This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft File: lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft (raw, json) Hash identifier: ZJtbTAXqGnyFFV9ROO1aWbEed5XrMqACsQeUCxEXmfU= Subject key identifier: D9:B8:C0:12:89:C3:EE:AD:2E:98:85:45:55:3F:48:05:D3:73:50:BC Authority key identifier: 96:44:8E:84:0D:27:2A:3E:31:59:19:2D:1D:F1:1F:10:0E:50:6F:6A Certificate issuer: /CN=96448e840d272a3e3159192d1df11f100e506f6a Certificate serial: 019C42B4207D978C4FA420ED87FD9FBE85D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft Manifest number: 0A3A Signing time: Mon 09 Feb 2026 14:00:26 +0000 Manifest this update: Mon 09 Feb 2026 14:00:26 +0000 Manifest next update: Tue 10 Feb 2026 14:00:26 +0000 Files and hashes: 1: gtKo7QAi2WcSoZ12HmBm24qw-r4.roa (hash: qnaglWaJ+iAOcdqIITkJYy4ZOlNoiaJCiuIcC9Lr3R4=) 2: lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl (hash: KTuxYMMh9WcBoOiv0dg1qFPGk7BDyE18GF6ifDIU7OI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:20:7d:97:8c:4f:a4:20:ed:87:fd:9f:be:85:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96448e840d272a3e3159192d1df11f100e506f6a Validity Not Before: Feb 9 14:00:26 2026 GMT Not After : Feb 10 14:00:26 2026 GMT Subject: CN=d9b8c01289c3eead2e988545553f4805d37350bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0a:d8:c9:c7:50:28:de:72:d7:87:ca:00:ff: 44:6e:29:09:ed:89:2b:17:44:99:04:02:31:16:b7: 50:29:6a:ff:ef:24:f8:24:86:6f:26:b1:b7:9e:0b: bc:9c:14:6d:59:26:54:a0:73:a7:a3:16:b0:3d:04: d7:69:0b:5f:40:79:4b:4c:4d:1c:18:b3:3b:8b:0d: 78:2a:f5:2e:98:aa:90:25:fd:2f:25:b7:3c:cf:bb: 97:15:e2:3e:6b:33:1d:1c:d6:42:f7:15:59:5d:7f: 89:50:df:9d:71:eb:46:ad:f3:f9:f2:85:98:05:38: 21:82:94:ea:38:45:75:88:56:c4:de:bb:84:36:d8: 5d:d6:f5:81:e5:ef:25:2b:d9:57:1d:b0:7c:0d:4d: ce:85:9c:86:73:02:b9:7d:25:30:6d:74:6b:a9:2d: b3:cd:63:a1:d0:48:f1:35:1d:b5:e0:b4:6e:7e:f3: 3f:0e:c7:b1:59:1c:6a:3a:38:10:38:ce:07:40:07: 5f:d1:77:a5:f2:7d:0b:29:a3:0d:47:fb:9e:82:a0: 1a:80:1c:11:97:cd:07:79:18:19:6a:aa:7c:b4:69: d9:86:a4:d7:5f:54:05:9c:db:7b:16:c2:e8:1d:f0: 51:1a:f0:99:b3:a7:0f:7e:5a:77:d1:77:c1:81:d6: dc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B8:C0:12:89:C3:EE:AD:2E:98:85:45:55:3F:48:05:D3:73:50:BC X509v3 Authority Key Identifier: keyid:96:44:8E:84:0D:27:2A:3E:31:59:19:2D:1D:F1:1F:10:0E:50:6F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:08:0f:3b:ff:78:a3:79:26:eb:76:48:51:b3:0a:93:e7:77: 