This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft File: lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft (raw, json) Hash identifier: 4qMzOIMcBSuT2YmqCcaKWwpaTlSVj+rSTa5Dz7xQe+g= Subject key identifier: B9:66:46:06:D6:E9:F2:37:80:FA:ED:D4:27:82:B3:77:CE:45:60:14 Authority key identifier: 94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D Certificate issuer: /CN=94fcde45305bd0cc8d25d7c6edca719136f5606d Certificate serial: 019C420FC6E8819A9BBDFA4A6B61E2D901AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft Manifest number: 15BD Signing time: Mon 09 Feb 2026 11:00:56 +0000 Manifest this update: Mon 09 Feb 2026 11:00:56 +0000 Manifest next update: Tue 10 Feb 2026 11:00:56 +0000 Files and hashes: 1: lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl (hash: QlmFC8FaLphc2CUitfggARmtrqr6Fjz7Zhyg5N1PKBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:c6:e8:81:9a:9b:bd:fa:4a:6b:61:e2:d9:01:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94fcde45305bd0cc8d25d7c6edca719136f5606d Validity Not Before: Feb 9 11:00:56 2026 GMT Not After : Feb 10 11:00:56 2026 GMT Subject: CN=b9664606d6e9f23780faedd42782b377ce456014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ff:ab:5a:36:09:60:ae:2a:50:a2:6a:04:87: 8e:27:b6:b1:10:af:ac:52:31:3b:61:b2:fd:f1:96: 37:1a:85:e2:e7:11:f2:69:56:08:fb:9e:76:16:f1: 6e:70:f1:20:dc:85:ad:2e:f6:d6:49:ea:99:04:6e: 3f:7d:26:42:3f:aa:b8:93:56:b4:a3:c9:d7:4d:1d: e2:f6:55:70:6d:1c:57:06:3f:e2:f1:82:6e:51:29: 68:9a:67:f0:63:e9:d9:74:4c:c3:0b:46:c9:d4:2e: 75:ff:a8:45:80:d8:a8:83:ad:3c:3a:bd:37:12:93: fd:07:0b:7d:18:fc:5f:06:c8:d6:5a:70:67:5b:99: 55:65:41:fb:fb:8b:3d:61:1c:8d:e8:ba:0a:85:90: 72:03:c4:9e:85:d3:d5:52:d6:37:b1:ee:2c:e7:65: 9c:47:3f:a1:bc:d3:95:e8:e3:22:84:76:4b:6a:ef: 6e:84:92:d2:54:57:e0:45:15:3d:78:dc:48:b8:a6: cd:de:dd:74:66:ce:d6:65:f5:b3:85:f0:21:7c:3f: b3:b2:2c:32:ed:c1:1c:35:00:5c:09:42:7e:a1:2a: cb:05:28:b3:7f:53:18:cb:c4:1e:49:21:62:01:b2: d2:04:72:ad:97:ec:f0:31:33:28:af:0d:bc:4d:ed: 69:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:66:46:06:D6:E9:F2:37:80:FA:ED:D4:27:82:B3:77:CE:45:60:14 X509v3 Authority Key Identifier: keyid:94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:eb:66:ef:16:23:4f:ce:12:1b:f8:03:0b:2f:31:7a:cd:fa: 1b:97:0c:32:5e:4d:a8:8b:15:9a:12:2c:b3:8c:67:0e:4a:26: 7a:b4:10:a1:ce:6a:22:a7:b8:ad:68:b8:4a:11:cd:6b:5d:f2: 01:e7:05:55:97:20:ac:13:59:32:12:bf:93:df:2e:22:d7:69: e7:31:85:fb:dc:e4:4d:23:f8:11:2d:be:37:8f:40:72:0a:5e: 5e:d9:f3:ff:26:7c:56:18:da:c5:8b:df:01:85:f0:f0:7c:87: 78:4e:d8:34:54:3c:03:24:c8:6e:35:ed:5c:aa:15:ac:3e:3c: 55:10:1f:36:e1:d9:15:63:de:5b:0e:70:7a:d2:ff:b1:bd:2c: 3f:81:da:aa:ba:fd:cc:81:61:78:9f:a1:de:fc:2f:e9:0e:88: 12:fc:03:59:7d:f5:7c:7f:18:60:02:db:a1:0e:29:35:34:be: 0b:94:41:0a:d3:e4:af:84:8a:b8:cc:09:37:09:b1:9c:a6:1b: be:c6:71:d9:9e:e1:41:29:67:6d:53:3e:08:67:6d:1c:9d:26: c4:d2:88:9c:69:6f:93:12:49:f5:23:3a:51:94:3c:ad:5f:83: ec:bf:f8:17:88:38:af:a9:fd:ff:d3:b3:1e:ab:fe:ec:ab:fa: 15:8c:93:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD8bogZqbvfpKa2Hi2QGsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZmNkZTQ1MzA1YmQwY2M4ZDI1ZDdjNmVkY2E3MTkxMzZm NTYwNmQwHhcNMjYwMjA5MTEwMDU2WhcNMjYwMjEwMTEwMDU2WjAzMTEwLwYDVQQD EyhiOTY2NDYwNmQ2ZTlmMjM3ODBmYWVkZDQyNzgyYjM3N2NlNDU2MDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf+rWjYJYK4qUKJqBIeOJ7axEK+s UjE7YbL98ZY3GoXi5xHyaVYI+552FvFucPEg3IWtLvbWSeqZBG4/fSZCP6q4k1a0 o8nXTR3i9lVwbRxXBj/i8YJuUSlommfwY+nZdEzDC0bJ1C51/6hFgNiog608Or03 EpP9Bwt9GPxfBsjWWnBnW5lVZUH7+4s9YRyN6LoKhZByA8SehdPVUtY3se4s52Wc Rz+hvNOV6OMihHZLau9uhJLSVFfgRRU9eNxIuKbN3t10Zs7WZfWzhfAhfD+zsiwy 7cEcNQBcCUJ+oSrLBSizf1MYy8QeSSFiAbLSBHKtl+zwMTMorw28Te1p9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlmRgbW6fI3gPrt1CeCs3fORWAUMB8GA1UdIwQY MBaAFJT83kUwW9DMjSXXxu3KcZE29WBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFB6ZVJUQmIwTXlOSmRmRzdjcHhrVGIxWUcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8xYjFiZTQtYmNjMC00YjIxLTgwZGYt MjAzZGNiZjdkM2ZjLzEvbFB6ZVJUQmIwTXlOSmRmRzdjcHhrVGIxWUcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8xYjFiZTQtYmNjMC00YjIxLTgwZGYtMjAzZGNiZjdkM2Zj LzEvbFB6ZVJUQmIwTXlOSmRmRzdjcHhrVGIxWUcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0+tm7xYj T84SG/gDCy8xes36G5cMMl5NqIsVmhIss4xnDkomerQQoc5qIqe4rWi4ShHNa13y AecFVZcgrBNZMhK/k98uItdp5zGF+9zkTSP4ES2+N49AcgpeXtnz/yZ8VhjaxYvf AYXw8HyHeE7YNFQ8AyTIbjXtXKoVrD48VRAfNuHZFWPeWw5wetL/sb0sP4Haqrr9 zIFheJ+h3vwv6Q6IEvwDWX31fH8YYALboQ4pNTS+C5RBCtPkr4SKuMwJNwmxnKYb vsZx2Z7hQSlnbVM+CGdtHJ0mxNKInGlvkxJJ9SM6UZQ8rV+D7L/4F4g4r6n9/9Oz Hqv+7Kv6FYyTpQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:03 2026 by rpki-client