This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft File: l2lJAzf2c8ZOORJK6JgbA05QEno.mft (raw, json) Hash identifier: MmiMAwua3SGWYHOLNjOMQ5/ULDb8Di8KufQgszQWwYE= Subject key identifier: 44:E0:97:EE:C8:49:65:03:54:65:20:83:41:52:E9:85:3F:AC:D3:56 Authority key identifier: 97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A Certificate issuer: /CN=9769490337f673c64e39124ae8981b034e50127a Certificate serial: 019C443510A0C1C366F0F79DD4656FA3382B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 21:00:54 +0000 Manifest this update: Mon 09 Feb 2026 21:00:54 +0000 Manifest next update: Tue 10 Feb 2026 21:00:54 +0000 Files and hashes: 1: l2lJAzf2c8ZOORJK6JgbA05QEno.crl (hash: inIy07PoEJszfNSa/BhuJoUdkM0+uMlCMCvbyoNdD8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:35:10:a0:c1:c3:66:f0:f7:9d:d4:65:6f:a3:38:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9769490337f673c64e39124ae8981b034e50127a Validity Not Before: Feb 9 21:00:54 2026 GMT Not After : Feb 10 21:00:54 2026 GMT Subject: CN=44e097eec8496503546520834152e9853facd356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:04:bd:30:59:23:5d:4e:3e:cb:e2:67:d3:25: f8:49:d4:78:99:9d:09:c6:fe:72:3e:e0:07:6c:00: 62:c4:8b:5d:3f:9c:cc:b8:1a:82:5d:be:79:3a:0c: e9:02:89:5c:f0:20:c7:3d:3f:8e:8f:f6:4c:30:03: c9:bc:f2:47:a1:85:ed:e0:91:9a:12:86:ab:73:fa: 74:65:ad:c4:d6:51:37:b7:64:f1:18:6d:67:8c:71: 7b:cb:58:05:82:4a:bd:31:9e:e1:10:e4:61:2e:a5: 9d:13:0c:42:b2:62:74:eb:86:6c:df:e6:6a:be:b8: c7:0d:cb:e5:c0:cc:32:1e:b5:63:80:cb:48:0a:68: 91:6d:77:7f:39:9e:49:68:3d:f5:1e:5a:e1:09:72: 75:0e:d6:78:b0:54:98:0f:69:03:47:36:13:85:a8: 0f:1e:8e:9d:02:84:d7:99:a4:a0:ae:7d:78:44:eb: 1e:33:5d:6a:d2:0f:65:1b:6a:de:39:8e:c2:89:f7: 68:2f:0f:78:e5:bf:8f:e7:60:35:a5:94:64:c3:19: 6a:5a:e1:ee:fe:08:11:bd:3a:df:86:24:aa:86:46: d6:18:aa:25:9e:e9:47:ef:d5:39:d3:ac:22:12:b6: ca:5c:0a:f7:cd:da:31:8d:be:1e:05:5c:73:f1:c4: fe:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E0:97:EE:C8:49:65:03:54:65:20:83:41:52:E9:85:3F:AC:D3:56 X509v3 Authority Key Identifier: keyid:97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f7:06:df:99:4c:b2:df:94:01:76:94:83:e8:db:82:67:6b: 9d:e4:eb:7b:b1:a3:7f:3e:79:34:9a:3a:32:ee:1c:ff:8e:b0: fd:a0:c4:13:b4:bb:d2:dd:6a:f4:9d:df:ff:00:f1:db:75:b0: 72:1e:e3:c0:a5:82:c3:8a:65:67:f7:39:91:47:1f:f7:07:d8: 9a:6c:ea:9f:dc:7a:a2:6c:72:be:2b:2c:25:2f:7a:d3:a3:cc: c6:10:83:32:3f:0f:1c:e0:32:23:f5:39:91:ba:35:29:21:6b: d0:31:a3:cc:5d:eb:1a:64:96:f8:42:d7:4c:e3:6f:d0:23:2e: ca:62:6d:3b:fa:e4:d5:53:dc:21:c3:24:7d:38:da:ce:73:e6: cb:57:a9:b6:21:21:27:54:76:82:5e:e3:d1:7e:e3:a1:0d:69: ae:9d:30:e4:b7:c7:7c:08:79:d6:94:8b:71:96:bb:21:43:39: dc:b1:87:c4:c9:d0:b1:73:38:77:e4:6b:6a:89:2a:d2:29:90: ce:01:de:a9:43:79:07:14:f7:a7:a2:6b:4f:7e:56:20:fd:7a: 7a:e3:a2:38:6a:3b:a8:26:a2:c4:c9:01:5b:76:24:0d:a0:65: e9:95:5e:1c:89:bc:c7:fd:48:0a:50:09:f8:ed:84:98:99:ee: d8:24:31:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENRCgwcNm8Ped1GVvozgrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3Njk0OTAzMzdmNjczYzY0ZTM5MTI0YWU4OTgxYjAzNGU1 MDEyN2EwHhcNMjYwMjA5MjEwMDU0WhcNMjYwMjEwMjEwMDU0WjAzMTEwLwYDVQQD Eyg0NGUwOTdlZWM4NDk2NTAzNTQ2NTIwODM0MTUyZTk4NTNmYWNkMzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAS9MFkjXU4+y+Jn0yX4SdR4mZ0J xv5yPuAHbABixItdP5zMuBqCXb55OgzpAolc8CDHPT+Oj/ZMMAPJvPJHoYXt4JGa Eoarc/p0Za3E1lE3t2TxGG1njHF7y1gFgkq9MZ7hEORhLqWdEwxCsmJ064Zs3+Zq vrjHDcvlwMwyHrVjgMtICmiRbXd/OZ5JaD31HlrhCXJ1DtZ4sFSYD2kDRzYThagP Ho6dAoTXmaSgrn14ROseM11q0g9lG2reOY7CifdoLw945b+P52A1pZRkwxlqWuHu /ggRvTrfhiSqhkbWGKolnulH79U506wiErbKXAr3zdoxjb4eBVxz8cT+cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETgl+7ISWUDVGUgg0FS6YU/rNNWMB8GA1UdIwQY MBaAFJdpSQM39nPGTjkSSuiYGwNOUBJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDJsSkF6ZjJjOFpPT1JKSzZKZ2JBMDVRRW5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jODdiNzYtMWI4YS00YjhhLWI0N2Mt YzEyM2Y3NjYyOGNiLzEvbDJsSkF6ZjJjOFpPT1JKSzZKZ2JBMDVRRW5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9jODdiNzYtMWI4YS00YjhhLWI0N2MtYzEyM2Y3NjYyOGNi LzEvbDJsSkF6ZjJjOFpPT1JKSzZKZ2JBMDVRRW5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/cG35lM st+UAXaUg+jbgmdrneTre7Gjfz55NJo6Mu4c/46w/aDEE7S70t1q9J3f/wDx23Ww ch7jwKWCw4plZ/c5kUcf9wfYmmzqn9x6omxyvissJS9606PMxhCDMj8PHOAyI/U5 kbo1KSFr0DGjzF3rGmSW+ELXTONv0CMuymJtO/rk1VPcIcMkfTjaznPmy1eptiEh J1R2gl7j0X7joQ1prp0w5LfHfAh51pSLcZa7IUM53LGHxMnQsXM4d+Rraokq0imQ zgHeqUN5BxT3p6JrT35WIP16euOiOGo7qCaixMkBW3YkDaBl6ZVeHIm8x/1IClAJ +O2EmJnu2CQxWg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:42:26 2026 by rpki-client