This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft File: LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft (raw, json) Hash identifier: 5qjAV6+Q6ojG7FF8/GvR8jUjwKZVQJJGZgsWIV/VadA= Subject key identifier: B6:6D:F7:01:18:4A:37:D7:2D:90:3A:6D:C5:55:DF:7D:5D:88:7E:26 Authority key identifier: 2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A Certificate issuer: /CN=2de1203acd9b07a11ea37e82f6c241ff8402975a Certificate serial: 019C1CB9BAECB993AEFCD2CED5E8404CC2D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft Manifest number: 17FB Signing time: Mon 02 Feb 2026 05:00:59 +0000 Manifest this update: Mon 02 Feb 2026 05:00:59 +0000 Manifest next update: Tue 03 Feb 2026 05:00:59 +0000 Files and hashes: 1: BHb65oEe87M0M_POvyT9Y4SCR5o.roa (hash: sBqJRrwyip4eAtZfyp+mo4JP1rjpyldZyBdCRdUfx7M=) 2: LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl (hash: o2QLBmIXL3UvIeo8YIfwwlOFawTmPOgvVW1WYuwt8Tg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:b9:ba:ec:b9:93:ae:fc:d2:ce:d5:e8:40:4c:c2:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2de1203acd9b07a11ea37e82f6c241ff8402975a Validity Not Before: Feb 2 05:00:59 2026 GMT Not After : Feb 3 05:00:59 2026 GMT Subject: CN=b66df701184a37d72d903a6dc555df7d5d887e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e1:8e:68:24:60:8c:cd:67:42:22:17:5a:a4: 19:16:df:4b:a7:d9:f7:f6:de:81:9b:7d:cc:b4:40: 06:db:3b:06:5b:b2:eb:60:ea:1c:24:6f:39:3b:42: 28:13:d7:2f:9a:4f:78:d5:f0:97:eb:3f:9d:87:bd: 20:6c:5e:b2:89:d9:57:3e:5a:87:b1:8e:0f:c2:c2: 7a:91:71:e7:b4:35:28:61:96:cf:a0:72:c4:3a:5c: e3:ad:5a:e5:c0:85:cc:20:89:02:7b:0d:6d:e0:58: d5:98:23:b4:90:12:ef:ca:01:91:26:28:54:9c:be: 05:95:6a:86:80:dd:5e:58:33:cc:0a:77:e9:8f:fb: 2f:0b:3a:12:e4:db:3c:49:0c:4a:89:82:e5:ce:0e: 6c:09:97:c8:af:3b:7e:7e:f3:2d:d8:82:51:e9:65: fc:a5:d7:05:71:17:c5:9f:4f:c1:da:0f:54:1c:95: 68:d9:fe:1e:0f:55:1c:ef:7c:76:2d:13:d1:9c:b0: 0c:de:d2:79:69:32:dd:d4:16:62:3e:1a:70:5f:ac: 99:e2:cd:5b:2f:05:86:7a:92:cf:95:29:75:77:b2: fc:d7:cc:b6:6e:b7:66:dc:0d:c1:7e:03:c7:87:c7: 48:68:30:6a:75:8d:49:1f:80:91:52:15:d5:0f:00: c0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6D:F7:01:18:4A:37:D7:2D:90:3A:6D:C5:55:DF:7D:5D:88:7E:26 X509v3 Authority Key Identifier: keyid:2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:f5:3f:19:f5:34:98:eb:0e:91:b3:63:c4:ea:9f:0c:99:d0: bb:55:27:a9:45:f8:1e:d8:a1:2f:a5:a6:63:11:66:3d:26:5e: 27:01:db:7a:53:f4:21:3e:89:45:f1:6d:59:27:04:bf:8b:7d: dc:ca:e4:b1:a7:c2:e3:a1:bd:c0:75:9d:49:36:fb:e6:01:02: d1:a9:72:b2:38:04:fb:be:8f:c2:05:35:4d:ab:c0:06:64:59: 35:9e:be:c9:06:22:86:c7:d5:73:4e:d0:06:3d:44:90:a1:2d: 53:f3:6b:65:19:33:49:06:7b:f9:35:f9:f4:27:14:6e:f1:e9: 77:31:f1:7c:29:ee:58:df:4b:24:c1:73:87:7f:4d:14:61:03: 63:23:5b:11:ad:42:b2:08:e4:c5:e6:dd:a6:bf:ff:83:89:b9: c3:1b:65:53:9b:46:bf:58:81:4d:47:70:9c:ed:8c:ef:50:4f: 32:bc:42:d8:66:cb:bb:06:1d:f0:59:df:5c:ef:9a:95:46:91: 92:1f:a5:ff:4a:5c:d1:c1:48:80:0c:f4:06:ce:a0:a4:ac:7a: 71:d9:e0:fe:95:56:33:42:d6:8e:95:a9:08:18:a4:79:24:1c: bd:6e:79:8b:62:a6:d8:7e:3c:c1:b8:80:e7:23:9e:4c:84:7b: f8:4b:b2:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcubrsuZOu/NLO1ehATMLUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZTEyMDNhY2Q5YjA3YTExZWEzN2U4MmY2YzI0MWZmODQw Mjk3NWEwHhcNMjYwMjAyMDUwMDU5WhcNMjYwMjAzMDUwMDU5WjAzMTEwLwYDVQQD EyhiNjZkZjcwMTE4NGEzN2Q3MmQ5MDNhNmRjNTU1ZGY3ZDVkODg3ZTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuGOaCRgjM1nQiIXWqQZFt9Lp9n3 9t6Bm33MtEAG2zsGW7LrYOocJG85O0IoE9cvmk941fCX6z+dh70gbF6yidlXPlqH sY4PwsJ6kXHntDUoYZbPoHLEOlzjrVrlwIXMIIkCew1t4FjVmCO0kBLvygGRJihU nL4FlWqGgN1eWDPMCnfpj/svCzoS5Ns8SQxKiYLlzg5sCZfIrzt+fvMt2IJR6WX8 pdcFcRfFn0/B2g9UHJVo2f4eD1Uc73x2LRPRnLAM3tJ5aTLd1BZiPhpwX6yZ4s1b LwWGepLPlSl1d7L818y2brdm3A3BfgPHh8dIaDBqdY1JH4CRUhXVDwDAQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZt9wEYSjfXLZA6bcVV331diH4mMB8GA1UdIwQY MBaAFC3hIDrNmwehHqN+gvbCQf+EApdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGVFZ09zMmJCNkVlbzM2QzlzSkJfNFFDbDFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jMWFlOGQtYzJjYi00ZmU1LTlhMWMt ZjI4Y2QyNzY0OTA0LzEvTGVFZ09zMmJCNkVlbzM2QzlzSkJfNFFDbDFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9jMWFlOGQtYzJjYi00ZmU1LTlhMWMtZjI4Y2QyNzY0OTA0 LzEvTGVFZ09zMmJCNkVlbzM2QzlzSkJfNFFDbDFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPU/GfU0 mOsOkbNjxOqfDJnQu1UnqUX4HtihL6WmYxFmPSZeJwHbelP0IT6JRfFtWScEv4t9 3MrksafC46G9wHWdSTb75gEC0alysjgE+76PwgU1TavABmRZNZ6+yQYihsfVc07Q Bj1EkKEtU/NrZRkzSQZ7+TX59CcUbvHpdzHxfCnuWN9LJMFzh39NFGEDYyNbEa1C sgjkxebdpr//g4m5wxtlU5tGv1iBTUdwnO2M71BPMrxC2GbLuwYd8FnfXO+alUaR kh+l/0pc0cFIgAz0Bs6gpKx6cdng/pVWM0LWjpWpCBikeSQcvW55i2Km2H48wbiA 5yOeTIR7+EuyKA== -----END CERTIFICATE-----Generated at Mon Feb 2 12:48:38 2026 by rpki-client