:ef:6d:3f:bf:71:ef:b6: 07:bd:f8:3e:56:e5:07:b6:54:70:00:64:91:b1:8a:4e:d9:48: a2:5f:53:dc:72:db:cb:ba:31:0f:e4:82:37:6a:02:d3:7a:50: 35:f8:7e:62:89:d5:64:6f:e4:94:91:ef:40:e8:50:46:37:9e: 53:5b:f3:1f:26:f7:e9:87:82:db:2e:e3:c2:e9:2d:b4:13:ed: 25:d4:6a:ea:d4:ea:61:66:9d:8c:6b:39:bf:4a:fe:39:09:d7: 06:1a:94:eb:93:ab:0c:24:2f:b8:96:66:43:5b:e8:2d:c9:b0: 16:a5:34:5b:ac:77:a7:ef:ca:57:82:6c:f6:6d:9c:f5:28:6d: f6:27:1e:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRsgPA6quS0t+IR4gzqu1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmY2E2NTkyYzBmZTM0ZmFiZWZjYzQzNzE5Mjg3Yjg0NGQ0 N2NhMDMwHhcNMjYwMjA5MTIwMTAwWhcNMjYwMjEwMTIwMTAwWjAzMTEwLwYDVQQD EyhiOTE5YWIxOTdiYjM2ODJlYTg5NzNmYjUyOTYwZTg1NDIwMmMxYzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO+gymjpAtVELqMVj35VPrdzVjCh 9jncgyZdiahR6IeO1aq/+blZDum9P75M5UrWIl2hEJl+3GXhspFD1PNUhijw0lZi mzfAoIEqPhWPBre69gUNP+apgysJvkaD9547Y06SoDCdKPCIx7rRQo8VFg2F0mJz Hdu7IvFY47MehyyyyM6rWnq6o8APc2VLzOxL8k4CzsjTrG0CQuX5MuFM5GakCO8O qPjAkWuaFICarWNNFRIgT23V+SuOaWo3QGNURnMTTqMcej7gH2KFwKL41nYPxWTM qNEoL2a2nW0dxXy8wLXu4NpK+xbnmahS5GyO5DZHtP9UujZW0pJsNaI/5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkZqxl7s2guqJc/tSlg6FQgLBxRMB8GA1UdIwQY MBaAFC/KZZLA/jT6vvzENxkoe4RNR8oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDhwbGtzRC1OUHEtX01RM0dTaDdoRTFIeWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83YmY2ODktODJmYy00ODE2LThlY2Ut MWVjZDk5MThiM2E2LzEvTDhwbGtzRC1OUHEtX01RM0dTaDdoRTFIeWdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi83YmY2ODktODJmYy00ODE2LThlY2UtMWVjZDk5MThiM2E2 LzEvTDhwbGtzRC1OUHEtX01RM0dTaDdoRTFIeWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgeCl39Cb UTyOlAjYuPj8/BItLicB5L4eNKz85nat1l4RoQpVe1S26eZd6AbZGxY5hvv/o34K +sNgGAq6CuwcAC8HCjO8em8JWhnhRp5mr1Gi2hU2yjyddNKLZchaR/Wk8tlHondl FhwcCKMjzhIevC9v4QWF8zDvbT+/ce+2B734PlblB7ZUcABkkbGKTtlIol9T3HLb y7oxD+SCN2oC03pQNfh+YonVZG/klJHvQOhQRjeeU1vzHyb36YeC2y7jwukttBPt JdRq6tTqYWadjGs5v0r+OQnXBhqU65OrDCQvuJZmQ1voLcmwFqU0W6x3p+/KV4Js 9m2c9Sht9ice3g== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:26 2026 by rpki-client