This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft File: LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft (raw, json) Hash identifier: +wpl429YePhVWC9sMtJBUq1ONdCwEVa6UiVhqPEl8J4= Subject key identifier: C4:C8:B7:EC:9E:4A:0B:94:54:F3:8A:5B:08:25:7A:5C:03:AD:EC:32 Authority key identifier: 2C:BA:35:56:69:B4:F9:B9:03:5F:05:B1:FB:A2:11:EF:86:96:10:1D Certificate issuer: /CN=2cba355669b4f9b9035f05b1fba211ef8696101d Certificate serial: 019C42B3FC0DDFD72EA2DE787647301F6238 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft Manifest number: 16DE Signing time: Mon 09 Feb 2026 14:00:17 +0000 Manifest this update: Mon 09 Feb 2026 14:00:17 +0000 Manifest next update: Tue 10 Feb 2026 14:00:17 +0000 Files and hashes: 1: GcH-WF46-Cx6ySovZfxGMRK-ScA.roa (hash: vLUhEA8jeh8KPUh1zpLwKiZLSX3eBBb9XYrIml4wnm4=) 2: LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl (hash: vX/YoI+hewpzCIFow2jqLaRagsoPkeuNzU3T8ddTfQY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b3:fc:0d:df:d7:2e:a2:de:78:76:47:30:1f:62:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cba355669b4f9b9035f05b1fba211ef8696101d Validity Not Before: Feb 9 14:00:17 2026 GMT Not After : Feb 10 14:00:17 2026 GMT Subject: CN=c4c8b7ec9e4a0b9454f38a5b08257a5c03adec32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c2:16:f0:bd:ce:72:bd:75:aa:8f:03:a4:13: a6:ee:7f:9e:a1:e6:d5:e0:5f:4b:43:dd:c8:2f:06: 52:b9:eb:97:6e:a1:86:bb:d6:43:fa:01:0c:67:ce: c1:ae:7e:ee:59:8e:33:57:e6:2a:83:6e:5a:57:4d: 35:7c:f5:6f:20:8e:8e:82:95:a3:ce:29:c2:83:94: 73:88:02:b8:4c:7c:40:04:40:5b:9d:b7:c4:0d:c9: 55:cd:40:e5:94:7b:44:4a:d9:b0:e9:0b:d7:e8:41: 8d:6b:af:3f:2e:d7:43:8c:1d:a0:05:27:b9:58:49: 0e:a6:9f:3f:01:f6:d1:5a:1f:08:75:b8:6c:35:52: 33:40:9b:c9:6d:e4:bb:a0:1a:de:d9:b7:41:67:71: 82:5c:1c:59:fe:9c:3b:d8:c2:e7:99:56:6b:80:29: 22:43:a3:be:84:98:6b:e0:3c:58:1e:11:22:e6:01: 00:a7:ec:e4:d7:f4:63:5e:40:62:b8:ec:43:9d:73: 9d:36:c3:ce:49:8c:3f:7b:49:c1:38:84:a0:8a:a1: db:6f:07:63:f3:1b:9e:67:bd:58:2e:00:66:bf:18: c8:2a:7d:24:cc:4f:6c:a0:f7:da:db:f8:7d:82:a8: c7:a1:ef:f4:58:be:8e:ac:58:17:4c:0a:fd:99:29: e4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C8:B7:EC:9E:4A:0B:94:54:F3:8A:5B:08:25:7A:5C:03:AD:EC:32 X509v3 Authority Key Identifier: keyid:2C:BA:35:56:69:B4:F9:B9:03:5F:05:B1:FB:A2:11:EF:86:96:10:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:2d:3d:80:aa:a4:35:49:40:d7:50:71:e0:2b:9d:a9:fa:45: 