This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft File: lowsVdyOuZe_WRIdTC_9VESiLi0.mft (raw, json) Hash identifier: i9u/GIA8qY7vtBEgvPaRmVwlkrJk/ui/P4lXP0rWV1Y= Subject key identifier: 38:56:46:A7:89:05:A4:59:9C:F5:24:AE:57:EC:CF:80:BE:AA:A3:EB Authority key identifier: 96:8C:2C:55:DC:8E:B9:97:BF:59:12:1D:4C:2F:FD:54:44:A2:2E:2D Certificate issuer: /CN=968c2c55dc8eb997bf59121d4c2ffd5444a22e2d Certificate serial: 019C4390C33771521131B848805B3030D1D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 18:01:26 +0000 Manifest this update: Mon 09 Feb 2026 18:01:26 +0000 Manifest next update: Tue 10 Feb 2026 18:01:26 +0000 Files and hashes: 1: lowsVdyOuZe_WRIdTC_9VESiLi0.crl (hash: zVl0eVmaURx4SM/mmjLpUjP4rtuAOOylcRCb73nKQWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.crl rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:c3:37:71:52:11:31:b8:48:80:5b:30:30:d1:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968c2c55dc8eb997bf59121d4c2ffd5444a22e2d Validity Not Before: Feb 9 18:01:26 2026 GMT Not After : Feb 10 18:01:26 2026 GMT Subject: CN=385646a78905a4599cf524ae57eccf80beaaa3eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:00:26:5e:fc:b2:b4:ad:19:34:30:20:3e:25: a6:0d:96:e4:0d:02:07:77:14:54:90:05:a9:45:d3: 14:b2:63:8d:d6:34:16:7e:54:3c:b1:29:83:d4:d8: 87:a7:1d:92:48:46:5a:7e:c8:aa:43:ec:06:9d:d9: f0:3b:12:f4:a7:4a:5b:56:06:0e:40:e2:7f:27:ef: 75:e7:a4:f5:6c:49:ef:a2:61:d0:15:91:61:29:f8: f2:9f:5c:e8:20:3e:ff:8c:6e:67:a1:11:92:70:2d: 4d:fb:c6:42:fb:f8:5f:8d:1f:aa:23:cb:77:98:d1: cf:7a:2d:dc:50:51:21:50:bd:b6:55:a5:41:31:03: df:21:7f:a1:f3:0b:bd:b7:7b:f4:3b:4c:df:d3:68: a1:91:49:c3:e0:99:d2:55:b9:b1:b9:de:77:5a:e5: f3:aa:11:38:f7:c4:ac:a5:b6:83:25:27:a2:72:8a: c7:cf:82:6f:8e:b0:ae:82:ab:05:8c:7b:a5:44:89: d0:88:4f:cd:df:23:7e:e6:d6:33:21:b6:4e:42:6c: eb:3e:c2:09:90:66:3d:97:67:a1:17:51:54:e2:62: 83:5b:2e:bd:57:4f:52:d3:9e:1e:77:ac:0e:bf:9f: 37:bb:28:23:d2:0a:0f:4a:39:2f:66:99:34:e7:c0: 7c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:56:46:A7:89:05:A4:59:9C:F5:24:AE:57:EC:CF:80:BE:AA:A3:EB X509v3 Authority Key Identifier: keyid:96:8C:2C:55:DC:8E:B9:97:BF:59:12:1D:4C:2F:FD:54:44:A2:2E:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:93:f6:06:7d:36:fb:57:f0:8d:c7:6f:da:57:0d:d2:5d:83: d3:39:4e:bf:fa:21:75:3a:7e:12:9b:70:0c:47:44:6f:51:5e: 