This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft File: LArI02kFESA6Me94Xm0cRDksoos.mft (raw, json) Hash identifier: JkHm7M7RhiV58NDrhCU0jgWRojYg3eEeQHT7akBeOMo= Subject key identifier: 25:4A:5D:C0:58:EB:33:AB:4B:9C:1D:ED:AD:E7:BC:31:3E:42:90:0D Authority key identifier: 2C:0A:C8:D3:69:05:11:20:3A:31:EF:78:5E:6D:1C:44:39:2C:A2:8B Certificate issuer: /CN=2c0ac8d3690511203a31ef785e6d1c44392ca28b Certificate serial: 019C420F50D127D7FD36AF2B383095110586 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft Manifest number: 15B7 Signing time: Mon 09 Feb 2026 11:00:25 +0000 Manifest this update: Mon 09 Feb 2026 11:00:25 +0000 Manifest next update: Tue 10 Feb 2026 11:00:25 +0000 Files and hashes: 1: LArI02kFESA6Me94Xm0cRDksoos.crl (hash: v5iIveLpxRhpvFAxyHSXd3t4AMzMqVKzrtSFiWxTW28=) 2: y9oIavvpiMrvnU2r-vzh4RLXZAM.roa (hash: 0GqP4mZRL5cj50tTVSJxQrctxG11Svu03EroPoTMkWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:50:d1:27:d7:fd:36:af:2b:38:30:95:11:05:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c0ac8d3690511203a31ef785e6d1c44392ca28b Validity Not Before: Feb 9 11:00:25 2026 GMT Not After : Feb 10 11:00:25 2026 GMT Subject: CN=254a5dc058eb33ab4b9c1dedade7bc313e42900d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:23:99:4a:2d:bb:60:73:22:2e:14:63:af:30: 32:ce:8e:a6:66:ff:ed:9f:d9:95:c9:25:d6:9f:96: bf:6b:16:41:e3:60:b4:ec:81:6b:ed:a9:8d:db:1c: fe:20:83:e2:14:bd:c6:c2:f3:40:9f:82:6c:14:61: 2c:9f:4e:c4:20:c0:a2:10:90:fd:0c:32:8c:2c:27: 6d:4c:1d:66:8b:f0:a7:da:fb:8a:ac:df:b0:8f:98: 27:93:63:d9:ca:77:04:c5:14:6b:bb:1e:a9:88:25: a7:6b:47:72:cb:27:e1:17:a1:bd:b6:e7:4f:25:66: 8f:39:e1:58:31:70:d3:67:c2:2d:8c:46:fc:ed:2b: 86:6e:57:ce:ff:0d:34:ad:d7:69:eb:d2:10:39:35: 59:4e:b8:a0:a5:fe:73:d0:fe:83:9f:23:89:10:49: 56:81:bd:a5:af:85:fe:0d:7a:90:96:ba:a2:cd:9a: 7c:4f:f5:f6:75:1c:0c:6b:49:39:c1:54:a3:f3:64: 5e:a4:cf:03:50:0a:a4:ac:2a:67:51:ab:98:db:84: a0:55:b9:a2:cd:57:57:e1:60:a6:a9:6a:e6:cd:0a: 38:f1:b7:67:93:4a:82:28:01:89:0a:d6:89:51:55: 39:7f:89:12:2f:f4:a4:05:40:62:1b:13:fb:ad:02: 0a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:4A:5D:C0:58:EB:33:AB:4B:9C:1D:ED:AD:E7:BC:31:3E:42:90:0D X509v3 Authority Key Identifier: keyid:2C:0A:C8:D3:69:05:11:20:3A:31:EF:78:5E:6D:1C:44:39:2C:A2:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:12:50:cc:ea:be:95:c8:09:f4:6f:f7:34:88:d5:1e:b7:73: 