This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft File: LcKRuNts_d9t0qHVWyJtSUkqJwU.mft (raw, json) Hash identifier: KKFav2dMCsh08OZa2nTpF8bdWg5VggwCcdMQo6+vdlQ= Subject key identifier: 40:1E:C7:9B:89:17:30:52:AE:16:20:24:65:C1:64:E2:F1:E7:F4:27 Authority key identifier: 2D:C2:91:B8:DB:6C:FD:DF:6D:D2:A1:D5:5B:22:6D:49:49:2A:27:05 Certificate issuer: /CN=2dc291b8db6cfddf6dd2a1d55b226d49492a2705 Certificate serial: 019C1EA85F05B69ABE6933CFA2171442810E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft Manifest number: 12ED Signing time: Mon 02 Feb 2026 14:01:16 +0000 Manifest this update: Mon 02 Feb 2026 14:01:16 +0000 Manifest next update: Tue 03 Feb 2026 14:01:16 +0000 Files and hashes: 1: LcKRuNts_d9t0qHVWyJtSUkqJwU.crl (hash: zmtFPXYg+sc2QfTyZtXMHSabgCzZfzA8aeiifSSI4vs=) 2: OSxR7yWXlXGYKz7l57qWN2MkgtY.roa (hash: zf1564nEeAhmFYxKrhpVodFL6WhyuPNWB8KasXTcpQw=) 3: S4RQtuZRJfsn5pCSOhLo3GCLnRs.roa (hash: J969uvOOjMxmLam91mq14STKrrErN1aKZ7dPQDpgBQo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.crl rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 14:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:a8:5f:05:b6:9a:be:69:33:cf:a2:17:14:42:81:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dc291b8db6cfddf6dd2a1d55b226d49492a2705 Validity Not Before: Feb 2 14:01:16 2026 GMT Not After : Feb 3 14:01:16 2026 GMT Subject: CN=401ec79b89173052ae16202465c164e2f1e7f427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:75:b7:80:a6:c7:99:d8:f0:50:a2:a3:7b:89: a8:21:64:46:f5:aa:41:21:47:d1:a3:6a:7d:ac:7d: cc:c7:9d:7a:1e:ff:22:2e:9a:1b:ec:b4:03:ed:72: e1:35:80:a8:a9:59:e7:5a:e5:bc:4f:b1:97:ef:92: 8c:38:7c:dd:fe:a8:1f:8e:6e:d6:5e:d4:dc:28:7c: 8f:fb:29:5a:ae:13:7d:97:b1:1f:76:26:62:29:74: 9d:af:3a:31:b0:d8:d6:20:90:5e:d9:b8:cb:b5:72: 62:25:12:a5:9d:7b:10:e4:b4:0e:6b:87:d4:e4:93: ef:58:a8:ff:89:dc:b1:40:75:c0:4f:bd:45:8c:79: 85:bb:c9:95:5c:b2:33:71:bf:db:0f:bd:73:db:fa: ea:de:45:b4:2e:6f:2f:59:d8:0b:5f:83:08:72:38: d8:2e:05:de:df:93:38:f1:7a:5d:af:85:b6:a3:bb: 8e:97:b7:31:f8:d4:f4:09:83:a2:54:bd:ca:14:4f: a8:57:83:5e:d8:32:25:e2:75:fa:82:7f:99:41:04: 7e:0e:3e:0e:65:16:b3:23:59:6b:99:54:37:62:99: e0:d9:17:2d:a5:83:00:15:71:31:99:28:9d:52:5b: e7:1f:9f:5f:8d:63:7b:8b:c8:3f:d7:50:97:cd:15: a2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:1E:C7:9B:89:17:30:52:AE:16:20:24:65:C1:64:E2:F1:E7:F4:27 X509v3 Authority Key Identifier: keyid:2D:C2:91:B8:DB:6C:FD:DF:6D:D2:A1:D5:5B:22:6D:49:49:2A:27:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:a3:8c:31:e7:42:55:98:ab:b9:e2:aa:68:34:55:12:e2:bb: 