7d:5b:ee:91:f8:d5:34:46:23:17:58:c7:e6:6c:8a:e7:19:94: d8:b0:34:c1:a2:fa:ba:ea:96:2f:19:0f:e8:71:f5:e0:ed:7a: 65:d8:41:57:e7:d7:23:ca:07:55:64:01:49:eb:5c:47:fd:79: 94:ab:94:dd:88:32:13:a8:52:fd:18:d3:69:b8:3a:c7:c6:91: 35:13:2c:47:32:08:f4:29:d7:b3:08:99:72:3b:26:cf:02:38: 4b:cd:3e:dc:5d:bf:c7:8b:5b:2d:e1:17:3b:1c:89:d1:14:67: 3d:98:5f:87:a9:a4:2c:11:cd:20:a1:6b:c7:66:7a:f2:bd:bb: 3a:18:6b:22:f5:ba:53:e5:49:0c:25:6b:18:3c:90:7a:f2:b8: 70:c3:4c:58:f2:df:c6:c4:98:cc:c6:34:23:26:2c:81:5e:25: 77:12:ce:7a:68:c7:b9:41:02:16:b5:b6:8b:b0:fa:33:f1:a6: fe:21:70:ec:31:ed:b5:a3:97:0f:37:08:f6:76:6c:b9:c7:42: cb:49:84:27:70:da:e4:a8:8c:89:a8:55:0f:83:a7:0c:65:36: de:f4:8f:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkMM3cVIRMbhIgFswMNHSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2OGMyYzU1ZGM4ZWI5OTdiZjU5MTIxZDRjMmZmZDU0NDRh MjJlMmQwHhcNMjYwMjA5MTgwMTI2WhcNMjYwMjEwMTgwMTI2WjAzMTEwLwYDVQQD EygzODU2NDZhNzg5MDVhNDU5OWNmNTI0YWU1N2VjY2Y4MGJlYWFhM2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwAmXvyytK0ZNDAgPiWmDZbkDQIH dxRUkAWpRdMUsmON1jQWflQ8sSmD1NiHpx2SSEZafsiqQ+wGndnwOxL0p0pbVgYO QOJ/J+9156T1bEnvomHQFZFhKfjyn1zoID7/jG5noRGScC1N+8ZC+/hfjR+qI8t3 mNHPei3cUFEhUL22VaVBMQPfIX+h8wu9t3v0O0zf02ihkUnD4JnSVbmxud53WuXz qhE498SspbaDJSeicorHz4JvjrCugqsFjHulRInQiE/N3yN+5tYzIbZOQmzrPsIJ kGY9l2ehF1FU4mKDWy69V09S054ed6wOv583uygj0goPSjkvZpk058B8TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhWRqeJBaRZnPUkrlfsz4C+qqPrMB8GA1UdIwQY MBaAFJaMLFXcjrmXv1kSHUwv/VREoi4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG93c1ZkeU91WmVfV1JJZFRDXzlWRVNpTGkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9lNDc0MWItZjViNS00MThmLThlOTYt MTU0ZTU5OWZkMzVmLzEvbG93c1ZkeU91WmVfV1JJZFRDXzlWRVNpTGkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9lNDc0MWItZjViNS00MThmLThlOTYtMTU0ZTU5OWZkMzVm LzEvbG93c1ZkeU91WmVfV1JJZFRDXzlWRVNpTGkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG5P2Bn02 +1fwjcdv2lcN0l2D0zlOv/ohdTp+EptwDEdEb1FefVvukfjVNEYjF1jH5myK5xmU 2LA0waL6uuqWLxkP6HH14O16ZdhBV+fXI8oHVWQBSetcR/15lKuU3YgyE6hS/RjT abg6x8aRNRMsRzII9CnXswiZcjsmzwI4S80+3F2/x4tbLeEXOxyJ0RRnPZhfh6mk LBHNIKFrx2Z68r27OhhrIvW6U+VJDCVrGDyQevK4cMNMWPLfxsSYzMY0IyYsgV4l dxLOemjHuUECFrW2i7D6M/Gm/iFw7DHttaOXDzcI9nZsucdCy0mEJ3Da5KiMiahV D4OnDGU23vSPrw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:01 2026 by rpki-client