This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft File: lJCxxOooQt35kp6oplRbgXoodoA.mft (raw, json) Hash identifier: pWBfqZcncvzOVE4PSG3lGLSwFfLhlp5bI2eLVuHMxWY= Subject key identifier: 6D:D3:AA:C6:B2:63:25:F3:E6:0C:24:59:01:1A:E9:CE:50:81:8E:08 Authority key identifier: 94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80 Certificate issuer: /CN=9490b1c4ea2842ddf9929ea8a6545b817a287680 Certificate serial: 019C44DA58C08C66472CFDAB8C9DCD3CA93F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft Manifest number: 069D Signing time: Tue 10 Feb 2026 00:01:26 +0000 Manifest this update: Tue 10 Feb 2026 00:01:26 +0000 Manifest next update: Wed 11 Feb 2026 00:01:26 +0000 Files and hashes: 1: lJCxxOooQt35kp6oplRbgXoodoA.crl (hash: YzQ/hBMHFIBSpdxVydW3dInqV10Lvojv4QVGO96KFJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:da:58:c0:8c:66:47:2c:fd:ab:8c:9d:cd:3c:a9:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9490b1c4ea2842ddf9929ea8a6545b817a287680 Validity Not Before: Feb 10 00:01:26 2026 GMT Not After : Feb 11 00:01:26 2026 GMT Subject: CN=6dd3aac6b26325f3e60c2459011ae9ce50818e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ef:cf:12:26:81:7b:3e:34:f4:ba:ea:45:bd: 22:97:61:a0:4f:6c:69:0c:3f:d0:e4:0d:9d:d0:00: 27:d7:1d:2a:05:70:bb:47:f9:30:a3:0e:3f:48:6e: c7:46:7a:b8:c2:d6:79:4c:d1:48:06:ce:8e:de:e8: 7e:d9:2d:85:a7:c6:fc:0c:9a:a2:0d:f0:05:ed:e7: 0b:6f:1a:c3:c9:70:48:55:5f:f0:d7:70:80:c9:49: ba:80:55:59:b2:c3:1b:2b:78:3f:6a:ec:86:d7:b0: de:e5:8e:c4:eb:65:a2:04:c7:a7:4e:59:0f:21:06: 8b:ec:13:e7:03:b3:2e:32:be:1f:f6:5d:2c:7d:5c: aa:d4:84:b7:63:bd:54:de:5a:81:aa:07:fe:3f:51: 24:1a:eb:f2:87:c4:8e:d6:f2:9f:0e:5a:8f:b1:6f: ad:6a:35:68:33:be:a4:25:93:c5:ad:bd:a0:f5:e9: ec:75:be:23:38:cc:c5:57:fe:76:ca:89:01:da:88: c3:bc:9f:a0:87:44:ab:0c:42:ee:9c:6c:1b:47:f0: 13:28:ee:75:e7:3b:65:61:66:cd:5f:a4:e5:08:42: 57:6d:10:e0:81:05:b3:26:49:e3:68:80:a1:a4:e6: 55:f7:cd:5f:cb:21:4d:e5:47:48:2d:1b:5c:24:53: eb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D3:AA:C6:B2:63:25:F3:E6:0C:24:59:01:1A:E9:CE:50:81:8E:08 X509v3 Authority Key Identifier: keyid:94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:5b:a0:b6:07:67:04:2f:18:bd:6b:0a:39:2d:8c:51:a1:64: 2c:50:2d:8d:bc:6d:f4:ba:86:6b:72:33:25:65:cb:e4:5e:f3: 21:34:8f:f9:cc:99:a8:ea:db:ee:78:2b:35:a3:8b:ca:00:a2: 