This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft File: L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft (raw, json) Hash identifier: IoA8ASnHXH0CRuEk1sJ5kd2VpOrn+j5BAk82eirSr24= Subject key identifier: 4B:88:0A:90:4C:3A:BB:42:3C:48:02:D0:B1:1A:FD:89:13:D6:13:F4 Authority key identifier: 2F:70:53:26:64:34:3C:B3:D2:89:70:23:A1:27:F6:0B:A9:17:A5:DD Certificate issuer: /CN=2f70532664343cb3d2897023a127f60ba917a5dd Certificate serial: 019C42B485246D57BCE60C352E4F0C6CEAB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft Manifest number: 0E03 Signing time: Mon 09 Feb 2026 14:00:52 +0000 Manifest this update: Mon 09 Feb 2026 14:00:52 +0000 Manifest next update: Tue 10 Feb 2026 14:00:52 +0000 Files and hashes: 1: L3BTJmQ0PLPSiXAjoSf2C6kXpd0.crl (hash: vlEkYEt7wk+fY+CrzTdXjD7yikcQd+03UeCMUmeIx9Q=) 2: TsNw6_rUlF3WyS0xB9lA_qFI5N0.roa (hash: o/jK1+Sozn92VWRitjnWkL3+T8fEVmw/zg1uz6fdVJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.crl rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft rsync://rpki.ripe.net/repository/DEFAULT/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:85:24:6d:57:bc:e6:0c:35:2e:4f:0c:6c:ea:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f70532664343cb3d2897023a127f60ba917a5dd Validity Not Before: Feb 9 14:00:52 2026 GMT Not After : Feb 10 14:00:52 2026 GMT Subject: CN=4b880a904c3abb423c4802d0b11afd8913d613f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fe:76:2f:81:3a:d0:3d:bd:1f:9d:f5:0a:46: 70:8d:11:78:af:6f:a8:1c:3d:72:37:6a:8e:18:78: 1c:f5:31:9d:01:6e:e0:c9:b0:b7:93:b5:e3:4c:5e: 35:be:38:5d:13:a8:77:60:8a:28:12:93:f9:7f:93: 8f:53:8f:33:aa:3e:91:72:a4:7c:90:32:07:b8:55: 9e:fa:60:8e:ef:75:c7:08:2b:f7:ef:b2:74:08:e8: f6:b5:23:dd:ed:23:34:3c:74:0e:22:44:fb:65:17: 25:e1:03:51:97:06:83:18:ca:4b:dc:87:19:87:41: 61:a9:bd:c5:94:71:82:d4:70:51:01:15:e6:e6:91: c0:10:ae:b9:e0:70:e1:83:bd:15:49:b0:b2:00:5b: 00:11:0e:c5:68:e6:21:ec:b0:20:89:99:52:8a:a6: 30:07:fc:a3:c2:ad:1d:a6:c5:cb:0d:28:4c:58:3e: 06:eb:9a:f4:e4:0a:47:fa:7f:d5:77:bb:4c:c2:05: a7:8d:0c:bf:a1:26:bf:84:b5:c8:95:6a:d2:cc:fe: 73:ee:c3:0c:a1:fd:af:fe:91:83:06:a9:13:19:d9: 88:50:50:39:a9:d8:4b:01:7f:47:5f:7f:78:f9:a5: 27:a2:3e:fd:81:13:1f:8e:b5:a9:bd:dd:b3:f6:43: 98:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:88:0A:90:4C:3A:BB:42:3C:48:02:D0:B1:1A:FD:89:13:D6:13:F4 X509v3 Authority Key Identifier: keyid:2F:70:53:26:64:34:3C:B3:D2:89:70:23:A1:27:F6:0B:A9:17:A5:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:30:de:ba:6d:76:0e:b3:83:9a:83:ec:e2:24:39:08:d4:0a: de:5f:be:91:ba:3a:20:26:e8:a7:64:23:17:0a:74:00:a0:5b: 78:2e:e0:29:e5:fd:99:8b:6b:18:2f:ed:89:cc:34:74:59:ce: e0:a6:b3:c1:4b:8d:39:d4:4b:37:b0:76:df:c6:90:4a:f6:b2: b2:b4:a3:d3:91:cb:ad:16:22:67:2d:d4:50:ae:72:89:d9:98: ab:48:4d:08:7e:5c:9c:df:f6:7e:aa:86:28:fb:9a:08:06:61: d9:51:3f:21:2e:19:fa:85:3c:b4:82:38:28:77:b1:c3:28:10: fc:68:7a:f9:11:4e:e6:3d:92:7e:2b:40:12:73:04:7c:af:43: cc:d4:28:6d:54:b1:cd:51:39:ef:15:9d:36:82:5c:a7:c9:af: 92:56:18:d6:99:ae:6c:34:46:a3:50:b4:79:ab:8b:bb:85:ba: 30:1c:35:30:59:f8:47:0e:e4:ee:2a:53:40:3e:fc:f9:80:a7: 92:76:98:89:50:81:1d:c3:c3:53:74:b8:7b:4e:d2:9b:db:dc: 44:f4:28:40:54:cd:ed:32:f9:68:9d:58:87:0a:c0:af:9a:36: 72:82:13:74:6c:25:ac:c2:28:2c:a8:78:cf:f3:47:84:18:33: af:50:52:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtIUkbVe85gw1Lk8MbOqzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNzA1MzI2NjQzNDNjYjNkMjg5NzAyM2ExMjdmNjBiYTkx N2E1ZGQwHhcNMjYwMjA5MTQwMDUyWhcNMjYwMjEwMTQwMDUyWjAzMTEwLwYDVQQD Eyg0Yjg4MGE5MDRjM2FiYjQyM2M0ODAyZDBiMTFhZmQ4OTEzZDYxM2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf52L4E60D29H531CkZwjRF4r2+o HD1yN2qOGHgc9TGdAW7gybC3k7XjTF41vjhdE6h3YIooEpP5f5OPU48zqj6RcqR8 kDIHuFWe+mCO73XHCCv377J0COj2tSPd7SM0PHQOIkT7ZRcl4QNRlwaDGMpL3IcZ h0Fhqb3FlHGC1HBRARXm5pHAEK654HDhg70VSbCyAFsAEQ7FaOYh7LAgiZlSiqYw B/yjwq0dpsXLDShMWD4G65r05ApH+n/Vd7tMwgWnjQy/oSa/hLXIlWrSzP5z7sMM of2v/pGDBqkTGdmIUFA5qdhLAX9HX394+aUnoj79gRMfjrWpvd2z9kOYrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEuICpBMOrtCPEgC0LEa/YkT1hP0MB8GA1UdIwQY MBaAFC9wUyZkNDyz0olwI6En9gupF6XdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDNCVEptUTBQTFBTaVhBam9TZjJDNmtYcGQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82YzU5YzAtZWNkOC00NzI3LWIxZGUt MzE1YTc5ZjU5ZTE4LzEvTDNCVEptUTBQTFBTaVhBam9TZjJDNmtYcGQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC82YzU5YzAtZWNkOC00NzI3LWIxZGUtMzE1YTc5ZjU5ZTE4 LzEvTDNCVEptUTBQTFBTaVhBam9TZjJDNmtYcGQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmjDeum12 DrODmoPs4iQ5CNQK3l++kbo6ICbop2QjFwp0AKBbeC7gKeX9mYtrGC/ticw0dFnO 4KazwUuNOdRLN7B238aQSvaysrSj05HLrRYiZy3UUK5yidmYq0hNCH5cnN/2fqqG KPuaCAZh2VE/IS4Z+oU8tII4KHexwygQ/Gh6+RFO5j2SfitAEnMEfK9DzNQobVSx zVE57xWdNoJcp8mvklYY1pmubDRGo1C0eauLu4W6MBw1MFn4Rw7k7ipTQD78+YCn knaYiVCBHcPDU3S4e07Sm9vcRPQoQFTN7TL5aJ1YhwrAr5o2coITdGwlrMIoLKh4 z/NHhBgzr1BSow== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:05 2026 by rpki-client