This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft File: 03lp9dJTIQsKvo4HoIb2CNbyoK8.mft (raw, json) Hash identifier: bUo/VHdmX107wSKw/6eKhZihywsexAD1rDnhoNHzOh0= Subject key identifier: D5:C5:2C:F3:0A:1E:8B:08:2A:8F:9F:A8:05:5B:7F:33:5D:A5:8E:D6 Authority key identifier: D3:79:69:F5:D2:53:21:0B:0A:BE:8E:07:A0:86:F6:08:D6:F2:A0:AF Certificate issuer: /CN=d37969f5d253210b0abe8e07a086f608d6f2a0af Certificate serial: 019C416AC713067BF2A9DCCFB2D2A053F33E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft Manifest number: 02A2 Signing time: Mon 09 Feb 2026 08:00:42 +0000 Manifest this update: Mon 09 Feb 2026 08:00:42 +0000 Manifest next update: Tue 10 Feb 2026 08:00:42 +0000 Files and hashes: 1: 03lp9dJTIQsKvo4HoIb2CNbyoK8.crl (hash: m96YI75/9uj7/ikaOSTV0Fvec81ULvd0OZSZdeDNHho=) 2: 8JXiL7XzwcUKWslrEH3fiUl9_1Q.roa (hash: XHMaFPKefGJYFcZdQ/GsdUkoHTLr9GXBB/VoyGHP+zA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.crl rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:c7:13:06:7b:f2:a9:dc:cf:b2:d2:a0:53:f3:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d37969f5d253210b0abe8e07a086f608d6f2a0af Validity Not Before: Feb 9 08:00:42 2026 GMT Not After : Feb 10 08:00:42 2026 GMT Subject: CN=d5c52cf30a1e8b082a8f9fa8055b7f335da58ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:09:97:ff:5f:07:42:0b:f7:a4:c4:47:e6:a6: ad:87:de:1c:de:b2:ef:4c:6c:b9:8d:cc:ed:18:34: 34:4c:b2:68:8b:b7:72:9b:3f:64:08:c2:5a:6a:c6: 64:07:5a:52:0d:54:75:72:fe:d7:0e:0e:0b:3f:6a: cc:7c:2e:b4:7d:d8:77:eb:06:1e:1b:7f:0c:e1:11: 3d:94:4f:6f:7c:13:56:1b:a8:c8:26:66:a2:9f:a2: 76:5a:41:3f:67:9e:dd:44:a2:b7:ac:75:15:0e:ab: f3:b6:70:45:0c:83:d0:0e:32:90:b2:1c:53:62:8a: 51:0b:f1:2c:1a:c9:63:0f:db:23:4e:93:59:d6:93: 1b:60:7d:12:79:f8:6e:ef:59:e3:a5:7b:32:85:ad: 5b:f1:44:d3:98:df:d8:7e:61:ce:a0:d4:d0:a0:27: 9d:99:7f:3b:eb:fc:87:70:2d:8a:16:da:2a:fe:0b: 6a:93:e3:87:b3:45:bc:09:88:9f:90:75:20:f6:87: 2b:3d:69:57:27:ee:db:f2:80:3f:ee:a6:75:a2:5f: ef:45:89:24:29:4c:c5:12:f7:b1:bb:8a:e6:56:65: 82:6e:d2:3f:02:ab:37:f1:93:5f:a3:9e:7d:0b:61: dd:c8:db:fa:39:39:ba:b1:9f:7b:ef:f4:d8:00:fa: df:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C5:2C:F3:0A:1E:8B:08:2A:8F:9F:A8:05:5B:7F:33:5D:A5:8E:D6 X509v3 Authority Key Identifier: keyid:D3:79:69:F5:D2:53:21:0B:0A:BE:8E:07:A0:86:F6:08:D6:F2:A0:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:83:a8:f0:96:a8:e6:fe:45:a4:3f:81:3c:de:ca:74:75:c1: 