This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft File: lo-QT-7x95FiuCGaikg7hY9UC_o.mft (raw, json) Hash identifier: pNpZzzIYJRU2GGS1AKoFvthQOdPtreBRShqhelWn3is= Subject key identifier: B0:20:A5:57:CA:22:87:90:1C:1C:AA:CA:C8:90:BC:6E:B0:96:38:AE Authority key identifier: 96:8F:90:4F:EE:F1:F7:91:62:B8:21:9A:8A:48:3B:85:8F:54:0B:FA Certificate issuer: /CN=968f904feef1f79162b8219a8a483b858f540bfa Certificate serial: 019C4322DC18F0AEDD096A6D0D17F6459DDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 16:01:23 +0000 Manifest this update: Mon 09 Feb 2026 16:01:23 +0000 Manifest next update: Tue 10 Feb 2026 16:01:23 +0000 Files and hashes: 1: lo-QT-7x95FiuCGaikg7hY9UC_o.crl (hash: c+ArzuQMz0h3EMLYoSPwqBNjZIIoH/GBCudgV3rwND0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:dc:18:f0:ae:dd:09:6a:6d:0d:17:f6:45:9d:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968f904feef1f79162b8219a8a483b858f540bfa Validity Not Before: Feb 9 16:01:23 2026 GMT Not After : Feb 10 16:01:23 2026 GMT Subject: CN=b020a557ca2287901c1caacac890bc6eb09638ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:32:82:b5:12:b9:9d:65:2f:fb:58:ba:0f:1b: 0f:47:ae:e6:5f:63:eb:77:ec:51:5f:9c:94:12:b6: d4:32:24:db:2d:9f:8e:0f:e0:50:03:9f:3a:d5:79: a2:78:27:22:bb:87:bb:ee:ad:ac:93:bf:a2:a7:dd: 20:84:94:a3:82:d2:45:4d:0a:49:d4:58:a4:71:db: b8:aa:a5:18:e5:37:aa:13:9a:5d:b6:08:f0:ac:bd: 76:6d:d5:65:08:68:a1:d4:bc:ff:ce:24:ff:87:31: 4f:39:26:a7:c0:53:68:2e:28:6e:78:35:14:6d:c4: 02:0d:80:96:ce:d6:3f:1a:e8:6b:56:2e:35:2e:f8: 95:36:92:30:06:a3:fc:f8:0c:12:64:22:d9:25:f1: 29:b0:45:e1:a3:8a:2b:e6:83:00:a0:df:9d:21:b7: 8b:97:9c:af:74:9c:6a:69:ad:dd:90:6b:d6:21:80: 22:1f:91:f4:08:03:f1:93:71:88:04:af:3c:5b:4c: 79:61:9b:db:38:fa:0a:5d:ce:98:e4:a7:7e:57:a4: 10:87:6e:37:cd:bf:26:68:69:4a:ce:38:dc:27:06: 02:e4:1c:90:06:c4:cd:cf:81:9f:2f:49:79:d1:8d: ab:16:05:06:b8:f8:53:d4:38:02:bd:cf:dd:1b:ec: 16:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:20:A5:57:CA:22:87:90:1C:1C:AA:CA:C8:90:BC:6E:B0:96:38:AE X509v3 Authority Key Identifier: keyid:96:8F:90:4F:EE:F1:F7:91:62:B8:21:9A:8A:48:3B:85:8F:54:0B:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:06:ee:e1:04:bf:d5:65:56:6d:ae:2d:df:c4:b4:a2:ea:f9: 4a:79:61:a4:08:a9:b4:7d:58:dc:8f:be:d9:de:06:08:3d:b8: b1:3b:35:bd:67:6d:c8:a2:04:fc:44:83:6b:3c:6c:ea:d0:c2: 