This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft File: lKpBiudwvajvBRax0cYzpn6R84s.mft (raw, json) Hash identifier: i7Qa4hRrP2RtaZTQAWCiYBBkqw3HHSEBScIq3NW/HRI= Subject key identifier: 4E:8D:84:98:56:DE:FF:07:DD:1A:BC:2A:13:F0:81:1C:DC:A4:29:C1 Authority key identifier: 94:AA:41:8A:E7:70:BD:A8:EF:05:16:B1:D1:C6:33:A6:7E:91:F3:8B Certificate issuer: /CN=94aa418ae770bda8ef0516b1d1c633a67e91f38b Certificate serial: 019C416A9DC332692FBDDC0D47CD22987707 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKpBiudwvajvBRax0cYzpn6R84s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft Manifest number: 11D8 Signing time: Mon 09 Feb 2026 08:00:32 +0000 Manifest this update: Mon 09 Feb 2026 08:00:32 +0000 Manifest next update: Tue 10 Feb 2026 08:00:32 +0000 Files and hashes: 1: F0X0Kldz9ZbWiCYe5dgOuGe8cE8.roa (hash: l3MXfi0HIHId22Sz44wGoyo4bnLBnE9WiSKYA9yuZAM=) 2: lKpBiudwvajvBRax0cYzpn6R84s.crl (hash: MJmlWPijGECAPax9u6wsfJtastvuYlTYob3sg6G4FY0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft rsync://rpki.ripe.net/repository/DEFAULT/lKpBiudwvajvBRax0cYzpn6R84s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:9d:c3:32:69:2f:bd:dc:0d:47:cd:22:98:77:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94aa418ae770bda8ef0516b1d1c633a67e91f38b Validity Not Before: Feb 9 08:00:32 2026 GMT Not After : Feb 10 08:00:32 2026 GMT Subject: CN=4e8d849856deff07dd1abc2a13f0811cdca429c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6c:3b:b7:c0:44:23:d1:b8:8c:e0:2f:40:76: 75:d0:af:2b:a1:55:ec:86:58:b0:1a:3a:7a:4b:4e: ea:bd:a7:66:87:6e:cd:78:80:c7:9c:e1:81:3d:fd: 32:3f:21:8a:ec:ad:0c:fe:ca:e3:57:38:91:c8:bd: 1b:e2:39:d7:05:ad:0d:5d:bc:bf:7b:8a:c3:cf:72: ad:1b:c8:39:76:14:a3:26:38:24:e1:30:2a:e1:4a: af:a2:74:3e:f9:06:ad:e9:b3:f4:c2:b2:9a:b5:06: cc:01:76:7b:d9:cc:c6:55:78:42:30:44:52:8c:f6: 7d:fa:99:d2:2f:91:e0:a5:c4:bf:9a:6e:45:02:f4: 50:f1:4b:38:6a:f6:91:50:d5:35:a1:c9:1b:3f:d9: b5:4d:b2:93:a3:69:e2:03:d4:e0:c4:3a:82:9c:70: fd:f6:1f:b8:71:9d:b8:4b:c4:bf:a8:7e:02:85:12: 8a:f6:02:b0:6a:cd:b0:20:4d:25:6b:e1:58:3d:c1: 98:7f:3d:a2:dd:ad:0b:e7:d7:d9:c2:73:44:2e:4e: f4:f2:07:c2:76:fc:82:02:10:03:ab:fb:c8:53:25: db:7e:3c:b4:77:02:12:76:65:8f:18:03:8b:aa:b5: a7:27:25:d5:0a:3a:4e:9c:60:95:cb:9b:7c:25:e4: 80:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:8D:84:98:56:DE:FF:07:DD:1A:BC:2A:13:F0:81:1C:DC:A4:29:C1 X509v3 Authority Key Identifier: