This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft File: LqdibWANr3WTdqZQfh1oQ4aZLTE.mft (raw, json) Hash identifier: XQDefpT6yMEevM23aUX60M8y7odJu4DjaJETcY9xk3Q= Subject key identifier: DE:70:D6:4F:74:26:FB:59:3C:84:0A:0A:37:4B:E8:02:3B:AE:C8:ED Authority key identifier: 2E:A7:62:6D:60:0D:AF:75:93:76:A6:50:7E:1D:68:43:86:99:2D:31 Certificate issuer: /CN=2ea7626d600daf759376a6507e1d684386992d31 Certificate serial: 019C1F4D14259ADFBAD8032687E4A993C241 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft Manifest number: 0E1A Signing time: Mon 02 Feb 2026 17:01:10 +0000 Manifest this update: Mon 02 Feb 2026 17:01:10 +0000 Manifest next update: Tue 03 Feb 2026 17:01:10 +0000 Files and hashes: 1: 74hYT2gK0sb5mVOlRXh4hpjf2Wg.roa (hash: KDQsSgSZtyiIVHFzfImrnhrCnaAln2AZORY10VEdnzo=) 2: LqdibWANr3WTdqZQfh1oQ4aZLTE.crl (hash: q1OYWgGPBNCOkaxBDRJ7Yp9FjOpNjDUTKSFQkENmIuk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.crl rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1f:4d:14:25:9a:df:ba:d8:03:26:87:e4:a9:93:c2:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ea7626d600daf759376a6507e1d684386992d31 Validity Not Before: Feb 2 17:01:10 2026 GMT Not After : Feb 3 17:01:10 2026 GMT Subject: CN=de70d64f7426fb593c840a0a374be8023baec8ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fd:4b:76:8a:98:dc:93:db:99:30:da:78:c8: e2:de:97:c7:98:fc:80:99:4d:62:ae:ca:03:ce:89: 3e:d5:bd:4d:e6:c3:08:28:6b:9e:58:86:32:7b:4d: a9:e5:06:84:5c:de:d6:ca:7b:c0:02:52:88:06:da: 31:05:c5:b5:d9:7e:23:c9:66:f0:0e:09:e0:0e:e2: f8:f3:cb:96:e9:22:0a:c7:71:d2:8b:1b:41:5f:35: 77:9a:97:e4:22:0d:df:14:69:18:50:e4:3e:13:89: 3a:cb:b9:ff:ad:41:c4:9b:e5:be:b9:35:8c:46:e2: 2f:fc:8f:ab:56:ba:2c:a1:48:9c:13:d1:80:bd:89: 1a:59:4f:19:97:32:6f:40:7c:0b:1b:a3:33:b9:b7: 44:ae:31:4d:80:05:ab:9d:c0:be:3f:9d:65:ea:05: 2a:da:19:5b:23:ae:71:ba:ec:8e:c2:fe:ae:a8:f3: f4:3c:34:f5:87:f7:55:82:a9:89:c8:4e:00:07:49: f9:e2:09:76:77:62:68:44:d6:eb:d0:2c:e9:db:a1: be:a6:68:f7:1d:ae:17:ab:ad:f0:20:48:25:ca:43: 82:45:4a:f8:e0:86:48:b4:f8:ca:64:46:94:72:c4: b9:48:08:17:27:93:4a:54:4e:aa:5c:04:7c:66:02: 13:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:70:D6:4F:74:26:FB:59:3C:84:0A:0A:37:4B:E8:02:3B:AE:C8:ED X509v3 Authority Key Identifier: keyid:2E:A7:62:6D:60:0D:AF:75:93:76:A6:50:7E:1D:68:43:86:99:2D:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:32:9e:2c:fd:d5:f5:e5:86:a2:26:09:76:94:c0:38:75:92: 