This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft File: L5FDTuFsYTNOwnDfVox3oLXeBSo.mft (raw, json) Hash identifier: NA6JfRHQpqOE4bJ8mjTxHq3Z+1GBJqpPOY82ppeC12c= Subject key identifier: 4F:C0:CE:DB:25:45:A6:AD:15:AA:25:02:54:22:C8:82:8F:B7:37:7A Authority key identifier: 2F:91:43:4E:E1:6C:61:33:4E:C2:70:DF:56:8C:77:A0:B5:DE:05:2A Certificate issuer: /CN=2f91434ee16c61334ec270df568c77a0b5de052a Certificate serial: 019C41A16662891F2708C65E33CDE2A61525 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft Manifest number: 0EF4 Signing time: Mon 09 Feb 2026 09:00:22 +0000 Manifest this update: Mon 09 Feb 2026 09:00:22 +0000 Manifest next update: Tue 10 Feb 2026 09:00:22 +0000 Files and hashes: 1: L5FDTuFsYTNOwnDfVox3oLXeBSo.crl (hash: AnpKKSUiXAXMf2UKRYWsOWXVG6tNCvpOer0sihJAJqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:66:62:89:1f:27:08:c6:5e:33:cd:e2:a6:15:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f91434ee16c61334ec270df568c77a0b5de052a Validity Not Before: Feb 9 09:00:22 2026 GMT Not After : Feb 10 09:00:22 2026 GMT Subject: CN=4fc0cedb2545a6ad15aa25025422c8828fb7377a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7a:60:78:47:1e:4a:6f:e4:d5:c3:7f:48:65: 0f:9a:d4:42:ac:15:f5:a8:d7:07:a8:98:33:f1:48: cd:23:0f:8d:1f:a5:ca:8e:50:cf:9c:59:08:47:f9: 61:03:27:e2:a7:3f:39:58:32:8e:6a:03:8e:86:1f: 78:b6:94:cc:51:ad:20:d2:e7:ae:9c:52:89:2d:0c: 72:ca:05:ae:19:b6:fd:c9:c5:75:3f:99:13:5f:8f: 9e:71:45:42:51:81:c5:2e:38:97:00:2e:9c:de:4c: 03:03:42:1f:85:c9:ea:2a:39:d7:69:20:29:40:37: f9:58:3a:0d:9e:38:62:50:1b:64:9c:fd:f6:9f:41: 01:a3:13:36:36:f5:6a:28:a8:cb:f9:65:a9:e6:db: 4e:e3:62:66:70:b4:8e:54:08:ba:c9:c1:c5:26:9f: 78:6f:9c:1e:25:f7:cb:e6:bf:44:91:ed:f9:93:42: 4a:2e:b0:40:a2:fb:4a:2b:8a:9d:fa:ea:62:fd:eb: 7b:26:be:17:c3:f4:3a:5d:eb:da:97:d5:31:54:9e: 02:b1:d4:96:89:17:6c:1c:6d:2f:e4:00:32:7a:e7: 09:14:75:c1:e9:d9:ad:f9:ad:07:b5:1e:11:f3:b0: 79:6a:1f:95:a5:0a:67:96:39:d5:52:ca:af:a4:a3: 4f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C0:CE:DB:25:45:A6:AD:15:AA:25:02:54:22:C8:82:8F:B7:37:7A X509v3 Authority Key Identifier: keyid:2F:91:43:4E:E1:6C:61:33:4E:C2:70:DF:56:8C:77:A0:B5:DE:05:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:be:13:77:65:92:88:06:f9:42:56:6b:8b:71:5e:a3:0b:04: e7:24:4c:40:c6:51:c2:16:04:ce:0e:fa:fd:1b:07:5a:ea:4a: b3:dd:cd:01:d7:f7:ae:9e:a9:b7:24:cd:a5:6b:b7:53:80:48: 44:d5:bf:18:ed:a5:18:98:77:4a:bd:77:92:5c:c8:0c:48:65: 22:30:66:95:a9:64:1f:7d:fb:31:76:aa:dd:c0:70:7e:00:86: 1e:08:3c:67:11:e5:03:ed:e3:16:99:15:26:94:ee:01:19:ca: 21:0c:96:a9:a2:2e:08:8a:39:1f:60:d6:d2:ad:27:57:5f:28: 80:7d:d4:e0:9d:15:34:ca:c1:73:b0:2a:e1:46:1e:7b:2e:67: cf:74:33:d0:68:20:bf:b2:c1:5f:ee:19:80:57:df:d5:66:e4: 87:73:1e:b9:ea:c9:d7:c5:6f:0c:54:00:e0:ea:73:74:f3:6c: a6:70:a7:31:27:0c:14:d2:7a:0e:b4:a1:41:cc:23:0f:ba:4e: 47:f7:01:21:1e:1c:f2:33:f0:db:23:47:43:5a:69:ee:e2:14: e7:4e:27:68:67:9e:a2:59:39:e3:9d:69:83:fb:40:05:82:9b: 16:15:6d:3c:44:81:a4:a0:eb:f1:10:33:77:9a:9a:c4:94:d4: 65:9c:d5:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoWZiiR8nCMZeM83iphUlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOTE0MzRlZTE2YzYxMzM0ZWMyNzBkZjU2OGM3N2EwYjVk ZTA1MmEwHhcNMjYwMjA5MDkwMDIyWhcNMjYwMjEwMDkwMDIyWjAzMTEwLwYDVQQD Eyg0ZmMwY2VkYjI1NDVhNmFkMTVhYTI1MDI1NDIyYzg4MjhmYjczNzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynpgeEceSm/k1cN/SGUPmtRCrBX1 qNcHqJgz8UjNIw+NH6XKjlDPnFkIR/lhAyfipz85WDKOagOOhh94tpTMUa0g0ueu nFKJLQxyygWuGbb9ycV1P5kTX4+ecUVCUYHFLjiXAC6c3kwDA0IfhcnqKjnXaSAp QDf5WDoNnjhiUBtknP32n0EBoxM2NvVqKKjL+WWp5ttO42JmcLSOVAi6ycHFJp94 b5weJffL5r9Eke35k0JKLrBAovtKK4qd+upi/et7Jr4Xw/Q6Xeval9UxVJ4CsdSW iRdsHG0v5AAyeucJFHXB6dmt+a0HtR4R87B5ah+VpQpnljnVUsqvpKNPeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/AztslRaatFaolAlQiyIKPtzd6MB8GA1UdIwQY MBaAFC+RQ07hbGEzTsJw31aMd6C13gUqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDVGRFR1RnNZVE5Pd25EZlZveDNvTFhlQlNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9jZDQxYmEtMmVhNy00NzRmLTg5NDEt NWZkYjMyMjhmZTFmLzEvTDVGRFR1RnNZVE5Pd25EZlZveDNvTFhlQlNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9jZDQxYmEtMmVhNy00NzRmLTg5NDEtNWZkYjMyMjhmZTFm LzEvTDVGRFR1RnNZVE5Pd25EZlZveDNvTFhlQlNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq74Td2WS iAb5QlZri3FeowsE5yRMQMZRwhYEzg76/RsHWupKs93NAdf3rp6ptyTNpWu3U4BI RNW/GO2lGJh3Sr13klzIDEhlIjBmlalkH337MXaq3cBwfgCGHgg8ZxHlA+3jFpkV JpTuARnKIQyWqaIuCIo5H2DW0q0nV18ogH3U4J0VNMrBc7Aq4UYeey5nz3Qz0Ggg v7LBX+4ZgFff1Wbkh3MeuerJ18VvDFQA4OpzdPNspnCnMScMFNJ6DrShQcwjD7pO R/cBIR4c8jPw2yNHQ1pp7uIU504naGeeolk5451pg/tABYKbFhVtPESBpKDr8RAz d5qaxJTUZZzVbg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:39 2026 by rpki-client