This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft File: LNpfA-r1E6d_LsIN5bsWcsXSeas.mft (raw, json) Hash identifier: 9PPOFo2dqSlfk2u9AKtX9+UPNVtW8swJKJu0et5JopQ= Subject key identifier: B7:31:8B:40:4F:4F:F6:43:06:3E:76:C4:5A:08:ED:45:33:0E:11:E8 Authority key identifier: 2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB Certificate issuer: /CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab Certificate serial: 019C40FCD69477CDEDFCDE8B0150F5D09333 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 06:00:37 +0000 Manifest this update: Mon 09 Feb 2026 06:00:37 +0000 Manifest next update: Tue 10 Feb 2026 06:00:37 +0000 Files and hashes: 1: LNpfA-r1E6d_LsIN5bsWcsXSeas.crl (hash: vytrnBn7xnXqi0dk3YC863oPesM2S97mXr+7hDuosok=) 2: fd8Ev0hcgslfyVKkXYe9Nwx0kyc.roa (hash: ZQjqK7exhVB66BBUdBf2gOZ8d37Zs6sdCNMpDp0YRYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fc:d6:94:77:cd:ed:fc:de:8b:01:50:f5:d0:93:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab Validity Not Before: Feb 9 06:00:37 2026 GMT Not After : Feb 10 06:00:37 2026 GMT Subject: CN=b7318b404f4ff643063e76c45a08ed45330e11e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:49:9d:db:67:2d:f6:94:51:77:b7:ea:a6:54: aa:cc:bb:5c:8a:d7:96:0b:91:c2:40:54:8c:ac:6f: be:ce:12:dd:0b:af:5b:52:a3:6c:15:1e:7b:5e:24: 5c:b5:98:5f:5f:eb:3d:c8:e8:ec:a8:71:79:12:ea: 91:a2:f1:7d:48:70:d9:9f:06:e8:d4:e1:d3:cd:bd: 5f:83:bc:1f:15:3d:70:f7:2c:83:a5:7d:9c:19:b7: 01:2b:c9:4c:9e:b2:91:e9:41:55:06:22:68:b9:80: 87:8f:51:66:96:ec:ab:fb:a5:69:39:6d:87:65:92: 79:ed:af:d4:36:84:27:9c:f2:bc:d5:bd:c5:ea:b8: 81:3c:e4:8b:95:55:ee:98:b6:22:61:a5:65:60:de: 6f:31:f7:6d:5a:9b:09:bf:59:0b:ae:aa:a6:51:16: eb:a7:9c:ec:cf:36:ac:d4:8f:5b:f0:51:59:f4:47: bd:be:ec:dc:6c:9a:46:09:90:9f:e1:56:23:c0:2b: f5:5c:f4:06:0a:fd:0d:5c:8c:88:6e:12:cf:4b:9c: a9:16:f3:b5:b2:2b:70:fa:18:42:99:ea:72:74:fd: 3c:42:f2:fa:09:65:af:0b:b4:ff:e9:63:5d:7f:19: 30:b2:9e:7d:43:23:19:5b:2b:d7:e9:e7:69:c5:51: d3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:31:8B:40:4F:4F:F6:43:06:3E:76:C4:5A:08:ED:45:33:0E:11:E8 X509v3 Authority Key Identifier: keyid:2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:6b:42:f3:bd:32:f6:b4:f1:ef:27:9a:23:83:db:f1:93:87: 14:71:9d:96:ad:71:01:e4:b6:12:a2:eb:33:f1:fd:04:21:2b: cc:9a:a5:8b:63:bf:37:f3:87:d3:bc:d6:1c:8e:c2:f7:6b:7f: 