This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft File: lywzrtjvsmnTdEgT0oxTYJLnzzg.mft (raw, json) Hash identifier: OKg6V/6Oln56KDGtlzTFVyIBrefcZNBMmefhsizTEW8= Subject key identifier: BD:A7:E0:44:8B:F7:9D:7A:50:EE:41:38:F7:DD:9D:71:C7:7D:54:E4 Authority key identifier: 97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38 Certificate issuer: /CN=972c33aed8efb269d3744813d28c536092e7cf38 Certificate serial: 019C42B48D2ADB9FC1BBDBF09CC693DF78F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft Manifest number: 0DE1 Signing time: Mon 09 Feb 2026 14:00:54 +0000 Manifest this update: Mon 09 Feb 2026 14:00:54 +0000 Manifest next update: Tue 10 Feb 2026 14:00:54 +0000 Files and hashes: 1: lywzrtjvsmnTdEgT0oxTYJLnzzg.crl (hash: Hln2V9qP9eBvkTeo4LCXqEhNAli4FoD3iOLC+7pmMbE=) 2: qyXjUdsyD8Ul_eSPbkKBBLkd-QY.roa (hash: K5SK7KsksSiQa/QO/NP+4NIGvbz4hbAkl2e3OiIRMxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:8d:2a:db:9f:c1:bb:db:f0:9c:c6:93:df:78:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=972c33aed8efb269d3744813d28c536092e7cf38 Validity Not Before: Feb 9 14:00:54 2026 GMT Not After : Feb 10 14:00:54 2026 GMT Subject: CN=bda7e0448bf79d7a50ee4138f7dd9d71c77d54e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ab:b0:95:8f:8a:ed:6e:e0:e3:0a:cf:9b:41: ca:08:e5:7a:c5:d4:a2:55:f6:d6:5b:71:32:e2:26: 0f:f6:84:1a:0e:3e:31:b7:1d:e9:85:9b:6d:a8:a0: 0b:a4:24:bb:d0:ce:b8:f7:93:44:86:8d:0e:1c:85: 30:86:d4:24:b7:5e:60:97:d7:cd:0b:d8:d3:33:83: c6:08:21:fc:28:03:42:3f:8a:19:6c:0e:16:85:de: d7:a0:98:83:d4:ab:6b:17:c0:b2:e4:da:66:e6:5a: c9:47:f0:d3:55:52:3b:c7:1d:e9:23:1a:82:93:82: 95:9f:c3:ee:86:dd:d2:3b:56:e2:25:41:3e:d0:25: 3b:a3:1d:3e:12:0b:c9:b4:20:50:3c:98:05:96:10: 99:53:f9:82:01:3b:7f:11:65:13:ee:6e:ab:36:25: f3:4c:88:80:22:b8:ab:6b:09:1c:0b:58:23:9e:ed: 59:3d:ed:63:78:bf:09:81:26:33:ad:6e:c2:26:05: 6f:29:5d:d6:34:86:ba:a4:b2:bc:85:3d:c7:3b:63: 2a:f8:a8:77:f8:3b:cf:ca:08:27:2a:ee:f1:2a:ee: e0:b9:48:50:66:6b:39:93:90:01:be:21:33:bf:7c: 19:7b:dc:0d:82:98:84:c6:67:43:3e:54:56:2a:a0: 3c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A7:E0:44:8B:F7:9D:7A:50:EE:41:38:F7:DD:9D:71:C7:7D:54:E4 X509v3 Authority Key Identifier: keyid:97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:8a:cf:bf:78:6a:a5:7c:1c:e9:8d:e7:31:df:ab:e4:43:ba: 38:7b:90:3c:3c:1b:7e:d7:bd:7b:53:9c:85:47:01:6d:46:ff: 