This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft File: l2U-VqlPj_3pS15PKKeeRffvDNw.mft (raw, json) Hash identifier: 61+hTl83TOCF5A5C2FppBUkrbfWeEEVPKdBFmYX0kuc= Subject key identifier: C6:DF:6D:E5:CA:DD:79:0C:F1:84:84:27:18:92:23:8D:83:CA:1C:46 Authority key identifier: 97:65:3E:56:A9:4F:8F:FD:E9:4B:5E:4F:28:A7:9E:45:F7:EF:0C:DC Certificate issuer: /CN=97653e56a94f8ffde94b5e4f28a79e45f7ef0cdc Certificate serial: 019C4321DBC79D8BBEE3CB43CA04FF69C765 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2U-VqlPj_3pS15PKKeeRffvDNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft Manifest number: 17F6 Signing time: Mon 09 Feb 2026 16:00:18 +0000 Manifest this update: Mon 09 Feb 2026 16:00:18 +0000 Manifest next update: Tue 10 Feb 2026 16:00:18 +0000 Files and hashes: 1: l2U-VqlPj_3pS15PKKeeRffvDNw.crl (hash: CQI9fFHIZpharDzTl7Oey4H+oow+6UUKfuPFVrcfdpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft rsync://rpki.ripe.net/repository/DEFAULT/l2U-VqlPj_3pS15PKKeeRffvDNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:db:c7:9d:8b:be:e3:cb:43:ca:04:ff:69:c7:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97653e56a94f8ffde94b5e4f28a79e45f7ef0cdc Validity Not Before: Feb 9 16:00:18 2026 GMT Not After : Feb 10 16:00:18 2026 GMT Subject: CN=c6df6de5cadd790cf18484271892238d83ca1c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f0:12:7a:97:95:0e:18:08:65:7b:2f:b6:f4: 8e:bd:54:25:dc:8e:48:90:16:59:6b:3c:1e:e6:04: 8b:51:09:2f:f0:db:7d:7c:2d:30:e7:e2:dd:5a:c6: 63:2a:93:2d:47:7c:cd:03:3b:ce:cf:6e:5d:31:c6: 28:cb:58:5d:23:15:5f:d5:b6:01:5a:95:c0:ec:03: 9e:15:22:8b:e6:00:bf:11:fa:d5:92:11:a0:57:c9: e2:0d:0b:38:62:74:9f:e8:07:ea:cf:10:d2:27:4c: 89:ca:8d:03:bb:ef:8b:11:7c:2f:6e:c4:11:7b:ef: 40:35:32:ed:d5:fb:a8:54:dc:ae:c0:af:2f:62:1f: fb:80:44:52:46:83:9e:32:d6:12:87:9e:90:2d:3e: ee:d9:18:38:21:ef:43:98:99:51:38:7a:b0:9e:ee: cc:66:c0:31:09:59:f7:dc:b8:77:d9:a3:ba:97:28: 7c:11:72:68:31:75:d0:99:38:9d:70:20:9e:c7:1f: 7f:28:58:03:c3:b9:7f:c7:3c:04:5a:11:3a:a2:1d: f5:a2:27:bf:3b:34:51:7d:a2:11:f9:fb:44:10:e0: d3:5b:37:b1:98:a1:61:17:e9:1f:60:86:b5:f6:f3: 68:c4:a9:cc:e5:2b:b5:00:be:96:fc:4a:62:1e:89: 16:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:DF:6D:E5:CA:DD:79:0C:F1:84:84:27:18:92:23:8D:83:CA:1C:46 X509v3 Authority Key Identifier: keyid:97:65:3E:56:A9:4F:8F:FD:E9:4B:5E:4F:28:A7:9E:45:F7:EF:0C:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2U-VqlPj_3pS15PKKeeRffvDNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:79:f4:97:68:a3:fa:e4:84:64:2f:a0:3f:80:85:9a:69:69: 