This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft File: Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft (raw, json) Hash identifier: RrSVGRSqkLvnXTVJljZCUuGuA2eAl7qkrsiNYH6WCpY= Subject key identifier: 21:FC:82:BF:B8:07:30:74:F9:55:76:D6:11:07:60:47:DF:BE:7D:74 Authority key identifier: 2D:DF:DC:A7:3C:D6:4D:75:E6:56:DD:0A:3A:44:27:ED:61:98:2A:3D Certificate issuer: /CN=2ddfdca73cd64d75e656dd0a3a4427ed61982a3d Certificate serial: 019C43C718A18AD17A8FD943661BC92526FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft Manifest number: 0928 Signing time: Mon 09 Feb 2026 19:00:47 +0000 Manifest this update: Mon 09 Feb 2026 19:00:47 +0000 Manifest next update: Tue 10 Feb 2026 19:00:47 +0000 Files and hashes: 1: JeFks6SyUKUdGcPpnRu7HceMVqI.roa (hash: fG7mhBWGrI11+SMkgosBLh6lyTzRJMTAZnL7F7NiLMY=) 2: Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl (hash: ZVtcFxmZ+uEw5CZl1PlzrvRvL23QKMc/tvbq22WYbSY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:18:a1:8a:d1:7a:8f:d9:43:66:1b:c9:25:26:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ddfdca73cd64d75e656dd0a3a4427ed61982a3d Validity Not Before: Feb 9 19:00:47 2026 GMT Not After : Feb 10 19:00:47 2026 GMT Subject: CN=21fc82bfb8073074f95576d611076047dfbe7d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f1:95:9f:b0:27:c1:6d:26:14:93:44:d8:55: 48:2c:22:df:ae:9d:be:7d:0a:b6:15:20:7e:c5:bf: 81:5c:3d:56:fe:1c:20:40:e8:c6:5c:b2:c6:4c:6d: 4d:71:26:5c:e1:da:24:00:ef:84:ef:2e:ae:28:2c: 3e:cb:bf:54:39:c2:61:a9:ec:fe:14:d8:41:e8:79: f1:ae:56:40:b0:d6:db:3a:37:df:59:15:de:20:b1: e8:5d:46:a6:a5:19:09:1b:60:ce:c5:0d:21:44:3f: cb:d3:c9:0d:ff:34:13:a7:e8:fb:76:b0:6f:da:2f: 38:0d:c1:a4:77:d1:5b:fb:18:ad:c1:f8:69:ca:f3: aa:58:4b:6c:e0:14:00:30:6b:44:95:08:df:37:e5: 9e:59:ae:26:30:7b:18:aa:51:78:1a:e3:cc:a7:77: 26:ec:74:a9:d1:ca:08:d8:85:5c:a4:aa:e0:91:83: 2a:ee:b5:d4:cb:c6:e6:05:48:3b:fa:7b:d2:94:9a: ad:f4:e8:87:25:01:bb:b6:85:84:9e:2d:f9:8c:eb: a9:fe:96:15:c0:fe:0a:3b:ee:22:51:aa:25:79:62: 39:c1:f2:b7:70:f1:4c:92:1a:96:41:12:6c:73:33: 18:bd:ec:0f:bb:b8:82:81:01:0c:36:2a:f4:05:59: fa:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FC:82:BF:B8:07:30:74:F9:55:76:D6:11:07:60:47:DF:BE:7D:74 X509v3 Authority Key Identifier: keyid:2D:DF:DC:A7:3C:D6:4D:75:E6:56:DD:0A:3A:44:27:ED:61:98:2A:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:c9:1e:43:a5:15:7b:80:8e:8f:4e:5d:51:2b:48:de:22:37: 