This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/2e65c9-a04e-4b87-a3fe-6503648711ba/1/l4ag6hgbRs2isjOCKvEAPBuxz40.mft File: l4ag6hgbRs2isjOCKvEAPBuxz40.mft (raw, json) Hash identifier: Il6jA35tl2J77qp7cql1Tmavybu8bOGUlifO50g1o1w= Subject key identifier: DD:15:B8:CA:13:EE:48:A6:2B:0E:C9:D0:69:AE:AD:A6:9C:B3:C4:2C Authority key identifier: 97:86:A0:EA:18:1B:46:CD:A2:B2:33:82:2A:F1:00:3C:1B:B1:CF:8D Certificate issuer: /CN=9786a0ea181b46cda2b233822af1003c1bb1cf8d Certificate serial: 019C41D88FC25EFA60621913D5CF5B707237 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4ag6hgbRs2isjOCKvEAPBuxz40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/2e65c9-a04e-4b87-a3fe-6503648711ba/1/l4ag6hgbRs2isjOCKvEAPBuxz40.mft Manifest number: 01A6 Signing time: Mon 09 Feb 2026 10:00:37 +0000 Manifest this update: Mon 09 Feb 2026 10:00:37 +0000 Manifest next update: Tue 10 Feb 2026 10:00:37 +0000 Files and hashes: 1: l4ag6hgbRs2isjOCKvEAPBuxz40.crl (hash: Aq1IvOLLxhxeY2YtQ4KGsYyvw5C71yzHEVduHc1hf3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/2e65c9-a04e-4b87-a3fe-6503648711ba/1/l4ag6hgbRs2isjOCKvEAPBuxz40.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/2e65c9-a04e-4b87-a3fe-6503648711ba/1/l4ag6hgbRs2isjOCKvEAPBuxz40.mft rsync://rpki.ripe.net/repository/DEFAULT/l4ag6hgbRs2isjOCKvEAPBuxz40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:8f:c2:5e:fa:60:62:19:13:d5:cf:5b:70:72:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9786a0ea181b46cda2b233822af1003c1bb1cf8d Validity Not Before: Feb 9 10:00:37 2026 GMT Not After : Feb 10 10:00:37 2026 GMT Subject: CN=dd15b8ca13ee48a62b0ec9d069aeada69cb3c42c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e7:6d:07:da:52:95:8f:1d:18:ef:f2:b8:99: 69:56:06:d2:a6:2d:6a:c6:3d:f6:1b:54:b4:92:c3: da:d4:2a:8c:b7:07:f0:58:7d:09:e3:31:ee:15:a6: 52:bb:4c:7f:4d:09:93:b8:ba:7f:8d:43:25:ff:8b: e4:dd:43:f9:bb:51:e3:b7:7a:e1:f6:c5:65:8e:b5: 6f:e9:69:da:14:d9:69:68:ca:a8:d2:77:72:51:66: 1d:7b:97:92:ef:7e:04:89:f3:32:84:c4:87:20:68: 60:8b:c7:87:da:5b:97:69:1e:af:ce:ed:0c:1e:08: c4:92:64:d6:8f:53:08:8b:7e:82:98:17:ec:f8:8a: f9:fc:19:83:22:04:ca:ee:a7:d4:28:04:0f:76:60: 18:b9:af:ab:0f:5b:1d:3c:a6:5c:8d:44:f8:23:56: fd:66:55:dd:b5:b1:b4:fd:44:33:49:03:fd:40:10: c2:be:bf:73:87:cd:1c:e4:cf:70:34:4d:60:d0:91: a8:13:98:65:fc:5d:e5:f5:c4:9a:1a:4c:03:df:89: 83:07:00:42:83:15:b9:0a:29:19:ca:9d:2e:eb:3c: 17:eb:b7:2c:0d:b0:a5:2e:e6:d2:70:ac:c3:ed:9d: f1:76:01:92:34:5c:b9:89:dc:68:58:77:5b:d2:1a: 49:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:15:B8:CA:13:EE:48:A6:2B:0E:C9:D0:69:AE:AD:A6:9C:B3:C4:2C X509v3 Authority Key Identifier: keyid:97:86:A0:EA:18:1B:46:CD:A2:B2:33:82:2A:F1:00:3C:1B:B1:CF:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4ag6hgbRs2isjOCKvEAPBuxz40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/2e65c9-a04e-4b87-a3fe-6503648711ba/1/l4ag6hgbRs2isjOCKvEAPBuxz40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/2e65c9-a04e-4b87-a3fe-6503648711ba/1/l4ag6hgbRs2isjOCKvEAPBuxz40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:44:64:50:77:4b:93:71:27:db:9a:56:3b:7f:7e:0b:e9:cf: 7f:5c:c3:2e:57:5d:e6:52:9a:b6:ad:a8:1c:a0:a2:e7:97:25: 24:d1:fe:e4:72:fa:46:2e:0f:70:0a:de:d8:a1:dc:d8:c9:e2: a0:7f:8e:db:85:76:1e:39:ff:a9:6d:d1:29:c6:75:78:69:b1: f1:af:d0:8b:03:93:cf:3e:43:49:02:76:0a:35:d2:b2:71:34: 3d:6e:b2:b8:92:c6:55:07:d1:75:b3:11:2c:57:52:a5:09:c5: d2:55:59:0f:ff:ad:37:1a:39:ec:0c:bd:11:b8:cd:00:17:a4: 5b:71:9b:53:c7:ae:a1:f2:b9:8d:24:09:21:42:6a:2e:8c:e6: b6:bd:81:9a:fd:a4:44:b2:48:4b:d7:54:5c:a9:9d:8b:d4:f3: cc:74:26:d1:f6:fb:0a:40:d7:1c:2c:dd:e0:29:22:1f:27:09: 82:2f:55:45:50:7e:81:61:c5:32:4e:e0:e6:15:2e:61:f5:34: c2:f2:95:fa:3f:3b:c8:54:05:86:36:3c:8c:fb:64:d8:ed:65: 0b:e6:c0:bb:40:16:4d:73:5a:73:b5:e9:8c:f0:59:e4:39:c3: b2:12:38:5e:0f:07:93:78:98:2c:f2:32:72:18:56:24:b4:f6: 79:ff:86:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2I/CXvpgYhkT1c9bcHI3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODZhMGVhMTgxYjQ2Y2RhMmIyMzM4MjJhZjEwMDNjMWJi MWNmOGQwHhcNMjYwMjA5MTAwMDM3WhcNMjYwMjEwMTAwMDM3WjAzMTEwLwYDVQQD EyhkZDE1YjhjYTEzZWU0OGE2MmIwZWM5ZDA2OWFlYWRhNjljYjNjNDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OdtB9pSlY8dGO/yuJlpVgbSpi1q xj32G1S0ksPa1CqMtwfwWH0J4zHuFaZSu0x/TQmTuLp/jUMl/4vk3UP5u1Hjt3rh 9sVljrVv6WnaFNlpaMqo0ndyUWYde5eS734EifMyhMSHIGhgi8eH2luXaR6vzu0M HgjEkmTWj1MIi36CmBfs+Ir5/BmDIgTK7qfUKAQPdmAYua+rD1sdPKZcjUT4I1b9 ZlXdtbG0/UQzSQP9QBDCvr9zh80c5M9wNE1g0JGoE5hl/F3l9cSaGkwD34mDBwBC gxW5CikZyp0u6zwX67csDbClLubScKzD7Z3xdgGSNFy5idxoWHdb0hpJ7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0VuMoT7kimKw7J0Gmuraacs8QsMB8GA1UdIwQY MBaAFJeGoOoYG0bNorIzgirxADwbsc+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRhZzZoZ2JSczJpc2pPQ0t2RUFQQnV4ejQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yZTY1YzktYTA0ZS00Yjg3LWEzZmUt NjUwMzY0ODcxMWJhLzEvbDRhZzZoZ2JSczJpc2pPQ0t2RUFQQnV4ejQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8yZTY1YzktYTA0ZS00Yjg3LWEzZmUtNjUwMzY0ODcxMWJh LzEvbDRhZzZoZ2JSczJpc2pPQ0t2RUFQQnV4ejQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVURkUHdL k3En25pWO39+C+nPf1zDLldd5lKatq2oHKCi55clJNH+5HL6Ri4PcAre2KHc2Mni oH+O24V2Hjn/qW3RKcZ1eGmx8a/QiwOTzz5DSQJ2CjXSsnE0PW6yuJLGVQfRdbMR LFdSpQnF0lVZD/+tNxo57Ay9EbjNABekW3GbU8euofK5jSQJIUJqLozmtr2Bmv2k RLJIS9dUXKmdi9TzzHQm0fb7CkDXHCzd4CkiHycJgi9VRVB+gWHFMk7g5hUuYfU0 wvKV+j87yFQFhjY8jPtk2O1lC+bAu0AWTXNac7XpjPBZ5DnDshI4Xg8Hk3iYLPIy chhWJLT2ef+Gig== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:31 2026 by rpki-client