This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft File: l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft (raw, json) Hash identifier: XBCb7DIIY76IwhK3ncpbwNf4/5Ny0JS+D8zXdrQ8Hgg= Subject key identifier: EF:E1:B0:57:C0:F1:11:00:21:E9:F4:2C:BA:90:54:72:E3:61:5C:D8 Authority key identifier: 97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B Certificate issuer: /CN=97c60d4d458cec3b8d618a01300642b588c3173b Certificate serial: 019C420F49F9A9DB02D3EF260F084EC6F814 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft Manifest number: 1620 Signing time: Mon 09 Feb 2026 11:00:24 +0000 Manifest this update: Mon 09 Feb 2026 11:00:24 +0000 Manifest next update: Tue 10 Feb 2026 11:00:24 +0000 Files and hashes: 1: GSheiqG0sKaOK_fFmZYJC3QfvLo.roa (hash: 5B6cRBlSKlHWSJH0+zxK6L6MtaJyKkMFEXEoN+t2Rxk=) 2: l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl (hash: iw6SXgAJ3I0r+zfvzWB4wMRuoSw9PiOmFn/HfBr3d0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:49:f9:a9:db:02:d3:ef:26:0f:08:4e:c6:f8:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97c60d4d458cec3b8d618a01300642b588c3173b Validity Not Before: Feb 9 11:00:24 2026 GMT Not After : Feb 10 11:00:24 2026 GMT Subject: CN=efe1b057c0f1110021e9f42cba905472e3615cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a2:b9:2a:7f:51:9b:49:99:0c:1e:0a:93:26: 60:26:f0:54:10:bf:1c:83:6a:0b:29:a0:9c:b3:12: a7:94:87:82:16:e5:c8:99:30:e2:c1:a9:f0:a1:fc: 4d:38:5c:3b:96:cb:bc:e2:84:69:0d:c0:56:59:5c: da:b7:3a:60:76:2c:b4:99:fc:2f:ff:c6:c2:88:1a: 8e:b6:cd:da:1d:1e:bc:c5:87:48:1f:0d:99:20:79: 23:8b:b8:06:4c:82:27:23:54:97:ed:ed:cb:7a:5d: 7a:4a:7d:b4:7f:1b:a9:43:4b:61:99:9e:63:5b:5e: 7a:85:5b:be:a3:e9:84:d0:43:7e:84:51:79:95:1e: 1b:53:9c:bd:a0:9b:83:d7:a1:12:33:c9:d4:70:3c: 38:d4:c9:c4:98:64:e5:3e:10:2f:e3:b1:4e:df:5a: 11:c7:35:91:d8:a2:34:eb:27:7f:0d:7d:af:6e:c2: 05:e6:1b:e0:6d:f4:73:c7:e2:f3:09:16:bf:da:d7: ef:ce:4b:85:4e:eb:6c:d1:dc:63:a6:44:1d:3a:81: 5e:a0:c0:82:b7:8e:f8:3b:4f:25:6b:70:19:1a:a7: d9:ea:58:02:5f:18:d9:03:9c:21:e5:95:0b:c7:e1: db:5f:eb:8e:75:01:c7:d4:10:b5:85:f5:9c:85:99: 04:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E1:B0:57:C0:F1:11:00:21:E9:F4:2C:BA:90:54:72:E3:61:5C:D8 X509v3 Authority Key Identifier: keyid:97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:a9:f6:23:3f:d7:4e:8a:7a:96:15:a5:f4:ea:37:66:f5:01: ea:22:2d:9c:62:f4:81:ec:06:30:f6:0a:7b:37:92:52:c2:bc: 46:9e:f9:6e:68:01:6e:52:0f:66:a1:ee:34:09:74:8c:12:79: e1:10:c1:00:55:3e:74:93:0b:91:73:ae:d2:13:f8:f2:1d:44: 34:6f:4d:7e:08:43:36:c8:2b:d2:a6:dd:25:f4:aa:3d:86:ef: fa:81:33:ba:ec:08:c2:73:cf:dc:f6:8c:ef:7d:25:19:c5:7c: 0c:73:b6:c4:b2:b8:36:8d:be:73:3c:72:53:60:c8:f0:2a:65: 65:95:6c:a6:c0:d2:01:5f:f4:a1:59:fc:ce:22:ab:6e:a2:96: 67:68:20:28:27:18:84:82:1c:c2:82:30:fe:b3:12:5c:90:e4: 55:90:77:a3:0e:66:67:2a:3b:36:df:c0:d6:7d:37:31:17:34: 0b:5d:bc:bf:2a:b0:56:e2:45:2c:6a:25:87:07:dd:bd:35:0d: 1e:dd:f7:ad:3f:38:36:d8:d9:a9:49:1c:14:54:bf:e4:bf:e5: dc:84:42:b1:4c:6a:da:da:8f:f9:0e:f3:d8:cc:5c:14:43:68: 06:fa:ce:3f:cb:1e:31:b1:e9:0b:ef:29:63:59:f2:d3:47:9d: fb:ac:d6:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD0n5qdsC0+8mDwhOxvgUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3YzYwZDRkNDU4Y2VjM2I4ZDYxOGEwMTMwMDY0MmI1ODhj MzE3M2IwHhcNMjYwMjA5MTEwMDI0WhcNMjYwMjEwMTEwMDI0WjAzMTEwLwYDVQQD EyhlZmUxYjA1N2MwZjExMTAwMjFlOWY0MmNiYTkwNTQ3MmUzNjE1Y2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqK5Kn9Rm0mZDB4KkyZgJvBUEL8c g2oLKaCcsxKnlIeCFuXImTDiwanwofxNOFw7lsu84oRpDcBWWVzatzpgdiy0mfwv /8bCiBqOts3aHR68xYdIHw2ZIHkji7gGTIInI1SX7e3Lel16Sn20fxupQ0thmZ5j W156hVu+o+mE0EN+hFF5lR4bU5y9oJuD16ESM8nUcDw41MnEmGTlPhAv47FO31oR xzWR2KI06yd/DX2vbsIF5hvgbfRzx+LzCRa/2tfvzkuFTuts0dxjpkQdOoFeoMCC t474O08la3AZGqfZ6lgCXxjZA5wh5ZULx+HbX+uOdQHH1BC1hfWchZkExQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/hsFfA8REAIen0LLqQVHLjYVzYMB8GA1UdIwQY MBaAFJfGDU1FjOw7jWGKATAGQrWIwxc7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDhZTlRVV003RHVOWVlvQk1BWkN0WWpERnpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYjRiMTctYWE2Yi00ZmMyLWEwM2Yt N2MwMzYxNzgxMjZjLzEvbDhZTlRVV003RHVOWVlvQk1BWkN0WWpERnpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lYjRiMTctYWE2Yi00ZmMyLWEwM2YtN2MwMzYxNzgxMjZj LzEvbDhZTlRVV003RHVOWVlvQk1BWkN0WWpERnpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoqn2Iz/X Top6lhWl9Oo3ZvUB6iItnGL0gewGMPYKezeSUsK8Rp75bmgBblIPZqHuNAl0jBJ5 4RDBAFU+dJMLkXOu0hP48h1ENG9NfghDNsgr0qbdJfSqPYbv+oEzuuwIwnPP3PaM 730lGcV8DHO2xLK4No2+czxyU2DI8CplZZVspsDSAV/0oVn8ziKrbqKWZ2ggKCcY hIIcwoIw/rMSXJDkVZB3ow5mZyo7Nt/A1n03MRc0C128vyqwVuJFLGolhwfdvTUN Ht33rT84NtjZqUkcFFS/5L/l3IRCsUxq2tqP+Q7z2MxcFENoBvrOP8seMbHpC+8p Y1ny00ed+6zW+Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:37 2026 by rpki-client