9b:0b:ad:1b:d8:ca:28:8d:00:4f:96:c8:f3:77:73:42:19:65: d1:40:3b:a0:de:95:c0:db:cf:0f:fb:9c:ee:ca:1f:9b:71:e9: 04:15:a2:e5:75:84:2b:66:04:db:c2:8c:12:79:0b:9c:e4:a0: 7e:de:14:43:e2:9c:79:61:57:a2:0b:6e:af:57:70:21:d6:a9: 04:6a:51:7b:9e:b7:da:31:ca:14:c2:9b:74:a0:dc:bd:4d:09: 55:81:56:32:98:4a:53:47:58:2a:50:ee:08:b5:bb:8f:23:7f: b7:98:56:d1:7a:b7:f7:1c:15:59:0e:79:e9:eb:ff:00:67:e8: 56:70:20:f8:16:55:5a:a0:9a:3f:d1:4f:f1:61:53:91:9f:e6: 9a:a8:27:84:56:82:db:8e:17:9d:16:a9:69:b0:da:4e:a5:62: 51:2a:0d:0b:3e:68:e9:e0:e8:15:c1:3a:6d:92:af:53:91:b7: f2:71:73:1e:4b:df:0c:75:91:aa:b1:61:ab:f7:6e:aa:6e:0f: 32:46:cb:9f:23:ac:85:38:0f:cb:39:6a:bc:e2:24:ac:bf:05: 7d:b6:c3:6b:02:89:b0:a8:9e:7f:b3:06:03:83:dd:22:93:90: a8:1c:9b:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxxihitF6j9lDZhvJJSb7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZGZkY2E3M2NkNjRkNzVlNjU2ZGQwYTNhNDQyN2VkNjE5 ODJhM2QwHhcNMjYwMjA5MTkwMDQ3WhcNMjYwMjEwMTkwMDQ3WjAzMTEwLwYDVQQD EygyMWZjODJiZmI4MDczMDc0Zjk1NTc2ZDYxMTA3NjA0N2RmYmU3ZDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfGVn7AnwW0mFJNE2FVILCLfrp2+ fQq2FSB+xb+BXD1W/hwgQOjGXLLGTG1NcSZc4dokAO+E7y6uKCw+y79UOcJhqez+ FNhB6HnxrlZAsNbbOjffWRXeILHoXUampRkJG2DOxQ0hRD/L08kN/zQTp+j7drBv 2i84DcGkd9Fb+xitwfhpyvOqWEts4BQAMGtElQjfN+WeWa4mMHsYqlF4GuPMp3cm 7HSp0coI2IVcpKrgkYMq7rXUy8bmBUg7+nvSlJqt9OiHJQG7toWEni35jOup/pYV wP4KO+4iUaoleWI5wfK3cPFMkhqWQRJsczMYvewPu7iCgQEMNir0BVn6nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCH8gr+4BzB0+VV21hEHYEffvn10MB8GA1UdIwQY MBaAFC3f3Kc81k115lbdCjpEJ+1hmCo9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGRfY3B6eldUWFhtVnQwS09rUW43V0dZS2owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9kNDFjNGEtOWJlZi00NzM3LTk1YTEt MDhmMTdjNDEwNzY1LzEvTGRfY3B6eldUWFhtVnQwS09rUW43V0dZS2owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9kNDFjNGEtOWJlZi00NzM3LTk1YTEtMDhmMTdjNDEwNzY1 LzEvTGRfY3B6eldUWFhtVnQwS09rUW43V0dZS2owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcskeQ6UV e4COj05dUStI3iI3mwutG9jKKI0AT5bI83dzQhll0UA7oN6VwNvPD/uc7sofm3Hp BBWi5XWEK2YE28KMEnkLnOSgft4UQ+KceWFXogtur1dwIdapBGpRe5632jHKFMKb dKDcvU0JVYFWMphKU0dYKlDuCLW7jyN/t5hW0Xq39xwVWQ556ev/AGfoVnAg+BZV WqCaP9FP8WFTkZ/mmqgnhFaC244XnRapabDaTqViUSoNCz5o6eDoFcE6bZKvU5G3 8nFzHkvfDHWRqrFhq/duqm4PMkbLnyOshTgPyzlqvOIkrL8FfbbDawKJsKief7MG A4PdIpOQqBybfg== -----END CERTIFICATE-----Generated at Mon Feb 9 23:02:08 2026 by rpki-client