97:8d:59:dc:5b:d9:12:e8:0e:80:a5:0f:1f:00:19:5a:94:ed: ee:0e:c4:46:ab:42:da:43:ae:d9:fe:98:c0:4f:7e:f8:66:1d: 28:1e:d4:6e:d8:c2:93:53:33:75:26:46:39:8a:ef:8d:8d:22: 2a:d7:22:7c:a0:e5:06:bf:0b:97:2e:a1:d7:5f:af:13:35:d5: 29:06:65:23:09:5d:57:71:f8:f4:7d:46:51:99:9c:06:ec:8b: eb:c1:12:04:eb:43:a3:1e:b8:d7:43:48:0b:34:b8:59:d4:de: 4d:63:61:ad:8d:44:39:26:4c:08:d2:d4:d4:27:3b:fc:1d:50: b1:8a:23:41:57:6a:89:85:1d:82:c7:01:24:f9:87:0f:e3:d4: cd:34:9b:bf:77:3c:de:ec:e7:fb:2b:48:df:37:76:45:1d:1b: 3c:b6:e0:54:32:fd:77:af:34:04:09:ac:30:72:a7:97:56:64: 59:a3:19:31:11:f6:c0:74:77:68:7e:83:41:50:a5:53:66:6e: 73:ca:d5:e2:40:ca:88:76:ab:3c:d6:9c:f2:f9:9c:44:76:6f: 9c:88:14:69:08:51:6b:43:78:ca:c6:92:77:c6:c6:0d:bb:29: 59:d0:4c:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIdvHnYu+48tDygT/acdlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NjUzZTU2YTk0ZjhmZmRlOTRiNWU0ZjI4YTc5ZTQ1Zjdl ZjBjZGMwHhcNMjYwMjA5MTYwMDE4WhcNMjYwMjEwMTYwMDE4WjAzMTEwLwYDVQQD EyhjNmRmNmRlNWNhZGQ3OTBjZjE4NDg0MjcxODkyMjM4ZDgzY2ExYzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fASepeVDhgIZXsvtvSOvVQl3I5I kBZZazwe5gSLUQkv8Nt9fC0w5+LdWsZjKpMtR3zNAzvOz25dMcYoy1hdIxVf1bYB WpXA7AOeFSKL5gC/EfrVkhGgV8niDQs4YnSf6AfqzxDSJ0yJyo0Du++LEXwvbsQR e+9ANTLt1fuoVNyuwK8vYh/7gERSRoOeMtYSh56QLT7u2Rg4Ie9DmJlROHqwnu7M ZsAxCVn33Lh32aO6lyh8EXJoMXXQmTidcCCexx9/KFgDw7l/xzwEWhE6oh31oie/ OzRRfaIR+ftEEODTWzexmKFhF+kfYIa19vNoxKnM5Su1AL6W/EpiHokW+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbfbeXK3XkM8YSEJxiSI42DyhxGMB8GA1UdIwQY MBaAFJdlPlapT4/96UteTyinnkX37wzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDJVLVZxbFBqXzNwUzE1UEtLZWVSZmZ2RE53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi84Y2UxNDYtZTA3ZC00MWQwLWIxMjct MjhjODljNTFiNGIwLzEvbDJVLVZxbFBqXzNwUzE1UEtLZWVSZmZ2RE53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi84Y2UxNDYtZTA3ZC00MWQwLWIxMjctMjhjODljNTFiNGIw LzEvbDJVLVZxbFBqXzNwUzE1UEtLZWVSZmZ2RE53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXn0l2ij +uSEZC+gP4CFmmlpl41Z3FvZEugOgKUPHwAZWpTt7g7ERqtC2kOu2f6YwE9++GYd KB7UbtjCk1MzdSZGOYrvjY0iKtcifKDlBr8Lly6h11+vEzXVKQZlIwldV3H49H1G UZmcBuyL68ESBOtDox6410NICzS4WdTeTWNhrY1EOSZMCNLU1Cc7/B1QsYojQVdq iYUdgscBJPmHD+PUzTSbv3c83uzn+ytI3zd2RR0bPLbgVDL9d680BAmsMHKnl1Zk WaMZMRH2wHR3aH6DQVClU2Zuc8rV4kDKiHarPNac8vmcRHZvnIgUaQhRa0N4ysaS d8bGDbspWdBMQw== -----END CERTIFICATE-----Generated at Tue Feb 10 00:12:32 2026 by rpki-client