This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft File: LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft (raw, json) Hash identifier: nlEurfDtaO3OU/BVhRLK0WUOMKav6rJuFq46SAskaBY= Subject key identifier: 80:FA:6B:85:47:89:75:28:1E:29:B5:26:1B:89:36:C9:57:01:78:D4 Authority key identifier: 2C:FA:A2:2B:D6:5C:AC:82:85:8E:A0:91:68:6D:5B:3B:4B:E3:BD:39 Certificate issuer: /CN=2cfaa22bd65cac82858ea091686d5b3b4be3bd39 Certificate serial: 019C4390250587B8FC704ED34B65E6478736 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft Manifest number: 130E Signing time: Mon 09 Feb 2026 18:00:45 +0000 Manifest this update: Mon 09 Feb 2026 18:00:45 +0000 Manifest next update: Tue 10 Feb 2026 18:00:45 +0000 Files and hashes: 1: LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl (hash: Staw2PMhI6gKzpqvIT3xoIBRDz/cJ8FcDsy+EHMIGIk=) 2: ao8cSCiGJ7ClPx10CHs-9lIIGq8.roa (hash: P9VwufsfbDvR02msSd4m6J1kCxDfxah00sWQYJJy8SE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:25:05:87:b8:fc:70:4e:d3:4b:65:e6:47:87:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cfaa22bd65cac82858ea091686d5b3b4be3bd39 Validity Not Before: Feb 9 18:00:45 2026 GMT Not After : Feb 10 18:00:45 2026 GMT Subject: CN=80fa6b85478975281e29b5261b8936c9570178d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b4:fa:ce:b8:41:0b:5e:be:8f:93:1d:89:68: 4f:9d:61:6a:09:a0:91:4a:ff:99:00:eb:b0:ad:8f: 1b:7f:97:b5:9d:d0:d6:6a:e8:a8:35:9f:16:23:29: 8c:ca:d0:1c:01:45:7a:46:03:72:ba:67:cd:00:21: 40:d4:b6:89:95:0b:b8:b6:7c:c7:07:f4:0b:5e:c1: 6f:d8:51:f3:0c:86:72:1d:e3:b0:cc:4a:e7:18:b2: 8e:35:9c:8c:4d:16:b0:ac:30:f8:bd:a0:b8:3b:d8: a8:63:7b:61:57:1e:e5:8a:8b:c8:86:1e:fd:49:e2: 5e:b1:06:a6:85:99:c3:0b:f8:df:24:24:43:aa:39: 2f:4f:76:a8:ae:57:82:ad:af:07:c5:cb:73:0b:f7: 07:d7:d8:6f:7b:59:35:d1:88:a3:6a:ee:3e:23:0b: 13:97:88:4a:7c:5b:6c:fd:e6:30:73:79:e1:ae:1c: aa:b8:ad:90:10:f9:e2:71:1c:1b:41:1b:d0:40:6b: f8:fd:7e:27:fa:f1:c4:11:3a:52:da:22:ec:44:9d: 9e:1b:de:18:1b:b0:e0:29:c2:90:92:95:6b:b5:aa: 72:ab:ef:a9:cc:eb:42:38:2c:b3:40:0b:e0:77:13: 1a:ce:47:96:16:0e:1a:7c:7f:3b:7b:ee:0a:85:40: 4d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FA:6B:85:47:89:75:28:1E:29:B5:26:1B:89:36:C9:57:01:78:D4 X509v3 Authority Key Identifier: keyid:2C:FA:A2:2B:D6:5C:AC:82:85:8E:A0:91:68:6D:5B:3B:4B:E3:BD:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:53:49:a0:a2:b7:3f:2e:53:ff:3a:ee:3b:7d:9f:1e:56:3a: cd:39:c4:27:1e:5d:1a:3b:75:24:bf:39:85:0e:88:3e:51:f8: 4a:b8:51:57:8e:e1:08:c5:0b:f7:5b:2f:13:9c:66:e8:9f:0c: be:c4:f1:fd:47:28:56:c3:23:44:c7:0c:63:db:30:09:b8:dd: 10:e6:f7:33:cb:6e:82:05:45:52:1e:29:45:db:09:09:5a:81: e7:ba:e0:df:4e:4e:ad:fa:65:01:30:82:f0:cd:0c:47:2c:20: fa:5f:74:69:e8:7b:8a:a9:03:ee:94:d8:4c:fd:0c:c2:5a:c4: 5a:54:29:02:d3:08:bc:2e:2b:ad:ac:ed:a0:b4:70:5a:9b:74: b9:c3:92:c2:7d:1e:2a:e2:8e:49:4f:10:33:1f:07:e0:92:e3: e9:6e:16:e1:1d:02:35:34:90:85:14:58:f5:98:28:a0:41:ee: 2c:1f:a5:0d:64:46:43:36:ed:e9:54:e4:eb:4d:30:01:99:d7: 21:ed:96:69:25:36:1e:f8:16:0c:e0:12:6a:d7:38:73:24:99: 45:26:24:5d:85:10:c2:89:0d:21:8e:5e:0e:8d:fa:96:c8:45: f0:f2:a9:ba:51:50:fd:53:66:b3:b5:ee:8d:f2:2c:03:3c:b7: b8:3a:1e:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkCUFh7j8cE7TS2XmR4c2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZmFhMjJiZDY1Y2FjODI4NThlYTA5MTY4NmQ1YjNiNGJl M2JkMzkwHhcNMjYwMjA5MTgwMDQ1WhcNMjYwMjEwMTgwMDQ1WjAzMTEwLwYDVQQD Eyg4MGZhNmI4NTQ3ODk3NTI4MWUyOWI1MjYxYjg5MzZjOTU3MDE3OGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rT6zrhBC16+j5MdiWhPnWFqCaCR Sv+ZAOuwrY8bf5e1ndDWauioNZ8WIymMytAcAUV6RgNyumfNACFA1LaJlQu4tnzH B/QLXsFv2FHzDIZyHeOwzErnGLKONZyMTRawrDD4vaC4O9ioY3thVx7liovIhh79 SeJesQamhZnDC/jfJCRDqjkvT3aorleCra8HxctzC/cH19hve1k10Yijau4+IwsT l4hKfFts/eYwc3nhrhyquK2QEPnicRwbQRvQQGv4/X4n+vHEETpS2iLsRJ2eG94Y G7DgKcKQkpVrtapyq++pzOtCOCyzQAvgdxMazkeWFg4afH87e+4KhUBNWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFID6a4VHiXUoHim1JhuJNslXAXjUMB8GA1UdIwQY MBaAFCz6oivWXKyChY6gkWhtWztL4705MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFBxaUs5WmNySUtGanFDUmFHMWJPMHZqdlRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81YmU0NGMtYTRmMi00YmQwLWI1YTct YjQ2ODgzOGM3ZmRmLzEvTFBxaUs5WmNySUtGanFDUmFHMWJPMHZqdlRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS81YmU0NGMtYTRmMi00YmQwLWI1YTctYjQ2ODgzOGM3ZmRm LzEvTFBxaUs5WmNySUtGanFDUmFHMWJPMHZqdlRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClNJoKK3 Py5T/zruO32fHlY6zTnEJx5dGjt1JL85hQ6IPlH4SrhRV47hCMUL91svE5xm6J8M vsTx/UcoVsMjRMcMY9swCbjdEOb3M8tuggVFUh4pRdsJCVqB57rg305OrfplATCC 8M0MRywg+l90aeh7iqkD7pTYTP0MwlrEWlQpAtMIvC4rraztoLRwWpt0ucOSwn0e KuKOSU8QMx8H4JLj6W4W4R0CNTSQhRRY9ZgooEHuLB+lDWRGQzbt6VTk600wAZnX Ie2WaSU2HvgWDOASatc4cySZRSYkXYUQwokNIY5eDo36lshF8PKpulFQ/VNms7Xu jfIsAzy3uDoeWw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:34 2026 by rpki-client