1e:a8:51:d3:9a:1a:cd:26:8a:77:1d:d2:aa:9b:1d:39:e5:3f: b3:ca:6b:b9:9d:82:5c:be:f3:6a:14:b9:cb:b5:c9:ed:2c:52: 5a:da:ed:53:09:75:ff:a8:d9:4d:5d:4c:a7:5f:cc:62:e6:f9: 16:aa:b2:3b:d3:95:74:05:05:de:2f:04:78:42:c5:d2:9d:97: 1c:e9:4c:6f:21:c5:9b:77:cb:9b:c7:6c:b6:38:44:22:44:a7: 61:5f:5f:68:04:ff:b9:11:0f:3e:9a:2d:2b:5b:e8:f1:d9:44: c7:8b:e2:72:ce:12:10:b2:d7:84:34:fd:e1:64:09:4b:69:c4: eb:5c:2e:57:12:f3:e6:bf:04:bc:db:2a:11:ef:8b:f8:98:b7: 0e:fb:4d:dd:93:56:a6:ae:39:75:27:a4:f0:c8:25:33:9c:b1: 89:94:34:e4:72:e2:9c:b8:20:7a:56:40:21:da:56:1c:1e:51: d4:0c:d7:69:79:5c:ed:29:2d:1b:7a:ac:ed:71:54:b9:3e:47: a3:d6:cb:42:a1:3e:23:65:46:3f:7d:44:5b:c0:b5:2b:10:45: 71:fe:17:fa:39:f7:f6:ae:f6:58:02:9a:30:68:ef:79:c5:4d: 8c:8e:51:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtCB9l4xPpCDth/2fvoXQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NDQ4ZTg0MGQyNzJhM2UzMTU5MTkyZDFkZjExZjEwMGU1 MDZmNmEwHhcNMjYwMjA5MTQwMDI2WhcNMjYwMjEwMTQwMDI2WjAzMTEwLwYDVQQD EyhkOWI4YzAxMjg5YzNlZWFkMmU5ODg1NDU1NTNmNDgwNWQzNzM1MGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6grYycdQKN5y14fKAP9EbikJ7Ykr F0SZBAIxFrdQKWr/7yT4JIZvJrG3ngu8nBRtWSZUoHOnoxawPQTXaQtfQHlLTE0c GLM7iw14KvUumKqQJf0vJbc8z7uXFeI+azMdHNZC9xVZXX+JUN+dcetGrfP58oWY BTghgpTqOEV1iFbE3ruENthd1vWB5e8lK9lXHbB8DU3OhZyGcwK5fSUwbXRrqS2z zWOh0EjxNR214LRufvM/DsexWRxqOjgQOM4HQAdf0Xel8n0LKaMNR/uegqAagBwR l80HeRgZaqp8tGnZhqTXX1QFnNt7FsLoHfBRGvCZs6cPflp30XfBgdbcOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNm4wBKJw+6tLpiFRVU/SAXTc1C8MB8GA1UdIwQY MBaAFJZEjoQNJyo+MVkZLR3xHxAOUG9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGtTT2hBMG5LajR4V1JrdEhmRWZFQTVRYjJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy80ZWU3MzQtZWZlOC00MWExLTgwZGYt MTZhZmJhOTg3YjA2LzEvbGtTT2hBMG5LajR4V1JrdEhmRWZFQTVRYjJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy80ZWU3MzQtZWZlOC00MWExLTgwZGYtMTZhZmJhOTg3YjA2 LzEvbGtTT2hBMG5LajR4V1JrdEhmRWZFQTVRYjJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQgPO/94 o3km63ZIUbMKk+d3HqhR05oazSaKdx3SqpsdOeU/s8pruZ2CXL7zahS5y7XJ7SxS WtrtUwl1/6jZTV1Mp1/MYub5FqqyO9OVdAUF3i8EeELF0p2XHOlMbyHFm3fLm8ds tjhEIkSnYV9faAT/uREPPpotK1vo8dlEx4vics4SELLXhDT94WQJS2nE61wuVxLz 5r8EvNsqEe+L+Ji3DvtN3ZNWpq45dSek8MglM5yxiZQ05HLinLggelZAIdpWHB5R 1AzXaXlc7SktG3qs7XFUuT5Ho9bLQqE+I2VGP31EW8C1KxBFcf4X+jn39q72WAKa MGjvecVNjI5Rjg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:07 2026 by rpki-client