This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft File: LdOuI8tG7pwhlQ78tg3voJS6VUg.mft (raw, json) Hash identifier: 2Pl9iBKGdX5+xodNuPB9eB2yyChaNaCB4qhylTaGBpw= Subject key identifier: B4:BE:D2:0B:E4:4F:C9:1D:A4:41:F3:33:05:E6:F2:B6:ED:18:C0:9B Authority key identifier: 2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48 Certificate issuer: /CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548 Certificate serial: 019C42EB83F3C85D9C341C8F98EA6036A9CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 15:00:56 +0000 Manifest this update: Mon 09 Feb 2026 15:00:56 +0000 Manifest next update: Tue 10 Feb 2026 15:00:56 +0000 Files and hashes: 1: 1-ABSTKH1wT-DANifzoEt3vYq-W0.roa (hash: oFzRFkLTXJ5mQQTzZqb5dFPrqzG+W5jr/q9L6K3O9sM=) 2: LdOuI8tG7pwhlQ78tg3voJS6VUg.crl (hash: RoZDpoyHQhCLqVORuGuzqPR5F+OdxHOr1ZqY1f264xg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:83:f3:c8:5d:9c:34:1c:8f:98:ea:60:36:a9:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548 Validity Not Before: Feb 9 15:00:56 2026 GMT Not After : Feb 10 15:00:56 2026 GMT Subject: CN=b4bed20be44fc91da441f33305e6f2b6ed18c09b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a1:11:43:72:33:fc:4e:3f:a7:2e:21:0a:45: 3c:c3:92:0d:48:9e:45:ae:09:13:a5:bd:4c:36:f8: 51:c9:fa:81:7d:dc:77:64:0c:93:65:df:db:e9:d8: e3:bd:c6:fc:64:ed:7b:e8:f6:2e:59:67:fb:fa:f3: f4:7d:da:81:aa:76:bc:3d:68:11:2e:4a:29:57:2a: 99:18:d3:ca:d7:b1:76:72:35:00:0f:5f:fb:18:d9: fa:8f:56:46:54:63:3b:a1:8e:6d:17:6b:e0:7d:9a: ff:fc:e6:66:f4:b2:39:3a:a0:85:c4:c6:98:ee:fa: 03:36:16:e1:74:43:55:6a:63:eb:1b:7b:af:1f:e4: ad:9e:42:af:2c:c8:2c:93:a5:7f:5b:6f:a0:71:0f: 18:91:b9:c6:f2:46:c9:67:5a:4e:83:07:79:c5:49: cd:af:b0:3d:89:bf:85:1f:f3:f5:1d:54:bb:99:65: 6b:3a:a6:0c:31:93:33:36:ed:a1:a8:82:e2:e0:9e: a4:e1:6e:36:bd:6f:68:81:f0:0f:63:21:d5:1d:47: ce:ab:41:79:c6:0a:bb:11:78:e2:0a:f7:48:24:37: 3c:66:e3:17:2f:8d:a9:ea:c3:13:71:51:bf:69:87: 45:de:f1:c8:8e:eb:10:ef:8f:75:de:75:fd:6d:fa: ac:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:BE:D2:0B:E4:4F:C9:1D:A4:41:F3:33:05:E6:F2:B6:ED:18:C0:9B X509v3 Authority Key Identifier: keyid:2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9c:fb:20:d4:0c:1b:ee:51:a1:44:6e:0d:c9:26:06:67:55: 0b:f6:c5:cc:73:b8:c7:a5:03:77:d2:54:47:4e:83:8d:cb:65: be:9f:b0:60:b5:0e:a5:df:52:dc:7b:16:cc:1a:cc:ae:fe:82: 