This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft File: lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft (raw, json) Hash identifier: 5DguItwXhGOgYbrRttckYxUGYDzK4/QAIQFD0n/tksI= Subject key identifier: FD:7D:33:81:CB:A8:A4:E4:79:CE:9B:39:5A:8A:B1:AB:CA:79:05:0F Authority key identifier: 95:4C:F7:21:C0:8C:8E:9B:C5:24:2D:56:19:66:77:21:73:50:45:5C Certificate issuer: /CN=954cf721c08c8e9bc5242d56196677217350455c Certificate serial: 019C4321E03DC34CA2731AF9136828CBAC91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft Manifest number: 082F Signing time: Mon 09 Feb 2026 16:00:19 +0000 Manifest this update: Mon 09 Feb 2026 16:00:19 +0000 Manifest next update: Tue 10 Feb 2026 16:00:19 +0000 Files and hashes: 1: lUz3IcCMjpvFJC1WGWZ3IXNQRVw.crl (hash: yWkTUQlIy3PxX0VMT3KtRKc8IAg1XBBQEmvgnhREDus=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.crl rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft rsync://rpki.ripe.net/repository/DEFAULT/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:e0:3d:c3:4c:a2:73:1a:f9:13:68:28:cb:ac:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954cf721c08c8e9bc5242d56196677217350455c Validity Not Before: Feb 9 16:00:19 2026 GMT Not After : Feb 10 16:00:19 2026 GMT Subject: CN=fd7d3381cba8a4e479ce9b395a8ab1abca79050f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d4:6f:cd:84:a6:8e:79:0d:9d:66:16:c3:6a: 29:12:a4:29:31:49:75:0e:e7:54:c5:4c:2a:9f:56: 5a:a1:cb:59:78:ca:94:23:d8:00:be:21:4b:4d:4c: 16:bd:94:f0:70:f2:1a:7e:15:47:87:ae:ad:98:35: d0:c2:2f:e6:ad:04:6f:70:41:ad:0b:c3:37:d6:be: ad:1b:c2:45:f8:e3:55:bb:42:46:6b:89:4d:3f:e1: b4:0e:48:55:40:e2:a2:b3:c4:b1:2d:61:67:e1:45: c6:11:7c:70:a0:4e:42:45:c4:96:f9:d3:da:e2:54: d8:7c:71:a3:95:00:37:c8:3f:ec:83:c5:3a:28:13: 3c:d1:0e:43:c1:cc:a4:a2:2a:d5:62:c7:7a:77:24: 3b:fd:e4:b9:a4:3c:da:3f:5b:fc:86:05:83:08:77: 5f:d0:8b:dc:78:f6:20:0f:83:32:33:2d:ac:5c:32: 35:a8:95:80:18:3b:09:14:70:42:00:63:cf:c4:26: 56:e4:77:75:ae:12:f4:81:d8:83:9a:40:5d:fa:23: 29:ad:aa:2d:df:b6:c0:88:3f:c2:18:a0:aa:cb:2b: 0b:d6:dd:61:a7:c3:7a:80:e8:fc:d0:d3:fb:17:21: 60:d2:7f:8a:84:99:c1:4f:10:25:96:a5:3d:9a:a9: 23:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:7D:33:81:CB:A8:A4:E4:79:CE:9B:39:5A:8A:B1:AB:CA:79:05:0F X509v3 Authority Key Identifier: keyid:95:4C:F7:21:C0:8C:8E:9B:C5:24:2D:56:19:66:77:21:73:50:45:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:c8:dd:27:35:14:52:65:e3:96:be:4b:4d:dd:1c:69:b8:55: 