This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft File: LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft (raw, json) Hash identifier: Om5Q4PmZqfMQh2zgJ9l9YwkmAvPT+w5JkL/WoPRIi0o= Subject key identifier: 8A:99:80:9F:68:03:30:13:A8:D3:D0:66:5B:47:45:48:06:B1:79:EE Authority key identifier: 2C:AB:10:E8:AF:DF:03:E4:B1:DA:85:7F:AC:05:19:F4:94:3D:BC:AB Certificate issuer: /CN=2cab10e8afdf03e4b1da857fac0519f4943dbcab Certificate serial: 019C4322D4BC8E05DD68DD971829449F0B5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft Manifest number: 180B Signing time: Mon 09 Feb 2026 16:01:22 +0000 Manifest this update: Mon 09 Feb 2026 16:01:22 +0000 Manifest next update: Tue 10 Feb 2026 16:01:22 +0000 Files and hashes: 1: LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl (hash: VJnk7F2cD9SDTR/lhUL0BhzyolXOKeIP4m9CVQzhQNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:d4:bc:8e:05:dd:68:dd:97:18:29:44:9f:0b:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cab10e8afdf03e4b1da857fac0519f4943dbcab Validity Not Before: Feb 9 16:01:22 2026 GMT Not After : Feb 10 16:01:22 2026 GMT Subject: CN=8a99809f68033013a8d3d0665b47454806b179ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a4:e6:fd:fa:f6:93:50:7c:c0:d4:da:e3:f5: f5:72:4c:78:de:22:a1:db:fe:9d:ce:f5:a3:2f:28: 67:7e:35:4c:21:3f:68:24:57:21:0b:b3:3c:76:bf: c4:bc:dc:9a:0f:d8:2d:9c:cb:2c:ec:d7:02:eb:3d: dd:7e:e1:c4:2b:cb:63:3f:14:24:cf:a2:59:62:5e: 6a:53:7d:c3:4a:8a:c0:f1:9c:16:be:43:51:ee:df: 95:de:e4:19:34:29:ed:5a:38:66:f6:10:f3:94:96: 1b:76:38:6e:dc:2c:e2:8d:af:a5:9b:c5:45:25:fe: 05:4f:47:de:91:09:13:8c:95:77:36:26:28:a8:d5: 70:ee:0b:bc:97:76:1a:66:8b:03:54:9e:1a:d1:cf: 5e:49:30:4a:ac:14:4e:96:69:ad:a9:73:b6:2b:05: 99:0c:6f:61:f5:4c:f5:19:50:f6:fb:84:33:ec:14: c5:a3:45:07:c4:6b:56:d2:65:62:c4:51:5f:12:20: 32:f4:c3:e4:a9:81:60:a7:4d:fa:1a:cc:39:b9:82: 75:eb:60:35:51:b2:bc:36:4b:bb:fd:cd:74:81:0f: 2d:86:65:4e:86:60:8f:17:17:fb:39:5e:51:3b:4a: 2c:cf:e7:fa:fb:88:69:64:e2:a7:c4:7d:a3:3f:20: c5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:99:80:9F:68:03:30:13:A8:D3:D0:66:5B:47:45:48:06:B1:79:EE X509v3 Authority Key Identifier: keyid:2C:AB:10:E8:AF:DF:03:E4:B1:DA:85:7F:AC:05:19:F4:94:3D:BC:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:4f:01:50:00:fa:41:72:79:dd:7e:c0:91:bb:0d:d0:6c:eb: 3f:70:06:6c:46:9e:50:ea:8d:50:c4:59:d9:d2:fa:03:99:79: