This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft File: q8Legg4C88P4bluMnEndxJMlEj8.mft (raw, json) Hash identifier: wTnAhieBJu7FSy7mH9Y1hWqs51LAgOSlgA4CPSQRelg= Subject key identifier: 42:37:5C:C0:D8:AC:8E:37:68:72:81:89:9F:27:13:E2:CC:E5:29:3F Authority key identifier: AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F Certificate issuer: /CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f Certificate serial: 019C43909336862FBF48FAA4843F8A2D03C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 18:01:14 +0000 Manifest this update: Mon 09 Feb 2026 18:01:14 +0000 Manifest next update: Tue 10 Feb 2026 18:01:14 +0000 Files and hashes: 1: _BnlDW0yMenZgGVAmuqxZ3GnNuo.roa (hash: 7rAqk38Xj2YUz4ZyKSekZT3B86MBmL3C6PiQyPZP8+g=) 2: q8Legg4C88P4bluMnEndxJMlEj8.crl (hash: HcRXcPi6vsotf4iEXclXOqxQ/NSmvdDiFuUlxgmGHJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:93:36:86:2f:bf:48:fa:a4:84:3f:8a:2d:03:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f Validity Not Before: Feb 9 18:01:14 2026 GMT Not After : Feb 10 18:01:14 2026 GMT Subject: CN=42375cc0d8ac8e37687281899f2713e2cce5293f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:48:16:b1:6d:b2:6c:fd:bb:9b:57:1b:99:50: d4:9f:d1:85:30:f5:04:82:24:d4:65:d8:f9:5b:39: d4:4c:d4:fb:7c:43:85:4f:b4:e4:3a:d8:f1:14:fd: a3:78:4d:d0:31:f3:49:b3:4d:81:f9:4d:9d:5e:f1: 3f:90:1a:81:d8:9a:6a:75:db:33:36:ec:7d:32:98: 0a:bb:a2:77:ce:75:bd:89:e4:a8:ed:1d:ef:a6:1f: c5:26:d8:b5:29:e5:d8:e7:67:29:5d:66:ab:fe:50: 0a:a7:a9:f7:63:43:ed:0a:7c:6a:2b:22:81:3d:a5: bd:03:a1:ea:a3:1c:60:16:8c:5e:7a:b0:bb:82:42: 5d:71:48:96:e7:cc:ee:37:bf:d8:38:c4:9b:3d:07: b8:b7:8b:b3:f5:22:ee:23:b3:39:0e:c0:0b:5e:9e: f2:27:27:f1:e7:16:80:ce:68:32:0e:55:81:f0:ea: 9f:ac:d3:1c:d7:e9:34:75:48:22:1f:a4:43:1d:95: 35:ef:3a:0e:d9:80:61:7a:97:e6:11:04:43:29:03: cc:c0:1f:9f:93:fe:6e:a4:6b:73:2f:26:83:9e:bb: 46:a2:f2:66:51:e6:1d:48:6c:54:8f:3d:62:9d:f1: e8:de:5d:e1:3d:5a:7b:35:ac:9f:ae:63:9e:49:f9: c7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:37:5C:C0:D8:AC:8E:37:68:72:81:89:9F:27:13:E2:CC:E5:29:3F X509v3 Authority Key Identifier: keyid:AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:19:4c:8b:14:8c:e8:46:81:2b:54:57:b1:72:81:6b:f7:c3: 15:b7:5b:c3:96:7e:dd:b2:d1:af:51:0d:7f:36:7f:a1:d0:6f: de:64:4e:3f:e4:13:83:03:83:fc:e6:07:3b:9a:53:66:63:d7: 