8c:f0:e3:18:cc:14:b1:7f:f0:d3:42:f6:b0:00:78:dd:4a:22: 4c:53:da:5d:fc:7b:1f:03:3d:e6:3c:ca:0b:af:77:0f:a2:bb: 98:7f:2b:05:2e:21:1a:cc:a7:12:2a:fd:fa:3b:4b:d7:20:bb: bf:8e:78:1c:f3:79:82:70:06:e9:88:9b:6c:3f:c3:86:ae:e4: 5f:ed:d8:5f:f6:9d:a5:5f:62:39:0a:01:4d:4a:fd:5a:6c:b2: 7e:4c:00:d3:47:37:37:87:a5:d2:47:8f:0e:09:a2:35:04:8e: 2a:c2:d7:64:9c:f8:f7:34:04:88:72:77:df:1e:a6:80:8d:a6: 10:c6:22:ae:fa:89:14:d6:77:f6:ae:08:68:54:62:83:73:96: c4:be:52:e1:83:64:24:b0:11:11:dd:b7:50:a2:25:6c:90:6f: eb:48:5a:23:7b:df:0d:9d:90:d8:74:e3:2e:6b:93:a9:7c:cd: f6:1e:4e:30:32:70:2d:73:28:b0:73:73:a6:bf:ee:48:90:b3: 58:8e:e5:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDItwY8K7dCWptDRf2RZ3fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2OGY5MDRmZWVmMWY3OTE2MmI4MjE5YThhNDgzYjg1OGY1 NDBiZmEwHhcNMjYwMjA5MTYwMTIzWhcNMjYwMjEwMTYwMTIzWjAzMTEwLwYDVQQD EyhiMDIwYTU1N2NhMjI4NzkwMWMxY2FhY2FjODkwYmM2ZWIwOTYzOGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTKCtRK5nWUv+1i6DxsPR67mX2Pr d+xRX5yUErbUMiTbLZ+OD+BQA5861XmieCciu4e77q2sk7+ip90ghJSjgtJFTQpJ 1Fikcdu4qqUY5TeqE5pdtgjwrL12bdVlCGih1Lz/ziT/hzFPOSanwFNoLihueDUU bcQCDYCWztY/GuhrVi41LviVNpIwBqP8+AwSZCLZJfEpsEXho4or5oMAoN+dIbeL l5yvdJxqaa3dkGvWIYAiH5H0CAPxk3GIBK88W0x5YZvbOPoKXc6Y5Kd+V6QQh243 zb8maGlKzjjcJwYC5ByQBsTNz4GfL0l50Y2rFgUGuPhT1DgCvc/dG+wW0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAgpVfKIoeQHByqysiQvG6wljiuMB8GA1UdIwQY MBaAFJaPkE/u8feRYrghmopIO4WPVAv6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG8tUVQtN3g5NUZpdUNHYWlrZzdoWTlVQ19vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kZGRmM2QtZTg4Ny00MjczLWJiN2It NjgxZmEwZDk5ODIxLzEvbG8tUVQtN3g5NUZpdUNHYWlrZzdoWTlVQ19vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kZGRmM2QtZTg4Ny00MjczLWJiN2ItNjgxZmEwZDk5ODIx LzEvbG8tUVQtN3g5NUZpdUNHYWlrZzdoWTlVQ19vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQbu4QS/ 1WVWba4t38S0our5SnlhpAiptH1Y3I++2d4GCD24sTs1vWdtyKIE/ESDazxs6tDC jPDjGMwUsX/w00L2sAB43UoiTFPaXfx7HwM95jzKC693D6K7mH8rBS4hGsynEir9 +jtL1yC7v454HPN5gnAG6YibbD/Dhq7kX+3YX/adpV9iOQoBTUr9WmyyfkwA00c3 N4el0kePDgmiNQSOKsLXZJz49zQEiHJ33x6mgI2mEMYirvqJFNZ39q4IaFRig3OW xL5S4YNkJLAREd23UKIlbJBv60haI3vfDZ2Q2HTjLmuTqXzN9h5OMDJwLXMosHNz pr/uSJCzWI7l6w== -----END CERTIFICATE-----Generated at Tue Feb 10 01:48:36 2026 by rpki-client