This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft File: ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft (raw, json) Hash identifier: d45zkBMSmAdSNAruYT8hrI4Dh84tfcafcJK1UzBKPvU= Subject key identifier: 22:07:A0:11:6B:4F:4E:72:55:5D:EF:BC:A3:56:90:A2:07:E2:0D:2A Authority key identifier: 95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90 Certificate issuer: /CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90 Certificate serial: 019C427E012B6CC9364E0DE5E812ED3C273A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 13:01:19 +0000 Manifest this update: Mon 09 Feb 2026 13:01:19 +0000 Manifest next update: Tue 10 Feb 2026 13:01:19 +0000 Files and hashes: 1: ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl (hash: 1LW3AJFjHGq2IOtv3KwsSq2iNNCG7byzJxsjfK+7vgw=) 2: rMVZ8VNrAbOr1spmw2IgJ5BytdA.roa (hash: tTo1sNFXQgwbOz3Qzxrcjf5177mm498Fb+OqdLzuw6s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:01:2b:6c:c9:36:4e:0d:e5:e8:12:ed:3c:27:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90 Validity Not Before: Feb 9 13:01:19 2026 GMT Not After : Feb 10 13:01:19 2026 GMT Subject: CN=2207a0116b4f4e72555defbca35690a207e20d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:06:d0:96:5d:7e:92:dd:c8:dd:22:19:4f:21: 60:23:f6:33:e4:38:c2:74:67:2b:b4:31:f6:6c:77: 82:b9:d1:2f:15:58:6b:2d:68:d5:13:c6:e3:51:10: 93:c5:c3:34:b5:1f:37:17:f0:ac:21:05:1a:63:49: 85:75:75:e8:d6:1c:b8:f8:62:71:ef:e5:86:a0:ce: 8c:09:ba:be:76:54:ec:40:8f:21:fb:c2:7b:93:19: bf:7f:0e:35:ad:2f:e0:fd:aa:fc:6b:15:ab:42:02: 96:9f:0e:89:8f:2d:a7:9a:37:fc:14:a4:33:e3:6b: e6:83:b3:10:dc:b4:f6:58:ad:50:45:b2:15:81:e8: 35:df:4b:60:db:a7:b2:7d:4e:f8:3b:36:f6:46:ba: b5:05:35:aa:2b:44:4a:94:88:d2:3e:a2:f3:f6:c0: 81:8d:10:2f:8e:87:d2:0b:80:ae:d3:4a:57:59:33: 72:5b:48:0d:51:73:ad:b9:c8:e5:95:65:30:a3:49: dd:35:1d:2d:55:d5:a0:f0:56:ef:50:8f:35:f7:78: 05:f0:4f:1c:8c:b4:4b:f9:8d:fb:42:73:7c:8b:45: a6:31:8d:49:2e:8d:18:c2:d0:70:f9:74:1e:38:f2: e8:ac:21:67:f0:14:75:2e:62:01:b3:d6:3e:c2:54: c8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:07:A0:11:6B:4F:4E:72:55:5D:EF:BC:A3:56:90:A2:07:E2:0D:2A X509v3 Authority Key Identifier: keyid:95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:21:c0:f5:56:f8:98:7c:76:0b:9f:fd:c7:26:9f:0f:15:b9: fb:93:34:ae:d8:fd:5f:44:da:89:e8:aa:65:c6:7d:ed:17:c7: 97:78:85:ca:5d:34:1b:8a:c2:c6:ea:42:5a:95:ab:23:82:c2: 90:9d:1f:c6:5f:95:2c:52:37:06:3c:e0:e2:eb:02:4b:89:ed: a9:89:58:b3:48:43:24:6e:8c:a2:db:af:33:be:d1:52:fb:31: f4:f6:44:31:00:77:b5:74:32:65:29:69:86:05:13:7c:6b:39: 25:22:3b:05:ea:35:b6:43:34:56:2c:c9:a6:eb:12:ef:9b:b8: 5b:c6:90:44:6a:a9:41:4c:82:88:5f:8d:70:49:ab:79:b2:ff: 4d:b3:fb:8a:53:3e:90:48:3f:a2:e7:16:91:f4:a6:b7:74:36: 51:c3:88:54:9f:a1:8f:76:4c:23:60:4c:f8:8b:2b:c6:cb:26: 16:a0:7f:d3:e5:36:f1:21:0f:92:f8:8b:d1:fe:0a:62:ec:1b: b5:01:1b:9e:65:d4:40:4f:04:b2:bf:3d:b7:92:c9:b9:54:bd: 76:20:71:89:cd:ac:f6:c1:91:bd:16:8f:25:67:7d:f0:bb:bf: 6f:3f:91:df:2e:ac:a4:6b:e1:48:27:8e:df:a2:de:0d:53:7a: 81:71:83:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfgErbMk2Tg3l6BLtPCc6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZDYxYWU4NDcyYzVjOGZjZDgxMzc1NmMxNjRjMmYxODY0 ZDNjOTAwHhcNMjYwMjA5MTMwMTE5WhcNMjYwMjEwMTMwMTE5WjAzMTEwLwYDVQQD EygyMjA3YTAxMTZiNGY0ZTcyNTU1ZGVmYmNhMzU2OTBhMjA3ZTIwZDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswbQll1+kt3I3SIZTyFgI/Yz5DjC dGcrtDH2bHeCudEvFVhrLWjVE8bjURCTxcM0tR83F/CsIQUaY0mFdXXo1hy4+GJx 7+WGoM6MCbq+dlTsQI8h+8J7kxm/fw41rS/g/ar8axWrQgKWnw6Jjy2nmjf8FKQz 42vmg7MQ3LT2WK1QRbIVgeg130tg26eyfU74Ozb2Rrq1BTWqK0RKlIjSPqLz9sCB jRAvjofSC4Cu00pXWTNyW0gNUXOtucjllWUwo0ndNR0tVdWg8FbvUI8193gF8E8c jLRL+Y37QnN8i0WmMY1JLo0YwtBw+XQeOPLorCFn8BR1LmIBs9Y+wlTIbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIHoBFrT05yVV3vvKNWkKIH4g0qMB8GA1UdIwQY MBaAFJXWGuhHLFyPzYE3VsFkwvGGTTyQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGRZYTZFY3NYSV9OZ1RkV3dXVEM4WVpOUEpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZTQ3NDgtNGVhYi00ZTU1LWI2NGEt MmM3YTExYzFmYmFmLzEvbGRZYTZFY3NYSV9OZ1RkV3dXVEM4WVpOUEpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lZTQ3NDgtNGVhYi00ZTU1LWI2NGEtMmM3YTExYzFmYmFm LzEvbGRZYTZFY3NYSV9OZ1RkV3dXVEM4WVpOUEpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKyHA9Vb4 mHx2C5/9xyafDxW5+5M0rtj9X0TaieiqZcZ97RfHl3iFyl00G4rCxupCWpWrI4LC kJ0fxl+VLFI3Bjzg4usCS4ntqYlYs0hDJG6MotuvM77RUvsx9PZEMQB3tXQyZSlp hgUTfGs5JSI7Beo1tkM0VizJpusS75u4W8aQRGqpQUyCiF+NcEmrebL/TbP7ilM+ kEg/oucWkfSmt3Q2UcOIVJ+hj3ZMI2BM+IsrxssmFqB/0+U28SEPkviL0f4KYuwb tQEbnmXUQE8Esr89t5LJuVS9diBxic2s9sGRvRaPJWd98Lu/bz+R3y6spGvhSCeO 36LeDVN6gXGDCw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:14 2026 by rpki-client