This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft File: lbheWsBVoSGIrlDNsAf6SItqqIs.mft (raw, json) Hash identifier: CHIb5GgQwIXi5s32vIrO+GSnoAat4xZ7e/bZfG2qPU0= Subject key identifier: 8D:46:72:7F:DA:7E:3D:20:9A:EA:25:64:8A:54:36:9B:53:81:BB:B3 Authority key identifier: 95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B Certificate issuer: /CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b Certificate serial: 019C42B42E73AE8DB932E6C1E10DC6468876 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 14:00:30 +0000 Manifest this update: Mon 09 Feb 2026 14:00:30 +0000 Manifest next update: Tue 10 Feb 2026 14:00:30 +0000 Files and hashes: 1: 34LZWsNGRIKWyIHXFffnM-VhclM.roa (hash: HVcPE4gapBs4vsO0MGbu+wRDbzaDiPj/yDgrINHf82Y=) 2: lbheWsBVoSGIrlDNsAf6SItqqIs.crl (hash: wx6WDANXpHzbHmGVXs/unhkyH/flGsOmSEmdNUsyVuk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:2e:73:ae:8d:b9:32:e6:c1:e1:0d:c6:46:88:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b Validity Not Before: Feb 9 14:00:30 2026 GMT Not After : Feb 10 14:00:30 2026 GMT Subject: CN=8d46727fda7e3d209aea25648a54369b5381bbb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c1:22:a0:49:be:47:03:2b:18:1f:46:c5:fd: 39:a9:31:5a:05:83:db:2e:da:f0:65:1b:c0:38:63: 01:f9:f7:6e:59:eb:7c:00:19:31:a0:22:69:44:8b: 80:9f:cb:d4:89:50:bb:31:1e:b1:ca:de:ff:9c:db: 31:fe:f4:0d:01:47:cc:79:c1:04:2c:a7:76:08:15: f4:fd:ed:86:52:a8:8b:73:3a:34:84:65:47:72:f4: 52:59:29:2a:ef:04:fe:e1:f9:28:90:83:33:cf:ed: 4c:bb:ea:62:88:cc:9c:ae:35:a1:22:54:4e:bc:a3: ef:45:bc:e5:f1:7e:a0:13:16:eb:c3:65:da:ee:5e: 47:f2:47:9a:55:b2:f2:22:56:8a:6c:2f:1d:09:f3: 82:ce:a5:09:dd:46:ab:8e:c3:f7:ff:2d:f2:e8:02: a7:cd:14:e1:1c:1c:61:f5:49:6b:7f:cc:63:a1:e0: 57:e6:39:00:85:80:77:40:49:b4:e7:05:b3:32:18: e0:df:dd:37:b4:7e:d0:91:e7:96:3f:00:ce:80:67: fc:f8:62:fc:b8:2b:d3:61:b4:89:bc:83:ed:f4:e1: 78:fc:59:bd:1c:f3:7c:60:dc:32:40:4f:13:ef:64: 06:98:92:e6:88:f9:4f:06:29:bd:f3:78:c4:b8:fc: 3a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:46:72:7F:DA:7E:3D:20:9A:EA:25:64:8A:54:36:9B:53:81:BB:B3 X509v3 Authority Key Identifier: keyid:95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:e1:fa:1c:b1:77:4c:55:e4:f4:65:ae:f2:d1:0f:39:79:94: 52:e2:11:be:98:d4:6e:f3:98:83:61:74:82:60:d6:a0:c1:fd: b8:6c:00:8c:88:dd:f9:ab:ae:8c:5e:4c:44:2e:74:52:29:bb: 53:8e:36:b1:99:f4:b1:c1:38:79:76:d8:4a:49:c8:d3:b9:b9: 38:fb:a2:52:f0:c8:fa:5f:19:ad:e1:7c:84:a9:b3:71:16:c5: b4:32:c9:1b:b8:42:fd:df:28:06:93:f3:a1:33:48:d6:a5:68: ef:af:b4:67:73:f4:0d:32:f6:81:cb:94:76:c5:2c:49:e4:89: b0:5f:6a:65:ab:b9:4c:dc:15:e7:ee:62:e9:fe:02:e2:94:4f: fd:42:69:9e:f2:6d:1b:99:e3:35:fb:ae:07:16:95:00:b0:71: c7:2b:a6:57:36:56:0b:5f:25:3e:80:52:3b:1f:63:76:98:c6: ed:8f:c0:e4:05:47:dd:3f:78:7e:28:eb:a2:6f:15:b3:eb:08: d1:79:5c:7c:77:c4:34:d5:8b:03:8d:9f:47:70:e8:4a:f2:ad: 79:5a:a7:fb:b3:82:7f:25:9a:a2:bd:cf:1c:3f:90:28:d8:1a: 77:5c:7b:b5:f4:43:77:a3:02:f4:c9:7f:fd:e0:7e:79:20:71: 7d:55:76:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtC5zro25MubB4Q3GRoh2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1Yjg1ZTVhYzA1NWExMjE4OGFlNTBjZGIwMDdmYTQ4OGI2 YWE4OGIwHhcNMjYwMjA5MTQwMDMwWhcNMjYwMjEwMTQwMDMwWjAzMTEwLwYDVQQD Eyg4ZDQ2NzI3ZmRhN2UzZDIwOWFlYTI1NjQ4YTU0MzY5YjUzODFiYmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MEioEm+RwMrGB9Gxf05qTFaBYPb LtrwZRvAOGMB+fduWet8ABkxoCJpRIuAn8vUiVC7MR6xyt7/nNsx/vQNAUfMecEE LKd2CBX0/e2GUqiLczo0hGVHcvRSWSkq7wT+4fkokIMzz+1Mu+piiMycrjWhIlRO vKPvRbzl8X6gExbrw2Xa7l5H8keaVbLyIlaKbC8dCfOCzqUJ3UarjsP3/y3y6AKn zRThHBxh9Ulrf8xjoeBX5jkAhYB3QEm05wWzMhjg3903tH7QkeeWPwDOgGf8+GL8 uCvTYbSJvIPt9OF4/Fm9HPN8YNwyQE8T72QGmJLmiPlPBim983jEuPw6jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1Gcn/afj0gmuolZIpUNptTgbuzMB8GA1UdIwQY MBaAFJW4XlrAVaEhiK5QzbAH+kiLaqiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJoZVdzQlZvU0dJcmxETnNBZjZTSXRxcUlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NGFlZTgtNDFhOC00ZWU3LWFlNGMt MjE4M2JjMzg0NGQyLzEvbGJoZVdzQlZvU0dJcmxETnNBZjZTSXRxcUlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NGFlZTgtNDFhOC00ZWU3LWFlNGMtMjE4M2JjMzg0NGQy LzEvbGJoZVdzQlZvU0dJcmxETnNBZjZTSXRxcUlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFuH6HLF3 TFXk9GWu8tEPOXmUUuIRvpjUbvOYg2F0gmDWoMH9uGwAjIjd+auujF5MRC50Uim7 U442sZn0scE4eXbYSknI07m5OPuiUvDI+l8ZreF8hKmzcRbFtDLJG7hC/d8oBpPz oTNI1qVo76+0Z3P0DTL2gcuUdsUsSeSJsF9qZau5TNwV5+5i6f4C4pRP/UJpnvJt G5njNfuuBxaVALBxxyumVzZWC18lPoBSOx9jdpjG7Y/A5AVH3T94fijrom8Vs+sI 0XlcfHfENNWLA42fR3DoSvKteVqn+7OCfyWaor3PHD+QKNgad1x7tfRDd6MC9Ml/ /eB+eSBxfVV2NA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:42 2026 by rpki-client