This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft File: l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft (raw, json) Hash identifier: FCOgB6oWxNO3drubgLqoDWU1y7kCyguve7eimENN0DU= Subject key identifier: EF:9E:7A:6F:BE:10:E2:1D:DD:35:07:44:B0:91:C6:7F:3A:4D:4C:4C Authority key identifier: 97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82 Certificate issuer: /CN=974506f3f202d86849bb4dd5c7539d22b4df5182 Certificate serial: 019C41A21DDEDF7D8DE40CCD381C1DD6A21E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft Manifest number: 0A9D Signing time: Mon 09 Feb 2026 09:01:09 +0000 Manifest this update: Mon 09 Feb 2026 09:01:09 +0000 Manifest next update: Tue 10 Feb 2026 09:01:09 +0000 Files and hashes: 1: JmukJcLMTVnoHK721SIDdRGwjZc.roa (hash: rPjeyMPjxCCECDKXZfovT9WYlr1pvcOFIEVBpeffV88=) 2: l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl (hash: lOlytQew4kv3DjTgHNMPCNstuK/V5oP7YwauTaFn4RU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:1d:de:df:7d:8d:e4:0c:cd:38:1c:1d:d6:a2:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=974506f3f202d86849bb4dd5c7539d22b4df5182 Validity Not Before: Feb 9 09:01:09 2026 GMT Not After : Feb 10 09:01:09 2026 GMT Subject: CN=ef9e7a6fbe10e21ddd350744b091c67f3a4d4c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:85:d8:e2:a7:00:99:3f:12:56:6c:88:8c:95: 25:1d:27:27:90:83:63:c5:3e:ff:69:b6:73:fe:95: 08:a6:49:5f:a7:a5:4f:c0:a1:3e:bd:01:ba:eb:7b: 73:31:7c:62:a7:07:93:de:cc:0a:dd:1f:97:f5:65: 80:b8:99:60:87:66:cd:81:a1:74:1a:75:73:ef:ce: 9d:46:73:ef:41:c7:7e:6c:d7:60:74:ab:e0:98:c2: 3b:f4:10:a4:a0:e3:79:f3:f4:a0:2e:0a:09:39:84: 7a:61:5c:12:75:ae:d8:5b:46:0b:50:2d:b1:16:37: a4:a5:e6:f0:07:36:d9:ac:4c:fc:fd:5d:ef:70:c3: 79:6d:11:92:5f:93:65:a6:9b:6e:24:f7:85:70:e0: cb:9b:4c:2e:e2:66:ac:b5:52:3b:7f:aa:25:40:00: 75:e3:28:31:28:18:73:38:c3:39:50:ad:d3:59:0b: a7:e6:24:42:00:40:89:b9:59:73:69:7a:01:f2:51: 38:98:f6:58:2e:bf:b2:dd:03:59:9c:af:13:6e:05: 19:fc:da:65:3d:34:79:8d:03:ab:89:49:55:ac:28: 94:1c:3d:35:a4:49:16:27:9d:70:39:64:6c:9d:bd: dd:55:10:f3:b5:ea:db:5f:44:9b:eb:df:bc:fe:33: 5c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:9E:7A:6F:BE:10:E2:1D:DD:35:07:44:B0:91:C6:7F:3A:4D:4C:4C X509v3 Authority Key Identifier: keyid:97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:83:85:bf:6a:ad:7b:97:61:c3:1d:27:28:5d:a3:a3:0f:34: fb:e8:0f:e4:9d:39:c8:55:1b:5e:07:fa:a8:1e:56:2e:61:54: 7e:75:88:c4:d0:d1:2c:1c:0b:fc:22:c1:91:30:fe:42:6c:bd: 84:62:6d:f4:75:95:08:13:f0:d8:74:64:d2:23:87:41:0e:4b: b4:63:66:d6:18:de:f9:5b:39:eb:fd:97:29:75:88:65:7c:75: 4f:58:5a:03:3c:03:81:f7:f1:39:c3:c6:59:36:97:15:2a:58: 1e:03:84:dc:d8:d8:7d:f5:2a:e4:68:31:18:f4:3d:4a:0b:54: 51:1b:80:5b:a5:82:ee:14:92:98:63:df:64:46:8a:b8:05:6b: 4d:fb:1c:27:f0:b2:3c:a3:04:fb:4c:49:2e:8f:b0:53:2a:28: d9:94:3b:09:42:82:d3:20:54:24:7f:e2:07:59:6f:0e:a9:08: 21:12:c6:d7:03:ca:f9:33:9c:50:1f:62:98:3c:03:f8:53:35: fc:67:cd:6f:6b:29:7a:df:e2:99:b1:74:85:ce:aa:bf:5a:a7: 89:74:e1:c8:f6:bb:57:1e:09:a2:00:6d:fa:46:3e:bf:0c:c4: 99:e2:d0:88:00:a8:d4:73:c7:2e:15:5e:94:83:0a:16:df:1e: 43:9b:66:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoh3e332N5AzNOBwd1qIeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NDUwNmYzZjIwMmQ4Njg0OWJiNGRkNWM3NTM5ZDIyYjRk ZjUxODIwHhcNMjYwMjA5MDkwMTA5WhcNMjYwMjEwMDkwMTA5WjAzMTEwLwYDVQQD EyhlZjllN2E2ZmJlMTBlMjFkZGQzNTA3NDRiMDkxYzY3ZjNhNGQ0YzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroXY4qcAmT8SVmyIjJUlHScnkINj xT7/abZz/pUIpklfp6VPwKE+vQG663tzMXxipweT3swK3R+X9WWAuJlgh2bNgaF0 GnVz786dRnPvQcd+bNdgdKvgmMI79BCkoON58/SgLgoJOYR6YVwSda7YW0YLUC2x FjekpebwBzbZrEz8/V3vcMN5bRGSX5NlpptuJPeFcODLm0wu4mastVI7f6olQAB1 4ygxKBhzOMM5UK3TWQun5iRCAECJuVlzaXoB8lE4mPZYLr+y3QNZnK8TbgUZ/Npl PTR5jQOriUlVrCiUHD01pEkWJ51wOWRsnb3dVRDzterbX0Sb69+8/jNcxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+eem++EOId3TUHRLCRxn86TUxMMB8GA1UdIwQY MBaAFJdFBvPyAthoSbtN1cdTnSK031GCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDBVRzhfSUMyR2hKdTAzVngxT2RJclRmVVlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85MzBjYWYtNzZlZS00NTZjLWFmZTAt YTI1MjU1MzI5ZGMwLzEvbDBVRzhfSUMyR2hKdTAzVngxT2RJclRmVVlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi85MzBjYWYtNzZlZS00NTZjLWFmZTAtYTI1MjU1MzI5ZGMw LzEvbDBVRzhfSUMyR2hKdTAzVngxT2RJclRmVVlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABoOFv2qt e5dhwx0nKF2jow80++gP5J05yFUbXgf6qB5WLmFUfnWIxNDRLBwL/CLBkTD+Qmy9 hGJt9HWVCBPw2HRk0iOHQQ5LtGNm1hje+Vs56/2XKXWIZXx1T1haAzwDgffxOcPG WTaXFSpYHgOE3NjYffUq5GgxGPQ9SgtUURuAW6WC7hSSmGPfZEaKuAVrTfscJ/Cy PKME+0xJLo+wUyoo2ZQ7CUKC0yBUJH/iB1lvDqkIIRLG1wPK+TOcUB9imDwD+FM1 /GfNb2spet/imbF0hc6qv1qniXThyPa7Vx4JogBt+kY+vwzEmeLQiACo1HPHLhVe lIMKFt8eQ5tmdg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:48 2026 by rpki-client