keyid:94:AA:41:8A:E7:70:BD:A8:EF:05:16:B1:D1:C6:33:A6:7E:91:F3:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKpBiudwvajvBRax0cYzpn6R84s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:6a:21:bc:42:3b:05:bd:5e:c0:b1:74:00:8e:ce:04:9c:dd: 4b:90:86:f5:95:1f:3a:70:56:95:31:b9:9e:7e:86:59:95:aa: 55:f4:a7:29:36:ec:e2:a2:1c:c1:c4:ee:ad:f9:e4:05:e5:fc: 1a:f3:67:7d:90:b0:69:89:36:34:f4:6c:f6:bd:a4:69:2c:13: 6e:c9:60:da:01:46:ae:b7:7d:3f:a2:36:96:55:55:e7:72:f7: 0f:ae:2f:67:38:13:25:2e:82:e9:54:6a:f7:4b:ae:52:ba:ec: 02:1f:6e:b2:28:64:41:a0:5f:41:5d:ad:d9:97:c4:01:c7:8f: 29:01:dc:df:c1:d8:9d:bf:34:d1:c5:14:43:7f:f4:64:7d:09: 86:ac:c0:82:3e:1d:a4:2e:80:1e:69:92:03:1f:e2:8e:df:ec: e4:69:08:2e:a2:72:42:10:ea:d9:75:ec:49:2c:9b:2f:97:44: a1:e9:ea:58:35:af:2d:b0:f3:d3:f4:cf:6a:9d:6a:58:51:7a: a0:d9:18:53:54:da:5b:c3:48:7a:9b:16:71:59:6f:af:84:63: 7a:d5:17:2c:3a:a3:5a:7e:2f:52:d8:a4:60:ec:d1:b3:22:96: 2e:f0:b4:13:0d:84:07:56:c5:19:6e:c2:fe:03:45:16:26:72: 4b:6c:bc:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBap3DMmkvvdwNR80imHcHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0YWE0MThhZTc3MGJkYThlZjA1MTZiMWQxYzYzM2E2N2U5 MWYzOGIwHhcNMjYwMjA5MDgwMDMyWhcNMjYwMjEwMDgwMDMyWjAzMTEwLwYDVQQD Eyg0ZThkODQ5ODU2ZGVmZjA3ZGQxYWJjMmExM2YwODExY2RjYTQyOWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmw7t8BEI9G4jOAvQHZ10K8roVXs hliwGjp6S07qvadmh27NeIDHnOGBPf0yPyGK7K0M/srjVziRyL0b4jnXBa0NXby/ e4rDz3KtG8g5dhSjJjgk4TAq4UqvonQ++Qat6bP0wrKatQbMAXZ72czGVXhCMERS jPZ9+pnSL5HgpcS/mm5FAvRQ8Us4avaRUNU1ockbP9m1TbKTo2niA9TgxDqCnHD9 9h+4cZ24S8S/qH4ChRKK9gKwas2wIE0la+FYPcGYfz2i3a0L59fZwnNELk708gfC dvyCAhADq/vIUyXbfjy0dwISdmWPGAOLqrWnJyXVCjpOnGCVy5t8JeSAxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6NhJhW3v8H3Rq8KhPwgRzcpCnBMB8GA1UdIwQY MBaAFJSqQYrncL2o7wUWsdHGM6Z+kfOLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEtwQml1ZHd2YWp2QlJheDBjWXpwbjZSODRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wOWUyZjctZTY1MC00ZjM4LWE3NDUt YzM5NjIwMGZlMGJmLzEvbEtwQml1ZHd2YWp2QlJheDBjWXpwbjZSODRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8wOWUyZjctZTY1MC00ZjM4LWE3NDUtYzM5NjIwMGZlMGJm LzEvbEtwQml1ZHd2YWp2QlJheDBjWXpwbjZSODRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2ohvEI7 Bb1ewLF0AI7OBJzdS5CG9ZUfOnBWlTG5nn6GWZWqVfSnKTbs4qIcwcTurfnkBeX8 GvNnfZCwaYk2NPRs9r2kaSwTbslg2gFGrrd9P6I2llVV53L3D64vZzgTJS6C6VRq 90uuUrrsAh9usihkQaBfQV2t2ZfEAcePKQHc38HYnb800cUUQ3/0ZH0JhqzAgj4d pC6AHmmSAx/ijt/s5GkILqJyQhDq2XXsSSybL5dEoenqWDWvLbDz0/TPap1qWFF6 oNkYU1TaW8NIepsWcVlvr4RjetUXLDqjWn4vUtikYOzRsyKWLvC0Ew2EB1bFGW7C /gNFFiZyS2y8Gw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:22 2026 by rpki-client