49:51:26:80:ea:e2:95:4e:22:be:12:6f:97:75:f0:e0:8c:68: 6e:28:14:8c:8b:c7:51:62:e0:f8:83:47:36:2f:40:8f:86:1a: a3:42:9a:2f:2c:3c:a2:71:6a:6f:ab:8a:3d:6c:ee:80:73:c3: 75:1e:ff:41:a0:49:1e:19:e6:a4:9a:60:3f:ea:a6:9f:06:ae: 7d:9c:c8:62:5c:94:6b:92:1d:88:32:23:b7:49:78:56:cf:48: d8:51:05:46:c7:13:78:8c:ae:2b:26:f3:93:de:e0:99:b6:3d: 69:98:3b:8a:2d:20:6d:c6:f5:13:de:ac:08:72:3b:ff:6b:ac: 8a:f5:40:99:f1:e0:31:89:97:bd:7a:90:32:81:c6:36:4e:6e: ed:93:92:82:cf:03:63:b9:6c:5a:d4:5a:60:d3:31:92:ce:f1: 85:35:2c:a8:f8:ea:77:ce:6a:17:0e:f6:65:78:3f:01:66:ed: 9d:00:b2:93:e0:1e:e3:19:fb:50:ef:ef:b1:27:f2:91:67:a4: 9c:80:f5:1f:98:58:2b:c6:a9:61:8c:90:26:7b:62:60:d5:50: 8d:07:61:97:e0:7c:05:d4:ec:6b:36:5c:df:3c:05:9d:f3:7d: d5:15:ab:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBascTBnvyqdzPstKgU/M+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNzk2OWY1ZDI1MzIxMGIwYWJlOGUwN2EwODZmNjA4ZDZm MmEwYWYwHhcNMjYwMjA5MDgwMDQyWhcNMjYwMjEwMDgwMDQyWjAzMTEwLwYDVQQD EyhkNWM1MmNmMzBhMWU4YjA4MmE4ZjlmYTgwNTViN2YzMzVkYTU4ZWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwmX/18HQgv3pMRH5qath94c3rLv TGy5jcztGDQ0TLJoi7dymz9kCMJaasZkB1pSDVR1cv7XDg4LP2rMfC60fdh36wYe G38M4RE9lE9vfBNWG6jIJmain6J2WkE/Z57dRKK3rHUVDqvztnBFDIPQDjKQshxT YopRC/EsGsljD9sjTpNZ1pMbYH0Sefhu71njpXsyha1b8UTTmN/YfmHOoNTQoCed mX876/yHcC2KFtoq/gtqk+OHs0W8CYifkHUg9ocrPWlXJ+7b8oA/7qZ1ol/vRYkk KUzFEvexu4rmVmWCbtI/Aqs38ZNfo559C2HdyNv6OTm6sZ977/TYAPrfTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXFLPMKHosIKo+fqAVbfzNdpY7WMB8GA1UdIwQY MBaAFNN5afXSUyELCr6OB6CG9gjW8qCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDNscDlkSlRJUXNLdm80SG9JYjJDTmJ5b0s4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81MjQwYTYtY2Q2MS00ZTBjLTg4YjYt ZjU5ZDIwZWYyN2I0LzEvMDNscDlkSlRJUXNLdm80SG9JYjJDTmJ5b0s4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC81MjQwYTYtY2Q2MS00ZTBjLTg4YjYtZjU5ZDIwZWYyN2I0 LzEvMDNscDlkSlRJUXNLdm80SG9JYjJDTmJ5b0s4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeIOo8Jao 5v5FpD+BPN7KdHXBSVEmgOrilU4ivhJvl3Xw4IxobigUjIvHUWLg+INHNi9Aj4Ya o0KaLyw8onFqb6uKPWzugHPDdR7/QaBJHhnmpJpgP+qmnwaufZzIYlyUa5IdiDIj t0l4Vs9I2FEFRscTeIyuKybzk97gmbY9aZg7ii0gbcb1E96sCHI7/2usivVAmfHg MYmXvXqQMoHGNk5u7ZOSgs8DY7lsWtRaYNMxks7xhTUsqPjqd85qFw72ZXg/AWbt nQCyk+Ae4xn7UO/vsSfykWeknID1H5hYK8apYYyQJntiYNVQjQdhl+B8BdTsazZc 3zwFnfN91RWrVg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:29 2026 by rpki-client