7e:fd:fa:75:27:eb:74:74:74:b8:cf:09:fe:18:6a:7b:0c:60: f0:ae:54:31:84:dc:e2:20:f2:3a:68:22:05:e3:65:71:40:0a: 61:01:32:d8:22:44:bf:ab:fe:54:c7:eb:3c:3c:fd:83:13:7e: 3e:48:f6:06:a8:d2:18:09:94:a9:f1:6a:83:38:2e:25:6f:4c: 04:61:2d:13:0a:b6:43:26:d0:06:28:b6:d2:6c:7b:af:8f:53: 71:27:f8:7e:bd:59:68:21:d6:81:d3:7a:49:9d:55:0b:4e:47: ed:27:80:91:70:9f:96:07:3b:38:51:21:c2:12:25:68:3c:68: 7f:04:3e:ca:51:09:c9:3e:0e:28:fc:58:47:a6:7a:ba:f1:84: dd:c9:d5:ac:ff:b6:38:81:f0:46:55:d5:e7:53:1d:e5:fa:44: 15:22:ef:6d:4c:4c:de:b8:8f:63:a2:a0:05:63:1c:47:81:25: 70:fa:ff:11:19:a4:f6:3f:9b:c9:30:4d:a7:b2:26:86:74:61: a8:23:c6:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC64PzyF2cNByPmOpgNqnOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZDNhZTIzY2I0NmVlOWMyMTk1MGVmY2I2MGRlZmEwOTRi YTU1NDgwHhcNMjYwMjA5MTUwMDU2WhcNMjYwMjEwMTUwMDU2WjAzMTEwLwYDVQQD EyhiNGJlZDIwYmU0NGZjOTFkYTQ0MWYzMzMwNWU2ZjJiNmVkMThjMDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqERQ3Iz/E4/py4hCkU8w5INSJ5F rgkTpb1MNvhRyfqBfdx3ZAyTZd/b6djjvcb8ZO176PYuWWf7+vP0fdqBqna8PWgR LkopVyqZGNPK17F2cjUAD1/7GNn6j1ZGVGM7oY5tF2vgfZr//OZm9LI5OqCFxMaY 7voDNhbhdENVamPrG3uvH+StnkKvLMgsk6V/W2+gcQ8YkbnG8kbJZ1pOgwd5xUnN r7A9ib+FH/P1HVS7mWVrOqYMMZMzNu2hqILi4J6k4W42vW9ogfAPYyHVHUfOq0F5 xgq7EXjiCvdIJDc8ZuMXL42p6sMTcVG/aYdF3vHIjusQ74913nX9bfqs/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLS+0gvkT8kdpEHzMwXm8rbtGMCbMB8GA1UdIwQY MBaAFC3TriPLRu6cIZUO/LYN76CUulVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGRPdUk4dEc3cHdobFE3OHRnM3ZvSlM2VlVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMTlkNjEtNTYwYS00NGZkLWFhMjUt NDk2NzFhY2RmNDg2LzEvTGRPdUk4dEc3cHdobFE3OHRnM3ZvSlM2VlVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8zMTlkNjEtNTYwYS00NGZkLWFhMjUtNDk2NzFhY2RmNDg2 LzEvTGRPdUk4dEc3cHdobFE3OHRnM3ZvSlM2VlVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXpz7INQM G+5RoURuDckmBmdVC/bFzHO4x6UDd9JUR06Djctlvp+wYLUOpd9S3HsWzBrMrv6C fv36dSfrdHR0uM8J/hhqewxg8K5UMYTc4iDyOmgiBeNlcUAKYQEy2CJEv6v+VMfr PDz9gxN+Pkj2BqjSGAmUqfFqgzguJW9MBGEtEwq2QybQBii20mx7r49TcSf4fr1Z aCHWgdN6SZ1VC05H7SeAkXCflgc7OFEhwhIlaDxofwQ+ylEJyT4OKPxYR6Z6uvGE 3cnVrP+2OIHwRlXV51Md5fpEFSLvbUxM3riPY6KgBWMcR4ElcPr/ERmk9j+byTBN p7ImhnRhqCPG7A== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:59 2026 by rpki-client