73:c2:9c:74:a6:b3:72:b5:52:5e:09:0d:e9:31:2e:1e:08:70: ce:a8:f2:55:45:9e:0c:17:26:cc:77:a5:57:f6:24:f7:38:20: 1c:83:12:76:b5:be:d6:64:e0:8e:ee:bd:b5:94:b3:3e:f0:ea: 90:76:0e:89:13:6a:60:4c:64:4c:5f:22:74:3c:d8:4b:3e:2e: b0:eb:de:0f:da:16:78:42:b8:76:ca:15:11:04:69:6b:05:49: 6d:b5:5c:88:d5:45:86:c2:5e:0d:20:ad:32:5a:da:56:6b:53: 13:6e:80:ed:af:05:b7:13:b2:fb:b0:ae:7c:f6:b4:0c:6d:46: 14:4a:19:1a:c4:08:e6:e7:94:84:bd:00:23:a4:b4:86:7e:24: db:2b:35:7c:6c:ba:29:96:2d:f6:bc:18:29:51:d4:77:71:73: 91:e8:0e:1e:07:e3:b9:2e:5a:d2:91:a6:18:34:bc:7e:6a:5c: d7:11:27:3b:2c:86:16:75:32:8d:38:0a:d5:9c:43:5c:be:58: 0d:93:1b:b5:2e:cb:73:83:67:62:39:3b:88:bf:52:f4:79:ab: 76:fb:33:cb:4a:03:6f:1f:30:89:e0:94:a5:c1:f8:af:c9:e0: 25:35:fa:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIeA9w0yicxr5E2goy6yRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NGNmNzIxYzA4YzhlOWJjNTI0MmQ1NjE5NjY3NzIxNzM1 MDQ1NWMwHhcNMjYwMjA5MTYwMDE5WhcNMjYwMjEwMTYwMDE5WjAzMTEwLwYDVQQD EyhmZDdkMzM4MWNiYThhNGU0NzljZTliMzk1YThhYjFhYmNhNzkwNTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9RvzYSmjnkNnWYWw2opEqQpMUl1 DudUxUwqn1ZaoctZeMqUI9gAviFLTUwWvZTwcPIafhVHh66tmDXQwi/mrQRvcEGt C8M31r6tG8JF+ONVu0JGa4lNP+G0DkhVQOKis8SxLWFn4UXGEXxwoE5CRcSW+dPa 4lTYfHGjlQA3yD/sg8U6KBM80Q5DwcykoirVYsd6dyQ7/eS5pDzaP1v8hgWDCHdf 0IvcePYgD4MyMy2sXDI1qJWAGDsJFHBCAGPPxCZW5Hd1rhL0gdiDmkBd+iMpraot 37bAiD/CGKCqyysL1t1hp8N6gOj80NP7FyFg0n+KhJnBTxAllqU9mqkjCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP19M4HLqKTkec6bOVqKsavKeQUPMB8GA1UdIwQY MBaAFJVM9yHAjI6bxSQtVhlmdyFzUEVcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFV6M0ljQ01qcHZGSkMxV0dXWjNJWE5RUlZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8yODIzZGQtMjVhMS00NGEwLWJmYzEt Y2JiZDA4YWQzZWMyLzEvbFV6M0ljQ01qcHZGSkMxV0dXWjNJWE5RUlZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8yODIzZGQtMjVhMS00NGEwLWJmYzEtY2JiZDA4YWQzZWMy LzEvbFV6M0ljQ01qcHZGSkMxV0dXWjNJWE5RUlZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGcjdJzUU UmXjlr5LTd0cabhVc8KcdKazcrVSXgkN6TEuHghwzqjyVUWeDBcmzHelV/Yk9zgg HIMSdrW+1mTgju69tZSzPvDqkHYOiRNqYExkTF8idDzYSz4usOveD9oWeEK4dsoV EQRpawVJbbVciNVFhsJeDSCtMlraVmtTE26A7a8FtxOy+7CufPa0DG1GFEoZGsQI 5ueUhL0AI6S0hn4k2ys1fGy6KZYt9rwYKVHUd3FzkegOHgfjuS5a0pGmGDS8fmpc 1xEnOyyGFnUyjTgK1ZxDXL5YDZMbtS7Lc4NnYjk7iL9S9Hmrdvszy0oDbx8wieCU pcH4r8ngJTX6dg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:30 2026 by rpki-client