This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft File: LuUlFj3AHc0wibsdz7CRLnftr5g.mft (raw, json) Hash identifier: 29kH96PDDT7PhWutGkt1YF6+tKosh42LT5hw5A3J4/c= Subject key identifier: C3:12:61:C1:60:E6:96:04:D0:2C:1E:15:D2:4F:E4:B0:56:BC:FB:05 Authority key identifier: 2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98 Certificate issuer: /CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98 Certificate serial: 019C43FDE51C6F7332E0938990E90A8152EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 20:00:38 +0000 Manifest this update: Mon 09 Feb 2026 20:00:38 +0000 Manifest next update: Tue 10 Feb 2026 20:00:38 +0000 Files and hashes: 1: LuUlFj3AHc0wibsdz7CRLnftr5g.crl (hash: nx+tAH+rVj+koa3UijdJXFv09/dJVTbNumtkum5XlqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:e5:1c:6f:73:32:e0:93:89:90:e9:0a:81:52:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98 Validity Not Before: Feb 9 20:00:38 2026 GMT Not After : Feb 10 20:00:38 2026 GMT Subject: CN=c31261c160e69604d02c1e15d24fe4b056bcfb05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:da:43:f1:88:16:2d:49:05:85:a5:03:3e:30: 36:f6:f8:8d:0a:e0:e6:91:af:98:39:16:c4:6c:4f: 38:73:c3:27:4b:27:f0:06:bf:e0:c3:77:33:fe:e5: 90:8a:8f:73:1d:46:9a:7d:79:48:23:17:f9:4f:07: 91:1b:f3:4d:e7:7e:ef:c0:19:d9:0f:4b:0a:a7:ea: 38:3b:40:7c:aa:e4:b8:cf:86:56:2f:9f:80:ca:91: cc:d8:3a:de:b7:54:ce:94:1b:fd:89:1b:8d:cf:d8: e8:70:cb:f2:1b:89:7b:d5:81:33:b1:7e:b8:2c:26: e2:40:6e:2e:1e:52:45:53:19:d2:5c:68:2a:89:9a: 90:ea:2e:64:8a:39:b1:3f:45:35:08:a7:13:dc:54: 75:df:7e:81:1e:4e:2b:ec:b6:f6:c6:e9:21:e0:80: 7b:2b:19:47:59:4b:a8:97:7f:69:75:27:80:7d:cf: b6:71:7b:34:df:89:06:b3:db:e9:f7:4f:d0:de:e3: 5e:39:a8:08:51:f4:5b:dc:5d:b9:d9:c6:76:08:c1: 9f:9c:af:f9:de:de:f9:31:0c:8d:aa:13:5b:db:f4: f0:d2:c6:33:55:a0:14:64:06:45:f1:28:0a:1a:83: b9:12:c4:da:f8:a6:65:be:f6:e5:de:d9:54:b0:bd: 77:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:12:61:C1:60:E6:96:04:D0:2C:1E:15:D2:4F:E4:B0:56:BC:FB:05 X509v3 Authority Key Identifier: keyid:2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:68:5f:f5:b4:02:66:a8:af:32:dc:ce:3c:6a:5f:f0:b4:de: 54:4b:44:76:79:3a:bd:0f:3a:5d:43:c6:9d:40:25:15:0c:45: eb:de:0f:e0:22:27:1b:04:44:c1:ab:83:dd:e4:21:40:46:54: 28:b8:77:a8:82:18:8a:a8:72:8f:e6:f2:41:78:51:58:df:07: 3d:b5:dc:4e:06:58:d6:c5:6a:86:fe:ce:6f:90:00:1c:50:57: e9:b3:b4:f9:79:63:7a:5b:44:54:5c:1d:99:5c:b4:1d:36:b6: 70:11:ff:16:b4:11:ab:58:5e:4c:52:fb:b2:77:68:34:78:46: 1c:a4:32:09:d7:02:28:aa:98:77:3d:b4:31:9f:f8:73:5f:33: 72:25:b2:64:c8:ba:aa:30:52:e0:6b:3a:2a:2f:35:65:47:24: 7e:81:91:5f:e7:20:c4:13:b8:be:f3:9f:76:c0:24:60:be:38: 4f:4b:bf:ed:d9:16:20:3a:1b:6d:3d:88:10:7d:e5:b3:8b:a9: 02:d6:7f:b9:97:5e:ee:f4:c7:47:70:31:4d:3a:53:16:93:28: a8:bf:d8:e5:91:84:4d:9e:cc:57:38:be:93:07:ab:9a:d4:b8: b4:7d:8d:21:fa:95:21:ab:81:7f:d1:b0:05:4f:ea:a0:b7:2c: da:ec:fe:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/eUcb3My4JOJkOkKgVLsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZTUyNTE2M2RjMDFkY2QzMDg5YmIxZGNmYjA5MTJlNzdl ZGFmOTgwHhcNMjYwMjA5MjAwMDM4WhcNMjYwMjEwMjAwMDM4WjAzMTEwLwYDVQQD EyhjMzEyNjFjMTYwZTY5NjA0ZDAyYzFlMTVkMjRmZTRiMDU2YmNmYjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tpD8YgWLUkFhaUDPjA29viNCuDm ka+YORbEbE84c8MnSyfwBr/gw3cz/uWQio9zHUaafXlIIxf5TweRG/NN537vwBnZ D0sKp+o4O0B8quS4z4ZWL5+AypHM2Dret1TOlBv9iRuNz9jocMvyG4l71YEzsX64 LCbiQG4uHlJFUxnSXGgqiZqQ6i5kijmxP0U1CKcT3FR1336BHk4r7Lb2xukh4IB7 KxlHWUuol39pdSeAfc+2cXs034kGs9vp90/Q3uNeOagIUfRb3F252cZ2CMGfnK/5 3t75MQyNqhNb2/Tw0sYzVaAUZAZF8SgKGoO5EsTa+KZlvvbl3tlUsL137wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMSYcFg5pYE0CweFdJP5LBWvPsFMB8GA1UdIwQY MBaAFC7lJRY9wB3NMIm7Hc+wkS537a+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHVVbEZqM0FIYzB3aWJzZHo3Q1JMbmZ0cjVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8zNWNmN2ItMDE0NC00NTA3LWJmMzkt Y2M2OGRjODU0ZTg4LzEvTHVVbEZqM0FIYzB3aWJzZHo3Q1JMbmZ0cjVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8zNWNmN2ItMDE0NC00NTA3LWJmMzktY2M2OGRjODU0ZTg4 LzEvTHVVbEZqM0FIYzB3aWJzZHo3Q1JMbmZ0cjVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmhf9bQC ZqivMtzOPGpf8LTeVEtEdnk6vQ86XUPGnUAlFQxF694P4CInGwREwauD3eQhQEZU KLh3qIIYiqhyj+byQXhRWN8HPbXcTgZY1sVqhv7Ob5AAHFBX6bO0+XljeltEVFwd mVy0HTa2cBH/FrQRq1heTFL7sndoNHhGHKQyCdcCKKqYdz20MZ/4c18zciWyZMi6 qjBS4Gs6Ki81ZUckfoGRX+cgxBO4vvOfdsAkYL44T0u/7dkWIDobbT2IEH3ls4up AtZ/uZde7vTHR3AxTTpTFpMoqL/Y5ZGETZ7MVzi+kwermtS4tH2NIfqVIauBf9Gw BU/qoLcs2uz+Iw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:25 2026 by rpki-client