This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft File: LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft (raw, json) Hash identifier: kT1MF1QQLcDQTc9yK+Oa5Ec9KN4JJCRMQ7OqrwjzuKI= Subject key identifier: 11:26:4F:9A:E0:C2:B3:D4:12:91:49:DE:B4:63:CA:DB:3E:3F:22:73 Authority key identifier: 2E:31:63:12:AD:2B:21:AA:9A:04:81:1F:62:AD:03:6B:F6:88:85:D9 Certificate issuer: /CN=2e316312ad2b21aa9a04811f62ad036bf68885d9 Certificate serial: 019C4322597E4455E4FF5689C23CBEF0EE2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft Manifest number: 0C89 Signing time: Mon 09 Feb 2026 16:00:50 +0000 Manifest this update: Mon 09 Feb 2026 16:00:50 +0000 Manifest next update: Tue 10 Feb 2026 16:00:50 +0000 Files and hashes: 1: LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl (hash: 8ZknTDSKaU6ueIts6QiKLN1kQGbo9E5Ph9Q035XmjNY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:59:7e:44:55:e4:ff:56:89:c2:3c:be:f0:ee:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e316312ad2b21aa9a04811f62ad036bf68885d9 Validity Not Before: Feb 9 16:00:50 2026 GMT Not After : Feb 10 16:00:50 2026 GMT Subject: CN=11264f9ae0c2b3d4129149deb463cadb3e3f2273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f3:95:e7:83:d4:7e:7b:df:6b:2b:11:de:c8: 7c:62:23:e0:41:28:a6:a6:25:99:64:b8:1f:58:08: 13:96:11:37:2b:b4:51:76:26:73:27:a0:6e:23:fb: d8:db:52:b3:b5:09:3a:18:1a:bd:01:bb:a6:50:3a: 89:cd:f2:49:b5:23:17:f2:5c:32:04:25:73:54:99: 83:42:7c:3f:50:81:a3:ab:b2:6f:3c:bd:7b:6c:0e: 38:c5:a1:d7:d4:08:0f:0c:a5:3c:c0:1a:d0:1b:a9: d3:cd:b0:24:ac:24:47:06:8e:f3:52:07:66:c5:24: 2e:65:2c:08:78:a0:30:c9:fe:67:a0:51:d0:cf:84: b6:bf:c3:e2:df:57:02:fb:85:04:e2:51:df:b5:73: a3:04:e0:b2:56:c5:a2:19:f9:c0:59:22:73:27:e9: 03:1e:4d:eb:d3:d7:2e:4f:64:e3:35:11:6d:ac:03: fa:3c:2f:ba:a6:e5:f1:b4:c2:c0:39:f1:5f:21:c3: a4:6b:ad:eb:43:e9:a2:7e:dc:6c:aa:68:5c:df:8d: ba:c4:ed:8b:21:ed:b7:e4:6a:a6:af:38:27:29:41: 31:bb:33:b6:a3:ba:d3:31:b0:79:09:6d:8e:34:a6: c5:8a:51:56:53:82:71:97:be:86:60:12:df:d3:65: 02:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:26:4F:9A:E0:C2:B3:D4:12:91:49:DE:B4:63:CA:DB:3E:3F:22:73 X509v3 Authority Key Identifier: keyid:2E:31:63:12:AD:2B:21:AA:9A:04:81:1F:62:AD:03:6B:F6:88:85:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:2d:2a:53:de:97:00:83:f2:b3:59:6f:cf:d5:88:cb:ca:40: 2c:7b:a3:fd:01:8a:2b:52:67:59:57:b3:b5:ab:a2:78:2b:ac: bb:b4:d0:0b:93:fe:8c:95:7e:28:b3:04:d1:e3:4a:6d:29:5a: bb:35:57:fc:1b:1e:17:bb:7f:66:0f:20:a9:42:9d:6d:5e:02: 72:03:09:55:10:4d:f4:b5:dd:48:e4:f1:83:6c:55:b7:9d:5c: bb:12:b6:f6:3b:43:b9:4f:07:ae:0d:52:a9:61:b7:8b:b6:d9: 92:62:8c:12:bc:cb:5f:7f:17:3a:01:92:81:22:78:3b:33:f0: 7b:21:01:12:2c:7b:5f:9e:26:13:42:f4:88:b1:8e:0a:cc:48: 13:7d:79:88:fe:28:c8:79:dd:04:d3:1c:75:12:d5:12:10:ce: 8c:56:d4:8d:11:1d:07:98:4d:a8:b3:60:71:ce:17:d4:31:1a: f9:38:44:cd:9f:09:a5:45:fd:88:76:7b:89:5c:e2:51:f9:6f: 9d:a6:f2:dd:44:33:38:41:9b:5a:c1:eb:9c:2f:37:b5:8d:c7: 65:71:6a:ea:d0:90:2e:41:a9:a1:ee:96:dd:c2:fd:80:ee:69: 26:a1:f4:32:57:9b:96:54:cb:9f:e7:2f:1b:a0:bf:93:99:6b: 86:d0:0d:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIll+RFXk/1aJwjy+8O4uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMzE2MzEyYWQyYjIxYWE5YTA0ODExZjYyYWQwMzZiZjY4 ODg1ZDkwHhcNMjYwMjA5MTYwMDUwWhcNMjYwMjEwMTYwMDUwWjAzMTEwLwYDVQQD EygxMTI2NGY5YWUwYzJiM2Q0MTI5MTQ5ZGViNDYzY2FkYjNlM2YyMjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfOV54PUfnvfaysR3sh8YiPgQSim piWZZLgfWAgTlhE3K7RRdiZzJ6BuI/vY21KztQk6GBq9AbumUDqJzfJJtSMX8lwy BCVzVJmDQnw/UIGjq7JvPL17bA44xaHX1AgPDKU8wBrQG6nTzbAkrCRHBo7zUgdm xSQuZSwIeKAwyf5noFHQz4S2v8Pi31cC+4UE4lHftXOjBOCyVsWiGfnAWSJzJ+kD Hk3r09cuT2TjNRFtrAP6PC+6puXxtMLAOfFfIcOka63rQ+miftxsqmhc3426xO2L Ie235GqmrzgnKUExuzO2o7rTMbB5CW2ONKbFilFWU4Jxl76GYBLf02UCYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEmT5rgwrPUEpFJ3rRjyts+PyJzMB8GA1UdIwQY MBaAFC4xYxKtKyGqmgSBH2KtA2v2iIXZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGpGakVxMHJJYXFhQklFZllxMERhX2FJaGRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC83YjlkMmMtN2Q0OS00YTE5LWE1NWQt M2I0NzY2NmQxMzY1LzEvTGpGakVxMHJJYXFhQklFZllxMERhX2FJaGRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC83YjlkMmMtN2Q0OS00YTE5LWE1NWQtM2I0NzY2NmQxMzY1 LzEvTGpGakVxMHJJYXFhQklFZllxMERhX2FJaGRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdi0qU96X AIPys1lvz9WIy8pALHuj/QGKK1JnWVeztauieCusu7TQC5P+jJV+KLME0eNKbSla uzVX/BseF7t/Zg8gqUKdbV4CcgMJVRBN9LXdSOTxg2xVt51cuxK29jtDuU8Hrg1S qWG3i7bZkmKMErzLX38XOgGSgSJ4OzPweyEBEix7X54mE0L0iLGOCsxIE315iP4o yHndBNMcdRLVEhDOjFbUjREdB5hNqLNgcc4X1DEa+ThEzZ8JpUX9iHZ7iVziUflv naby3UQzOEGbWsHrnC83tY3HZXFq6tCQLkGpoe6W3cL9gO5pJqH0MlebllTLn+cv G6C/k5lrhtANgQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:58 2026 by rpki-client