This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft File: v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft (raw, json) Hash identifier: rrNR9JgE2vSHe0cl5hsoVbBQkpX6aJiYWZSmFGsl4sY= Subject key identifier: 68:65:38:51:AD:E9:CE:47:3E:AF:93:18:B4:0D:82:7D:F9:D2:EB:6D Authority key identifier: BF:4F:CB:64:AE:B3:45:5F:B3:98:97:E3:12:95:DD:E8:3A:DD:4D:0E Certificate issuer: /CN=bf4fcb64aeb3455fb39897e31295dde83add4d0e Certificate serial: 019C43C74E70B4213FF7FD47877438F9AD3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft Manifest number: 17A2 Signing time: Mon 09 Feb 2026 19:01:00 +0000 Manifest this update: Mon 09 Feb 2026 19:01:00 +0000 Manifest next update: Tue 10 Feb 2026 19:01:00 +0000 Files and hashes: 1: HkESZav4s-gaBhayorEKTs_dvWY.roa (hash: 4pdtiZ94ktcZKGQXEiN4JbBohEK0TkGQ1CIQ5Piq3Ns=) 2: v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl (hash: PwP5DzrYHeGBP2V2Fyw8OF7R7bE+04FvjuKZQryeX6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:4e:70:b4:21:3f:f7:fd:47:87:74:38:f9:ad:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf4fcb64aeb3455fb39897e31295dde83add4d0e Validity Not Before: Feb 9 19:01:00 2026 GMT Not After : Feb 10 19:01:00 2026 GMT Subject: CN=68653851ade9ce473eaf9318b40d827df9d2eb6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:08:1e:cf:00:77:2f:c6:fa:93:00:98:f4:9b: 04:f8:79:87:7f:22:25:a5:1f:34:3c:03:38:bb:da: f7:0d:26:e9:c5:f9:24:3e:97:cd:2d:b5:e4:7e:07: 8a:1f:8f:b3:3c:04:84:bc:65:be:fd:dc:f0:9c:22: d8:ca:09:3e:28:35:07:b9:6f:5a:c8:c8:3b:ff:1f: 8a:88:12:e5:be:5a:d1:b4:6d:85:37:e6:c7:55:0d: 02:3b:84:8c:b6:d1:7f:7f:65:ae:0b:f2:86:c8:fe: cf:9b:1c:5b:c9:0b:0f:e1:ae:da:db:9c:de:ed:4b: 16:25:c1:57:9d:76:03:de:ad:5b:95:aa:ae:87:50: aa:b7:bc:20:aa:0c:cb:ee:8d:72:ef:23:46:05:9d: da:fe:73:a9:f5:05:9b:80:ec:dc:d1:36:c5:0a:97: c3:c3:12:48:4f:fa:79:9c:79:74:c4:06:c8:f3:49: 4b:92:c2:c8:b5:34:ac:e4:61:a5:0c:58:74:83:5e: 29:af:89:c9:03:ec:7c:03:d9:f2:74:cd:50:b1:d7: 28:60:41:44:23:78:ec:22:51:6b:2f:19:52:10:1f: 9e:0f:98:1d:fd:32:fe:50:19:92:29:5d:d8:f1:3e: 2a:3e:0c:64:68:04:69:19:0d:cb:95:5d:2f:b2:56: f7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:65:38:51:AD:E9:CE:47:3E:AF:93:18:B4:0D:82:7D:F9:D2:EB:6D X509v3 Authority Key Identifier: keyid:BF:4F:CB:64:AE:B3:45:5F:B3:98:97:E3:12:95:DD:E8:3A:DD:4D:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:8b:02:15:a3:c9:0d:23:2b:41:11:bf:e3:08:17:40:1c:5b: 