This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft File: llRz1oVy6iI4vdh1r6cloEBd5IM.mft (raw, json) Hash identifier: N5yDqqz6VKxVAe1UQEJO/Kff1IVkaBNTE9DfADSXjHw= Subject key identifier: 90:83:11:F1:AC:1E:10:92:29:9E:BD:CD:4B:6E:C1:31:A2:AA:20:CE Authority key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83 Certificate issuer: /CN=965473d68572ea2238bdd875afa725a0405de483 Certificate serial: 019C4322C1E18B4BF7D12801B9D2BC1C77E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 16:01:17 +0000 Manifest this update: Mon 09 Feb 2026 16:01:17 +0000 Manifest next update: Tue 10 Feb 2026 16:01:17 +0000 Files and hashes: 1: QGW4LwlvDICFL2rpJRW4EK0DFIc.roa (hash: dEh5JmMpZS30YtylfZQmdL8aaYHuh+kMQSbQLZPHa4Q=) 2: llRz1oVy6iI4vdh1r6cloEBd5IM.crl (hash: 3uziKZSC+d6KWqIxwH/cJ5pjDF/RG96DIxLMMpurjd4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:c1:e1:8b:4b:f7:d1:28:01:b9:d2:bc:1c:77:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=965473d68572ea2238bdd875afa725a0405de483 Validity Not Before: Feb 9 16:01:17 2026 GMT Not After : Feb 10 16:01:17 2026 GMT Subject: CN=908311f1ac1e1092299ebdcd4b6ec131a2aa20ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4e:5e:d6:bb:fe:bb:f9:b9:ba:93:61:e5:63: 9f:5d:a8:33:3e:a0:40:bb:c9:e7:c1:c7:c3:76:e9: 42:51:af:d0:d3:d3:1a:21:f1:52:fe:5a:f0:7e:e0: 80:9f:84:84:e8:99:40:96:0a:9d:97:33:66:cd:91: f3:a5:0f:ad:5a:07:cc:e0:96:27:15:28:82:a0:e3: ca:e3:06:11:00:9b:1f:2d:39:c8:07:74:c8:6c:7e: be:5a:6c:30:b0:0d:94:27:5b:8a:f9:3c:fc:a6:fe: 68:9e:cd:65:99:21:71:0a:6c:68:01:a8:28:b9:c7: 94:92:bc:07:bc:9c:0f:08:71:ca:cc:46:a0:d3:d9: 12:1a:b5:6b:09:b2:91:a9:d9:01:8e:b8:3d:23:25: f1:46:e2:88:3b:63:df:c4:dc:a7:f2:55:6b:16:6d: 46:d4:d9:74:24:9e:d6:0d:3d:9f:e3:72:84:08:b3: 49:7c:51:60:59:45:65:07:6e:2a:68:8d:6a:34:a2: 1c:3a:1e:ec:db:fc:24:69:df:1c:60:5c:92:1a:13: 71:3d:c2:17:c4:fc:3b:2f:2f:02:3e:0b:54:ec:ae: 9f:52:e4:8f:0d:62:6c:5d:b2:6c:30:da:f0:5f:05: a7:8e:c7:83:7c:a5:2e:4e:e4:9e:ca:57:d5:73:d5: b8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:83:11:F1:AC:1E:10:92:29:9E:BD:CD:4B:6E:C1:31:A2:AA:20:CE X509v3 Authority Key Identifier: keyid:96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:85:6f:9c:e9:bf:33:39:ee:00:48:3d:84:c1:00:b3:b4:3d: 9d:43:88:ed:3f:7a:b6:d6:23:aa:96:f1:bb:ae:35:eb:2a:88: 