This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft File: lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft (raw, json) Hash identifier: +gQZC8zciCnUCSq4QADnlLXF3R2NrKfHuFaw6W9sNAA= Subject key identifier: B5:E6:AB:8C:8A:99:A2:97:8A:14:8F:05:80:6A:2A:EC:2B:02:D8:BF Authority key identifier: 95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA Certificate issuer: /CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa Certificate serial: 019C1BDE04633E08FB41F703D058C5CCEC09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft Manifest number: 17 Signing time: Mon 02 Feb 2026 01:01:00 +0000 Manifest this update: Mon 02 Feb 2026 01:01:00 +0000 Manifest next update: Tue 03 Feb 2026 01:01:00 +0000 Files and hashes: 1: lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl (hash: 0Z2iIwyuJVjieZSdXDtLfqcJ1D2wJgPvxcVnCRkTEOw=) 2: xtHXPk4W92n0LCAl91mK293p0b0.asa (hash: kh969yxtGkOu/TJNHd1FmXb6qdM0IeUvqQnojIlQfB4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:de:04:63:3e:08:fb:41:f7:03:d0:58:c5:cc:ec:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa Validity Not Before: Feb 2 01:01:00 2026 GMT Not After : Feb 3 01:01:00 2026 GMT Subject: CN=b5e6ab8c8a99a2978a148f05806a2aec2b02d8bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ea:e3:b7:2c:5f:62:fa:69:4d:c3:a2:84:fc: 5c:43:5f:9e:4f:7c:ae:eb:27:93:02:cc:57:0d:35: 9c:4f:0f:c7:04:c0:2f:96:d6:b5:98:be:c7:76:69: a1:d0:3c:59:ea:88:ff:b5:41:76:e4:17:4f:8e:65: 86:6e:2f:13:a4:68:43:53:9d:0b:f6:b1:bf:88:3b: 0b:f5:6c:68:3d:98:5b:15:cc:ee:6c:3f:46:98:f9: 99:0f:4c:b9:53:eb:0f:7f:75:3e:59:3b:81:7b:bb: 2b:6a:d9:02:0d:b6:9b:a9:eb:62:a8:a4:b3:4c:2c: 70:70:96:e5:2f:01:e3:d2:09:c9:93:a5:19:1b:30: 66:38:16:35:5f:f9:ab:6a:fd:61:61:89:c9:17:ee: 4e:8f:01:5e:46:5f:75:d6:ac:d8:b8:97:a0:3a:2c: 17:dd:1b:05:c5:17:18:f1:bb:a6:55:c1:12:94:32: 36:cf:79:63:05:cc:92:9c:d9:b7:ea:75:3e:f4:42: 05:e3:cb:8c:f7:0b:a0:7c:d0:c1:c7:7b:7a:e7:8c: b1:d0:0b:33:5f:72:59:3e:04:eb:b8:3f:6d:76:1d: 96:c2:d5:9e:f6:08:07:f1:ec:fc:55:ef:b8:bb:95: cd:78:a8:6b:d3:1e:f4:84:50:dc:0f:77:a9:91:ba: 9d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E6:AB:8C:8A:99:A2:97:8A:14:8F:05:80:6A:2A:EC:2B:02:D8:BF X509v3 Authority Key Identifier: keyid:95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:81:79:b7:85:20:18:34:66:d1:7a:84:c2:fe:03:e6:98:2d: bc:27:02:c6:60:12:d8:11:3d:a6:e8:21:85:60:8e:7b:5f:07: 