This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft File: L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft (raw, json) Hash identifier: jLc7ZpZUL/qkSUpl3BmyjZUehYYqFVvEmvqCIsHK5UM= Subject key identifier: 4E:35:DB:11:12:CA:B5:28:78:D4:2F:A1:81:7E:89:7A:2A:3E:8F:01 Authority key identifier: 2F:64:71:6B:18:6B:E1:14:58:22:E1:C7:07:64:FA:B6:1F:B1:3C:6A Certificate issuer: /CN=2f64716b186be1145822e1c70764fab61fb13c6a Certificate serial: 019C4321C6CC8C5DD98958F5B47EEDA10A88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft Manifest number: 0A59 Signing time: Mon 09 Feb 2026 16:00:12 +0000 Manifest this update: Mon 09 Feb 2026 16:00:12 +0000 Manifest next update: Tue 10 Feb 2026 16:00:12 +0000 Files and hashes: 1: L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl (hash: iarHd8NEQY5P5lW1jG6PuYn9ZsDPzYHqp3Vhz+4qiFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:c6:cc:8c:5d:d9:89:58:f5:b4:7e:ed:a1:0a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f64716b186be1145822e1c70764fab61fb13c6a Validity Not Before: Feb 9 16:00:12 2026 GMT Not After : Feb 10 16:00:12 2026 GMT Subject: CN=4e35db1112cab52878d42fa1817e897a2a3e8f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5f:cb:de:32:10:ff:9d:8c:c6:4c:85:f1:d6: 2f:1c:b9:cb:a2:2e:84:36:9b:4c:bc:16:56:ab:6a: de:62:9e:ac:93:9b:91:ca:e6:a7:91:79:a7:95:df: 96:1b:49:d2:80:15:b9:59:c6:fb:a8:aa:d7:36:2b: 7b:54:8b:d9:9c:3a:c5:c1:c2:f8:83:e9:50:74:78: 72:04:b1:c6:68:da:96:9a:f0:32:2b:3d:4d:5b:39: 1b:de:fb:b1:5f:da:50:3c:4e:a3:d8:87:14:8c:64: 84:7a:55:e4:ec:42:40:ed:3b:4a:02:49:bb:eb:23: 16:a3:81:03:eb:c9:20:71:3d:55:c1:d2:71:f9:ea: 8d:26:6b:8e:eb:ed:88:a7:ca:cf:9b:92:00:83:70: 01:46:0d:ce:f3:c2:76:a1:83:8f:23:cb:b9:31:62: 2a:01:f3:44:69:de:24:49:49:b3:9e:27:67:32:91: dc:17:2a:48:32:6a:27:15:3d:3a:80:b6:da:ef:bb: 00:e1:7f:f0:ea:41:8c:b8:6c:f2:b8:eb:38:49:6e: 4b:30:75:c8:73:6b:27:1e:1b:d8:b2:1e:40:54:48: 10:65:f4:32:6d:59:e2:07:6a:72:ff:3f:70:2b:95: 91:78:93:d0:9f:d8:f2:01:9e:59:fb:76:1f:e2:46: fd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:35:DB:11:12:CA:B5:28:78:D4:2F:A1:81:7E:89:7A:2A:3E:8F:01 X509v3 Authority Key Identifier: keyid:2F:64:71:6B:18:6B:E1:14:58:22:E1:C7:07:64:FA:B6:1F:B1:3C:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:f4:04:92:c1:80:b0:6e:1a:c3:d7:ac:1c:35:c6:7b:ef:4d: e9:ae:81:19:09:9e:ab:20:0f:8b:05:03:1f:5d:c6:56:70:2e: