This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft File: LkFFfaHqbHmxtr6lLGSnobXylkg.mft (raw, json) Hash identifier: e09gOeQADjESEPG4a/NGwhR7adRJ9D8Kyym58SAPTYM= Subject key identifier: 83:DB:BC:B0:15:6E:0D:2F:28:DF:97:8C:B9:27:75:D7:5A:17:4A:DD Authority key identifier: 2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48 Certificate issuer: /CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648 Certificate serial: 019C42B4080A67A14218F62E62E3E2335DB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 14:00:20 +0000 Manifest this update: Mon 09 Feb 2026 14:00:20 +0000 Manifest next update: Tue 10 Feb 2026 14:00:20 +0000 Files and hashes: 1: 41BadyilkbxexUsN9_QCLE-lN9U.roa (hash: mKipKbsOuZUI5PBjgwAvlkxPu0eVLjnhl1jdP6GuFz8=) 2: LkFFfaHqbHmxtr6lLGSnobXylkg.crl (hash: lItKsVDCaR1aB9lwEGgl22kXU8ZxVrPdD8SLhYNJvVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:08:0a:67:a1:42:18:f6:2e:62:e3:e2:33:5d:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648 Validity Not Before: Feb 9 14:00:20 2026 GMT Not After : Feb 10 14:00:20 2026 GMT Subject: CN=83dbbcb0156e0d2f28df978cb92775d75a174add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cb:4f:f1:fa:96:c0:a9:74:08:79:82:0b:28: 6e:8c:4b:50:dd:5a:d5:91:f5:c9:91:fe:83:9e:26: 81:d7:80:83:3c:f0:14:7d:7f:00:4d:2f:35:9d:74: 11:27:ae:3e:e5:0d:9f:92:93:3f:33:a4:b8:cc:7e: 81:e9:04:3c:81:ca:f0:bb:64:3e:49:ec:72:f5:38: 09:0c:df:ae:0e:ce:e6:cc:70:84:80:6f:a5:ad:7d: fc:2f:1f:19:d5:ed:b0:f0:04:53:72:4d:39:85:c5: a7:27:f7:34:da:e1:35:72:b3:42:00:26:cb:70:95: cb:43:62:a9:74:84:e9:b4:51:e0:61:ed:33:53:99: 91:87:23:69:40:96:98:df:cf:db:48:e4:f9:03:18: 16:32:3b:4b:10:e1:5a:cf:2a:0d:bd:be:7a:ad:95: 1b:ce:f9:9d:dc:83:e5:d4:54:0a:ba:0b:ce:31:b3: 90:15:e4:f5:6b:10:83:b9:49:7c:71:09:f9:87:cf: 79:63:5c:1a:20:fc:69:8d:40:6e:d5:b4:0b:c8:0b: e0:96:74:27:63:d3:c7:8b:61:cd:93:9c:37:31:a7: 64:81:a4:56:60:f7:a4:f4:db:e7:8d:a4:aa:f9:48: 59:0b:d7:66:fd:f4:36:ee:23:06:d6:0e:47:43:2f: d9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DB:BC:B0:15:6E:0D:2F:28:DF:97:8C:B9:27:75:D7:5A:17:4A:DD X509v3 Authority Key Identifier: keyid:2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:82:d4:1e:3d:68:6a:7b:ef:30:fa:2d:7b:3c:51:d0:a4:e4: 8d:e3:ee:40:f0:52:a9:8e:40:fc:d6:5a:bf:7f:44:a4:0a:2a: d3:9a:12:78:51:be:cf:0c:ea:bd:5e:6e:69:1b:00:df:d4:12: e8:ba:b7:cf:09:de:f8:30:93:86:87:89:c7:f3:27:a6:77:0d: ad:cb:ad:1f:b7:02:1b:30:8c:57:53:11:aa:04:07:11:5d:99: 0c:02:a1:a8:22:7a:55:3d:15:6b:05:3b:7a:69:6f:2e:ac:42: 45:4d:fd:3c:bb:f8:ee:5f:9e:5b:7c:c8:fc:25:b4:0f:18:2c: 93:3d:e8:cf:8e:03:d7:99:04:55:5e:37:cd:ff:98:bb:9d:23: ef:42:e2:2a:06:5d:6e:a8:c3:c2:dc:81:bd:90:6e:7e:8a:6c: 56:9d:70:95:c2:60:84:e1:02:ff:6c:e5:85:ff:27:f1:45:00: 7d:16:39:ef:27:94:f2:3b:c1:20:b4:bb:0e:4c:04:67:74:35: 01:73:a9:87:cb:df:8f:5b:43:fa:fc:b6:86:13:6f:04:05:d9: 61:85:7b:be:b9:1d:1b:64:c9:86:3c:81:54:d0:29:34:7e:c8: 86:a7:81:dd:57:7d:35:6a:80:47:23:71:8a:d2:89:ea:e2:71: b7:df:d6:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtAgKZ6FCGPYuYuPiM125MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNDE0NTdkYTFlYTZjNzliMWI2YmVhNTJjNjRhN2ExYjVm Mjk2NDgwHhcNMjYwMjA5MTQwMDIwWhcNMjYwMjEwMTQwMDIwWjAzMTEwLwYDVQQD Eyg4M2RiYmNiMDE1NmUwZDJmMjhkZjk3OGNiOTI3NzVkNzVhMTc0YWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqctP8fqWwKl0CHmCCyhujEtQ3VrV kfXJkf6DniaB14CDPPAUfX8ATS81nXQRJ64+5Q2fkpM/M6S4zH6B6QQ8gcrwu2Q+ Sexy9TgJDN+uDs7mzHCEgG+lrX38Lx8Z1e2w8ARTck05hcWnJ/c02uE1crNCACbL cJXLQ2KpdITptFHgYe0zU5mRhyNpQJaY38/bSOT5AxgWMjtLEOFazyoNvb56rZUb zvmd3IPl1FQKugvOMbOQFeT1axCDuUl8cQn5h895Y1waIPxpjUBu1bQLyAvglnQn Y9PHi2HNk5w3MadkgaRWYPek9NvnjaSq+UhZC9dm/fQ27iMG1g5HQy/ZoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIPbvLAVbg0vKN+XjLkndddaF0rdMB8GA1UdIwQY MBaAFC5BRX2h6mx5sba+pSxkp6G18pZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGtGRmZhSHFiSG14dHI2bExHU25vYlh5bGtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84ZmFkOGItYTAzMy00NDg0LTg4NWUt ZTAyODcyZDFkYjAxLzEvTGtGRmZhSHFiSG14dHI2bExHU25vYlh5bGtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84ZmFkOGItYTAzMy00NDg0LTg4NWUtZTAyODcyZDFkYjAx LzEvTGtGRmZhSHFiSG14dHI2bExHU25vYlh5bGtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALILUHj1o anvvMPotezxR0KTkjePuQPBSqY5A/NZav39EpAoq05oSeFG+zwzqvV5uaRsA39QS 6Lq3zwne+DCThoeJx/MnpncNrcutH7cCGzCMV1MRqgQHEV2ZDAKhqCJ6VT0VawU7 emlvLqxCRU39PLv47l+eW3zI/CW0Dxgskz3oz44D15kEVV43zf+Yu50j70LiKgZd bqjDwtyBvZBufopsVp1wlcJghOEC/2zlhf8n8UUAfRY57yeU8jvBILS7DkwEZ3Q1 AXOph8vfj1tD+vy2hhNvBAXZYYV7vrkdG2TJhjyBVNApNH7IhqeB3Vd9NWqARyNx itKJ6uJxt9/W6w== -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:47 2026 by rpki-client