0b:62:9d:ac:8c:1f:37:ed:e3:1f:42:15:a6:7b:72:22:2b:1b: 28:78:0b:b6:0d:7b:12:c8:20:1e:6b:8f:ff:b9:50:a0:ec:5a: f2:13:0c:8f:be:fb:5e:be:6d:94:a1:aa:09:53:b9:d4:0b:53: 6f:24:7d:33:84:66:e0:b3:e1:c6:fa:48:68:79:3b:c1:d7:7b: 17:03:18:0e:22:fa:6b:ef:25:b2:e5:dd:84:db:02:ee:32:7b: 26:34:57:01:52:43:d7:66:04:a0:79:b5:8c:b0:8f:18:30:6c: 64:89:ae:4e:5a:ab:b8:99:6d:28:34:d3:d5:35:1e:fa:76:55: 9b:8c:7a:7d:4e:9d:c7:d8:fb:6a:d2:96:89:38:c5:ee:08:9a: 10:91:1a:8e:db:f1:bc:69:c2:50:b7:59:55:64:e1:b0:32:6f: 95:67:15:84:f0:a0:20:2c:de:21:95:06:ed:f1:71:99:8d:29: 89:d6:01:07:0d:52:ed:9f:b5:dc:3f:bc:08:74:c4:7d:d5:8a: 80:c1:a9:ed:5e:cc:fb:8b:70:8d:22:be:b8:6f:aa:2f:f4:30: 21:64:1f:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIsHhi0v30SgBudK8HHfkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NTQ3M2Q2ODU3MmVhMjIzOGJkZDg3NWFmYTcyNWEwNDA1 ZGU0ODMwHhcNMjYwMjA5MTYwMTE3WhcNMjYwMjEwMTYwMTE3WjAzMTEwLwYDVQQD Eyg5MDgzMTFmMWFjMWUxMDkyMjk5ZWJkY2Q0YjZlYzEzMWEyYWEyMGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE5e1rv+u/m5upNh5WOfXagzPqBA u8nnwcfDdulCUa/Q09MaIfFS/lrwfuCAn4SE6JlAlgqdlzNmzZHzpQ+tWgfM4JYn FSiCoOPK4wYRAJsfLTnIB3TIbH6+WmwwsA2UJ1uK+Tz8pv5ons1lmSFxCmxoAago uceUkrwHvJwPCHHKzEag09kSGrVrCbKRqdkBjrg9IyXxRuKIO2PfxNyn8lVrFm1G 1Nl0JJ7WDT2f43KECLNJfFFgWUVlB24qaI1qNKIcOh7s2/wkad8cYFySGhNxPcIX xPw7Ly8CPgtU7K6fUuSPDWJsXbJsMNrwXwWnjseDfKUuTuSeylfVc9W4vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCDEfGsHhCSKZ69zUtuwTGiqiDOMB8GA1UdIwQY MBaAFJZUc9aFcuoiOL3Yda+nJaBAXeSDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGxSejFvVnk2aUk0dmRoMXI2Y2xvRUJkNUlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8zZjliMjItYzFlMy00ZGU5LWI2OWMt NDVmODI5YzZkZDExLzEvbGxSejFvVnk2aUk0dmRoMXI2Y2xvRUJkNUlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8zZjliMjItYzFlMy00ZGU5LWI2OWMtNDVmODI5YzZkZDEx LzEvbGxSejFvVnk2aUk0dmRoMXI2Y2xvRUJkNUlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJoVvnOm/ MznuAEg9hMEAs7Q9nUOI7T96ttYjqpbxu6416yqIC2KdrIwfN+3jH0IVpntyIisb KHgLtg17EsggHmuP/7lQoOxa8hMMj777Xr5tlKGqCVO51AtTbyR9M4Rm4LPhxvpI aHk7wdd7FwMYDiL6a+8lsuXdhNsC7jJ7JjRXAVJD12YEoHm1jLCPGDBsZImuTlqr uJltKDTT1TUe+nZVm4x6fU6dx9j7atKWiTjF7giaEJEajtvxvGnCULdZVWThsDJv lWcVhPCgICzeIZUG7fFxmY0pidYBBw1S7Z+13D+8CHTEfdWKgMGp7V7M+4twjSK+ uG+qL/QwIWQfQw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:44:53 2026 by rpki-client