This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft File: lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft (raw, json) Hash identifier: ZdBdsTR2ArknpJE4g8UGL21td2MRL9TE0PKuTyGo9zA= Subject key identifier: 3A:AF:AC:85:15:4A:75:E5:EC:37:F4:68:42:41:80:C7:28:C4:85:65 Authority key identifier: 94:26:D3:09:D0:DB:02:DF:1D:7E:04:BB:B3:93:13:BD:1D:F1:33:58 Certificate issuer: /CN=9426d309d0db02df1d7e04bbb39313bd1df13358 Certificate serial: 019C4358F8419FDC3A4A9E4A6A922D04B67C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft Manifest number: 0E9D Signing time: Mon 09 Feb 2026 17:00:29 +0000 Manifest this update: Mon 09 Feb 2026 17:00:29 +0000 Manifest next update: Tue 10 Feb 2026 17:00:29 +0000 Files and hashes: 1: JyitJqFf_sQZcIwoUYj4wcE-Kng.roa (hash: yAWpwzimbdFio0eZOpdLMpc2d2s+H4IuE70MmKFwzP0=) 2: lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl (hash: O3UAKhtfJtGbuxVXPfn3SQIMbDX/kjPiWV/Z32cbOgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:f8:41:9f:dc:3a:4a:9e:4a:6a:92:2d:04:b6:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9426d309d0db02df1d7e04bbb39313bd1df13358 Validity Not Before: Feb 9 17:00:29 2026 GMT Not After : Feb 10 17:00:29 2026 GMT Subject: CN=3aafac85154a75e5ec37f468424180c728c48565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7d:41:cb:76:c6:2d:3b:34:56:4d:e5:6a:51: 1c:10:f0:4a:6f:81:46:fb:97:ec:71:9e:c4:2d:84: 17:3f:c6:44:14:bd:03:5e:37:90:2f:2e:ed:3f:27: ff:bd:60:3c:d9:10:e9:5b:53:59:69:06:ff:53:79: bb:d5:ba:08:14:b0:03:16:3c:cb:d2:52:96:d7:4c: 6c:a0:38:fe:9c:8a:4f:70:c4:66:48:20:15:94:9c: 6a:f7:d7:ab:6c:08:44:a8:24:68:8d:ff:c0:33:73: e0:85:02:f7:d0:9e:5a:07:cb:02:41:4c:a2:67:d1: 57:e9:27:92:2b:6d:55:51:7d:a8:8c:46:3c:69:11: 24:07:9c:10:e8:e5:40:ee:9e:63:63:0a:31:5e:2a: 0a:a8:c5:75:a8:0f:c9:d6:f6:74:d1:24:68:e3:f6: 66:85:bd:37:bd:b9:e6:d1:d2:cf:f8:56:1c:9a:d8: 2b:59:cc:56:47:df:12:b0:e1:52:c7:aa:d7:e2:d6: d7:b5:9f:c8:39:36:1a:6c:9d:24:d4:a0:48:4f:b9: 4d:e5:ba:04:da:a2:ff:b9:c2:0a:6c:6d:9f:bb:83: 67:2e:ef:67:97:94:4b:12:57:59:f3:99:44:18:30: ba:53:b6:f1:88:6f:c3:91:2f:78:97:18:6e:e0:5e: d0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AF:AC:85:15:4A:75:E5:EC:37:F4:68:42:41:80:C7:28:C4:85:65 X509v3 Authority Key Identifier: keyid:94:26:D3:09:D0:DB:02:DF:1D:7E:04:BB:B3:93:13:BD:1D:F1:33:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:48:90:c4:f7:8e:4e:3f:32:d6:af:40:28:ca:49:ca:d6:d3: dc:5d:cc:5f:38:18:60:e3:ab:a6:fa:3b:07:f1:b7:c0:9e:41: 0f:64:eb:f3:7c:5c:ec:51:d3:37:11:86:02:6b:36:0d:19:90: f4:13:a4:62:93:2e:a9:57:33:4d:e4:38:0f:d9:75:d6:7c:c2: 3e:90:ac:d4:8b:af:a6:1a:60:7f:22:da:f7:2a:00:53:8d:2a: a0:fc:f6:1c:1f:4f:1d:c3:eb:54:c1:ee:89:5c:c0:2b:2f:d7: 61:86:f1:ba:92:90:dc:b6:3a:c3:22:7e:7c:9a:a9:bb:10:f4: 37:aa:1f:34:d6:59:4f:07:c5:f5:b5:43:55:1d:7a:4b:0c:75: 45:bb:71:35:ca:c9:b0:55:5a:58:80:06:f7:06:81:30:f8:89: 17:0f:5a:35:7d:23:75:cc:7f:fc:b2:2b:ff:6d:e8:fe:a8:80: 98:a4:f4:9c:60:70:af:49:68:52:19:49:d4:b5:bb:aa:f5:1a: 11:2b:68:12:4d:0a:d7:c0:ad:2f:f2:9c:30:b1:55:e1:6b:ed: 7b:29:cd:99:5c:5d:7e:47:b3:e6:df:7b:e1:3d:47:05:c6:f2: bc:b7:32:28:c3:b6:e2:30:bd:4b:75:01:8c:8b:e1:6f:5c:2f: 62:37:00:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWPhBn9w6Sp5KapItBLZ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MjZkMzA5ZDBkYjAyZGYxZDdlMDRiYmIzOTMxM2JkMWRm MTMzNTgwHhcNMjYwMjA5MTcwMDI5WhcNMjYwMjEwMTcwMDI5WjAzMTEwLwYDVQQD EygzYWFmYWM4NTE1NGE3NWU1ZWMzN2Y0Njg0MjQxODBjNzI4YzQ4NTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjn1By3bGLTs0Vk3lalEcEPBKb4FG +5fscZ7ELYQXP8ZEFL0DXjeQLy7tPyf/vWA82RDpW1NZaQb/U3m71boIFLADFjzL 0lKW10xsoDj+nIpPcMRmSCAVlJxq99erbAhEqCRojf/AM3PghQL30J5aB8sCQUyi Z9FX6SeSK21VUX2ojEY8aREkB5wQ6OVA7p5jYwoxXioKqMV1qA/J1vZ00SRo4/Zm hb03vbnm0dLP+FYcmtgrWcxWR98SsOFSx6rX4tbXtZ/IOTYabJ0k1KBIT7lN5boE 2qL/ucIKbG2fu4NnLu9nl5RLEldZ85lEGDC6U7bxiG/DkS94lxhu4F7Q4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqvrIUVSnXl7Df0aEJBgMcoxIVlMB8GA1UdIwQY MBaAFJQm0wnQ2wLfHX4Eu7OTE70d8TNYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbENiVENkRGJBdDhkZmdTN3M1TVR2UjN4TTFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi85MTQzMWEtYjUwZC00ZDUwLWE2ZDYt ZjE3ZjA5NWRkM2FmLzEvbENiVENkRGJBdDhkZmdTN3M1TVR2UjN4TTFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi85MTQzMWEtYjUwZC00ZDUwLWE2ZDYtZjE3ZjA5NWRkM2Fm LzEvbENiVENkRGJBdDhkZmdTN3M1TVR2UjN4TTFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM0iQxPeO Tj8y1q9AKMpJytbT3F3MXzgYYOOrpvo7B/G3wJ5BD2Tr83xc7FHTNxGGAms2DRmQ 9BOkYpMuqVczTeQ4D9l11nzCPpCs1IuvphpgfyLa9yoAU40qoPz2HB9PHcPrVMHu iVzAKy/XYYbxupKQ3LY6wyJ+fJqpuxD0N6ofNNZZTwfF9bVDVR16Swx1RbtxNcrJ sFVaWIAG9waBMPiJFw9aNX0jdcx//LIr/23o/qiAmKT0nGBwr0loUhlJ1LW7qvUa EStoEk0K18CtL/KcMLFV4WvteynNmVxdfkez5t974T1HBcbyvLcyKMO24jC9S3UB jIvhb1wvYjcAvQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:45:40 2026 by rpki-client