d7:d5:0b:03:1b:e7:bc:6e:83:b8:ea:23:fb:bb:00:e0:b4:00: bf:91:6d:13:ce:ac:5e:b2:a9:2f:91:cb:f8:97:7d:7c:c0:32: b0:72:13:61:ae:a7:07:1a:49:db:18:26:f8:86:c6:6d:1b:d1: 0c:76:c7:28:71:01:89:63:36:13:83:c9:0e:d6:4f:c1:7e:21: ab:61:89:46:cf:00:d3:d4:97:f7:7f:16:86:77:75:e5:a9:60: fe:9d:01:23:d6:65:2c:94:e1:68:54:d5:02:54:ab:b3:86:f8: 5b:da:df:f5:0b:35:e6:27:56:12:ca:88:df:03:f6:4a:dd:c6: fd:6c:4a:36:ea:4a:fb:4b:f5:8a:76:55:a9:ff:cc:74:31:fd: da:9b:f9:66:d2:00:12:69:1b:2b:1e:dd:fc:9d:fe:7e:58:2e: fe:f0:e8:51:e3:e1:d2:07:89:ac:bb:70:45:f3:ef:e8:8f:3e: 76:ce:59:7a:da:48:00:b0:13:12:93:c8:1c:b4:8e:9b:2d:7a: 88:cf:47:9b:4f:1b:cd:fb:ae:b3:4f:eb:10:fc:02:b6:3a:e5: d7:a9:60:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDItS8jgXdaN2XGClEnwtfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYWIxMGU4YWZkZjAzZTRiMWRhODU3ZmFjMDUxOWY0OTQz ZGJjYWIwHhcNMjYwMjA5MTYwMTIyWhcNMjYwMjEwMTYwMTIyWjAzMTEwLwYDVQQD Eyg4YTk5ODA5ZjY4MDMzMDEzYThkM2QwNjY1YjQ3NDU0ODA2YjE3OWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKTm/fr2k1B8wNTa4/X1ckx43iKh 2/6dzvWjLyhnfjVMIT9oJFchC7M8dr/EvNyaD9gtnMss7NcC6z3dfuHEK8tjPxQk z6JZYl5qU33DSorA8ZwWvkNR7t+V3uQZNCntWjhm9hDzlJYbdjhu3Czija+lm8VF Jf4FT0fekQkTjJV3NiYoqNVw7gu8l3YaZosDVJ4a0c9eSTBKrBROlmmtqXO2KwWZ DG9h9Uz1GVD2+4Qz7BTFo0UHxGtW0mVixFFfEiAy9MPkqYFgp036Gsw5uYJ162A1 UbK8Nku7/c10gQ8thmVOhmCPFxf7OV5RO0osz+f6+4hpZOKnxH2jPyDFowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIqZgJ9oAzATqNPQZltHRUgGsXnuMB8GA1UdIwQY MBaAFCyrEOiv3wPksdqFf6wFGfSUPbyrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEtzUTZLX2ZBLVN4Mm9WX3JBVVo5SlE5dktzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82NjllNDctYzA0ZC00ZDk2LWI5YTAt MGQ1MDk0NGYyMzllLzEvTEtzUTZLX2ZBLVN4Mm9WX3JBVVo5SlE5dktzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC82NjllNDctYzA0ZC00ZDk2LWI5YTAtMGQ1MDk0NGYyMzll LzEvTEtzUTZLX2ZBLVN4Mm9WX3JBVVo5SlE5dktzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASE8BUAD6 QXJ53X7AkbsN0GzrP3AGbEaeUOqNUMRZ2dL6A5l519ULAxvnvG6DuOoj+7sA4LQA v5FtE86sXrKpL5HL+Jd9fMAysHITYa6nBxpJ2xgm+IbGbRvRDHbHKHEBiWM2E4PJ DtZPwX4hq2GJRs8A09SX938Whnd15alg/p0BI9ZlLJThaFTVAlSrs4b4W9rf9Qs1 5idWEsqI3wP2St3G/WxKNupK+0v1inZVqf/MdDH92pv5ZtIAEmkbKx7d/J3+flgu /vDoUePh0geJrLtwRfPv6I8+ds5ZetpIALATEpPIHLSOmy16iM9Hm08bzfuus0/r EPwCtjrl16lgiA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:20 2026 by rpki-client