This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft File: LLE1YlrAUaKAl39jBs8j1gxAa5A.mft (raw, json) Hash identifier: KtCkvB6+0xAmCwBw+0WE1d4XtGpUvJN+dI1thc23Wpg= Subject key identifier: 5A:ED:86:21:9A:D7:8B:27:A9:66:B5:C8:F0:FF:71:B9:5F:C3:04:5E Authority key identifier: 2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90 Certificate issuer: /CN=2cb135625ac051a280977f6306cf23d60c406b90 Certificate serial: 019C41D895AC223B3AE07F0C7D9453E96D41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft Manifest number: 14A3 Signing time: Mon 09 Feb 2026 10:00:38 +0000 Manifest this update: Mon 09 Feb 2026 10:00:38 +0000 Manifest next update: Tue 10 Feb 2026 10:00:38 +0000 Files and hashes: 1: LLE1YlrAUaKAl39jBs8j1gxAa5A.crl (hash: 7p2rSvFpGKtKkV0BYjAOD7J6/PXOiBXpYIKHZZLRtA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:95:ac:22:3b:3a:e0:7f:0c:7d:94:53:e9:6d:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cb135625ac051a280977f6306cf23d60c406b90 Validity Not Before: Feb 9 10:00:38 2026 GMT Not After : Feb 10 10:00:38 2026 GMT Subject: CN=5aed86219ad78b27a966b5c8f0ff71b95fc3045e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b9:93:42:2a:18:48:f9:6b:de:8b:28:31:9a: 3b:c3:86:d7:7a:2a:bf:d3:d2:98:80:6f:d0:92:64: 5e:b8:13:91:23:52:72:38:14:2a:9a:66:9a:ea:83: 54:90:0d:18:7a:1d:42:24:4b:0a:92:20:d5:1d:f9: 8e:68:97:ae:30:3f:9b:2e:62:fd:a2:63:78:7e:0d: 4f:b7:ce:8a:c7:79:f9:e8:fa:2c:17:c5:1e:16:ee: 3e:0a:68:3d:e9:03:2e:66:34:f5:56:82:12:aa:54: e4:33:a0:c4:39:9b:78:ee:40:11:44:8f:1f:2c:ee: ed:ab:ae:82:96:55:b5:35:6c:03:6a:14:9b:94:aa: 29:0b:ae:c5:9f:82:6b:9d:42:d2:3e:a7:ee:e9:ee: d5:92:53:38:90:63:f9:cc:ad:9d:27:d0:bd:ee:a8: 31:b7:24:db:15:b5:48:5c:7d:1a:fe:46:71:2f:62: 39:b6:6c:22:f7:ce:1b:2b:4f:5c:da:51:3a:7d:f9: a7:d5:45:75:42:80:1f:9f:a0:fc:b3:54:ba:0f:9c: a7:ec:6b:7a:c7:5a:d7:22:a2:eb:93:c6:cc:01:5e: dc:37:9b:85:65:31:98:5b:23:4f:41:e1:f7:4c:38: b6:4d:5a:8d:9f:3e:19:8c:03:ad:26:e7:0d:2e:39: 27:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:ED:86:21:9A:D7:8B:27:A9:66:B5:C8:F0:FF:71:B9:5F:C3:04:5E X509v3 Authority Key Identifier: keyid:2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:6f:d1:e4:3d:91:55:79:82:a6:a6:1e:4d:a9:4d:a7:d3:99: 95:67:a0:f8:96:de:c0:69:41:95:e5:77:49:b5:51:8a:57:95: b2:5e:71:ba:10:91:47:4e:dc:80:19:f8:d5:6c:59:3a:1e:a6: fc:0d:8e:54:41:e7:44:63:09:cc:43:44:33:e8:ec:33:06:07: 14:0a:ef:bc:39:97:24:81:1f:b3:e5:ff:34:8a:73:e3:30:af: ce:72:5a:41:6b:d0:d2:ea:21:d5:b1:42:b1:ad:23:a9:8c:2e: 83:9a:38:11:0b:1b:65:96:da:eb:9f:14:d1:3f:cb:0f:30:f0: 70:f3:d3:49:46:f7:34:61:2c:20:c8:99:4b:7c:5f:38:4c:b2: fe:cf:74:b6:a7:af:f8:62:36:ed:81:e2:dc:7e:19:db:e3:a0: c2:f1:26:60:32:02:17:fe:d2:5f:a3:a4:2f:53:b0:52:1c:f9: 04:57:ea:a3:9f:49:c3:64:6f:56:03:0f:43:6a:bb:08:fc:97: 32:55:60:88:c0:65:a1:f2:40:43:4f:f7:92:67:af:c6:6e:ad: 19:4c:18:db:2e:cd:7b:d1:0a:5d:b4:cb:38:10:90:99:67:49: df:02:1c:b0:86:ac:fa:be:91:cf:e9:26:e0:b1:ce:33:3f:51: 17:7c:7f:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2JWsIjs64H8MfZRT6W1BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYjEzNTYyNWFjMDUxYTI4MDk3N2Y2MzA2Y2YyM2Q2MGM0 MDZiOTAwHhcNMjYwMjA5MTAwMDM4WhcNMjYwMjEwMTAwMDM4WjAzMTEwLwYDVQQD Eyg1YWVkODYyMTlhZDc4YjI3YTk2NmI1YzhmMGZmNzFiOTVmYzMwNDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bmTQioYSPlr3osoMZo7w4bXeiq/ 09KYgG/QkmReuBORI1JyOBQqmmaa6oNUkA0Yeh1CJEsKkiDVHfmOaJeuMD+bLmL9 omN4fg1Pt86Kx3n56PosF8UeFu4+Cmg96QMuZjT1VoISqlTkM6DEOZt47kARRI8f LO7tq66CllW1NWwDahSblKopC67Fn4JrnULSPqfu6e7VklM4kGP5zK2dJ9C97qgx tyTbFbVIXH0a/kZxL2I5tmwi984bK09c2lE6ffmn1UV1QoAfn6D8s1S6D5yn7Gt6 x1rXIqLrk8bMAV7cN5uFZTGYWyNPQeH3TDi2TVqNnz4ZjAOtJucNLjknawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrthiGa14snqWa1yPD/cblfwwReMB8GA1UdIwQY MBaAFCyxNWJawFGigJd/YwbPI9YMQGuQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTExFMVlsckFVYUtBbDM5akJzOGoxZ3hBYTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jNzQwZTYtY2U2Yi00ZDFhLThlY2Ut ZmU5ZWRiZmNjN2VmLzEvTExFMVlsckFVYUtBbDM5akJzOGoxZ3hBYTVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9jNzQwZTYtY2U2Yi00ZDFhLThlY2UtZmU5ZWRiZmNjN2Vm LzEvTExFMVlsckFVYUtBbDM5akJzOGoxZ3hBYTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeG/R5D2R VXmCpqYeTalNp9OZlWeg+JbewGlBleV3SbVRileVsl5xuhCRR07cgBn41WxZOh6m /A2OVEHnRGMJzENEM+jsMwYHFArvvDmXJIEfs+X/NIpz4zCvznJaQWvQ0uoh1bFC sa0jqYwug5o4EQsbZZba658U0T/LDzDwcPPTSUb3NGEsIMiZS3xfOEyy/s90tqev +GI27YHi3H4Z2+OgwvEmYDICF/7SX6OkL1OwUhz5BFfqo59Jw2RvVgMPQ2q7CPyX MlVgiMBlofJAQ0/3kmevxm6tGUwY2y7Ne9EKXbTLOBCQmWdJ3wIcsIas+r6Rz+km 4LHOMz9RF3x/Sw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:05 2026 by rpki-client