This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft File: lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft (raw, json) Hash identifier: ptB1l7+7KwxgNF5JYqxBKE+sWQTAKM/o+nb/SrlrPQc= Subject key identifier: DA:EB:B2:3F:1D:56:7B:2A:F8:22:27:5E:CC:1F:09:7C:DA:2E:25:53 Authority key identifier: 97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4 Certificate issuer: /CN=971533cb7a6796ac5c382b38dcf459f9176931f4 Certificate serial: 019C41D8CF7731D437A24DCBB417C54137FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft Manifest number: 08BC Signing time: Mon 09 Feb 2026 10:00:53 +0000 Manifest this update: Mon 09 Feb 2026 10:00:53 +0000 Manifest next update: Tue 10 Feb 2026 10:00:53 +0000 Files and hashes: 1: JmkFCABPoX7SZe-QwBD6PChOSGk.roa (hash: xzMASuZ9G8RWkd86x5BZTykE+oySkmLx0mmIPA2Mdbo=) 2: lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl (hash: XWcHdjoNzNomDs9nxYJM3iSAQF7UoJDJ0ZFAMAccKhg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:cf:77:31:d4:37:a2:4d:cb:b4:17:c5:41:37:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=971533cb7a6796ac5c382b38dcf459f9176931f4 Validity Not Before: Feb 9 10:00:53 2026 GMT Not After : Feb 10 10:00:53 2026 GMT Subject: CN=daebb23f1d567b2af822275ecc1f097cda2e2553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:13:bc:20:68:1d:39:c9:3f:29:e5:6b:8b:4b: 09:8c:d6:a1:a0:e2:e0:00:47:71:9e:74:50:b7:3c: 8f:c5:2d:cb:a5:b6:8f:2a:54:a3:41:4f:e4:af:6f: c2:5a:48:73:2f:70:61:70:5d:2e:b7:df:0e:8c:6e: a1:16:99:7e:14:14:ed:b2:d3:77:de:47:3d:df:8c: 7e:e0:64:c0:84:94:ae:17:6e:95:93:43:31:36:c3: d9:cf:41:17:e5:4a:93:61:2e:5e:63:0d:6f:32:e3: 9b:99:15:ef:d8:7d:57:b9:77:2c:94:94:90:bd:76: 29:89:9e:53:bf:f9:78:59:0d:30:a2:be:56:58:a8: 94:27:ab:78:2a:6a:76:63:28:43:7d:3c:8f:b1:72: 91:90:b6:44:b4:a3:ce:38:58:05:fe:f2:dc:53:c2: ef:db:b1:ef:ee:19:c3:fc:42:08:da:64:f6:d7:d2: eb:ac:ae:fc:4a:64:eb:d8:01:79:ed:a9:59:f1:cf: 1b:01:a4:87:42:a4:21:01:15:04:cf:57:29:b0:49: 3d:f1:be:94:d4:36:6d:52:82:e4:64:7c:e0:5c:e8: 36:33:09:97:55:5b:a2:6d:6b:e6:a0:70:c6:e5:f0: 81:d1:21:f9:12:cd:c2:dd:84:35:33:ef:14:5d:9c: 39:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:EB:B2:3F:1D:56:7B:2A:F8:22:27:5E:CC:1F:09:7C:DA:2E:25:53 X509v3 Authority Key Identifier: keyid:97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:a8:15:45:b4:e3:30:b9:13:39:3d:4f:48:cf:31:6f:00:23: ea:41:f1:c8:0d:62:b6:c7:65:ad:cd:6b:4d:86:b1:92:18:ea: e3:10:f8:ef:cf:fb:e3:46:e3:4e:10:62:35:80:ee:67:13:e6: 5e:3d:f5:c7:e0:8f:84:28:0d:05:b7:81:08:b5:81:f4:0d:0c: ed:e0:c7:29:73:9b:bd:6d:30:89:49:e9:60:44:2d:4c:cb:e6: dd:aa:8d:c5:64:09:8e:cb:38:12:0d:90:b2:3c:c0:a8:1e:54: fb:a5:3c:d0:1c:e1:78:14:fe:c8:f0:d3:e6:62:93:b0:e5:c0: a4:dc:af:2c:29:93:42:8a:bc:03:79:4c:be:8a:06:94:50:94: 17:39:5f:61:80:2b:62:1c:1d:b2:fd:66:63:bf:06:08:fc:f0: fd:8e:ec:b1:b2:f1:35:bd:c8:10:d6:87:0d:d1:ee:f7:9c:25: 32:44:95:83:93:f1:b3:86:5c:f8:44:6b:79:e1:c4:66:3a:71: 74:9b:03:c0:19:7f:9b:49:20:af:e3:98:e4:47:e4:eb:a5:8d: 5c:6a:b6:98:48:6c:3e:d7:dd:a6:6b:f9:8f:f3:80:be:dc:17: a2:c1:08:32:16:e7:93:39:b3:10:05:32:d6:10:15:9b:20:a6: d6:31:47:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2M93MdQ3ok3LtBfFQTf9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MTUzM2NiN2E2Nzk2YWM1YzM4MmIzOGRjZjQ1OWY5MTc2 OTMxZjQwHhcNMjYwMjA5MTAwMDUzWhcNMjYwMjEwMTAwMDUzWjAzMTEwLwYDVQQD EyhkYWViYjIzZjFkNTY3YjJhZjgyMjI3NWVjYzFmMDk3Y2RhMmUyNTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhO8IGgdOck/KeVri0sJjNahoOLg AEdxnnRQtzyPxS3LpbaPKlSjQU/kr2/CWkhzL3BhcF0ut98OjG6hFpl+FBTtstN3 3kc934x+4GTAhJSuF26Vk0MxNsPZz0EX5UqTYS5eYw1vMuObmRXv2H1XuXcslJSQ vXYpiZ5Tv/l4WQ0wor5WWKiUJ6t4Kmp2YyhDfTyPsXKRkLZEtKPOOFgF/vLcU8Lv 27Hv7hnD/EII2mT219LrrK78SmTr2AF57alZ8c8bAaSHQqQhARUEz1cpsEk98b6U 1DZtUoLkZHzgXOg2MwmXVVuibWvmoHDG5fCB0SH5Es3C3YQ1M+8UXZw5XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrrsj8dVnsq+CInXswfCXzaLiVTMB8GA1UdIwQY MBaAFJcVM8t6Z5asXDgrONz0WfkXaTH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHhVenkzcG5scXhjT0NzNDNQUlotUmRwTWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kNjU3N2QtZjJkMi00NTMwLWI5ZDIt MzllY2E0NzI2NjhiLzEvbHhVenkzcG5scXhjT0NzNDNQUlotUmRwTWZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9kNjU3N2QtZjJkMi00NTMwLWI5ZDItMzllY2E0NzI2Njhi LzEvbHhVenkzcG5scXhjT0NzNDNQUlotUmRwTWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhqgVRbTj MLkTOT1PSM8xbwAj6kHxyA1itsdlrc1rTYaxkhjq4xD478/740bjThBiNYDuZxPm Xj31x+CPhCgNBbeBCLWB9A0M7eDHKXObvW0wiUnpYEQtTMvm3aqNxWQJjss4Eg2Q sjzAqB5U+6U80BzheBT+yPDT5mKTsOXApNyvLCmTQoq8A3lMvooGlFCUFzlfYYAr Yhwdsv1mY78GCPzw/Y7ssbLxNb3IENaHDdHu95wlMkSVg5Pxs4Zc+ERreeHEZjpx dJsDwBl/m0kgr+OY5Efk66WNXGq2mEhsPtfdpmv5j/OAvtwXosEIMhbnkzmzEAUy 1hAVmyCm1jFH3A== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:23 2026 by rpki-client