This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft File: LuKffz-qSKlAq42iErSxEWiD8nM.mft (raw, json) Hash identifier: O1HXFZBhKudIUre+gPQC83OAMDlW+1LPRhEGx8cIG1I= Subject key identifier: 20:61:FA:B5:97:28:7E:83:BF:05:44:81:8C:B6:BB:60:16:8B:51:B7 Authority key identifier: 2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73 Certificate issuer: /CN=2ee29f7f3faa48a940ab8da212b4b1116883f273 Certificate serial: 019C41D864B116C7A909D62240C7B908BA83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft Manifest number: 1813 Signing time: Mon 09 Feb 2026 10:00:26 +0000 Manifest this update: Mon 09 Feb 2026 10:00:26 +0000 Manifest next update: Tue 10 Feb 2026 10:00:26 +0000 Files and hashes: 1: LuKffz-qSKlAq42iErSxEWiD8nM.crl (hash: npKYnW/TH999zDyfERtDsaQKag20Y2YMIyMtzkiaOjA=) 2: _v7GfhVuqUV1D7sW2SlcrySGsrA.roa (hash: KzmQ49grnGxQlCZ2CCyjpnejNzdZeWdhTo34zMYUN0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:64:b1:16:c7:a9:09:d6:22:40:c7:b9:08:ba:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ee29f7f3faa48a940ab8da212b4b1116883f273 Validity Not Before: Feb 9 10:00:26 2026 GMT Not After : Feb 10 10:00:26 2026 GMT Subject: CN=2061fab597287e83bf0544818cb6bb60168b51b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4c:6f:58:b7:f3:67:7a:d5:88:ae:1f:74:77: 5e:46:10:e7:d2:86:5f:80:0f:85:75:0b:3a:d6:db: f7:f2:0c:f2:93:61:d3:37:11:0f:c2:c5:1f:40:dc: 35:f0:3b:fc:3a:95:a3:5e:73:49:fa:dd:b2:60:6e: e5:db:cf:13:55:93:17:14:60:41:93:e3:70:ba:be: 44:88:02:90:b0:5a:83:cc:7b:32:ae:bf:61:02:bf: 81:89:41:42:e6:2d:2d:fc:23:0d:bc:25:95:7f:ac: 03:24:67:0b:c1:59:97:20:06:25:69:14:d1:93:ae: e9:f8:41:5d:88:b9:85:ff:93:50:40:17:29:97:68: 09:1b:86:e7:31:98:5d:1b:c7:de:33:c7:4c:4c:fe: ca:a5:9b:ef:4b:97:55:90:4d:e8:74:3d:d7:c6:87: 28:8d:0b:d6:33:fe:46:60:1e:2b:04:26:15:04:d0: 91:1d:f7:df:47:eb:fc:8e:a6:a3:0e:b1:a5:4e:6b: 86:9a:5b:9d:7c:bc:e1:45:f3:35:48:2a:7e:ba:b1: 3c:6c:d6:80:3e:af:3f:b8:aa:ca:a8:49:a9:0a:94: 6a:b6:e9:ab:5f:c3:4d:90:44:d1:9c:ad:57:9f:67: de:48:2f:d5:47:c1:0f:dd:c7:9d:ef:ce:ab:1f:4e: 03:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:61:FA:B5:97:28:7E:83:BF:05:44:81:8C:B6:BB:60:16:8B:51:B7 X509v3 Authority Key Identifier: keyid:2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:cb:ea:c2:e2:df:65:4d:4c:ce:16:6a:dc:f1:aa:01:bc:c4: 61:38:c2:97:8d:92:d2:6f:df:7a:26:dd:1e:10:dc:a0:e5:39: