This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft File: O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft (raw, json) Hash identifier: yOGFNS4w9UGuzxSTBwydjzwse3HSLE/76IpbOo9ij0w= Subject key identifier: D6:CE:ED:69:13:69:3F:7D:F4:A0:4B:2A:57:D2:5D:E6:EC:E9:BD:FD Authority key identifier: 3B:F2:C2:0D:A4:D6:30:18:2E:EE:33:45:AD:9D:1C:4A:D9:17:0D:50 Certificate issuer: /CN=3bf2c20da4d630182eee3345ad9d1c4ad9170d50 Certificate serial: 019C446BD87BFA2893ED9782D87E9CEC4925 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft Manifest number: 124F Signing time: Mon 09 Feb 2026 22:00:44 +0000 Manifest this update: Mon 09 Feb 2026 22:00:44 +0000 Manifest next update: Tue 10 Feb 2026 22:00:44 +0000 Files and hashes: 1: O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl (hash: dzkIuCEI04AQjUrF8mWc8LBnwRM9sABlU/bPJyzO2zI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:d8:7b:fa:28:93:ed:97:82:d8:7e:9c:ec:49:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bf2c20da4d630182eee3345ad9d1c4ad9170d50 Validity Not Before: Feb 9 22:00:44 2026 GMT Not After : Feb 10 22:00:44 2026 GMT Subject: CN=d6ceed6913693f7df4a04b2a57d25de6ece9bdfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:71:2d:b2:60:8c:7b:98:68:b8:97:01:bd:ac: d9:e1:42:ff:ab:63:e2:fd:3c:93:fb:83:c3:b4:88: a0:90:35:38:4e:03:33:b1:44:e4:b0:f6:31:e0:a7: e8:ee:d2:de:76:94:cd:b8:50:45:35:7c:6a:99:dd: ca:6b:06:4a:2c:3e:0a:96:30:ce:ba:df:b3:ad:6f: d3:af:a4:22:54:37:4f:30:85:d1:5d:8d:a5:84:73: 5d:b3:62:12:80:dd:2a:fd:6a:2d:68:d2:a7:8d:41: 8e:bc:f3:27:4a:95:4a:7f:5a:67:5c:d5:78:0a:08: dd:40:04:58:95:70:52:da:87:16:e2:34:0b:5d:c3: 6b:7d:6b:c2:d8:8b:6a:a7:d4:27:01:4a:a0:cb:e2: 5b:40:22:42:d9:6a:92:56:68:45:c8:b1:7c:d0:c5: c4:cd:c5:c3:cc:a4:6d:92:ec:1b:fc:1d:cb:7d:73: 34:be:54:a8:c6:e7:7a:20:79:41:7c:6c:66:fe:1c: c3:cb:59:e0:77:1d:55:84:37:a8:c1:f9:a9:40:9b: 69:37:1a:6c:d4:84:d8:59:b1:44:d9:db:5c:4b:61: b5:dd:7b:e9:2c:77:97:77:e1:4a:23:2d:14:d6:e7: 4f:91:7a:24:2d:02:0e:ff:22:6a:39:62:c8:bf:08: 63:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CE:ED:69:13:69:3F:7D:F4:A0:4B:2A:57:D2:5D:E6:EC:E9:BD:FD X509v3 Authority Key Identifier: keyid:3B:F2:C2:0D:A4:D6:30:18:2E:EE:33:45:AD:9D:1C:4A:D9:17:0D:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:91:4e:f5:ec:65:2d:eb:81:4f:bc:6e:33:42:9d:cd:e6:ef: 8c:dd:19:81:d0:ee:ff:09:49:2d:61:3c:20:24:ca:04:86:9b: e6:fb:f3:7b:ad:d1:e1:35:82:00:73:4e:71:44:cf:c8:6b:3d: 26:63:19:7f:1b:ac:74:35:6f:24:b1:04:07:4f:aa:c8:f7:04: 8b:e7:11:2e:01:b1:b0:dc:74:43:77:51:15:00:83:85:32:7e: d6:36:e7:ff:80:1a:bf:6b:49:86:6e:49:71:ba:8f:1e:5f:a0: 0b:58:5b:e3:e8:6d:2d:88:db:ba:6e:39:a1:6e:b7:60:1c:27: f2:ed:0f:cf:47:3e:a6:83:4f:9d:8b:40:0e:7a:79:a8:12:53: 50:ca:99:42:f1:a0:be:92:6a:cf:dd:2e:ae:cc:5d:e4:cb:7a: 4b:89:74:f0:81:83:17:af:30:4c:61:55:ca:a7:be:a9:af:0c: bd:d3:14:7e:e5:6a:ed:c3:42:8b:58:e6:ef:29:cc:96:3e:48: 85:31:84:e9:51:fa:1e:58:ce:1d:7b:03:fa:0c:27:31:02:89: 7e:ae:15:ad:ed:1a:bc:5f:1a:1e:2e:34:1b:67:5c:90:89:57: f3:0d:c0:f1:2a:3a:9b:98:e4:ea:9a:28:13:72:24:4d:51:1e: c7:a9:5b:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa9h7+iiT7ZeC2H6c7EklMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZjJjMjBkYTRkNjMwMTgyZWVlMzM0NWFkOWQxYzRhZDkx NzBkNTAwHhcNMjYwMjA5MjIwMDQ0WhcNMjYwMjEwMjIwMDQ0WjAzMTEwLwYDVQQD EyhkNmNlZWQ2OTEzNjkzZjdkZjRhMDRiMmE1N2QyNWRlNmVjZTliZGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nEtsmCMe5houJcBvazZ4UL/q2Pi /TyT+4PDtIigkDU4TgMzsUTksPYx4Kfo7tLedpTNuFBFNXxqmd3KawZKLD4KljDO ut+zrW/Tr6QiVDdPMIXRXY2lhHNds2ISgN0q/WotaNKnjUGOvPMnSpVKf1pnXNV4 CgjdQARYlXBS2ocW4jQLXcNrfWvC2Itqp9QnAUqgy+JbQCJC2WqSVmhFyLF80MXE zcXDzKRtkuwb/B3LfXM0vlSoxud6IHlBfGxm/hzDy1ngdx1VhDeowfmpQJtpNxps 1ITYWbFE2dtcS2G13XvpLHeXd+FKIy0U1udPkXokLQIO/yJqOWLIvwhjSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbO7WkTaT999KBLKlfSXebs6b39MB8GA1UdIwQY MBaAFDvywg2k1jAYLu4zRa2dHErZFw1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT19MQ0RhVFdNQmd1N2pORnJaMGNTdGtYRFZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wNzJiNDYtMGRhMS00MmQyLTg5OWMt YTBiZGE4YWY3NTZhLzEvT19MQ0RhVFdNQmd1N2pORnJaMGNTdGtYRFZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8wNzJiNDYtMGRhMS00MmQyLTg5OWMtYTBiZGE4YWY3NTZh LzEvT19MQ0RhVFdNQmd1N2pORnJaMGNTdGtYRFZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0pFO9exl LeuBT7xuM0KdzebvjN0ZgdDu/wlJLWE8ICTKBIab5vvze63R4TWCAHNOcUTPyGs9 JmMZfxusdDVvJLEEB0+qyPcEi+cRLgGxsNx0Q3dRFQCDhTJ+1jbn/4Aav2tJhm5J cbqPHl+gC1hb4+htLYjbum45oW63YBwn8u0Pz0c+poNPnYtADnp5qBJTUMqZQvGg vpJqz90ursxd5Mt6S4l08IGDF68wTGFVyqe+qa8MvdMUfuVq7cNCi1jm7ynMlj5I hTGE6VH6HljOHXsD+gwnMQKJfq4Vre0avF8aHi40G2dckIlX8w3A8So6m5jk6poo E3IkTVEex6lbsQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:43:47 2026 by rpki-client