This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft File: lvGXfPF_5OHeLxYpPGafRNW9dDM.mft (raw, json) Hash identifier: W/MpAVCi/Ns2uPwI1XjWP2YxqObrz8zLUo2jizmPvvE= Subject key identifier: AD:BF:FF:DD:B9:B3:3E:75:4D:12:6A:76:2A:E2:DB:D7:26:9C:B2:8D Authority key identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33 Certificate issuer: /CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433 Certificate serial: 019C4322164B6F2CCBBB1F382A0617702849 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft Manifest number: 0A88 Signing time: Mon 09 Feb 2026 16:00:33 +0000 Manifest this update: Mon 09 Feb 2026 16:00:33 +0000 Manifest next update: Tue 10 Feb 2026 16:00:33 +0000 Files and hashes: 1: lvGXfPF_5OHeLxYpPGafRNW9dDM.crl (hash: xthRRW0Oj3oH3+AyKva5/YQ/sQlxW7MSJxlmp2uGzOo=) 2: w9C2YEP1w5Y_JbXVYJuueL5--a4.roa (hash: +XN99efnsnCoGzlf+tUbIokhlmEnZBGkv0fp+mcWEF0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:16:4b:6f:2c:cb:bb:1f:38:2a:06:17:70:28:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433 Validity Not Before: Feb 9 16:00:33 2026 GMT Not After : Feb 10 16:00:33 2026 GMT Subject: CN=adbfffddb9b33e754d126a762ae2dbd7269cb28d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4a:e5:6c:b2:eb:80:4f:5b:7d:09:d5:d6:2a: 67:6e:d3:97:32:bd:d0:b3:cd:4c:e4:6d:d9:48:5f: e4:80:12:9a:2a:8d:5b:8f:5d:bf:00:70:92:e0:72: b0:04:6a:ab:55:00:97:5d:4a:35:30:ab:b7:0a:32: 07:65:d6:a5:9c:90:84:1e:f0:46:8c:a6:79:05:3f: 36:31:1e:86:70:09:41:8f:61:f0:cb:c9:f8:6d:38: 07:5d:9e:74:fd:6f:f1:a5:08:41:48:23:2f:51:d8: 8a:0f:20:77:11:53:00:8d:4d:5c:fd:57:dc:b6:9c: 6c:f4:e9:64:71:26:69:58:9b:e0:2c:bf:3e:29:31: 4f:02:65:49:9c:e7:7a:c7:0e:f7:e7:63:4b:0b:6a: fa:91:b1:40:31:c8:4a:38:00:a8:8d:e9:ec:b9:07: 2b:68:c9:2e:17:4d:09:6f:4f:83:e1:51:d7:8f:f5: 48:9d:dd:63:c3:64:ef:48:6f:e5:1d:66:8a:3f:ef: 5d:7e:a4:53:bf:b8:79:62:c9:16:5e:5e:e0:e7:23: c3:4f:81:2d:93:31:ac:6b:9d:45:7a:3e:8a:27:4a: 62:fa:21:a6:db:4a:f3:51:76:75:56:7c:02:10:57: 3a:0a:39:69:65:e0:2b:e5:75:2e:95:e3:b4:5d:23: fe:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:BF:FF:DD:B9:B3:3E:75:4D:12:6A:76:2A:E2:DB:D7:26:9C:B2:8D X509v3 Authority Key Identifier: keyid:96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:c7:9a:86:02:05:d6:d1:55:17:2c:7b:a3:e0:b1:df:5e:a1: ff:1f:30:6e:ac:3c:85:57:24:98:b5:2a:cc:bb:5d:a4:b6:5c: 