This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft File: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft (raw, json) Hash identifier: 3ff7bnqTxSaA386GDp+xzg8mWwF3BbT4Zo+yyQsrfIw= Subject key identifier: 91:39:17:24:3E:10:78:9B:57:77:6B:32:3B:77:E8:FD:65:03:71:75 Authority key identifier: D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97 Certificate issuer: /CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797 Certificate serial: 019C43FE5A7CD956C999B6E0AF406A4B56FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft Manifest number: 0DFE Signing time: Mon 09 Feb 2026 20:01:08 +0000 Manifest this update: Mon 09 Feb 2026 20:01:08 +0000 Manifest next update: Tue 10 Feb 2026 20:01:08 +0000 Files and hashes: 1: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl (hash: /lP78fCUMwIO9d4cFTl69/RrnrRqbu44926ByHYsJLc=) 2: gmvIshISRNirz3J-s4-1ehrXUDk.roa (hash: Io3sSeSvgkiOhA1EF6OANQ4yd9bXS2k4hv1hWFjIVO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:5a:7c:d9:56:c9:99:b6:e0:af:40:6a:4b:56:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797 Validity Not Before: Feb 9 20:01:08 2026 GMT Not After : Feb 10 20:01:08 2026 GMT Subject: CN=913917243e10789b57776b323b77e8fd65037175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:da:2c:12:b6:18:ca:7b:40:c5:37:e3:3f:91: a2:28:9f:07:b5:6c:bc:df:35:3d:a7:53:8d:c3:19: 7e:4f:95:86:6c:ec:e4:ea:ea:05:db:97:02:8e:b1: 65:49:c9:ba:0f:53:8e:6b:23:3e:ae:da:09:9e:85: 28:60:1a:19:09:b0:dd:b4:33:9e:f9:88:f5:84:c3: 16:16:42:eb:bd:f6:82:40:c2:80:0d:f4:80:f6:46: 06:18:10:93:dd:70:35:9e:04:ba:3e:86:6e:86:d2: 51:b7:88:f2:d8:58:4b:cb:37:75:23:77:18:e5:69: a4:42:15:9b:dc:b6:ed:d1:c8:60:ba:fa:eb:5b:94: 8f:ac:9a:20:62:4f:ef:d8:7f:1e:50:f7:3f:93:c0: fc:6e:66:49:a1:5a:c0:6b:45:ac:18:31:f4:79:19: b9:4f:b0:70:03:17:54:2c:70:9c:92:6c:93:ba:51: 25:80:8a:11:d6:91:8a:17:01:ef:4e:37:d8:8a:07: fe:e4:14:35:ab:e8:65:61:2a:24:ba:45:53:42:4f: 3a:af:86:60:14:6f:2f:0f:b1:9a:a2:83:24:ed:1d: 38:3b:fa:75:24:f2:ef:86:c8:8a:bd:59:f7:0a:a0: 1c:bb:da:d5:ac:76:88:9c:6a:02:ff:d4:e2:08:48: 5b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:39:17:24:3E:10:78:9B:57:77:6B:32:3B:77:E8:FD:65:03:71:75 X509v3 Authority Key Identifier: keyid:D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:13:b8:c4:d8:2d:b8:10:2d:db:a3:07:fa:48:d5:14:1c:5f: f5:7e:28:b4:62:c0:74:82:aa:f2:e8:5b:45:30:04:4e:09:5a: 07:2c:5e:01:e3:51:69:f2:6c:1b:5c:55:77:ce:4d:97:da:42: 72:a1:66:5e:12:e6:ac:5a:41:56:18:0f:04:2b:da:a5:2a:c5: f7:ab:8d:88:a6:19:e3:bb:2d:c7:ce:a8:e7:ee:78:9f:57:c9: b3:63:b6:29:49:11:0a:21:67:09:e6:b2:02:47:bb:04:83:1c: 51:7d:ae:73:8f:f7:27:26:da:fe:e3:27:6b:42:d8:72:bb:1e: c4:74:7b:5d:46:ac:0d:86:19:9a:4c:d8:54:60:6c:0e:2d:37: a0:c1:12:84:1a:15:1b:81:70:09:dc:86:ef:04:af:a8:98:f7: 1e:c8:e0:4b:84:7f:83:4b:5b:80:51:88:b0:aa:69:9b:37:c8: 53:23:27:67:c2:24:64:e7:b4:b4:a1:c3:26:07:49:67:fd:4d: f4:ea:7c:02:ad:14:f3:98:13:aa:89:4c:d5:6e:31:d0:06:e3: 5f:f2:30:17:e0:a0:57:b7:d7:9c:32:74:04:4e:55:8d:97:90: 2d:61:c6:45:b6:96:11:9a:4f:29:d3:df:72:7c:48:48:e7:2d: 87:8b:cc:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/lp82VbJmbbgr0BqS1b7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYjdmYzhiMDU4ZDFmNDk5OTAxYThjMmY4NmU2MmFlOTUx MzY3OTcwHhcNMjYwMjA5MjAwMTA4WhcNMjYwMjEwMjAwMTA4WjAzMTEwLwYDVQQD Eyg5MTM5MTcyNDNlMTA3ODliNTc3NzZiMzIzYjc3ZThmZDY1MDM3MTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltosErYYyntAxTfjP5GiKJ8HtWy8 3zU9p1ONwxl+T5WGbOzk6uoF25cCjrFlScm6D1OOayM+rtoJnoUoYBoZCbDdtDOe +Yj1hMMWFkLrvfaCQMKADfSA9kYGGBCT3XA1ngS6PoZuhtJRt4jy2FhLyzd1I3cY 5WmkQhWb3Lbt0chguvrrW5SPrJogYk/v2H8eUPc/k8D8bmZJoVrAa0WsGDH0eRm5 T7BwAxdULHCckmyTulElgIoR1pGKFwHvTjfYigf+5BQ1q+hlYSokukVTQk86r4Zg FG8vD7GaooMk7R04O/p1JPLvhsiKvVn3CqAcu9rVrHaInGoC/9TiCEhbGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJE5FyQ+EHibV3drMjt36P1lA3F1MB8GA1UdIwQY MBaAFNC3/IsFjR9JmQGowvhuYq6VE2eXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMExmOGl3V05IMG1aQWFqQy1HNWlycFVUWjVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS85Y2IzNGEtYzM3Mi00ODJlLTgxY2Et OGY2MzljNWExYTcyLzEvMExmOGl3V05IMG1aQWFqQy1HNWlycFVUWjVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS85Y2IzNGEtYzM3Mi00ODJlLTgxY2EtOGY2MzljNWExYTcy LzEvMExmOGl3V05IMG1aQWFqQy1HNWlycFVUWjVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxO4xNgt uBAt26MH+kjVFBxf9X4otGLAdIKq8uhbRTAETglaByxeAeNRafJsG1xVd85Nl9pC cqFmXhLmrFpBVhgPBCvapSrF96uNiKYZ47stx86o5+54n1fJs2O2KUkRCiFnCeay Ake7BIMcUX2uc4/3Jyba/uMna0LYcrsexHR7XUasDYYZmkzYVGBsDi03oMEShBoV G4FwCdyG7wSvqJj3HsjgS4R/g0tbgFGIsKppmzfIUyMnZ8IkZOe0tKHDJgdJZ/1N 9Op8Aq0U85gTqolM1W4x0AbjX/IwF+CgV7fXnDJ0BE5VjZeQLWHGRbaWEZpPKdPf cnxISOcth4vMng== -----END CERTIFICATE-----Generated at Mon Feb 9 22:45:06 2026 by rpki-client