73:c1:4f:77:f5:d7:74:f2:91:ec:29:d4:6c:49:e4:ed:30:13: 17:e6:86:ca:1e:78:40:a3:7e:72:79:78:9c:9f:0d:7d:00:14: c5:92:8e:0e:05:7f:56:f7:d7:09:1d:9b:b1:14:45:cc:15:7a: 4b:9a:ae:66:1c:3f:35:69:ed:20:f9:2c:4f:82:16:f7:76:4b: 85:b0:fb:d1:3e:26:bd:44:86:5c:10:cc:6a:03:93:bb:55:4b: 48:fd:c6:5d:e7:9e:5a:95:98:16:63:9a:90:b1:7f:b6:83:a3: e5:d5:b3:d8:13:31:13:61:b7:02:29:57:e8:f8:98:32:0e:eb: 29:7d:1b:b4:48:ec:9f:38:71:54:06:e6:92:d7:31:bb:6c:fc: f3:de:7e:d7:29:24:69:a9:c8:ab:0a:f6:26:f1:44:d8:e0:c2: 3a:37:3c:e7:df:b2:cb:da:11:f7:e9:cb:7e:c3:05:57:01:fe: 88:1d:5a:73:e7:0d:84:65:34:39:ee:c5:68:e2:a4:9f:a5:1a: 69:75:94:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2ljAjGZHLP2rjJ3NPKk/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0OTBiMWM0ZWEyODQyZGRmOTkyOWVhOGE2NTQ1YjgxN2Ey ODc2ODAwHhcNMjYwMjEwMDAwMTI2WhcNMjYwMjExMDAwMTI2WjAzMTEwLwYDVQQD Eyg2ZGQzYWFjNmIyNjMyNWYzZTYwYzI0NTkwMTFhZTljZTUwODE4ZTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+/PEiaBez409LrqRb0il2GgT2xp DD/Q5A2d0AAn1x0qBXC7R/kwow4/SG7HRnq4wtZ5TNFIBs6O3uh+2S2Fp8b8DJqi DfAF7ecLbxrDyXBIVV/w13CAyUm6gFVZssMbK3g/auyG17De5Y7E62WiBMenTlkP IQaL7BPnA7MuMr4f9l0sfVyq1IS3Y71U3lqBqgf+P1EkGuvyh8SO1vKfDlqPsW+t ajVoM76kJZPFrb2g9ensdb4jOMzFV/52yokB2ojDvJ+gh0SrDELunGwbR/ATKO51 5ztlYWbNX6TlCEJXbRDggQWzJknjaIChpOZV981fyyFN5UdILRtcJFPreQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3TqsayYyXz5gwkWQEa6c5QgY4IMB8GA1UdIwQY MBaAFJSQscTqKELd+ZKeqKZUW4F6KHaAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEpDeHhPb29RdDM1a3A2b3BsUmJnWG9vZG9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lZGRkYWEtYzMxYS00MDI2LThmODUt MDU2NmY1MTI1MmE5LzEvbEpDeHhPb29RdDM1a3A2b3BsUmJnWG9vZG9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9lZGRkYWEtYzMxYS00MDI2LThmODUtMDU2NmY1MTI1MmE5 LzEvbEpDeHhPb29RdDM1a3A2b3BsUmJnWG9vZG9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOVugtgdn BC8YvWsKOS2MUaFkLFAtjbxt9LqGa3IzJWXL5F7zITSP+cyZqOrb7ngrNaOLygCi c8FPd/XXdPKR7CnUbEnk7TATF+aGyh54QKN+cnl4nJ8NfQAUxZKODgV/VvfXCR2b sRRFzBV6S5quZhw/NWntIPksT4IW93ZLhbD70T4mvUSGXBDMagOTu1VLSP3GXeee WpWYFmOakLF/toOj5dWz2BMxE2G3AilX6PiYMg7rKX0btEjsnzhxVAbmktcxu2z8 895+1ykkaanIqwr2JvFE2ODCOjc859+yy9oR9+nLfsMFVwH+iB1ac+cNhGU0Oe7F aOKkn6UaaXWUPA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:39:31 2026 by rpki-client