93:bf:44:fc:0a:31:d6:a7:bd:1c:12:02:f7:d9:c8:e8:30:e2: 8d:3d:88:36:f2:fa:17:ff:ac:f0:bd:8e:5f:00:2b:b2:3a:62: 4d:88:7b:d9:5d:26:00:ac:05:3e:7f:3f:17:33:e6:30:1f:b3: a4:55:fa:bc:a2:24:7c:0f:44:dc:8e:14:dc:2b:12:f1:fc:7f: 6b:ef:d2:5a:1f:dc:43:25:ac:4b:86:36:fd:8b:71:aa:49:b0: d4:79:34:5b:38:b1:7f:65:0b:65:58:3e:15:1d:cd:1c:52:9f: 70:ee:22:ef:9c:e1:e4:33:5f:66:84:5a:ea:75:99:83:40:00: f5:3c:db:05:5e:c0:16:e5:4b:44:de:ed:84:e2:f1:39:ec:7a: b0:62:21:2c:4f:ee:a3:d4:fc:3a:6e:90:ac:53:bf:87:c0:84: d7:09:56:ec:6d:66:5b:28:53:3d:ad:2d:ea:4b:5f:10:b3:3d: a7:6e:58:ce:52:b6:30:d5:2e:09:5c:94:9e:72:c7:89:b3:d7: cc:d3:51:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/NaUd83t/N6LAVD10JMzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZGE1ZjAzZWFmNTEzYTc3ZjJlYzIwZGU1YmIxNjcyYzVk Mjc5YWIwHhcNMjYwMjA5MDYwMDM3WhcNMjYwMjEwMDYwMDM3WjAzMTEwLwYDVQQD EyhiNzMxOGI0MDRmNGZmNjQzMDYzZTc2YzQ1YTA4ZWQ0NTMzMGUxMWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUmd22ct9pRRd7fqplSqzLtciteW C5HCQFSMrG++zhLdC69bUqNsFR57XiRctZhfX+s9yOjsqHF5EuqRovF9SHDZnwbo 1OHTzb1fg7wfFT1w9yyDpX2cGbcBK8lMnrKR6UFVBiJouYCHj1Fmluyr+6VpOW2H ZZJ57a/UNoQnnPK81b3F6riBPOSLlVXumLYiYaVlYN5vMfdtWpsJv1kLrqqmURbr p5zszzas1I9b8FFZ9Ee9vuzcbJpGCZCf4VYjwCv1XPQGCv0NXIyIbhLPS5ypFvO1 sitw+hhCmepydP08QvL6CWWvC7T/6WNdfxkwsp59QyMZWyvX6edpxVHTgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcxi0BPT/ZDBj52xFoI7UUzDhHoMB8GA1UdIwQY MBaAFCzaXwPq9ROnfy7CDeW7FnLF0nmrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE5wZkEtcjFFNmRfTHNJTjVic1djc1hTZWFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8zODM4YzQtNmU0Ni00OWE4LThjMTQt YWU4YjhkNzg4NzAwLzEvTE5wZkEtcjFFNmRfTHNJTjVic1djc1hTZWFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS8zODM4YzQtNmU0Ni00OWE4LThjMTQtYWU4YjhkNzg4NzAw LzEvTE5wZkEtcjFFNmRfTHNJTjVic1djc1hTZWFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMWtC870y 9rTx7yeaI4Pb8ZOHFHGdlq1xAeS2EqLrM/H9BCErzJqli2O/N/OH07zWHI7C92t/ k79E/Aox1qe9HBIC99nI6DDijT2INvL6F/+s8L2OXwArsjpiTYh72V0mAKwFPn8/ FzPmMB+zpFX6vKIkfA9E3I4U3CsS8fx/a+/SWh/cQyWsS4Y2/Ytxqkmw1Hk0Wzix f2ULZVg+FR3NHFKfcO4i75zh5DNfZoRa6nWZg0AA9TzbBV7AFuVLRN7thOLxOex6 sGIhLE/uo9T8Om6QrFO/h8CE1wlW7G1mWyhTPa0t6ktfELM9p25YzlK2MNUuCVyU nnLHibPXzNNRVg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:30 2026 by rpki-client