This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft File: LUUkZslYX29anMHDDo17Fu1HSkg.mft (raw, json) Hash identifier: sVi2SXBmfkoOaLsTtsDqu3Q4Pw/tMu/u+Bmpdnh+57I= Subject key identifier: 15:69:4B:D2:10:CC:9B:B3:C9:06:E9:EB:17:12:FF:32:7E:2E:A8:BB Authority key identifier: 2D:45:24:66:C9:58:5F:6F:5A:9C:C1:C3:0E:8D:7B:16:ED:47:4A:48 Certificate issuer: /CN=2d452466c9585f6f5a9cc1c30e8d7b16ed474a48 Certificate serial: 019C4390C5FB07D0926999B771E9394F1673 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft Manifest number: 0883 Signing time: Mon 09 Feb 2026 18:01:27 +0000 Manifest this update: Mon 09 Feb 2026 18:01:27 +0000 Manifest next update: Tue 10 Feb 2026 18:01:27 +0000 Files and hashes: 1: LUUkZslYX29anMHDDo17Fu1HSkg.crl (hash: lb5Dzq5/1FQsXyfA+1Qglkc6Gj2ZYYkSWPWOJ/Hak3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.crl rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:c5:fb:07:d0:92:69:99:b7:71:e9:39:4f:16:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d452466c9585f6f5a9cc1c30e8d7b16ed474a48 Validity Not Before: Feb 9 18:01:27 2026 GMT Not After : Feb 10 18:01:27 2026 GMT Subject: CN=15694bd210cc9bb3c906e9eb1712ff327e2ea8bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d3:29:0d:b1:0d:55:3f:18:7d:1a:7c:4b:0c: bc:b0:40:db:b8:c5:05:24:a1:1d:9f:05:75:0c:60: e7:93:c6:92:28:d8:b5:a0:a9:b9:72:0b:a8:63:1f: 31:09:03:24:ce:8f:a1:b7:e3:55:f5:51:2f:e6:2c: 5f:b2:7e:c0:4a:16:f9:0e:45:5d:16:4a:0e:0e:9b: a8:7e:7a:38:ce:68:f8:8a:f7:c0:81:55:bf:33:97: 70:60:cb:36:05:84:7a:f4:f1:60:4a:d5:e8:3f:47: 37:d4:29:53:9e:26:6d:db:8c:b2:e7:c2:5b:59:2e: 04:c3:b4:e6:4b:a4:96:e5:b5:b6:97:96:78:45:c3: 80:d6:d8:e3:fe:c3:2c:95:4b:b6:fb:af:b2:2d:a5: 05:fc:5a:21:7d:39:ef:d6:c7:7d:a6:c7:09:f5:4f: 97:1c:0e:91:cf:48:26:9e:92:de:8f:48:65:ec:c0: aa:22:3c:55:39:04:21:80:1f:85:dc:73:61:01:44: ff:56:3d:ba:f5:19:15:fe:ea:36:b0:59:e7:e0:1b: 51:c8:bf:1d:32:36:7f:e8:81:e6:a5:12:1c:17:0a: 21:73:20:8e:ce:fa:6a:4d:31:fd:72:ef:bd:ac:91: af:61:9c:4b:a4:06:6d:3b:78:73:3a:c6:9b:3a:2d: dc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:69:4B:D2:10:CC:9B:B3:C9:06:E9:EB:17:12:FF:32:7E:2E:A8:BB X509v3 Authority Key Identifier: keyid:2D:45:24:66:C9:58:5F:6F:5A:9C:C1:C3:0E:8D:7B:16:ED:47:4A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c9:6b:8d:86:93:b4:27:cc:94:dc:64:d7:56:d0:c6:ab:0b: c8:2a:95:7e:d5:a8:4c:be:2b:ba:c8:98:5c:a3:33:ac:ae:98: 