This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft File: LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft (raw, json) Hash identifier: BOgGIaPFfE5zrLHzPTVxAG/Obj9TSG+wy5t2lIGZYdQ= Subject key identifier: 11:AF:A7:F2:39:36:BF:20:98:4C:47:90:6D:50:E4:95:D2:5E:F9:5F Authority key identifier: 2C:13:22:02:0E:E4:E5:9C:B5:CD:3D:E7:16:50:C6:2A:FD:4C:02:27 Certificate issuer: /CN=2c1322020ee4e59cb5cd3de71650c62afd4c0227 Certificate serial: 019C4322EC3BD893E687A1A7CA202696B28A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft Manifest number: 0B25 Signing time: Mon 09 Feb 2026 16:01:28 +0000 Manifest this update: Mon 09 Feb 2026 16:01:28 +0000 Manifest next update: Tue 10 Feb 2026 16:01:28 +0000 Files and hashes: 1: LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl (hash: 8FdKST/b/r8QvW+n7pPcGbyS6Crx2E51S80pTHJdrkQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:ec:3b:d8:93:e6:87:a1:a7:ca:20:26:96:b2:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c1322020ee4e59cb5cd3de71650c62afd4c0227 Validity Not Before: Feb 9 16:01:28 2026 GMT Not After : Feb 10 16:01:28 2026 GMT Subject: CN=11afa7f23936bf20984c47906d50e495d25ef95f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a4:ec:a0:dd:f2:2c:c6:1f:68:63:cc:3a:e4: 7b:85:ab:d5:76:7f:a5:ab:00:6c:37:5e:65:a7:07: 18:d0:67:0b:df:3b:d9:c4:11:4d:5e:47:7f:8f:f2: cd:2e:42:64:e8:6d:d5:0c:03:77:fe:b0:98:0f:54: 35:4e:ad:05:9c:f8:99:9b:40:66:92:4a:68:8d:2b: 62:b8:4f:bf:bf:c4:8d:69:26:9c:3f:d5:6e:a6:02: 2e:37:00:46:b6:74:4f:1e:b5:04:1d:e1:ec:c3:59: 71:cd:16:76:b5:26:ea:13:a1:fc:21:dc:7e:4c:1e: 2f:1a:96:0d:d2:f2:bd:77:38:ad:ae:7c:00:19:59: f4:52:2f:94:b2:a5:fb:d0:4b:91:a0:95:e5:7d:b3: a5:9d:4d:45:56:84:8c:09:65:38:70:99:e0:80:dd: ec:b7:51:38:53:11:ea:52:ac:c7:39:47:c5:4d:32: 6c:9f:14:65:5f:5f:0e:cd:71:42:cf:67:6b:70:c4: 1c:f2:35:ca:44:28:1a:be:17:96:96:c2:9c:1b:1d: 4a:aa:7a:c4:ee:e7:b8:a3:b6:d8:bf:c8:56:42:65: b4:4e:62:60:d2:ec:93:92:1a:d4:d6:1f:73:c4:dd: da:c5:2e:e8:06:2f:34:95:3e:ef:33:25:3d:3c:bb: 15:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AF:A7:F2:39:36:BF:20:98:4C:47:90:6D:50:E4:95:D2:5E:F9:5F X509v3 Authority Key Identifier: keyid:2C:13:22:02:0E:E4:E5:9C:B5:CD:3D:E7:16:50:C6:2A:FD:4C:02:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:bd:95:50:7c:ff:55:17:2b:06:ba:6b:b5:31:d4:4f:9e:b0: d3:91:ee:7c:e6:57:a4:34:84:78:89:59:d5:31:ff:8d:4f:26: 