9d:21:42:83:87:1f:2b:ff:07:a3:06:1e:cd:4e:7e:3f:85:5a: 7b:64:b8:e3:08:b8:93:27:27:a3:69:09:c6:b3:1c:5f:e0:d9: f5:70:f3:9d:b3:00:4d:e1:0e:99:bb:49:df:70:6a:ee:03:15: 36:e1:08:71:b7:39:7e:9f:52:e8:54:93:7f:d5:6c:22:ae:39: 70:74:98:a3:05:19:4d:a7:6c:11:36:9e:17:e5:b2:a3:a3:c2: 65:05:13:ae:a8:41:3c:ab:83:e8:08:ef:0d:73:30:bd:f4:ef: 83:85:b8:03:1b:fe:dc:7f:1d:32:82:dd:33:b0:1c:48:3b:bf: 48:a5:90:61:19:fc:b5:66:05:4f:93:e9:c3:f7:1c:ab:4f:dd: 0a:47:f5:09:0d:8b:06:2b:f2:23:5d:79:ad:00:2b:1b:d8:0d: 3a:da:11:9e:64:39:0f:e1:10:98:1b:7f:f6:a0:87:2b:22:1b: ca:ad:73:9b:14:40:34:5b:e4:47:d4:cd:b0:5d:cf:98:b9:38: c5:ce:e8:6c:c5:6e:7a:f3:7a:1b:c4:c0:a2:e6:16:2b:15:ae: f8:b7:07:cd:cc:16:9c:ed:9c:98:89:05:59:a7:e0:19:e9:e1: c2:ff:d1:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwfTRQlmt+62AMmh+Spk8JBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYTc2MjZkNjAwZGFmNzU5Mzc2YTY1MDdlMWQ2ODQzODY5 OTJkMzEwHhcNMjYwMjAyMTcwMTEwWhcNMjYwMjAzMTcwMTEwWjAzMTEwLwYDVQQD EyhkZTcwZDY0Zjc0MjZmYjU5M2M4NDBhMGEzNzRiZTgwMjNiYWVjOGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf1LdoqY3JPbmTDaeMji3pfHmPyA mU1irsoDzok+1b1N5sMIKGueWIYye02p5QaEXN7WynvAAlKIBtoxBcW12X4jyWbw DgngDuL488uW6SIKx3HSixtBXzV3mpfkIg3fFGkYUOQ+E4k6y7n/rUHEm+W+uTWM RuIv/I+rVrosoUicE9GAvYkaWU8ZlzJvQHwLG6MzubdErjFNgAWrncC+P51l6gUq 2hlbI65xuuyOwv6uqPP0PDT1h/dVgqmJyE4AB0n54gl2d2JoRNbr0Czp26G+pmj3 Ha4Xq63wIEglykOCRUr44IZItPjKZEaUcsS5SAgXJ5NKVE6qXAR8ZgITrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5w1k90JvtZPIQKCjdL6AI7rsjtMB8GA1UdIwQY MBaAFC6nYm1gDa91k3amUH4daEOGmS0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHFkaWJXQU5yM1dUZHFaUWZoMW9RNGFaTFRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wZDZiNDctODE5MS00MWUyLTgxMTMt NmU1NjIxMmNkZjVjLzEvTHFkaWJXQU5yM1dUZHFaUWZoMW9RNGFaTFRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8wZDZiNDctODE5MS00MWUyLTgxMTMtNmU1NjIxMmNkZjVj LzEvTHFkaWJXQU5yM1dUZHFaUWZoMW9RNGFaTFRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjKeLP3V 9eWGoiYJdpTAOHWSnSFCg4cfK/8HowYezU5+P4Vae2S44wi4kycno2kJxrMcX+DZ 9XDznbMATeEOmbtJ33Bq7gMVNuEIcbc5fp9S6FSTf9VsIq45cHSYowUZTadsETae F+Wyo6PCZQUTrqhBPKuD6AjvDXMwvfTvg4W4Axv+3H8dMoLdM7AcSDu/SKWQYRn8 tWYFT5Ppw/ccq0/dCkf1CQ2LBivyI115rQArG9gNOtoRnmQ5D+EQmBt/9qCHKyIb yq1zmxRANFvkR9TNsF3PmLk4xc7obMVuevN6G8TAouYWKxWu+LcHzcwWnO2cmIkF WafgGenhwv/RhA== -----END CERTIFICATE-----Generated at Mon Feb 2 20:56:42 2026 by rpki-client