18:81:7d:93:96:88:ea:01:e7:80:03:18:68:46:d0:8f:35:88: 17:b0:6f:01:85:38:fc:e8:73:d1:a7:7f:58:bd:86:88:09:e1: 87:ec:b6:a2:73:1c:7c:4b:61:7d:b9:9a:49:ee:99:9c:ea:c8: c6:b3:10:8a:5a:15:b0:cf:89:27:ab:57:b2:b7:b0:15:cf:b1: 2c:45:76:b7:f3:81:6c:b5:ee:a6:6f:de:6f:4d:95:be:8b:c6: 91:8b:12:11:a8:e0:73:e7:37:ef:f4:af:ec:91:a8:25:98:30: 14:22:63:05:62:ae:76:3f:04:23:c9:00:29:07:a5:6d:16:73: e1:eb:20:a7:d6:c7:69:83:5b:25:5e:bb:a7:a8:37:5f:1a:2a: 80:cc:7c:52:72:07:ae:60:25:ad:92:cd:23:02:ba:08:da:8d: 6d:63:46:f8:f0:1f:e0:e1:f9:d3:01:23:cf:e7:ed:90:2d:3e: 8d:df:88:71:e7:28:50:01:6e:c1:04:62:fc:9b:fc:15:38:f8: 60:78:20:d3:6c:53:2f:9f:1a:89:09:ce:1b:03:3a:5b:49:91: bd:b0:66:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkMX7B9CSaZm3cek5TxZzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNDUyNDY2Yzk1ODVmNmY1YTljYzFjMzBlOGQ3YjE2ZWQ0 NzRhNDgwHhcNMjYwMjA5MTgwMTI3WhcNMjYwMjEwMTgwMTI3WjAzMTEwLwYDVQQD EygxNTY5NGJkMjEwY2M5YmIzYzkwNmU5ZWIxNzEyZmYzMjdlMmVhOGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNMpDbENVT8YfRp8Swy8sEDbuMUF JKEdnwV1DGDnk8aSKNi1oKm5cguoYx8xCQMkzo+ht+NV9VEv5ixfsn7AShb5DkVd FkoODpuofno4zmj4ivfAgVW/M5dwYMs2BYR69PFgStXoP0c31ClTniZt24yy58Jb WS4Ew7TmS6SW5bW2l5Z4RcOA1tjj/sMslUu2+6+yLaUF/FohfTnv1sd9pscJ9U+X HA6Rz0gmnpLej0hl7MCqIjxVOQQhgB+F3HNhAUT/Vj269RkV/uo2sFnn4BtRyL8d MjZ/6IHmpRIcFwohcyCOzvpqTTH9cu+9rJGvYZxLpAZtO3hzOsabOi3cCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBVpS9IQzJuzyQbp6xcS/zJ+Lqi7MB8GA1UdIwQY MBaAFC1FJGbJWF9vWpzBww6NexbtR0pIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFVVa1pzbFlYMjlhbk1IRERvMTdGdTFIU2tnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9hNmJjMDAtNmZkNS00NzgyLWIwNmUt MjNlOWFhNWM4YWExLzEvTFVVa1pzbFlYMjlhbk1IRERvMTdGdTFIU2tnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9hNmJjMDAtNmZkNS00NzgyLWIwNmUtMjNlOWFhNWM4YWEx LzEvTFVVa1pzbFlYMjlhbk1IRERvMTdGdTFIU2tnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOslrjYaT tCfMlNxk11bQxqsLyCqVftWoTL4rusiYXKMzrK6YGIF9k5aI6gHngAMYaEbQjzWI F7BvAYU4/Ohz0ad/WL2GiAnhh+y2onMcfEthfbmaSe6ZnOrIxrMQiloVsM+JJ6tX srewFc+xLEV2t/OBbLXupm/eb02VvovGkYsSEajgc+c37/Sv7JGoJZgwFCJjBWKu dj8EI8kAKQelbRZz4esgp9bHaYNbJV67p6g3XxoqgMx8UnIHrmAlrZLNIwK6CNqN bWNG+PAf4OH50wEjz+ftkC0+jd+IcecoUAFuwQRi/Jv8FTj4YHgg02xTL58aiQnO GwM6W0mRvbBmaw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:41:14 2026 by rpki-client