84:32:10:de:ab:55:2f:1d:9c:03:7f:b9:5b:0e:3d:08:94:b5: 83:da:2c:36:2e:82:2d:fc:ab:e9:b4:25:c8:23:34:fa:1a:b5: 44:5c:bf:a0:63:02:d7:0b:d0:8f:04:81:21:d8:29:0e:4e:c2: 1f:e9:69:70:11:05:32:75:65:f4:03:73:3a:d5:ba:a3:8a:d5: 1c:8f:bf:19:de:fb:2e:ce:60:c8:9c:8e:a1:43:05:45:f0:11: 88:69:84:6c:7e:30:9a:b2:24:d1:32:29:02:5f:24:0e:40:7b: 1c:0d:57:9e:db:90:67:7f:fd:c2:46:ae:f0:79:88:cf:b7:ea: 62:76:e5:98:da:65:03:3d:62:68:eb:86:36:d9:a9:bb:19:99: 57:b9:ca:7a:2a:ce:3c:b0:64:8a:60:37:e8:ba:0d:90:32:93: 9d:c5:ef:99:4e:bb:e4:13:c1:36:b4:4c:a1:d5:dd:25:ca:fa: 9a:77:5a:a0:ac:60:da:64:04:d5:21:ec:1f:48:23:47:26:2e: df:01:9f:00:8a:56:33:b4:ca:75:a2:1c:5c:34:e8:84:76:55: 07:f7:99:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwb3gRjPgj7QfcD0FjFzOwJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NGZjNGQ4ZGE1NzY1ZjA2ZDdjMjRlZTI3ZGFjMGFmMzQz MWVkZmEwHhcNMjYwMjAyMDEwMTAwWhcNMjYwMjAzMDEwMTAwWjAzMTEwLwYDVQQD EyhiNWU2YWI4YzhhOTlhMjk3OGExNDhmMDU4MDZhMmFlYzJiMDJkOGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0erjtyxfYvppTcOihPxcQ1+eT3yu 6yeTAsxXDTWcTw/HBMAvlta1mL7Hdmmh0DxZ6oj/tUF25BdPjmWGbi8TpGhDU50L 9rG/iDsL9WxoPZhbFczubD9GmPmZD0y5U+sPf3U+WTuBe7sratkCDbabqetiqKSz TCxwcJblLwHj0gnJk6UZGzBmOBY1X/mrav1hYYnJF+5OjwFeRl911qzYuJegOiwX 3RsFxRcY8bumVcESlDI2z3ljBcySnNm36nU+9EIF48uM9wugfNDBx3t654yx0Asz X3JZPgTruD9tdh2WwtWe9ggH8ez8Ve+4u5XNeKhr0x70hFDcD3epkbqdAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXmq4yKmaKXihSPBYBqKuwrAti/MB8GA1UdIwQY MBaAFJVPxNjaV2XwbXwk7ifawK80Me36MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFVfRTJOcFhaZkJ0ZkNUdUo5ckFyelF4N2ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yMWNlMDUtOWNjMi00NDUxLWJkMTkt MDQwODQ0ZmE0MjM4LzEvbFVfRTJOcFhaZkJ0ZkNUdUo5ckFyelF4N2ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yMWNlMDUtOWNjMi00NDUxLWJkMTktMDQwODQ0ZmE0MjM4 LzEvbFVfRTJOcFhaZkJ0ZkNUdUo5ckFyelF4N2ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVYF5t4Ug GDRm0XqEwv4D5pgtvCcCxmAS2BE9pughhWCOe18HhDIQ3qtVLx2cA3+5Ww49CJS1 g9osNi6CLfyr6bQlyCM0+hq1RFy/oGMC1wvQjwSBIdgpDk7CH+lpcBEFMnVl9ANz OtW6o4rVHI+/Gd77Ls5gyJyOoUMFRfARiGmEbH4wmrIk0TIpAl8kDkB7HA1XntuQ Z3/9wkau8HmIz7fqYnblmNplAz1iaOuGNtmpuxmZV7nKeirOPLBkimA36LoNkDKT ncXvmU675BPBNrRModXdJcr6mndaoKxg2mQE1SHsH0gjRyYu3wGfAIpWM7TKdaIc XDTohHZVB/eZPQ== -----END CERTIFICATE-----Generated at Mon Feb 2 08:02:58 2026 by rpki-client