eb:24:39:85:f0:c6:da:2c:f2:05:6c:42:60:7c:e1:2d:9c:e6: 59:a0:f3:4d:51:d7:53:94:38:88:4d:75:1d:93:fe:de:70:82: 0c:ab:0e:b8:07:f4:b2:be:69:df:b7:6d:11:de:bc:55:e0:6c: 02:f2:dc:bf:f2:e3:35:3c:bf:06:fd:36:1e:d3:8b:69:5c:98: f1:b0:c4:62:0c:59:8e:e3:78:f7:60:6a:34:57:ae:ee:71:5d: 70:ee:a9:51:9f:0d:76:9b:79:22:15:86:d8:9c:41:3e:1b:54: 6c:d9:72:e7:d6:38:75:67:11:7f:e2:4d:fb:7d:3c:c1:34:c8: b9:81:d6:68:6d:da:d3:e4:5a:de:48:62:a0:94:be:85:d9:27: 60:13:40:93:84:0b:30:7f:65:3a:2d:d7:8f:d9:5d:95:34:52: f6:ce:03:73:7a:e8:8e:21:6e:d3:45:50:48:57:b2:96:fe:1a: 74:7e:4a:86:dc:a7:ed:d3:cd:00:57:3e:3d:94:2b:b5:ae:cb: c9:ba:a1:1b:60:7b:14:be:2d:42:38:66:56:82:f3:5d:4c:57: b1:69:9e:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIcbMjF3ZiVj1tH7toQqIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNjQ3MTZiMTg2YmUxMTQ1ODIyZTFjNzA3NjRmYWI2MWZi MTNjNmEwHhcNMjYwMjA5MTYwMDEyWhcNMjYwMjEwMTYwMDEyWjAzMTEwLwYDVQQD Eyg0ZTM1ZGIxMTEyY2FiNTI4NzhkNDJmYTE4MTdlODk3YTJhM2U4ZjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01/L3jIQ/52MxkyF8dYvHLnLoi6E NptMvBZWq2reYp6sk5uRyuankXmnld+WG0nSgBW5Wcb7qKrXNit7VIvZnDrFwcL4 g+lQdHhyBLHGaNqWmvAyKz1NWzkb3vuxX9pQPE6j2IcUjGSEelXk7EJA7TtKAkm7 6yMWo4ED68kgcT1VwdJx+eqNJmuO6+2Ip8rPm5IAg3ABRg3O88J2oYOPI8u5MWIq AfNEad4kSUmznidnMpHcFypIMmonFT06gLba77sA4X/w6kGMuGzyuOs4SW5LMHXI c2snHhvYsh5AVEgQZfQybVniB2py/z9wK5WReJPQn9jyAZ5Z+3Yf4kb90QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE412xESyrUoeNQvoYF+iXoqPo8BMB8GA1UdIwQY MBaAFC9kcWsYa+EUWCLhxwdk+rYfsTxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJSeGF4aHI0UlJZSXVISEIyVDZ0aC14UEdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lYjBjMTAtYWIyZS00YzFhLTgxNmUt NTQ5MGQ3MDg3ZWQyLzEvTDJSeGF4aHI0UlJZSXVISEIyVDZ0aC14UEdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9lYjBjMTAtYWIyZS00YzFhLTgxNmUtNTQ5MGQ3MDg3ZWQy LzEvTDJSeGF4aHI0UlJZSXVISEIyVDZ0aC14UEdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfQEksGA sG4aw9esHDXGe+9N6a6BGQmeqyAPiwUDH13GVnAu6yQ5hfDG2izyBWxCYHzhLZzm WaDzTVHXU5Q4iE11HZP+3nCCDKsOuAf0sr5p37dtEd68VeBsAvLcv/LjNTy/Bv02 HtOLaVyY8bDEYgxZjuN492BqNFeu7nFdcO6pUZ8Ndpt5IhWG2JxBPhtUbNly59Y4 dWcRf+JN+308wTTIuYHWaG3a0+Ra3khioJS+hdknYBNAk4QLMH9lOi3Xj9ldlTRS 9s4Dc3rojiFu00VQSFeylv4adH5Khtyn7dPNAFc+PZQrta7LybqhG2B7FL4tQjhm VoLzXUxXsWmeGA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:02 2026 by rpki-client