40:fc:16:ff:ea:91:47:82:e9:5e:b1:8f:cf:ea:d3:2f:2d:ff: 9a:04:91:e2:5a:96:e7:06:53:33:86:8f:ac:b0:53:5d:33:41: 5c:2f:3e:7a:f3:89:52:53:54:92:51:9e:d4:28:ee:39:20:44: 2b:58:b3:87:08:26:a9:f3:49:48:4b:68:e2:35:70:32:4d:b0: 07:40:c7:52:72:3b:28:d2:be:bf:bc:b3:2f:7e:53:21:a2:2f: e8:af:52:be:b5:4b:d5:55:8c:41:e5:77:9a:a9:34:90:6a:fd: 2c:e4:f1:16:26:76:ad:8e:f4:bf:8f:69:af:40:fb:35:bb:c8: 24:13:ae:e9:fd:08:ac:55:ab:fc:f4:83:d6:60:e8:a6:c2:c4: d5:a7:43:ab:c8:eb:40:7a:02:f1:a9:e3:6c:a6:ed:7b:d1:21: 37:30:dd:a2:df:86:55:10:40:f9:0c:f2:54:9f:b3:a7:f0:fb: 96:c3:58:6b:e6:75:90:b0:cf:1e:06:61:44:af:c0:96:2b:66: b8:19:0d:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkJM2hi+/SPqkhD+KLQPBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzJkZTgyMGUwMmYzYzNmODZlNWI4YzljNDlkZGM0OTMy NTEyM2YwHhcNMjYwMjA5MTgwMTE0WhcNMjYwMjEwMTgwMTE0WjAzMTEwLwYDVQQD Eyg0MjM3NWNjMGQ4YWM4ZTM3Njg3MjgxODk5ZjI3MTNlMmNjZTUyOTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUgWsW2ybP27m1cbmVDUn9GFMPUE giTUZdj5WznUTNT7fEOFT7TkOtjxFP2jeE3QMfNJs02B+U2dXvE/kBqB2Jpqddsz Nux9MpgKu6J3znW9ieSo7R3vph/FJti1KeXY52cpXWar/lAKp6n3Y0PtCnxqKyKB PaW9A6HqoxxgFoxeerC7gkJdcUiW58zuN7/YOMSbPQe4t4uz9SLuI7M5DsALXp7y Jyfx5xaAzmgyDlWB8OqfrNMc1+k0dUgiH6RDHZU17zoO2YBhepfmEQRDKQPMwB+f k/5upGtzLyaDnrtGovJmUeYdSGxUjz1infHo3l3hPVp7NayfrmOeSfnHUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEI3XMDYrI43aHKBiZ8nE+LM5Sk/MB8GA1UdIwQY MBaAFKvC3oIOAvPD+G5bjJxJ3cSTJRI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThMZWdnNEM4OFA0Ymx1TW5FbmR4Sk1sRWo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS81Njc0OGUtYzI5Ny00ZGU3LThlOTYt ODk3ODMzMTdlYTI5LzEvcThMZWdnNEM4OFA0Ymx1TW5FbmR4Sk1sRWo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS81Njc0OGUtYzI5Ny00ZGU3LThlOTYtODk3ODMzMTdlYTI5 LzEvcThMZWdnNEM4OFA0Ymx1TW5FbmR4Sk1sRWo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBlMixSM 6EaBK1RXsXKBa/fDFbdbw5Z+3bLRr1ENfzZ/odBv3mROP+QTgwOD/OYHO5pTZmPX QPwW/+qRR4LpXrGPz+rTLy3/mgSR4lqW5wZTM4aPrLBTXTNBXC8+evOJUlNUklGe 1CjuOSBEK1izhwgmqfNJSEto4jVwMk2wB0DHUnI7KNK+v7yzL35TIaIv6K9SvrVL 1VWMQeV3mqk0kGr9LOTxFiZ2rY70v49pr0D7NbvIJBOu6f0IrFWr/PSD1mDopsLE 1adDq8jrQHoC8anjbKbte9EhNzDdot+GVRBA+QzyVJ+zp/D7lsNYa+Z1kLDPHgZh RK/AlitmuBkNFQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:42 2026 by rpki-client