a4:f2:0d:2b:ee:21:e2:15:a0:c6:8a:e5:74:64:c2:32:71:e5: 89:f7:ae:c4:95:87:eb:f8:4f:c8:e2:8c:7e:1b:cf:88:4f:96: 33:8c:5f:bd:60:b6:82:f0:2a:bb:51:4c:27:26:c3:54:38:db: f4:2f:16:99:c3:3f:a4:2a:d1:44:a6:20:79:3b:51:7b:3c:53: f6:5c:81:88:b3:30:d0:f0:38:c6:69:97:15:43:7c:d1:81:46: 03:a0:8d:3f:7c:0f:f2:35:15:24:09:ca:26:7e:1d:5d:c8:bc: c5:44:7e:5a:f9:6c:c9:ba:57:a8:25:d2:52:97:95:02:89:aa: 6b:d5:d0:35:5c:f3:70:26:06:db:03:fd:00:f3:19:e5:90:97: 67:8b:96:4b:8d:23:a5:c3:2f:0f:4e:8f:0e:6d:fc:9a:ad:8f: d2:2f:c9:2d:cc:92:0f:cd:33:35:20:c9:0b:d7:c3:74:1f:c1: 89:1a:72:e0:8d:bf:bb:06:5c:ce:f4:37:6c:5f:3e:ac:54:9b: 04:73:33:d2:73:a8:b2:49:74:4d:91:29:69:ca:d3:30:58:c0: 68:f5:8a:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2GSxFsepCdYiQMe5CLqDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZTI5ZjdmM2ZhYTQ4YTk0MGFiOGRhMjEyYjRiMTExNjg4 M2YyNzMwHhcNMjYwMjA5MTAwMDI2WhcNMjYwMjEwMTAwMDI2WjAzMTEwLwYDVQQD EygyMDYxZmFiNTk3Mjg3ZTgzYmYwNTQ0ODE4Y2I2YmI2MDE2OGI1MWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtExvWLfzZ3rViK4fdHdeRhDn0oZf gA+FdQs61tv38gzyk2HTNxEPwsUfQNw18Dv8OpWjXnNJ+t2yYG7l288TVZMXFGBB k+Nwur5EiAKQsFqDzHsyrr9hAr+BiUFC5i0t/CMNvCWVf6wDJGcLwVmXIAYlaRTR k67p+EFdiLmF/5NQQBcpl2gJG4bnMZhdG8feM8dMTP7KpZvvS5dVkE3odD3Xxoco jQvWM/5GYB4rBCYVBNCRHfffR+v8jqajDrGlTmuGmludfLzhRfM1SCp+urE8bNaA Pq8/uKrKqEmpCpRqtumrX8NNkETRnK1Xn2feSC/VR8EP3ced786rH04DRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBh+rWXKH6DvwVEgYy2u2AWi1G3MB8GA1UdIwQY MBaAFC7in38/qkipQKuNohK0sRFog/JzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHVLZmZ6LXFTS2xBcTQyaUVyU3hFV2lEOG5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC81Njc4NzYtOGQxNy00NmM2LThjZGQt NGI4NDNlOWQwNGY4LzEvTHVLZmZ6LXFTS2xBcTQyaUVyU3hFV2lEOG5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC81Njc4NzYtOGQxNy00NmM2LThjZGQtNGI4NDNlOWQwNGY4 LzEvTHVLZmZ6LXFTS2xBcTQyaUVyU3hFV2lEOG5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhcvqwuLf ZU1MzhZq3PGqAbzEYTjCl42S0m/feibdHhDcoOU5pPINK+4h4hWgxorldGTCMnHl ifeuxJWH6/hPyOKMfhvPiE+WM4xfvWC2gvAqu1FMJybDVDjb9C8WmcM/pCrRRKYg eTtRezxT9lyBiLMw0PA4xmmXFUN80YFGA6CNP3wP8jUVJAnKJn4dXci8xUR+Wvls ybpXqCXSUpeVAomqa9XQNVzzcCYG2wP9APMZ5ZCXZ4uWS40jpcMvD06PDm38mq2P 0i/JLcySD80zNSDJC9fDdB/BiRpy4I2/uwZczvQ3bF8+rFSbBHMz0nOoskl0TZEp acrTMFjAaPWKag== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:18 2026 by rpki-client