61:c4:4e:90:16:78:42:cd:c0:ed:dc:8b:b0:9a:a4:47:20:c3: f0:52:55:eb:89:9b:22:28:a7:46:34:13:88:68:79:e3:e1:1f: 04:0d:48:60:a9:a5:fb:4f:dc:3a:d2:47:b7:df:86:8a:80:df: a4:e4:80:11:7f:aa:02:3a:ab:c1:3c:7c:66:7a:32:ef:15:2c: eb:f0:3b:6a:05:3e:dd:2b:2b:2c:cb:e5:17:df:ff:fc:1a:f8: cf:ff:8d:53:2e:4c:39:59:67:1f:97:2f:0f:9c:5f:60:98:59: 37:20:62:6d:41:7a:a5:66:70:cd:a8:c7:16:b5:1f:e4:d4:0e: 7a:bf:8a:9b:50:6e:ee:22:23:ad:fb:30:2d:42:8c:48:19:9c: 3a:a9:87:30:5d:69:09:b9:f1:26:94:c7:7f:48:70:6a:34:4e: 13:10:c9:f4:29:a3:4f:bb:c3:a1:f7:74:67:52:c0:51:16:b2: 53:68:7c:21:0f:db:86:62:1b:dd:bd:51:85:74:c7:e2:18:b4: c9:c5:f4:af:e9:ea:75:37:e8:86:e2:b1:e7:26:0a:75:45:37: e3:2c:4b:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtI0q25/Bu9vwnMaT33jyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MmMzM2FlZDhlZmIyNjlkMzc0NDgxM2QyOGM1MzYwOTJl N2NmMzgwHhcNMjYwMjA5MTQwMDU0WhcNMjYwMjEwMTQwMDU0WjAzMTEwLwYDVQQD EyhiZGE3ZTA0NDhiZjc5ZDdhNTBlZTQxMzhmN2RkOWQ3MWM3N2Q1NGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6uwlY+K7W7g4wrPm0HKCOV6xdSi VfbWW3Ey4iYP9oQaDj4xtx3phZttqKALpCS70M6495NEho0OHIUwhtQkt15gl9fN C9jTM4PGCCH8KANCP4oZbA4Whd7XoJiD1KtrF8Cy5Npm5lrJR/DTVVI7xx3pIxqC k4KVn8Puht3SO1biJUE+0CU7ox0+EgvJtCBQPJgFlhCZU/mCATt/EWUT7m6rNiXz TIiAIrirawkcC1gjnu1ZPe1jeL8JgSYzrW7CJgVvKV3WNIa6pLK8hT3HO2Mq+Kh3 +DvPyggnKu7xKu7guUhQZms5k5ABviEzv3wZe9wNgpiExmdDPlRWKqA81QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2n4ESL9516UO5BOPfdnXHHfVTkMB8GA1UdIwQY MBaAFJcsM67Y77Jp03RIE9KMU2CS5884MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHl3enJ0anZzbW5UZEVnVDBveFRZSkxuenpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zMWZhOTktYzg1My00ZDAyLWI1M2Qt ZDI1MGU0NWIxNjIwLzEvbHl3enJ0anZzbW5UZEVnVDBveFRZSkxuenpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8zMWZhOTktYzg1My00ZDAyLWI1M2QtZDI1MGU0NWIxNjIw LzEvbHl3enJ0anZzbW5UZEVnVDBveFRZSkxuenpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIrPv3hq pXwc6Y3nMd+r5EO6OHuQPDwbfte9e1OchUcBbUb/YcROkBZ4Qs3A7dyLsJqkRyDD 8FJV64mbIiinRjQTiGh54+EfBA1IYKml+0/cOtJHt9+GioDfpOSAEX+qAjqrwTx8 Znoy7xUs6/A7agU+3SsrLMvlF9///Br4z/+NUy5MOVlnH5cvD5xfYJhZNyBibUF6 pWZwzajHFrUf5NQOer+Km1Bu7iIjrfswLUKMSBmcOqmHMF1pCbnxJpTHf0hwajRO ExDJ9CmjT7vDofd0Z1LAURayU2h8IQ/bhmIb3b1RhXTH4hi0ycX0r+nqdTfohuKx 5yYKdUU34yxLog== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:11 2026 by rpki-client