This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft File: LYaVbM1-OrtCkd1U29i0NCv5V8w.mft (raw, json) Hash identifier: h7CyAwoBu737sV0T82uYdF24n31lmEA+GDsQmDR4FOQ= Subject key identifier: DB:AB:5E:89:85:2E:5C:CD:43:14:B5:17:23:FD:7A:FC:C2:DD:B0:62 Authority key identifier: 2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC Certificate issuer: /CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc Certificate serial: 019C41D8675AAF47335104359123D467D82F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft Manifest number: 1814 Signing time: Mon 09 Feb 2026 10:00:26 +0000 Manifest this update: Mon 09 Feb 2026 10:00:26 +0000 Manifest next update: Tue 10 Feb 2026 10:00:26 +0000 Files and hashes: 1: LYaVbM1-OrtCkd1U29i0NCv5V8w.crl (hash: nLxs3xFZDBeAvIl+fdo90V7DdM+l9mwFGXxVSFnBOI0=) 2: UZ3Zh5sbw9GQyuWThFTa8ax6K-k.roa (hash: yAGOxTch7/IeLN3QFrJm+PJnLSPNYzzaqiRQZwJHefI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:67:5a:af:47:33:51:04:35:91:23:d4:67:d8:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc Validity Not Before: Feb 9 10:00:26 2026 GMT Not After : Feb 10 10:00:26 2026 GMT Subject: CN=dbab5e89852e5ccd4314b51723fd7afcc2ddb062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e2:83:78:13:40:54:49:d1:e4:7a:04:c8:f0: ad:20:4e:5b:e8:fc:58:1e:3e:5c:94:be:3e:ef:95: 9b:2c:df:4f:7c:65:7d:a8:12:dd:84:65:bb:ee:8a: ff:70:c8:6d:e7:b1:5e:1d:d5:e8:58:f8:f6:3e:1e: 6b:6d:13:bf:9b:dc:ba:df:ad:bc:86:0b:9a:94:fe: 79:3b:27:ff:41:32:56:f9:ec:92:5c:e6:a8:17:ab: e3:eb:9f:38:d6:2a:41:3c:b3:bd:50:9d:4c:bc:52: 65:86:fb:4c:fd:90:f7:26:0b:b6:71:64:f1:0a:3b: 63:ed:ba:8b:8e:5d:7a:0b:bb:1e:6c:27:47:48:2a: 01:d3:1f:f8:dd:4f:af:bf:77:d3:14:ef:eb:4e:38: 95:87:4b:c3:88:17:bc:09:34:88:96:10:f2:43:ce: 60:9b:58:30:31:c3:53:5e:67:67:a6:24:a0:5d:14: c4:96:af:e1:dc:d7:61:b2:a8:3d:dc:2b:34:08:95: fb:30:0b:e1:f5:90:59:e4:f1:af:6a:62:a9:d3:4a: 9a:63:c0:79:62:fb:91:2d:6a:de:dc:6d:8d:db:32: e8:3a:8b:b1:a6:77:52:f2:9a:b8:e2:37:35:4a:f1: 8c:6d:bd:04:fc:bf:29:12:fd:24:04:c7:7a:10:99: 05:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:AB:5E:89:85:2E:5C:CD:43:14:B5:17:23:FD:7A:FC:C2:DD:B0:62 X509v3 Authority Key Identifier: keyid:2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:ec:1e:74:3c:07:d4:0f:64:8e:f5:0e:16:46:cd:3b:d4:ab: d8:48:42:c4:34:20:b3:12:af:48:79:74:88:6d:d2:59:9f:7e: c4:61:d1:f2:a4:84:27:30:8f:44:8c:85:4e:70:3f:f3:6d:a3: ec:8d:5b:aa:91:61:2d:63:1f:1b:bf:84:fc:29:db:a9:d7:46: df:83:47:67:60:25:d0:92:63:eb:6c:ad:42:f6:16:2e:1c:e0: f3:3c:03:de:8f:5b:f1:f9:06:b9:21:3d:56:18:6e:fe:30:8f: 38:22:ef:49:82:8e:24:2f:07:53:82:d3:35:03:e6:3d:85:8c: 23:dc:07:8e:b0:d1:4b:6f:f3:6b:26:c2:58:65:67:f4:f7:76: 90:77:b9:e2:af:a8:c2:6a:32:f0:08:c1:9d:87:76:6e:7e:29: a0:3b:ad:6d:88:96:0a:d7:23:04:bb:f2:6f:9d:3b:5f:df:81: ec:65:29:5d:49:b1:d9:34:79:34:89:92:92:cb:cf:b1:a5:78: 6f:a5:35:62:82:6f:c4:89:d1:68:88:9e:e9:86:ba:fa:9c:0a: 40:5c:06:de:7f:65:52:3b:15:a3:d8:e0:d6:1c:88:0a:08:c8: 9f:7c:da:77:49:31:ca:26:ad:a8:ea:0e:bc:ff:f5:c3:6e:2a: c4:cd:93:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2Gdar0czUQQ1kSPUZ9gvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkODY5NTZjY2Q3ZTNhYmI0MjkxZGQ1NGRiZDhiNDM0MmJm OTU3Y2MwHhcNMjYwMjA5MTAwMDI2WhcNMjYwMjEwMTAwMDI2WjAzMTEwLwYDVQQD EyhkYmFiNWU4OTg1MmU1Y2NkNDMxNGI1MTcyM2ZkN2FmY2MyZGRiMDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+KDeBNAVEnR5HoEyPCtIE5b6PxY Hj5clL4+75WbLN9PfGV9qBLdhGW77or/cMht57FeHdXoWPj2Ph5rbRO/m9y63628 hgualP55Oyf/QTJW+eySXOaoF6vj65841ipBPLO9UJ1MvFJlhvtM/ZD3Jgu2cWTx Cjtj7bqLjl16C7sebCdHSCoB0x/43U+vv3fTFO/rTjiVh0vDiBe8CTSIlhDyQ85g m1gwMcNTXmdnpiSgXRTElq/h3Ndhsqg93Cs0CJX7MAvh9ZBZ5PGvamKp00qaY8B5 YvuRLWre3G2N2zLoOouxpndS8pq44jc1SvGMbb0E/L8pEv0kBMd6EJkFqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNurXomFLlzNQxS1FyP9evzC3bBiMB8GA1UdIwQY MBaAFC2GlWzNfjq7QpHdVNvYtDQr+VfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFlhVmJNMS1PcnRDa2QxVTI5aTBOQ3Y1Vjh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8wNjRlMzUtODgxNC00M2Y2LWI0OGIt YTI2ZGUzMTNiMzRkLzEvTFlhVmJNMS1PcnRDa2QxVTI5aTBOQ3Y1Vjh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8wNjRlMzUtODgxNC00M2Y2LWI0OGItYTI2ZGUzMTNiMzRk LzEvTFlhVmJNMS1PcnRDa2QxVTI5aTBOQ3Y1Vjh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqewedDwH 1A9kjvUOFkbNO9Sr2EhCxDQgsxKvSHl0iG3SWZ9+xGHR8qSEJzCPRIyFTnA/822j 7I1bqpFhLWMfG7+E/CnbqddG34NHZ2Al0JJj62ytQvYWLhzg8zwD3o9b8fkGuSE9 Vhhu/jCPOCLvSYKOJC8HU4LTNQPmPYWMI9wHjrDRS2/zaybCWGVn9Pd2kHe54q+o wmoy8AjBnYd2bn4poDutbYiWCtcjBLvyb507X9+B7GUpXUmx2TR5NImSksvPsaV4 b6U1YoJvxInRaIie6Ya6+pwKQFwG3n9lUjsVo9jg1hyICgjIn3zad0kxyiatqOoO vP/1w24qxM2TCA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:16 2026 by rpki-client