00:da:ff:c7:68:b4:9f:00:28:1c:27:ee:20:8b:4e:9a:4f:69: 31:08:55:07:d9:47:e9:5d:87:79:b3:fa:bf:f9:3e:f1:50:14: 09:05:5a:47:c8:84:df:bf:a6:52:52:8f:b8:f7:aa:49:3e:0e: 53:cc:93:76:fc:bd:02:dd:48:46:1a:d7:d6:e9:33:90:c3:c3: 3e:41:ef:45:a1:b0:9a:63:48:cd:2d:cd:38:51:0b:c7:25:3a: 5b:51:75:24:51:38:90:b0:79:9d:34:04:63:d0:f4:ab:5d:64: 54:23:6b:8d:d0:04:a4:81:90:c2:b7:95:bd:40:1b:6b:c7:26: 61:9b:53:21:28:6d:87:c8:2f:3d:c3:b6:fe:3b:04:9a:d8:bf: ae:a6:00:21:1a:dc:eb:c3:30:22:eb:bc:98:d1:79:61:b7:5c: 5e:83:72:57:64:fc:6c:b9:18:fd:2a:da:13:71:58:46:c3:a6: bb:99:6a:5e:ec:09:6e:f9:bf:21:7a:0c:4f:76:58:54:96:de: 56:d3:56:53:be:90:ba:c8:9b:4e:93:87:84:07:cd:b0:91:2b: 80:3d:f1:fd:57:e0:47:85:f3:5b:82:f9:ad:ac:01:b5:1a:c0: c9:67:82:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD1DRJ9f9Nq8rODCVEQWGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMGFjOGQzNjkwNTExMjAzYTMxZWY3ODVlNmQxYzQ0Mzky Y2EyOGIwHhcNMjYwMjA5MTEwMDI1WhcNMjYwMjEwMTEwMDI1WjAzMTEwLwYDVQQD EygyNTRhNWRjMDU4ZWIzM2FiNGI5YzFkZWRhZGU3YmMzMTNlNDI5MDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyOZSi27YHMiLhRjrzAyzo6mZv/t n9mVySXWn5a/axZB42C07IFr7amN2xz+IIPiFL3GwvNAn4JsFGEsn07EIMCiEJD9 DDKMLCdtTB1mi/Cn2vuKrN+wj5gnk2PZyncExRRrux6piCWna0dyyyfhF6G9tudP JWaPOeFYMXDTZ8ItjEb87SuGblfO/w00rddp69IQOTVZTrigpf5z0P6DnyOJEElW gb2lr4X+DXqQlrqizZp8T/X2dRwMa0k5wVSj82RepM8DUAqkrCpnUauY24SgVbmi zVdX4WCmqWrmzQo48bdnk0qCKAGJCtaJUVU5f4kSL/SkBUBiGxP7rQIK1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVKXcBY6zOrS5wd7a3nvDE+QpANMB8GA1UdIwQY MBaAFCwKyNNpBREgOjHveF5tHEQ5LKKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEFySTAya0ZFU0E2TWU5NFhtMGNSRGtzb29zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi84ZWZkMmUtNjkyYy00ZjQ3LWI3NDkt NGYzNmM2YTIwYzBlLzEvTEFySTAya0ZFU0E2TWU5NFhtMGNSRGtzb29zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi84ZWZkMmUtNjkyYy00ZjQ3LWI3NDktNGYzNmM2YTIwYzBl LzEvTEFySTAya0ZFU0E2TWU5NFhtMGNSRGtzb29zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRJQzOq+ lcgJ9G/3NIjVHrdzANr/x2i0nwAoHCfuIItOmk9pMQhVB9lH6V2HebP6v/k+8VAU CQVaR8iE37+mUlKPuPeqST4OU8yTdvy9At1IRhrX1ukzkMPDPkHvRaGwmmNIzS3N OFELxyU6W1F1JFE4kLB5nTQEY9D0q11kVCNrjdAEpIGQwreVvUAba8cmYZtTISht h8gvPcO2/jsEmti/rqYAIRrc68MwIuu8mNF5YbdcXoNyV2T8bLkY/SraE3FYRsOm u5lqXuwJbvm/IXoMT3ZYVJbeVtNWU76QusibTpOHhAfNsJErgD3x/VfgR4XzW4L5 rawBtRrAyWeCWQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:34 2026 by rpki-client