This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft File: lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft (raw, json) Hash identifier: xlVPf1JpNc73slUyav34aK3+wGOC08eOjtUtIy3r/s4= Subject key identifier: 18:87:0B:19:58:3C:E8:8B:D8:9B:50:22:87:B8:83:26:E9:6D:7A:5F Authority key identifier: 94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9 Certificate issuer: /CN=94472e859957355da5ddd13496d70d70773491f9 Certificate serial: 019C41A229AB9416AFD51E9EEAC8C36A22F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft Manifest number: 1132 Signing time: Mon 09 Feb 2026 09:01:12 +0000 Manifest this update: Mon 09 Feb 2026 09:01:12 +0000 Manifest next update: Tue 10 Feb 2026 09:01:12 +0000 Files and hashes: 1: lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl (hash: n3urO8GFSepCDcOBftsHRx0K2x2oQ1IyXcH+zNdxaVA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:29:ab:94:16:af:d5:1e:9e:ea:c8:c3:6a:22:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94472e859957355da5ddd13496d70d70773491f9 Validity Not Before: Feb 9 09:01:12 2026 GMT Not After : Feb 10 09:01:12 2026 GMT Subject: CN=18870b19583ce88bd89b502287b88326e96d7a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5b:f6:1e:1d:16:ef:5b:31:8b:8c:91:c3:03: 8c:2c:16:fa:4a:d9:4b:68:67:36:fd:b3:79:d0:2c: f4:8b:e5:a1:89:16:80:6d:c4:1e:c2:9f:09:23:3e: 5a:17:e7:0f:ce:48:fe:1b:61:be:df:f8:f5:95:2f: e6:d6:17:da:db:78:29:2f:a3:e1:c0:04:4d:81:25: 5f:6f:74:fd:6e:2d:ab:3a:cf:77:0a:5b:ff:ce:58: 04:d3:57:08:08:a6:aa:52:1c:c8:bf:4c:60:94:3a: ff:9b:57:c8:d1:5f:57:a2:83:8a:cc:c0:cc:9a:c2: b3:98:a4:e6:b5:66:de:09:ac:85:f5:2a:4a:5a:a0: c3:57:94:80:23:14:22:62:f4:19:3f:10:25:11:03: 77:81:7f:86:b0:ad:5b:5c:21:42:b3:22:81:10:74: da:fd:f3:6b:07:f5:6b:c1:de:ab:90:8b:92:45:8c: d4:ea:83:bb:82:fb:57:76:95:b0:5e:25:78:fe:e5: b0:94:ce:bb:f0:c0:51:12:d1:ef:dc:59:a3:9c:f5: 02:55:f3:67:60:d4:e5:1d:39:76:cc:60:37:87:6d: 27:ae:65:2e:68:a1:79:60:a2:b0:93:d5:a1:e5:0e: 28:9c:83:0c:e2:15:11:ad:41:5b:08:1f:c6:32:41: 8c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:87:0B:19:58:3C:E8:8B:D8:9B:50:22:87:B8:83:26:E9:6D:7A:5F X509v3 Authority Key Identifier: keyid:94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:86:5b:39:35:dd:5a:c1:20:4b:4c:4b:95:54:33:bf:f1:7f: 3f:29:79:c1:97:ae:ff:f7:11:9f:3d:b6:09:3c:92:5e:c6:59: 0f:16:f5:1f:d7:ce:d7:42:23:04:fe:f3:e0:cc:cc:35:35:e6: d1:6c:13:85:74:a9:31:89:2b:60:2c:fd:f6:bb:9a:9f:a4:18: 7a:0d:da:59:a8:b7:8f:cb:cf:73:28:e9:04:45:51:08:f2:ce: fc:9d:e6:98:be:71:63:5a:04:27:ea:56:5c:dc:d1:d2:38:2b: 90:02:aa:74:54:6d:ae:fa:cd:41:e6:9f:f9:d1:f3:e6:1b:bf: 50:89:6f:e2:e4:90:26:48:3f:58:39:d9:f4:7b:f5:06:e0:33: 90:36:0d:7e:e8:91:cd:e0:2b:0c:05:b0:b1:c0:a5:93:0d:91: 86:c5:13:15:39:0c:d2:29:39:a4:75:39:f3:cb:58:3a:c0:37: 69:fc:9a:a7:63:e3:91:53:a3:ad:0b:5e:9f:3a:32:64:5c:c0: 94:83:71:f6:ca:84:bc:61:40:13:22:d5:e7:5b:36:33:0e:d8: 5c:61:b6:b3:4e:a4:9e:55:71:f9:84:1c:a3:0b:d6:11:e7:00: 73:1d:29:6b:a8:12:f4:33:49:9f:70:51:be:00:6a:5a:d9:80: 6b:f6:47:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoimrlBav1R6e6sjDaiL2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NDcyZTg1OTk1NzM1NWRhNWRkZDEzNDk2ZDcwZDcwNzcz NDkxZjkwHhcNMjYwMjA5MDkwMTEyWhcNMjYwMjEwMDkwMTEyWjAzMTEwLwYDVQQD EygxODg3MGIxOTU4M2NlODhiZDg5YjUwMjI4N2I4ODMyNmU5NmQ3YTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1v2Hh0W71sxi4yRwwOMLBb6StlL aGc2/bN50Cz0i+WhiRaAbcQewp8JIz5aF+cPzkj+G2G+3/j1lS/m1hfa23gpL6Ph wARNgSVfb3T9bi2rOs93Clv/zlgE01cICKaqUhzIv0xglDr/m1fI0V9XooOKzMDM msKzmKTmtWbeCayF9SpKWqDDV5SAIxQiYvQZPxAlEQN3gX+GsK1bXCFCsyKBEHTa /fNrB/Vrwd6rkIuSRYzU6oO7gvtXdpWwXiV4/uWwlM678MBREtHv3FmjnPUCVfNn YNTlHTl2zGA3h20nrmUuaKF5YKKwk9Wh5Q4onIMM4hURrUFbCB/GMkGMxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBiHCxlYPOiL2JtQIoe4gybpbXpfMB8GA1UdIwQY MBaAFJRHLoWZVzVdpd3RNJbXDXB3NJH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEVjdWhabFhOVjJsM2RFMGx0Y05jSGMwa2ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kNmMxOGEtNTVlZi00MTE4LTk3MGMt NjBkMWVkODBjN2NmLzEvbEVjdWhabFhOVjJsM2RFMGx0Y05jSGMwa2ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9kNmMxOGEtNTVlZi00MTE4LTk3MGMtNjBkMWVkODBjN2Nm LzEvbEVjdWhabFhOVjJsM2RFMGx0Y05jSGMwa2ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADoZbOTXd WsEgS0xLlVQzv/F/Pyl5wZeu//cRnz22CTySXsZZDxb1H9fO10IjBP7z4MzMNTXm 0WwThXSpMYkrYCz99ruan6QYeg3aWai3j8vPcyjpBEVRCPLO/J3mmL5xY1oEJ+pW XNzR0jgrkAKqdFRtrvrNQeaf+dHz5hu/UIlv4uSQJkg/WDnZ9Hv1BuAzkDYNfuiR zeArDAWwscClkw2RhsUTFTkM0ik5pHU588tYOsA3afyap2PjkVOjrQtenzoyZFzA lINx9sqEvGFAEyLV51s2Mw7YXGG2s06knlVx+YQcowvWEecAcx0pa6gS9DNJn3BR vgBqWtmAa/ZHHg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:30 2026 by rpki-client