This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft File: L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft (raw, json) Hash identifier: NOqMBFMROjZM/tF1n2QMnSA6pmmkgz3kHTWltbex89A= Subject key identifier: 6A:40:AE:10:12:67:B3:1D:75:CE:FD:25:D9:DC:19:0C:FF:F1:34:66 Authority key identifier: 2F:CC:93:46:52:84:2B:7B:D9:A7:CE:C0:02:C7:7C:1C:A1:3F:10:64 Certificate issuer: /CN=2fcc934652842b7bd9a7cec002c77c1ca13f1064 Certificate serial: 019C420FE56EAE53232F4A47E900ABBED955 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8yTRlKEK3vZp87AAsd8HKE_EGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 11:01:03 +0000 Manifest this update: Mon 09 Feb 2026 11:01:03 +0000 Manifest next update: Tue 10 Feb 2026 11:01:03 +0000 Files and hashes: 1: BcdnvgFk_BPjfJay48B0cMIpc0w.roa (hash: XfisUF3xoeDRYkIvVZku+7kk1qU1c+uuDUdRONEZgfE=) 2: L8yTRlKEK3vZp87AAsd8HKE_EGQ.crl (hash: 4DcF3/SvBUdyVSH7V8XcfBc+A8YTEMJ7VDJ7dC9NrJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/L8yTRlKEK3vZp87AAsd8HKE_EGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:e5:6e:ae:53:23:2f:4a:47:e9:00:ab:be:d9:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fcc934652842b7bd9a7cec002c77c1ca13f1064 Validity Not Before: Feb 9 11:01:03 2026 GMT Not After : Feb 10 11:01:03 2026 GMT Subject: CN=6a40ae101267b31d75cefd25d9dc190cfff13466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c7:2d:03:40:9e:24:af:00:99:49:4d:f5:18: c4:cb:77:52:9d:88:b1:92:63:7c:97:54:58:18:0c: 46:3f:af:3f:5c:e0:2a:97:cd:92:4f:8a:c0:c7:6e: 33:79:82:72:74:31:13:06:b6:53:bd:f6:51:4f:96: ba:02:af:0e:8e:57:c7:58:45:27:f2:39:af:4e:36: 6e:ff:76:1a:30:ff:7a:db:9b:2c:12:f9:d4:ef:54: aa:1a:f7:d4:7e:d2:27:1b:51:2c:90:ee:d1:34:49: 6f:0a:b7:54:7d:27:a2:e8:e1:e9:38:71:7a:f2:c1: 65:87:e3:86:d6:cd:67:3f:67:aa:38:bb:3f:7c:2a: b2:a3:72:a4:64:ae:33:71:e9:b5:48:68:90:5e:fd: 97:26:45:4c:7c:67:aa:c2:a9:85:82:77:33:3f:06: b4:b6:37:e0:f1:57:a1:58:4e:d5:17:02:0f:bd:e4: ac:f1:0f:0b:81:37:41:da:29:b3:b4:ba:c4:c2:44: c8:35:8c:fd:5d:82:11:c3:31:bd:2f:08:4d:c2:23: 13:92:56:8a:a3:95:79:72:30:f1:1c:af:35:b3:20: 2a:1d:94:e4:63:20:03:46:7a:01:eb:7d:a1:ef:2b: 8d:53:d5:bc:d6:52:af:67:92:96:bf:4c:a0:1d:66: 7a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:40:AE:10:12:67:B3:1D:75:CE:FD:25:D9:DC:19:0C:FF:F1:34:66 X509v3 Authority Key Identifier: keyid:2F:CC:93:46:52:84:2B:7B:D9:A7:CE:C0:02:C7:7C:1C:A1:3F:10:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8yTRlKEK3vZp87AAsd8HKE_EGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:8e:71:68:64:d6:40:9f:0a:3b:99:6d:45:61:57:37:4f:f9: e5:db:2f:c1:6c:af:f5:af:48:28:67:3d:65:79:4d:46:90:0f: f4:d9:cd:2a:4a:46:3e:e9:12:06:db:0a:8d:05:f6:d5:eb:6e: 1e:33:0e:d1:46:fb:d1:f1:d4:33:25:cc:dd:aa:97:7a:66:28: e9:b8:c7:26:95:1e:c1:2f:63:8c:47:94:7d:84:22:c6:57:09: 0a:a9:58:d9:c2:72:1a:58:a2:11:9d:22:60:17:bf:36:0a:c4: af:fe:63:b1:c8:ae:03:e0:41:59:a5:8f:d1:31:30:98:80:b1: be:9f:d5:74:f6:8f:78:51:b2:f9:4c:be:6e:90:2c:a9:e6:e2: cc:16:b0:ec:f0:72:24:06:4f:f8:00:e0:ef:35:bb:7c:86:09: d7:72:9b:ac:5b:dc:55:39:e7:d1:98:5c:4a:15:ed:ed:3a:da: 6e:a9:4b:fd:82:2a:c6:1b:37:cd:de:59:b1:e0:ed:f6:c8:e6: 99:ba:35:c3:ff:89:92:73:df:54:f5:bd:4d:18:b7:c3:71:40: 0e:90:97:eb:6c:88:5c:55:5e:eb:e6:2d:53:87:48:26:a4:e8: 7d:c7:51:8b:d6:2b:c1:9f:9f:9e:b3:92:45:06:65:50:be:a9: 72:ce:63:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD+VurlMjL0pH6QCrvtlVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmY2M5MzQ2NTI4NDJiN2JkOWE3Y2VjMDAyYzc3YzFjYTEz ZjEwNjQwHhcNMjYwMjA5MTEwMTAzWhcNMjYwMjEwMTEwMTAzWjAzMTEwLwYDVQQD Eyg2YTQwYWUxMDEyNjdiMzFkNzVjZWZkMjVkOWRjMTkwY2ZmZjEzNDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcctA0CeJK8AmUlN9RjEy3dSnYix kmN8l1RYGAxGP68/XOAql82ST4rAx24zeYJydDETBrZTvfZRT5a6Aq8OjlfHWEUn 8jmvTjZu/3YaMP9625ssEvnU71SqGvfUftInG1EskO7RNElvCrdUfSei6OHpOHF6 8sFlh+OG1s1nP2eqOLs/fCqyo3KkZK4zcem1SGiQXv2XJkVMfGeqwqmFgnczPwa0 tjfg8VehWE7VFwIPveSs8Q8LgTdB2imztLrEwkTINYz9XYIRwzG9LwhNwiMTklaK o5V5cjDxHK81syAqHZTkYyADRnoB632h7yuNU9W81lKvZ5KWv0ygHWZ6gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGpArhASZ7Mddc79JdncGQz/8TRmMB8GA1UdIwQY MBaAFC/Mk0ZShCt72afOwALHfByhPxBkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDh5VFJsS0VLM3ZacDg3QUFzZDhIS0VfRUdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iYjcwZDMtNjMyZS00ZWZmLTg0ZmYt NmRjZjdjMzg0OWJjLzEvTDh5VFJsS0VLM3ZacDg3QUFzZDhIS0VfRUdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9iYjcwZDMtNjMyZS00ZWZmLTg0ZmYtNmRjZjdjMzg0OWJj LzEvTDh5VFJsS0VLM3ZacDg3QUFzZDhIS0VfRUdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiY5xaGTW QJ8KO5ltRWFXN0/55dsvwWyv9a9IKGc9ZXlNRpAP9NnNKkpGPukSBtsKjQX21etu HjMO0Ub70fHUMyXM3aqXemYo6bjHJpUewS9jjEeUfYQixlcJCqlY2cJyGliiEZ0i YBe/NgrEr/5jsciuA+BBWaWP0TEwmICxvp/VdPaPeFGy+Uy+bpAsqebizBaw7PBy JAZP+ADg7zW7fIYJ13KbrFvcVTnn0ZhcShXt7TrabqlL/YIqxhs3zd5ZseDt9sjm mbo1w/+JknPfVPW9TRi3w3FADpCX62yIXFVe6+YtU4dIJqTofcdRi9YrwZ+fnrOS RQZlUL6pcs5jzQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:35 2026 by rpki-client