28:aa:5a:fa:71:f6:05:4c:70:6d:6b:73:99:bf:ab:4f:e0:50: 64:1d:67:2a:a3:2b:92:41:9b:fb:80:55:30:8d:85:7a:5a:00: 54:5e:16:6b:6a:e9:9d:bd:18:bb:26:3a:7b:20:15:ee:8e:c1: 97:3c:f1:98:73:14:d0:ba:e8:f3:cf:d2:89:4f:ce:56:58:10: 61:ab:d1:69:05:e6:11:ff:e3:2f:76:b7:f3:17:a5:f2:6a:48: d3:d0:3c:5b:6f:0c:da:d8:ba:e2:bb:21:e2:b4:a3:17:3e:3a: 02:51:22:af:c9:c2:a0:e3:26:a3:11:87:11:16:69:54:7b:69: 68:42:38:af:ef:0f:09:f1:09:79:8b:be:7a:3f:f3:04:15:92: 7e:37:39:eb:7b:43:6f:bb:9c:cb:b3:a6:05:04:1a:8b:63:7c: ea:c4:ce:87:bf:8e:02:18:2c:7c:30:f2:d3:09:f3:19:13:93: cc:a2:64:43:6e:1d:a2:26:4c:44:5b:31:3a:b2:6f:8d:5b:d7: 34:42:8d:37:1e:25:f2:ab:11:60:a2:85:d9:89:59:85:22:25: c5:56:dc:03:f9:5f:22:38:8e:31:21:da:9d:74:e1:b4:76:84: e5:3a:ce:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCs/wN39cuot54dkcwH2I4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYmEzNTU2NjliNGY5YjkwMzVmMDViMWZiYTIxMWVmODY5 NjEwMWQwHhcNMjYwMjA5MTQwMDE3WhcNMjYwMjEwMTQwMDE3WjAzMTEwLwYDVQQD EyhjNGM4YjdlYzllNGEwYjk0NTRmMzhhNWIwODI1N2E1YzAzYWRlYzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sIW8L3Ocr11qo8DpBOm7n+eoebV 4F9LQ93ILwZSueuXbqGGu9ZD+gEMZ87Brn7uWY4zV+Yqg25aV001fPVvII6OgpWj zinCg5RziAK4THxABEBbnbfEDclVzUDllHtEStmw6QvX6EGNa68/LtdDjB2gBSe5 WEkOpp8/AfbRWh8IdbhsNVIzQJvJbeS7oBre2bdBZ3GCXBxZ/pw72MLnmVZrgCki Q6O+hJhr4DxYHhEi5gEAp+zk1/RjXkBiuOxDnXOdNsPOSYw/e0nBOISgiqHbbwdj 8xueZ71YLgBmvxjIKn0kzE9soPfa2/h9gqjHoe/0WL6OrFgXTAr9mSnkjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTIt+yeSguUVPOKWwglelwDrewyMB8GA1UdIwQY MBaAFCy6NVZptPm5A18FsfuiEe+GlhAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTExvMVZtbTAtYmtEWHdXeC02SVI3NGFXRUIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82ZmE2ZDAtZjJjOC00MTJjLTliYzct MzY1YzUxYTVmOWZmLzEvTExvMVZtbTAtYmtEWHdXeC02SVI3NGFXRUIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi82ZmE2ZDAtZjJjOC00MTJjLTliYzctMzY1YzUxYTVmOWZm LzEvTExvMVZtbTAtYmtEWHdXeC02SVI3NGFXRUIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWy09gKqk NUlA11Bx4CudqfpFKKpa+nH2BUxwbWtzmb+rT+BQZB1nKqMrkkGb+4BVMI2FeloA VF4Wa2rpnb0YuyY6eyAV7o7BlzzxmHMU0Lro88/SiU/OVlgQYavRaQXmEf/jL3a3 8xel8mpI09A8W28M2ti64rsh4rSjFz46AlEir8nCoOMmoxGHERZpVHtpaEI4r+8P CfEJeYu+ej/zBBWSfjc563tDb7ucy7OmBQQai2N86sTOh7+OAhgsfDDy0wnzGROT zKJkQ24doiZMRFsxOrJvjVvXNEKNNx4l8qsRYKKF2YlZhSIlxVbcA/lfIjiOMSHa nXThtHaE5TrOeg== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:11 2026 by rpki-client