This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.mft File: lZCfz5xup2MAznHQlNMl9X1knL8.mft (raw, json) Hash identifier: BblZTCSJgTeogSmzdJcvLN6htDRW3vRQwOh+NFRJIQY= Subject key identifier: C2:00:22:82:F4:A6:61:D4:46:2A:37:EA:E7:83:CA:D9:BD:6D:65:54 Authority key identifier: 95:90:9F:CF:9C:6E:A7:63:00:CE:71:D0:94:D3:25:F5:7D:64:9C:BF Certificate issuer: /CN=95909fcf9c6ea76300ce71d094d325f57d649cbf Certificate serial: 019C4134453BC803337EA58FBB4B33254DE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZCfz5xup2MAznHQlNMl9X1knL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.mft Manifest number: 1546 Signing time: Mon 09 Feb 2026 07:01:10 +0000 Manifest this update: Mon 09 Feb 2026 07:01:10 +0000 Manifest next update: Tue 10 Feb 2026 07:01:10 +0000 Files and hashes: 1: lZCfz5xup2MAznHQlNMl9X1knL8.crl (hash: IhTtb/q/qA3zMTiWCkboAjtotC1L8h9CSbgp+FhJx6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.mft rsync://rpki.ripe.net/repository/DEFAULT/lZCfz5xup2MAznHQlNMl9X1knL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:45:3b:c8:03:33:7e:a5:8f:bb:4b:33:25:4d:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95909fcf9c6ea76300ce71d094d325f57d649cbf Validity Not Before: Feb 9 07:01:10 2026 GMT Not After : Feb 10 07:01:10 2026 GMT Subject: CN=c2002282f4a661d4462a37eae783cad9bd6d6554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cb:57:92:51:aa:20:f6:2e:39:94:34:10:fc: 8b:65:18:7c:b4:b3:e7:96:73:d7:40:ea:a9:45:e4: d8:bf:18:f7:98:60:66:ff:80:07:7d:d2:03:47:27: d0:04:ad:8e:5e:f7:ec:b5:3e:88:e3:7e:97:33:cb: 4a:7e:a9:ed:0f:20:c0:12:82:54:34:77:31:9f:3a: 50:bf:3c:55:ff:2a:0d:c1:96:bf:f9:3f:ea:0c:12: 26:a4:62:c6:ea:10:c3:6b:9c:5a:cd:2d:16:8a:eb: cc:e9:b5:4a:b4:a6:50:c3:66:08:c5:f3:1b:cb:6e: 32:c1:67:49:d6:62:0e:1b:1c:3d:bf:79:5e:81:9c: cc:90:79:53:82:9e:4d:76:2d:5e:74:b7:84:c7:73: ef:74:e6:1a:e5:9c:e8:21:bf:a4:1c:18:4f:da:a3: d6:e7:2f:2a:18:5f:bc:21:19:f3:fd:5b:b0:d0:09: a7:ce:bb:3c:61:36:1e:49:73:09:43:79:45:c7:35: e7:be:0b:cd:e2:4a:1b:dc:a7:b8:ab:a0:2e:3c:d4: 98:a1:85:ae:20:be:3f:bb:6d:a6:93:66:61:df:cd: 5c:4d:be:68:45:97:e4:98:01:f6:0f:11:ae:7d:10: 2a:9c:ec:61:fb:93:80:ed:e9:29:6c:36:fb:ba:17: 7b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:00:22:82:F4:A6:61:D4:46:2A:37:EA:E7:83:CA:D9:BD:6D:65:54 X509v3 Authority Key Identifier: keyid:95:90:9F:CF:9C:6E:A7:63:00:CE:71:D0:94:D3:25:F5:7D:64:9C:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZCfz5xup2MAznHQlNMl9X1knL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:bf:7e:96:58:36:8d:da:44:7e:df:08:43:86:d4:69:fd:7b: c4:88:d2:12:86:0d:6d:62:55:89:4d:a7:33:41:c9:ee:d7:25: ba:45:32:a1:25:ea:b1:9f:f3:f4:42:8d:b6:61:38:15:67:85: 90:cd:2c:29:a7:c8:ea:bd:7d:cf:00:4d:f5:38:0f:c2:d1:31: 7d:3f:d3:0d:2c:d7:d1:75:ea:bd:71:6e:26:ef:ef:51:93:37: 78:06:a2:2c:2c:64:0a:ec:e1:9f:c2:2c:6f:2d:64:b4:23:4c: e7:bc:a6:ad:b5:1d:5a:ed:da:21:5a:65:91:28:60:56:d1:4e: 4d:7b:8a:46:ba:c2:a8:ed:9a:56:dc:f2:07:62:ad:d3:e3:36: d2:ec:a5:0b:17:ce:ff:e1:36:bc:13:11:95:8a:56:6b:93:67: 09:f9:ad:d4:ec:a8:60:08:41:b6:4a:a1:b0:83:6d:39:62:e2: 4b:1d:6d:ea:93:c9:4a:b7:35:a2:7c:ce:08:02:cc:a1:1a:a2: ff:cf:52:63:66:28:6a:dd:d4:de:a2:e8:eb:d6:74:c9:cf:68: 0c:43:0f:8a:4c:39:73:fa:5c:9b:01:9b:7a:ff:c8:55:f7:2f: a4:e5:cd:ae:74:a9:9e:fd:57:78:7c:35:4d:64:b8:91:be:d1: 6a:0b:c6:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBNEU7yAMzfqWPu0szJU3jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1OTA5ZmNmOWM2ZWE3NjMwMGNlNzFkMDk0ZDMyNWY1N2Q2 NDljYmYwHhcNMjYwMjA5MDcwMTEwWhcNMjYwMjEwMDcwMTEwWjAzMTEwLwYDVQQD EyhjMjAwMjI4MmY0YTY2MWQ0NDYyYTM3ZWFlNzgzY2FkOWJkNmQ2NTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMtXklGqIPYuOZQ0EPyLZRh8tLPn lnPXQOqpReTYvxj3mGBm/4AHfdIDRyfQBK2OXvfstT6I436XM8tKfqntDyDAEoJU NHcxnzpQvzxV/yoNwZa/+T/qDBImpGLG6hDDa5xazS0WiuvM6bVKtKZQw2YIxfMb y24ywWdJ1mIOGxw9v3legZzMkHlTgp5Ndi1edLeEx3PvdOYa5ZzoIb+kHBhP2qPW 5y8qGF+8IRnz/Vuw0Amnzrs8YTYeSXMJQ3lFxzXnvgvN4kob3Ke4q6AuPNSYoYWu IL4/u22mk2Zh381cTb5oRZfkmAH2DxGufRAqnOxh+5OA7ekpbDb7uhd7CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIAIoL0pmHURio36ueDytm9bWVUMB8GA1UdIwQY MBaAFJWQn8+cbqdjAM5x0JTTJfV9ZJy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFpDZno1eHVwMk1Bem5IUWxOTWw5WDFrbkw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zNzNlNGMtZDg4NS00NGZhLThjNGIt YTZlZWRmYTlhNGZjLzEvbFpDZno1eHVwMk1Bem5IUWxOTWw5WDFrbkw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8zNzNlNGMtZDg4NS00NGZhLThjNGItYTZlZWRmYTlhNGZj LzEvbFpDZno1eHVwMk1Bem5IUWxOTWw5WDFrbkw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASr9+llg2 jdpEft8IQ4bUaf17xIjSEoYNbWJViU2nM0HJ7tclukUyoSXqsZ/z9EKNtmE4FWeF kM0sKafI6r19zwBN9TgPwtExfT/TDSzX0XXqvXFuJu/vUZM3eAaiLCxkCuzhn8Is by1ktCNM57ymrbUdWu3aIVplkShgVtFOTXuKRrrCqO2aVtzyB2Kt0+M20uylCxfO /+E2vBMRlYpWa5NnCfmt1OyoYAhBtkqhsINtOWLiSx1t6pPJSrc1onzOCALMoRqi /89SY2Yoat3U3qLo69Z0yc9oDEMPikw5c/pcmwGbev/IVfcvpOXNrnSpnv1XeHw1 TWS4kb7RagvGPQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:28 2026 by rpki-client