1d:9b:c4:00:95:01:ff:da:24:db:e9:16:ba:a2:47:3a:8e:9b: 61:c1:21:8e:4d:2d:7f:0f:bf:1f:bf:89:b0:8b:da:22:d4:0a: 0c:d0:07:55:e3:c6:ba:bb:72:8e:11:55:69:46:b7:ec:c6:78: b7:4c:c1:fa:ee:86:05:1b:d1:e4:19:0c:b2:ab:7c:44:1c:2c: 9f:50:34:7c:33:0e:e3:61:ca:27:46:22:17:f0:b5:8d:9b:44: 62:1c:73:f5:eb:ad:05:01:31:9c:79:41:1b:a8:70:63:4c:84: d9:e0:8f:4b:f5:25:22:7c:19:1a:cd:17:6d:88:21:53:0a:ca: d1:a5:a0:5f:c2:fa:c5:1b:30:da:4a:73:f8:6a:b9:74:82:30: 16:3d:fa:d5:f5:60:a3:38:56:c4:7a:d1:6b:4f:ce:33:61:e6: f8:2c:74:c0:82:ba:5e:b4:8e:10:5d:20:3f:6e:d2:90:82:d9: 47:22:ef:94:c3:86:77:c7:9b:e4:45:8e:35:27:ef:80:35:4b: 21:87:04:62:b0:d3:39:b5:4f:15:68:9d:08:80:72:9d:3d:bc: 76:02:6e:3e:25:b5:da:02:ef:3d:a3:74:c1:75:df:4e:1e:6e: eb:ef:55:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDx05wtCE/9/1Hh3Q4+a08MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNGZjYjY0YWViMzQ1NWZiMzk4OTdlMzEyOTVkZGU4M2Fk ZDRkMGUwHhcNMjYwMjA5MTkwMTAwWhcNMjYwMjEwMTkwMTAwWjAzMTEwLwYDVQQD Eyg2ODY1Mzg1MWFkZTljZTQ3M2VhZjkzMThiNDBkODI3ZGY5ZDJlYjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAgezwB3L8b6kwCY9JsE+HmHfyIl pR80PAM4u9r3DSbpxfkkPpfNLbXkfgeKH4+zPASEvGW+/dzwnCLYygk+KDUHuW9a yMg7/x+KiBLlvlrRtG2FN+bHVQ0CO4SMttF/f2WuC/KGyP7PmxxbyQsP4a7a25ze 7UsWJcFXnXYD3q1blaquh1Cqt7wgqgzL7o1y7yNGBZ3a/nOp9QWbgOzc0TbFCpfD wxJIT/p5nHl0xAbI80lLksLItTSs5GGlDFh0g14pr4nJA+x8A9nydM1QsdcoYEFE I3jsIlFrLxlSEB+eD5gd/TL+UBmSKV3Y8T4qPgxkaARpGQ3LlV0vslb3TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhlOFGt6c5HPq+TGLQNgn350uttMB8GA1UdIwQY MBaAFL9Py2Sus0Vfs5iX4xKV3eg63U0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjBfTFpLNnpSVi16bUpmakVwWGQ2RHJkVFE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zZTc5ODAtN2UzMS00ZmQxLWI3OWQt MGJkNjJjODNlOTJiLzEvdjBfTFpLNnpSVi16bUpmakVwWGQ2RHJkVFE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8zZTc5ODAtN2UzMS00ZmQxLWI3OWQtMGJkNjJjODNlOTJi LzEvdjBfTFpLNnpSVi16bUpmakVwWGQ2RHJkVFE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYsCFaPJ DSMrQRG/4wgXQBxbHZvEAJUB/9ok2+kWuqJHOo6bYcEhjk0tfw+/H7+JsIvaItQK DNAHVePGurtyjhFVaUa37MZ4t0zB+u6GBRvR5BkMsqt8RBwsn1A0fDMO42HKJ0Yi F/C1jZtEYhxz9eutBQExnHlBG6hwY0yE2eCPS/UlInwZGs0XbYghUwrK0aWgX8L6 xRsw2kpz+Gq5dIIwFj361fVgozhWxHrRa0/OM2Hm+Cx0wIK6XrSOEF0gP27SkILZ RyLvlMOGd8eb5EWONSfvgDVLIYcEYrDTObVPFWidCIBynT28dgJuPiW12gLvPaN0 wXXfTh5u6+9VbA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:48 2026 by rpki-client