1b:76:80:cb:2b:6b:06:60:4e:72:39:5d:ab:c4:c8:ab:94:f3: fe:44:09:49:02:64:e7:3a:12:02:8e:b3:75:ea:5f:fc:b8:de: ca:79:2a:bd:38:2c:3b:1f:49:78:89:44:19:a6:aa:91:3c:cd: d5:dc:84:f5:00:4a:7f:e4:c0:bd:8d:f5:51:81:d2:06:f5:95: c8:5f:98:53:8d:20:f0:0e:ae:a5:9a:3e:ae:80:bc:76:cc:4b: 40:d0:0d:7e:75:6f:dd:44:d2:06:87:7c:49:cb:3a:46:66:93: ee:10:ef:45:e8:cb:2c:56:9c:75:06:13:ed:06:27:86:63:ed: d3:b5:db:f6:88:55:3a:e7:a8:95:2a:dc:34:16:71:7c:2b:7a: 7b:8b:a8:db:bb:78:5c:10:2c:c5:43:1c:57:8c:f7:ae:6d:40: 32:b1:77:ae:70:b8:32:6c:43:6d:70:0f:f5:22:67:6f:61:bd: b1:cf:92:fb:e6:b2:26:6d:77:c6:f3:f0:47:7a:b3:7e:c9:8b: 5e:50:c2:2c:1b:85:37:29:ee:45:39:eb:20:15:90:63:2a:cb: 5b:45:7a:7c:f1:17:29:e9:fb:8a:94:f9:a1:27:eb:fb:03:73: 40:53:b9:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZweqF8Ftpq+aTPPohcUQoEOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkYzI5MWI4ZGI2Y2ZkZGY2ZGQyYTFkNTViMjI2ZDQ5NDky YTI3MDUwHhcNMjYwMjAyMTQwMTE2WhcNMjYwMjAzMTQwMTE2WjAzMTEwLwYDVQQD Eyg0MDFlYzc5Yjg5MTczMDUyYWUxNjIwMjQ2NWMxNjRlMmYxZTdmNDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HW3gKbHmdjwUKKje4moIWRG9apB IUfRo2p9rH3Mx516Hv8iLpob7LQD7XLhNYCoqVnnWuW8T7GX75KMOHzd/qgfjm7W XtTcKHyP+ylarhN9l7EfdiZiKXSdrzoxsNjWIJBe2bjLtXJiJRKlnXsQ5LQOa4fU 5JPvWKj/idyxQHXAT71FjHmFu8mVXLIzcb/bD71z2/rq3kW0Lm8vWdgLX4MIcjjY LgXe35M48Xpdr4W2o7uOl7cx+NT0CYOiVL3KFE+oV4Ne2DIl4nX6gn+ZQQR+Dj4O ZRazI1lrmVQ3Ypng2RctpYMAFXExmSidUlvnH59fjWN7i8g/11CXzRWinQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEAex5uJFzBSrhYgJGXBZOLx5/QnMB8GA1UdIwQY MBaAFC3CkbjbbP3fbdKh1VsibUlJKicFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGNLUnVOdHNfZDl0MHFIVld5SnRTVWtxSndVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80MWE4NDMtNzUyNC00NTViLWJlMjIt MmIxNzBlOTVjMmI3LzEvTGNLUnVOdHNfZDl0MHFIVld5SnRTVWtxSndVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80MWE4NDMtNzUyNC00NTViLWJlMjItMmIxNzBlOTVjMmI3 LzEvTGNLUnVOdHNfZDl0MHFIVld5SnRTVWtxSndVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYqOMMedC VZirueKqaDRVEuK7G3aAyytrBmBOcjldq8TIq5Tz/kQJSQJk5zoSAo6zdepf/Lje ynkqvTgsOx9JeIlEGaaqkTzN1dyE9QBKf+TAvY31UYHSBvWVyF+YU40g8A6upZo+ roC8dsxLQNANfnVv3UTSBod8Scs6RmaT7hDvRejLLFacdQYT7QYnhmPt07Xb9ohV OueolSrcNBZxfCt6e4uo27t4XBAsxUMcV4z3rm1AMrF3rnC4MmxDbXAP9SJnb2G9 sc+S++ayJm13xvPwR3qzfsmLXlDCLBuFNynuRTnrIBWQYyrLW0V6fPEXKen7ipT5 oSfr+wNzQFO5/g== -----END CERTIFICATE-----Generated at Mon Feb 2 20:56:40 2026 by rpki-client