This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft File: L9XGHpMiaUuHL10yzB-lwbu6sbY.mft (raw, json) Hash identifier: FV8dZG+cCO5sGPeSXxdTNdqai8iRue3xHc9MCvT4XrU= Subject key identifier: E5:B7:4C:59:F9:0B:06:98:B6:63:AB:AE:5A:B7:C0:73:8B:63:F8:ED Authority key identifier: 2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6 Certificate issuer: /CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6 Certificate serial: 019C420F7859805D06FEEE8159992364CE4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft Manifest number: 0821 Signing time: Mon 09 Feb 2026 11:00:35 +0000 Manifest this update: Mon 09 Feb 2026 11:00:35 +0000 Manifest next update: Tue 10 Feb 2026 11:00:35 +0000 Files and hashes: 1: L9XGHpMiaUuHL10yzB-lwbu6sbY.crl (hash: kj2LT7QPAGNqr3kLD+B2Yp7ogdxr1CWhH0eMhWbZUSY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:78:59:80:5d:06:fe:ee:81:59:99:23:64:ce:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6 Validity Not Before: Feb 9 11:00:35 2026 GMT Not After : Feb 10 11:00:35 2026 GMT Subject: CN=e5b74c59f90b0698b663abae5ab7c0738b63f8ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3b:95:bb:44:ee:98:6d:47:b2:74:75:9d:60: 39:52:b7:12:0a:64:cc:66:9f:4f:da:22:8a:8f:11: 84:15:41:94:fc:e0:00:1c:b7:7a:43:4e:f3:19:8d: 20:86:a1:62:10:90:be:d7:08:e7:ed:08:15:76:be: d1:77:69:56:80:f3:e1:10:c9:ad:a0:26:f9:95:66: b3:6f:48:57:1a:b4:47:ff:86:00:6f:98:c3:99:8e: dc:f2:35:21:1d:98:a5:99:76:3d:ee:a7:f1:d6:91: ce:35:30:53:fa:1f:a8:64:2b:87:c4:bf:8b:fa:04: 46:d2:30:46:15:94:05:49:be:0d:68:b6:d1:91:31: 6f:28:84:9c:77:bc:19:61:25:50:03:28:a5:d1:2f: cd:70:81:fd:6d:35:2d:60:42:68:49:02:8a:90:8f: ed:f0:8b:4c:a4:25:0e:e7:a6:84:9f:e6:2b:6a:94: 21:60:51:04:6b:c2:7c:75:35:3b:78:67:5d:09:4d: eb:3a:14:bd:68:9b:de:72:d8:a4:e1:96:cd:19:06: 2b:0d:7f:a6:c1:98:3a:c5:d3:f1:59:95:7f:69:52: ce:2e:03:89:7e:49:fb:92:51:ea:5d:8f:c4:0f:1a: 14:cc:ee:97:cc:19:1c:9a:59:8a:35:c2:40:38:61: 3c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B7:4C:59:F9:0B:06:98:B6:63:AB:AE:5A:B7:C0:73:8B:63:F8:ED X509v3 Authority Key Identifier: keyid:2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:32:3c:98:bc:bf:c1:7a:0c:9f:ed:95:5d:fa:a8:36:65:89: df:31:05:2e:a6:01:7a:66:70:e9:60:6f:8d:73:7c:69:b5:4d: 5b:2e:06:eb:2a:29:15:ce:79:c7:14:db:40:3c:07:9d:c8:03: e5:c2:b5:6f:f5:47:a5:c5:79:be:c8:82:bb:de:1e:95:19:c0: 38:2f:ef:4c:79:bb:13:c6:a7:a0:ce:b8:13:a6:cc:80:55:11: 57:46:98:0b:d3:4d:88:eb:7c:12:11:58:f0:ee:cb:48:91:de: 59:da:2c:bd:d5:fc:91:96:27:33:78:af:8d:b7:32:20:da:e8: 96:d1:13:78:67:0c:a9:8c:ab:50:78:b2:c4:01:86:36:a1:a6: fc:64:de:d8:8f:46:2a:2c:da:8c:d2:22:2d:f6:5c:9e:d6:07: a2:0f:fe:e5:fe:02:d0:39:91:c4:cd:db:0a:2f:94:38:c4:58: 5e:57:17:18:f4:cd:64:bf:21:ba:18:55:95:81:f3:12:6b:7f: 5a:fc:39:a3:25:e7:30:dd:92:6d:e7:3b:a1:43:f2:3b:5b:1d: cf:f3:8c:d7:76:12:35:2f:21:ab:ba:23:fa:0f:3d:8d:da:e4: 05:60:2f:ed:a6:23:1a:a1:30:7d:c1:f7:68:7f:b2:10:4f:6c: ab:d4:33:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD3hZgF0G/u6BWZkjZM5LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZDVjNjFlOTMyMjY5NGI4NzJmNWQzMmNjMWZhNWMxYmJi YWIxYjYwHhcNMjYwMjA5MTEwMDM1WhcNMjYwMjEwMTEwMDM1WjAzMTEwLwYDVQQD EyhlNWI3NGM1OWY5MGIwNjk4YjY2M2FiYWU1YWI3YzA3MzhiNjNmOGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1juVu0TumG1HsnR1nWA5UrcSCmTM Zp9P2iKKjxGEFUGU/OAAHLd6Q07zGY0ghqFiEJC+1wjn7QgVdr7Rd2lWgPPhEMmt oCb5lWazb0hXGrRH/4YAb5jDmY7c8jUhHZilmXY97qfx1pHONTBT+h+oZCuHxL+L +gRG0jBGFZQFSb4NaLbRkTFvKIScd7wZYSVQAyil0S/NcIH9bTUtYEJoSQKKkI/t 8ItMpCUO56aEn+YrapQhYFEEa8J8dTU7eGddCU3rOhS9aJvectik4ZbNGQYrDX+m wZg6xdPxWZV/aVLOLgOJfkn7klHqXY/EDxoUzO6XzBkcmlmKNcJAOGE8WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOW3TFn5CwaYtmOrrlq3wHOLY/jtMB8GA1UdIwQY MBaAFC/Vxh6TImlLhy9dMswfpcG7urG2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDlYR0hwTWlhVXVITDEweXpCLWx3YnU2c2JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8yMzcwZGUtYjhlNy00ODkwLTk5OTkt YWIzMDdjYjFlM2JiLzEvTDlYR0hwTWlhVXVITDEweXpCLWx3YnU2c2JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8yMzcwZGUtYjhlNy00ODkwLTk5OTktYWIzMDdjYjFlM2Ji LzEvTDlYR0hwTWlhVXVITDEweXpCLWx3YnU2c2JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgDI8mLy/ wXoMn+2VXfqoNmWJ3zEFLqYBemZw6WBvjXN8abVNWy4G6yopFc55xxTbQDwHncgD 5cK1b/VHpcV5vsiCu94elRnAOC/vTHm7E8anoM64E6bMgFURV0aYC9NNiOt8EhFY 8O7LSJHeWdosvdX8kZYnM3ivjbcyINroltETeGcMqYyrUHiyxAGGNqGm/GTe2I9G KizajNIiLfZcntYHog/+5f4C0DmRxM3bCi+UOMRYXlcXGPTNZL8huhhVlYHzEmt/ Wvw5oyXnMN2Sbec7oUPyO1sdz/OM13YSNS8hq7oj+g89jdrkBWAv7aYjGqEwfcH3 aH+yEE9sq9Qz+Q== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:54 2026 by rpki-client