This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft File: l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft (raw, json) Hash identifier: vCg8YTJVf/Rife7WMunDMLUMO5GWqSa7ZFUseWk0zxM= Subject key identifier: 8E:AB:B9:58:23:41:5F:66:0E:2A:B5:75:30:DC:35:85:B3:4B:C3:7D Authority key identifier: 97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67 Certificate issuer: /CN=97e271a1d447e410630fac3a6406e04a83067c67 Certificate serial: 019C4322862872F982F0A3E62DFB8ADAFD40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft Manifest number: 0814 Signing time: Mon 09 Feb 2026 16:01:01 +0000 Manifest this update: Mon 09 Feb 2026 16:01:01 +0000 Manifest next update: Tue 10 Feb 2026 16:01:01 +0000 Files and hashes: 1: l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl (hash: S8OBEyzwbwgOmraprFj2PMvG4AiecESMWrrHvIrU2Ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:86:28:72:f9:82:f0:a3:e6:2d:fb:8a:da:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97e271a1d447e410630fac3a6406e04a83067c67 Validity Not Before: Feb 9 16:01:01 2026 GMT Not After : Feb 10 16:01:01 2026 GMT Subject: CN=8eabb95823415f660e2ab57530dc3585b34bc37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f7:c2:4b:3d:39:ad:89:53:2d:78:7f:82:79: 67:5f:00:ff:b2:71:00:f2:9b:cd:a5:2d:c9:71:8a: 2e:1e:5e:7b:99:02:bd:2b:dd:3b:2a:48:17:fa:40: d5:50:5e:90:3a:4a:0b:11:2c:fc:5e:b0:6b:7d:36: 26:59:9a:35:62:da:02:a1:60:75:cb:1b:cb:ea:48: 84:95:85:3a:c1:ec:54:60:40:7c:8c:1c:a5:c9:3b: ca:d7:18:06:ee:5d:92:d0:1f:6d:75:f2:df:a0:43: 5d:35:8b:70:de:42:c5:62:bb:eb:dc:33:c6:84:67: 01:aa:f7:12:cf:42:d0:15:f0:7b:ec:46:36:6c:c5: d9:1b:1a:7e:12:39:62:af:67:a2:56:d6:ee:6a:ac: d6:6e:92:f4:0d:25:41:d0:78:b1:4c:8a:a0:27:53: 64:b1:81:bf:04:08:d4:e1:b2:d1:89:9d:52:46:42: 38:77:14:66:fa:35:64:c7:16:e0:43:7e:c7:32:c0: 3c:50:d0:d6:fc:7e:da:16:13:a4:be:27:30:13:f2: b5:19:80:bc:72:02:86:48:00:1f:58:e6:5a:76:56: b5:78:88:be:31:19:2c:1c:e7:c4:42:36:d4:19:91: 23:f5:6c:ae:ed:6a:61:9e:3a:35:e3:f9:0b:a3:33: 6c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:AB:B9:58:23:41:5F:66:0E:2A:B5:75:30:DC:35:85:B3:4B:C3:7D X509v3 Authority Key Identifier: keyid:97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:b4:9b:d9:eb:12:b9:1f:b5:c2:e4:fa:95:da:7e:01:f0:90: 2b:74:13:d3:1c:a6:f2:14:e1:39:a6:0f:ef:88:48:43:b9:7a: 16:ab:cf:e7:fb:15:4c:d8:ff:7f:86:5e:d1:cb:e0:fa:0a:3e: 5b:8b:83:31:49:63:77:c4:83:94:8f:82:fc:ac:0f:59:8c:fc: 8e:ee:61:b1:92:dd:78:ef:2a:94:de:da:a0:3e:50:c9:22:71: c2:df:9b:a0:e2:fb:fd:5a:38:6d:97:cb:a9:69:d0:69:f1:20: c7:80:b5:c5:6a:2c:95:22:fc:aa:a0:43:77:97:3a:d8:5e:29: 03:c7:de:4d:08:f4:9a:a4:e5:9f:f1:ae:a4:75:9c:ed:32:69: ef:ad:94:a4:b1:20:f8:66:f2:48:5e:a5:8c:d5:98:9c:a9:74: d3:02:ca:db:e5:58:f4:b4:57:f2:8b:b6:c9:76:2c:dd:9e:52: 27:7e:6e:bd:de:13:94:2b:60:9c:2c:62:3a:57:b2:38:34:25: a4:05:9f:b5:47:c7:01:98:76:26:7f:5c:85:c1:0d:29:7c:38: 6d:1b:f8:47:8a:f4:8a:ba:0f:7f:92:df:43:02:62:da:40:ff: 11:e7:0d:9e:de:da:d5:df:92:06:28:9a:26:18:cd:82:73:4f: cc:05:1e:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIoYocvmC8KPmLfuK2v1AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ZTI3MWExZDQ0N2U0MTA2MzBmYWMzYTY0MDZlMDRhODMw NjdjNjcwHhcNMjYwMjA5MTYwMTAxWhcNMjYwMjEwMTYwMTAxWjAzMTEwLwYDVQQD Eyg4ZWFiYjk1ODIzNDE1ZjY2MGUyYWI1NzUzMGRjMzU4NWIzNGJjMzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ffCSz05rYlTLXh/gnlnXwD/snEA 8pvNpS3JcYouHl57mQK9K907KkgX+kDVUF6QOkoLESz8XrBrfTYmWZo1YtoCoWB1 yxvL6kiElYU6wexUYEB8jBylyTvK1xgG7l2S0B9tdfLfoENdNYtw3kLFYrvr3DPG hGcBqvcSz0LQFfB77EY2bMXZGxp+Ejlir2eiVtbuaqzWbpL0DSVB0HixTIqgJ1Nk sYG/BAjU4bLRiZ1SRkI4dxRm+jVkxxbgQ37HMsA8UNDW/H7aFhOkvicwE/K1GYC8 cgKGSAAfWOZadla1eIi+MRksHOfEQjbUGZEj9Wyu7Wphnjo14/kLozNs+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6ruVgjQV9mDiq1dTDcNYWzS8N9MB8GA1UdIwQY MBaAFJficaHUR+QQYw+sOmQG4EqDBnxnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbC1KeG9kUkg1QkJqRDZ3NlpBYmdTb01HZkdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9iOTQ5NjctZGFjMi00MzU1LWE0ZjEt NWZmMjYyYWM4N2JhLzEvbC1KeG9kUkg1QkJqRDZ3NlpBYmdTb01HZkdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9iOTQ5NjctZGFjMi00MzU1LWE0ZjEtNWZmMjYyYWM4N2Jh LzEvbC1KeG9kUkg1QkJqRDZ3NlpBYmdTb01HZkdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLSb2esS uR+1wuT6ldp+AfCQK3QT0xym8hThOaYP74hIQ7l6FqvP5/sVTNj/f4Ze0cvg+go+ W4uDMUljd8SDlI+C/KwPWYz8ju5hsZLdeO8qlN7aoD5QySJxwt+boOL7/Vo4bZfL qWnQafEgx4C1xWoslSL8qqBDd5c62F4pA8feTQj0mqTln/GupHWc7TJp762UpLEg +GbySF6ljNWYnKl00wLK2+VY9LRX8ou2yXYs3Z5SJ35uvd4TlCtgnCxiOleyODQl pAWftUfHAZh2Jn9chcENKXw4bRv4R4r0iroPf5LfQwJi2kD/EecNnt7a1d+SBiia JhjNgnNPzAUeCQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:13 2026 by rpki-client