8e:f5:0d:19:e7:93:96:14:c4:9e:04:f6:27:ff:91:8b:99:c7: 54:42:03:f8:a5:ac:86:58:6e:6c:be:23:53:8f:44:bd:60:0b: 00:70:b0:1a:11:b4:36:28:05:f1:fb:de:83:e3:ec:06:5f:b7: 9f:54:a4:09:b6:95:1b:fa:ab:25:59:dd:f6:b8:63:e4:6d:b4: e8:03:a1:99:9d:69:65:65:dc:03:8e:98:3b:72:ea:a3:9c:63: 52:50:5a:e5:f1:fa:86:18:d6:d4:08:2e:1c:23:1f:57:76:02: b6:8d:26:ae:82:39:93:aa:f8:88:6f:20:5e:d1:c9:ba:4f:4d: 79:58:46:31:69:59:31:f4:d2:ac:a3:0e:ad:cd:c3:40:3b:ae: f7:71:62:00:18:73:e4:21:26:a0:28:9a:8a:54:d0:40:41:4c: 43:bb:bc:8f:d2:07:27:1b:9f:f4:c9:f7:80:63:c5:fc:d6:8d: 8f:9d:61:ff:44:05:36:7e:81:5b:ec:90:e4:55:15:a8:c7:12: 6e:da:49:82:9b:07:d8:c8:37:ce:bf:45:08:c7:84:83:db:e4: 9b:e4:d9:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIhZLbyzLux84KgYXcChJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZjE5NzdjZjE3ZmU0ZTFkZTJmMTYyOTNjNjY5ZjQ0ZDVi ZDc0MzMwHhcNMjYwMjA5MTYwMDMzWhcNMjYwMjEwMTYwMDMzWjAzMTEwLwYDVQQD EyhhZGJmZmZkZGI5YjMzZTc1NGQxMjZhNzYyYWUyZGJkNzI2OWNiMjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkrlbLLrgE9bfQnV1ipnbtOXMr3Q s81M5G3ZSF/kgBKaKo1bj12/AHCS4HKwBGqrVQCXXUo1MKu3CjIHZdalnJCEHvBG jKZ5BT82MR6GcAlBj2Hwy8n4bTgHXZ50/W/xpQhBSCMvUdiKDyB3EVMAjU1c/Vfc tpxs9OlkcSZpWJvgLL8+KTFPAmVJnOd6xw7352NLC2r6kbFAMchKOACojensuQcr aMkuF00Jb0+D4VHXj/VInd1jw2TvSG/lHWaKP+9dfqRTv7h5YskWXl7g5yPDT4Et kzGsa51Fej6KJ0pi+iGm20rzUXZ1VnwCEFc6CjlpZeAr5XUuleO0XSP+RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK2//925sz51TRJqdiri29cmnLKNMB8GA1UdIwQY MBaAFJbxl3zxf+Th3i8WKTxmn0TVvXQzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHZHWGZQRl81T0hlTHhZcFBHYWZSTlc5ZERNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yNGE0N2QtNmE0ZC00ZTE1LWEyMzgt Nzc0MGIzZDY5MDVlLzEvbHZHWGZQRl81T0hlTHhZcFBHYWZSTlc5ZERNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yNGE0N2QtNmE0ZC00ZTE1LWEyMzgtNzc0MGIzZDY5MDVl LzEvbHZHWGZQRl81T0hlTHhZcFBHYWZSTlc5ZERNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8eahgIF 1tFVFyx7o+Cx316h/x8wbqw8hVckmLUqzLtdpLZcjvUNGeeTlhTEngT2J/+Ri5nH VEID+KWshlhubL4jU49EvWALAHCwGhG0NigF8fveg+PsBl+3n1SkCbaVG/qrJVnd 9rhj5G206AOhmZ1pZWXcA46YO3Lqo5xjUlBa5fH6hhjW1AguHCMfV3YCto0mroI5 k6r4iG8gXtHJuk9NeVhGMWlZMfTSrKMOrc3DQDuu93FiABhz5CEmoCiailTQQEFM Q7u8j9IHJxuf9Mn3gGPF/NaNj51h/0QFNn6BW+yQ5FUVqMcSbtpJgpsH2Mg3zr9F CMeEg9vkm+TZng== -----END CERTIFICATE-----Generated at Tue Feb 10 01:42:33 2026 by rpki-client