This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft File: lwhyRZO0dTF1shSBLPaJGmRfhMU.mft (raw, json) Hash identifier: hxT126Z4EEYcL4joZiEJmwGeXYdph8SGpJPlXMHNMfU= Subject key identifier: C1:C5:31:E9:5C:0A:6C:19:FF:20:F0:70:7C:69:F5:3C:14:44:20:3C Authority key identifier: 97:08:72:45:93:B4:75:31:75:B2:14:81:2C:F6:89:1A:64:5F:84:C5 Certificate issuer: /CN=9708724593b4753175b214812cf6891a645f84c5 Certificate serial: 019C42B4523B40CAD34456816A562C6DD0B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft Manifest number: 0336 Signing time: Mon 09 Feb 2026 14:00:39 +0000 Manifest this update: Mon 09 Feb 2026 14:00:39 +0000 Manifest next update: Tue 10 Feb 2026 14:00:39 +0000 Files and hashes: 1: cGIbIuyd_-GcZFAPYp_iRhjY8Fs.roa (hash: 4l9uaitU/oM93/Oha9XHLDc9sPtfot6T5F/wqRyQOyk=) 2: lwhyRZO0dTF1shSBLPaJGmRfhMU.crl (hash: rWE5a4KjU2E5xGNX1gNpS/mCVAVaBBsF29xfr6wv2q8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.crl rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:52:3b:40:ca:d3:44:56:81:6a:56:2c:6d:d0:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9708724593b4753175b214812cf6891a645f84c5 Validity Not Before: Feb 9 14:00:39 2026 GMT Not After : Feb 10 14:00:39 2026 GMT Subject: CN=c1c531e95c0a6c19ff20f0707c69f53c1444203c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:09:96:09:d2:9c:90:f5:44:19:25:5b:cf:dc: 1f:31:67:52:1a:6d:46:b6:b7:8a:92:b7:62:af:c1: cc:eb:d7:e1:e5:4d:6c:21:2f:bd:74:7b:5d:1a:b2: 7a:da:23:d4:ad:94:d1:5e:0b:85:86:43:e1:c6:27: 00:48:47:2c:87:99:8c:d2:f8:e8:cd:c7:65:e6:95: fb:92:74:80:8c:0b:dc:9e:51:c0:b0:8d:2f:2d:d4: ec:87:bd:ea:be:61:ef:1b:37:b7:1e:97:b1:9b:a0: e7:dd:dd:ca:25:65:dd:eb:77:38:49:62:19:32:2e: b4:dd:e6:9b:be:1c:3d:c6:9b:2d:d7:7f:88:e4:76: b4:00:35:42:95:09:bb:58:6a:b3:4a:63:5b:9e:30: 95:8e:06:95:3e:90:5d:56:46:6a:20:8f:6e:5f:6d: 4c:fe:00:c4:5b:54:78:5b:b8:de:7c:9c:94:1b:a3: e8:3a:ca:b5:48:c6:30:5f:09:20:da:4d:93:5c:d1: 3c:93:6c:e4:22:f2:81:f7:e0:c9:44:54:8a:f5:2a: 6d:5a:3a:76:b5:eb:ec:92:de:cf:5c:56:de:c8:06: 83:a2:a3:8e:5b:90:a5:d4:83:65:e8:f0:e3:c2:af: 95:79:c6:86:fb:f9:35:48:9d:03:87:34:bf:84:cd: 73:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C5:31:E9:5C:0A:6C:19:FF:20:F0:70:7C:69:F5:3C:14:44:20:3C X509v3 Authority Key Identifier: keyid:97:08:72:45:93:B4:75:31:75:B2:14:81:2C:F6:89:1A:64:5F:84:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:17:06:9e:5e:32:84:f0:41:30:60:75:0d:e8:4c:54:9d:2e: ea:3f:24:b9:cd:30:15:fb:90:0b:8f:1e:4b:72:d8:aa:3d:62: 21:a7:2c:a9:9e:75:86:74:fd:a1:1f:fc:69:d5:97:31:a2:8c: 5a:f8:72:aa:3c:ea:c5:f3:3c:58:2f:fe:be:be:ef:0e:fe:23: 9e:1d:d0:01:fb:1b:a8:ad:ac:0c:9a:34:f6:6d:c7:f1:af:7a: 8f:c9:56:bc:33:fc:a9:82:25:34:93:ae:5e:11:5a:a8:ef:3c: 06:87:25:c6:fb:02:35:d2:8d:d8:e5:fd:2f:30:b8:dd:af:5d: a5:37:53:85:e9:e3:1f:04:1b:38:0d:8b:b6:f9:44:97:04:51: 8f:08:51:9e:51:aa:14:64:73:33:4d:bc:93:31:bd:7a:b1:95: 3d:84:ac:61:e8:16:62:8d:cc:49:60:62:45:cd:34:f0:dd:75: 32:21:3b:9f:7d:40:c4:18:58:c9:81:d2:48:d8:c6:17:3a:72: 8c:1f:87:72:dd:b0:07:f5:cf:15:11:75:67:c4:49:33:3c:b9: b0:63:14:af:4c:2c:60:80:89:85:1c:41:76:96:89:50:59:2b: f1:83:fe:a4:aa:9a:82:ff:6f:b4:bf:1a:e9:39:de:ea:96:67: 76:85:87:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtFI7QMrTRFaBalYsbdCzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MDg3MjQ1OTNiNDc1MzE3NWIyMTQ4MTJjZjY4OTFhNjQ1 Zjg0YzUwHhcNMjYwMjA5MTQwMDM5WhcNMjYwMjEwMTQwMDM5WjAzMTEwLwYDVQQD EyhjMWM1MzFlOTVjMGE2YzE5ZmYyMGYwNzA3YzY5ZjUzYzE0NDQyMDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAmWCdKckPVEGSVbz9wfMWdSGm1G treKkrdir8HM69fh5U1sIS+9dHtdGrJ62iPUrZTRXguFhkPhxicASEcsh5mM0vjo zcdl5pX7knSAjAvcnlHAsI0vLdTsh73qvmHvGze3Hpexm6Dn3d3KJWXd63c4SWIZ Mi603eabvhw9xpst13+I5Ha0ADVClQm7WGqzSmNbnjCVjgaVPpBdVkZqII9uX21M /gDEW1R4W7jefJyUG6PoOsq1SMYwXwkg2k2TXNE8k2zkIvKB9+DJRFSK9SptWjp2 tevskt7PXFbeyAaDoqOOW5Cl1INl6PDjwq+VecaG+/k1SJ0DhzS/hM1zXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHFMelcCmwZ/yDwcHxp9TwURCA8MB8GA1UdIwQY MBaAFJcIckWTtHUxdbIUgSz2iRpkX4TFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHdoeVJaTzBkVEYxc2hTQkxQYUpHbVJmaE1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hZThjMzUtZjlkNy00MzdiLTg5OTYt MzJhNDI3OGU1YmM1LzEvbHdoeVJaTzBkVEYxc2hTQkxQYUpHbVJmaE1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9hZThjMzUtZjlkNy00MzdiLTg5OTYtMzJhNDI3OGU1YmM1 LzEvbHdoeVJaTzBkVEYxc2hTQkxQYUpHbVJmaE1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfxcGnl4y hPBBMGB1DehMVJ0u6j8kuc0wFfuQC48eS3LYqj1iIacsqZ51hnT9oR/8adWXMaKM WvhyqjzqxfM8WC/+vr7vDv4jnh3QAfsbqK2sDJo09m3H8a96j8lWvDP8qYIlNJOu XhFaqO88BoclxvsCNdKN2OX9LzC43a9dpTdThenjHwQbOA2LtvlElwRRjwhRnlGq FGRzM028kzG9erGVPYSsYegWYo3MSWBiRc008N11MiE7n31AxBhYyYHSSNjGFzpy jB+Hct2wB/XPFRF1Z8RJMzy5sGMUr0wsYICJhRxBdpaJUFkr8YP+pKqagv9vtL8a 6Tne6pZndoWHXQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:58:28 2026 by rpki-client