74:71:a1:b1:65:09:09:88:c0:de:bf:08:98:14:ec:b8:30:d1: 67:02:5f:bc:bf:44:40:5f:cd:a7:ca:86:d7:8c:44:5b:66:fa: 06:8d:f8:63:48:a2:c1:6e:31:86:7a:83:17:98:3b:1f:25:aa: c3:81:ae:7a:6a:4b:cf:18:ad:0c:f2:12:fc:52:1b:c5:7c:3c: 2b:f5:c3:ad:dc:53:24:4b:43:d8:68:74:34:5a:f0:ca:28:36: e0:4a:0d:a5:34:2b:ab:f2:03:2f:85:dc:60:38:9c:29:b3:d7: 30:74:ab:6f:7c:1b:f8:ad:cf:85:9b:89:2e:e5:c1:8c:03:30: e4:fd:6b:0b:40:79:83:40:a5:7f:4d:bf:d1:71:16:27:8a:48: f1:b8:ae:6d:70:57:d8:a8:5d:40:52:55:28:b5:42:9e:d6:be: c5:43:a4:0b:23:aa:b1:ef:df:65:4e:0d:5e:21:15:48:73:cf: ec:e0:ce:76:45:b2:53:cd:06:90:e0:d3:11:87:68:fb:48:82: 3e:c2:86:09:d1:0c:66:d9:e7:af:60:38:7e:c2:07:94:e3:6c: 6d:d2:73:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIuw72JPmh6GnyiAmlrKKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMTMyMjAyMGVlNGU1OWNiNWNkM2RlNzE2NTBjNjJhZmQ0 YzAyMjcwHhcNMjYwMjA5MTYwMTI4WhcNMjYwMjEwMTYwMTI4WjAzMTEwLwYDVQQD EygxMWFmYTdmMjM5MzZiZjIwOTg0YzQ3OTA2ZDUwZTQ5NWQyNWVmOTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aTsoN3yLMYfaGPMOuR7havVdn+l qwBsN15lpwcY0GcL3zvZxBFNXkd/j/LNLkJk6G3VDAN3/rCYD1Q1Tq0FnPiZm0Bm kkpojStiuE+/v8SNaSacP9VupgIuNwBGtnRPHrUEHeHsw1lxzRZ2tSbqE6H8Idx+ TB4vGpYN0vK9dzitrnwAGVn0Ui+UsqX70EuRoJXlfbOlnU1FVoSMCWU4cJnggN3s t1E4UxHqUqzHOUfFTTJsnxRlX18OzXFCz2drcMQc8jXKRCgavheWlsKcGx1KqnrE 7ue4o7bYv8hWQmW0TmJg0uyTkhrU1h9zxN3axS7oBi80lT7vMyU9PLsVbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGvp/I5Nr8gmExHkG1Q5JXSXvlfMB8GA1UdIwQY MBaAFCwTIgIO5OWctc095xZQxir9TAInMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEJNaUFnN2s1WnkxelQzbkZsREdLdjFNQWljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9jNThjOGMtNWM2ZS00NGUwLTgyYWYt ZTk2ZGUzMTEyZGVhLzEvTEJNaUFnN2s1WnkxelQzbkZsREdLdjFNQWljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9jNThjOGMtNWM2ZS00NGUwLTgyYWYtZTk2ZGUzMTEyZGVh LzEvTEJNaUFnN2s1WnkxelQzbkZsREdLdjFNQWljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFb2VUHz/ VRcrBrprtTHUT56w05HufOZXpDSEeIlZ1TH/jU8mdHGhsWUJCYjA3r8ImBTsuDDR ZwJfvL9EQF/Np8qG14xEW2b6Bo34Y0iiwW4xhnqDF5g7HyWqw4GuempLzxitDPIS /FIbxXw8K/XDrdxTJEtD2Gh0NFrwyig24EoNpTQrq/IDL4XcYDicKbPXMHSrb3wb +K3PhZuJLuXBjAMw5P1rC0B5g0Clf02/0XEWJ4pI8biubXBX2KhdQFJVKLVCnta+ xUOkCyOqse/fZU4NXiEVSHPP7ODOdkWyU80GkODTEYdo+0iCPsKGCdEMZtnnr2A4 fsIHlONsbdJzbw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:35 2026 by rpki-client