This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft File: lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft (raw, json) Hash identifier: NX6uYkG97xxi8lIbxjSSNB0ziBGQSkcdrbVx8gvYc3w= Subject key identifier: 00:53:B8:F6:B1:54:4F:D5:EE:FA:D7:23:24:76:F1:6F:89:8A:4F:08 Authority key identifier: 97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68 Certificate issuer: /CN=9735a94f31546d437b89720e844b2f12a5abf268 Certificate serial: 019C4246570D45DCF677523DC2F1AF70C9FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft Manifest number: 0D42 Signing time: Mon 09 Feb 2026 12:00:31 +0000 Manifest this update: Mon 09 Feb 2026 12:00:31 +0000 Manifest next update: Tue 10 Feb 2026 12:00:31 +0000 Files and hashes: 1: D8jbeGvsCWlCtUKlWcmQzUoyjDA.roa (hash: hR+1WTEE4faE3X7SUL7mOqQ/qkK9Up9FfMVzqDGeaYA=) 2: lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl (hash: Sw1kX65V+fC8A5eT1bBPSGMIwZQWlgHQg35nXZ5wMu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:57:0d:45:dc:f6:77:52:3d:c2:f1:af:70:c9:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9735a94f31546d437b89720e844b2f12a5abf268 Validity Not Before: Feb 9 12:00:31 2026 GMT Not After : Feb 10 12:00:31 2026 GMT Subject: CN=0053b8f6b1544fd5eefad7232476f16f898a4f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a9:a7:b9:0c:0b:03:92:cf:01:2e:07:e3:0b: 50:32:17:7b:56:39:ce:af:c8:e1:b2:9b:aa:01:5a: b7:88:f3:0b:cb:73:41:9a:ee:61:a6:5b:33:35:70: a0:7f:62:e5:65:a0:1a:e8:a2:af:88:6c:d8:c8:e6: ca:6b:9d:8d:90:a5:ae:24:51:03:70:8e:bd:78:7e: 72:c9:69:fe:5d:48:b2:1a:c4:82:e4:af:bd:13:27: b6:f5:4e:4d:78:f2:65:5d:cd:87:75:c9:dd:1d:48: ae:93:d6:6b:91:ab:f5:0f:e0:4f:4a:69:20:81:d4: 30:4d:1d:92:9c:94:ea:8d:38:24:1b:fb:92:05:ca: 13:a3:f6:4a:27:14:10:cd:f8:9f:fe:9a:3f:fe:25: 34:74:24:24:f0:df:d9:d8:d1:71:06:79:0b:6f:c7: f7:88:07:f9:0f:5a:65:77:9e:83:24:25:9b:a7:3e: 39:00:6c:68:4a:f5:b0:d5:79:04:35:9c:1f:73:5d: 7f:f9:98:c4:42:4c:dd:ac:04:8a:41:6a:f1:2e:99: 49:4b:1e:84:95:0c:57:4b:9b:56:bd:b0:da:e6:e8: 44:f6:cd:52:33:ea:25:cb:8b:ab:9e:57:94:49:52: 75:4c:1b:cb:a8:e6:05:ce:51:50:ae:af:f6:85:c8: 9e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:53:B8:F6:B1:54:4F:D5:EE:FA:D7:23:24:76:F1:6F:89:8A:4F:08 X509v3 Authority Key Identifier: keyid:97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:8d:2d:87:e5:82:6d:cc:a7:e7:84:16:fd:6a:45:92:e2:c2: c7:2d:98:b7:b1:7b:bd:12:ae:7f:d4:e4:9c:ff:10:25:bb:9e: 17:51:ca:5b:7b:0d:78:2d:7f:3a:9e:f2:fb:41:e7:0b:b7:ff: 34:51:d4:81:ce:81:fc:10:8b:48:df:19:b8:88:52:53:a6:74: ff:20:20:90:31:8c:47:86:44:2a:a6:ec:88:a4:ba:35:c3:fa: dc:13:d4:af:57:ce:50:63:57:d8:21:9f:78:5c:37:3c:cb:d7: 9c:75:7b:02:64:c2:12:e4:32:89:f9:0b:25:5f:87:69:75:4f: 08:74:cf:83:03:bd:37:ed:e7:83:51:8f:3c:3c:2f:29:33:b4: 3a:ec:ea:6c:cc:4b:4f:7f:a7:b2:22:2b:7c:0c:f5:12:35:8c: 77:21:68:03:5b:1b:f9:5d:8a:cf:69:62:9d:a9:17:45:2f:76: 70:f1:7f:71:c3:0e:1d:e2:76:b3:3a:f1:ef:7e:81:30:dd:18: 55:50:df:9b:c1:e0:05:4d:51:bd:16:1a:75:4a:d0:ef:0e:dc: 2f:03:d4:bd:9f:89:dc:ae:42:46:d6:ae:23:e5:a1:9e:0b:f4: 97:aa:db:e7:c3:a7:35:1c:4c:92:76:a3:f1:d6:fe:3c:32:0b: 75:b5:df:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRlcNRdz2d1I9wvGvcMn7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MzVhOTRmMzE1NDZkNDM3Yjg5NzIwZTg0NGIyZjEyYTVh YmYyNjgwHhcNMjYwMjA5MTIwMDMxWhcNMjYwMjEwMTIwMDMxWjAzMTEwLwYDVQQD EygwMDUzYjhmNmIxNTQ0ZmQ1ZWVmYWQ3MjMyNDc2ZjE2Zjg5OGE0ZjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqmnuQwLA5LPAS4H4wtQMhd7VjnO r8jhspuqAVq3iPMLy3NBmu5hplszNXCgf2LlZaAa6KKviGzYyObKa52NkKWuJFED cI69eH5yyWn+XUiyGsSC5K+9Eye29U5NePJlXc2HdcndHUiuk9Zrkav1D+BPSmkg gdQwTR2SnJTqjTgkG/uSBcoTo/ZKJxQQzfif/po//iU0dCQk8N/Z2NFxBnkLb8f3 iAf5D1pld56DJCWbpz45AGxoSvWw1XkENZwfc11/+ZjEQkzdrASKQWrxLplJSx6E lQxXS5tWvbDa5uhE9s1SM+oly4urnleUSVJ1TBvLqOYFzlFQrq/2hcielQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFABTuPaxVE/V7vrXIyR28W+Jik8IMB8GA1UdIwQY MBaAFJc1qU8xVG1De4lyDoRLLxKlq/JoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHpXcFR6RlViVU43aVhJT2hFc3ZFcVdyOG1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9jZDQzNTAtYmU3NC00N2UwLTk2YjMt YjBkYjJlYWE5N2VkLzEvbHpXcFR6RlViVU43aVhJT2hFc3ZFcVdyOG1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9jZDQzNTAtYmU3NC00N2UwLTk2YjMtYjBkYjJlYWE5N2Vk LzEvbHpXcFR6RlViVU43aVhJT2hFc3ZFcVdyOG1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjI0th+WC bcyn54QW/WpFkuLCxy2Yt7F7vRKuf9TknP8QJbueF1HKW3sNeC1/Op7y+0HnC7f/ NFHUgc6B/BCLSN8ZuIhSU6Z0/yAgkDGMR4ZEKqbsiKS6NcP63BPUr1fOUGNX2CGf eFw3PMvXnHV7AmTCEuQyifkLJV+HaXVPCHTPgwO9N+3ng1GPPDwvKTO0OuzqbMxL T3+nsiIrfAz1EjWMdyFoA1sb+V2Kz2linakXRS92cPF/ccMOHeJ2szrx736BMN0Y VVDfm8HgBU1RvRYadUrQ7w7cLwPUvZ+J3K5CRtauI+Whngv0l6rb58OnNRxMknaj 8db+PDILdbXfhA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:31 2026 by rpki-client