This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft File: LyRkddfJujmfB_hDYh9uCBNy11c.mft (raw, json) Hash identifier: YuEzUMvSwnw6ANXbIaGcAqeNYNV5xPm9ean0PXPTXKA= Subject key identifier: C3:1A:51:EF:5D:52:FD:9B:18:27:3D:F8:B0:B1:6A:73:ED:15:72:E3 Authority key identifier: 2F:24:64:75:D7:C9:BA:39:9F:07:F8:43:62:1F:6E:08:13:72:D7:57 Certificate issuer: /CN=2f246475d7c9ba399f07f843621f6e081372d757 Certificate serial: 019C42B4039C671927F0DBC2E89814FF4D04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft Manifest number: 080E Signing time: Mon 09 Feb 2026 14:00:19 +0000 Manifest this update: Mon 09 Feb 2026 14:00:19 +0000 Manifest next update: Tue 10 Feb 2026 14:00:19 +0000 Files and hashes: 1: LyRkddfJujmfB_hDYh9uCBNy11c.crl (hash: dhGhb85unqFS5NzovEHvNg5FIyVQc0msIzWzIxoJyTI=) 2: rGAms1z6A-9ECUjJ26qD00dFB5M.roa (hash: TneAOJ5ow61DGzqx3O0Ri/mEpaW4EBKjztqT5e9vxSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.crl rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:03:9c:67:19:27:f0:db:c2:e8:98:14:ff:4d:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f246475d7c9ba399f07f843621f6e081372d757 Validity Not Before: Feb 9 14:00:19 2026 GMT Not After : Feb 10 14:00:19 2026 GMT Subject: CN=c31a51ef5d52fd9b18273df8b0b16a73ed1572e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a2:c6:1a:64:2b:4a:23:6d:dc:c7:0d:06:ab: d8:11:59:7c:36:1c:96:a4:11:39:44:2a:92:d6:dc: 4b:54:8a:1e:44:11:01:45:6c:fe:9b:94:1b:91:64: e2:48:b1:e9:30:0b:c9:3a:55:83:1e:a2:7f:0e:02: 4f:3a:2b:90:37:cd:ec:85:f7:60:50:58:77:ce:34: b9:ad:d3:b2:ca:21:0d:0b:1d:fa:ba:a0:23:60:b3: df:f1:cb:ef:77:50:95:51:e4:82:b8:35:3f:b4:68: f9:e2:f4:89:8a:7d:82:a5:21:c0:99:f8:31:1d:07: 55:d5:8f:69:fa:30:bc:45:0d:70:87:fe:13:d6:ff: 45:64:a7:79:fe:dd:69:da:66:1e:2e:d0:c6:0c:1b: af:c8:df:70:3f:93:dd:49:31:ee:8a:f4:39:07:fb: c4:59:31:e7:2f:8c:97:01:bb:cb:62:0a:35:e2:51: 26:58:ab:a0:34:60:1f:ab:65:67:d4:9d:30:2b:af: ee:1b:7c:bf:5d:52:9d:fd:c5:9c:f2:b9:3f:63:f0: 86:2e:0e:e7:8c:9c:0d:5e:b5:17:43:31:76:7d:b1: 5e:f5:ae:4b:cf:b8:4d:63:30:4f:42:cc:f3:3d:99: 81:d1:0b:14:ff:e7:fd:84:7a:8c:80:8a:06:ff:6e: 00:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:1A:51:EF:5D:52:FD:9B:18:27:3D:F8:B0:B1:6A:73:ED:15:72:E3 X509v3 Authority Key Identifier: keyid:2F:24:64:75:D7:C9:BA:39:9F:07:F8:43:62:1F:6E:08:13:72:D7:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:c5:eb:f9:cb:d5:87:f5:da:55:da:0e:87:97:7b:a0:18:bc: d3:ad:20:b7:62:65:fb:ba:cb:ce:03:1c:8f:7e:38:0f:a8:39: 4e:bd:0a:ed:6f:77:44:f5:3d:ea:b6:ca:29:0d:13:5e:75:68: e2:26:ec:01:c3:0c:37:2f:10:2a:ef:7f:8e:8c:2c:79:0f:c2: e7:94:b6:42:88:9d:40:45:b9:67:d9:29:b4:33:06:cb:3f:be: d4:08:a6:69:94:6f:7c:0e:98:50:fd:93:1d:e6:76:54:87:d2: 9d:af:70:15:99:e0:f0:45:78:3c:3a:d3:31:c5:ee:d4:38:62: 5b:07:ff:29:8e:5f:e6:75:0d:58:54:a2:e0:da:54:ce:77:4a: 2d:fb:e0:69:01:84:d8:40:8a:80:28:7e:66:e8:63:25:ce:da: 3f:f6:3e:9f:de:d4:d6:e3:f9:3e:fc:c5:6b:96:1a:9f:ff:33: 2e:d9:cb:f1:9e:94:56:a4:65:53:0a:e7:1a:05:d6:1e:03:e3: 97:01:18:e2:55:07:48:db:37:84:1d:8d:a6:fd:a8:09:26:e0: db:e9:03:df:2c:07:6b:a1:db:57:c7:fc:5d:8b:bb:b2:05:13: 24:2b:61:9e:05:ee:c5:a9:0e:f5:cb:a0:1e:4d:6d:8e:9e:90: 28:45:17:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtAOcZxkn8NvC6JgU/00EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMjQ2NDc1ZDdjOWJhMzk5ZjA3Zjg0MzYyMWY2ZTA4MTM3 MmQ3NTcwHhcNMjYwMjA5MTQwMDE5WhcNMjYwMjEwMTQwMDE5WjAzMTEwLwYDVQQD EyhjMzFhNTFlZjVkNTJmZDliMTgyNzNkZjhiMGIxNmE3M2VkMTU3MmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aLGGmQrSiNt3McNBqvYEVl8NhyW pBE5RCqS1txLVIoeRBEBRWz+m5QbkWTiSLHpMAvJOlWDHqJ/DgJPOiuQN83shfdg UFh3zjS5rdOyyiENCx36uqAjYLPf8cvvd1CVUeSCuDU/tGj54vSJin2CpSHAmfgx HQdV1Y9p+jC8RQ1wh/4T1v9FZKd5/t1p2mYeLtDGDBuvyN9wP5PdSTHuivQ5B/vE WTHnL4yXAbvLYgo14lEmWKugNGAfq2Vn1J0wK6/uG3y/XVKd/cWc8rk/Y/CGLg7n jJwNXrUXQzF2fbFe9a5Lz7hNYzBPQszzPZmB0QsU/+f9hHqMgIoG/24ADwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMaUe9dUv2bGCc9+LCxanPtFXLjMB8GA1UdIwQY MBaAFC8kZHXXybo5nwf4Q2IfbggTctdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHlSa2RkZkp1am1mQl9oRFloOXVDQk55MTFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9kZjUyYTAtNTgyNC00MmFkLTliNGQt ZDlhMWZhOTA4MTBmLzEvTHlSa2RkZkp1am1mQl9oRFloOXVDQk55MTFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9kZjUyYTAtNTgyNC00MmFkLTliNGQtZDlhMWZhOTA4MTBm LzEvTHlSa2RkZkp1am1mQl9oRFloOXVDQk55MTFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp8Xr+cvV h/XaVdoOh5d7oBi8060gt2Jl+7rLzgMcj344D6g5Tr0K7W93RPU96rbKKQ0TXnVo 4ibsAcMMNy8QKu9/jowseQ/C55S2QoidQEW5Z9kptDMGyz++1AimaZRvfA6YUP2T HeZ2VIfSna9wFZng8EV4PDrTMcXu1DhiWwf/KY5f5nUNWFSi4NpUzndKLfvgaQGE 2ECKgCh+ZuhjJc7aP/Y+n97U1uP5PvzFa5Yan/8zLtnL8Z6UVqRlUwrnGgXWHgPj lwEY4lUHSNs3hB2Npv2oCSbg2+kD3ywHa6HbV8f8XYu7sgUTJCthngXuxakO9cug Hk1tjp6QKEUXDA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:54 2026 by rpki-client