This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft File: lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft (raw, json) Hash identifier: bokIsaj6qaMOttMUxWSmuGPfELlBaBWwRpSBiIBFmU8= Subject key identifier: 56:FD:35:D5:86:6F:89:30:3C:6B:7A:3F:4E:86:D6:25:E8:D4:B5:27 Authority key identifier: 96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A Certificate issuer: /CN=96edc682a944005117b8febed6dc8bac060f329a Certificate serial: 019C4358F3B3BBBFAA47DD2AE3B5592D330D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft Manifest number: 0705 Signing time: Mon 09 Feb 2026 17:00:28 +0000 Manifest this update: Mon 09 Feb 2026 17:00:28 +0000 Manifest next update: Tue 10 Feb 2026 17:00:28 +0000 Files and hashes: 1: DErivx0e-6b56vQq7Hodx5LXJgM.roa (hash: Qu7V6jf5xYIpOAX8Mui4oAi/eNqnZVmhkF0lUX59mwE=) 2: lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl (hash: KJNpHmtFq9RMn+hCPz5qxd+3RHLOGXKpp8IuxgCgLgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:f3:b3:bb:bf:aa:47:dd:2a:e3:b5:59:2d:33:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96edc682a944005117b8febed6dc8bac060f329a Validity Not Before: Feb 9 17:00:28 2026 GMT Not After : Feb 10 17:00:28 2026 GMT Subject: CN=56fd35d5866f89303c6b7a3f4e86d625e8d4b527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ce:56:99:e4:1c:60:db:4e:e9:70:67:c5:c5: 89:58:28:8c:13:a2:08:4c:c4:1d:01:53:b6:cb:bf: c2:83:50:0b:ac:a9:c5:e3:44:b4:dc:a6:1e:d3:fa: 62:d7:41:01:ba:fe:24:1d:b7:ac:94:06:5f:1f:62: 85:80:f2:ef:96:8f:f6:21:53:4b:a6:4d:14:2c:86: 38:a1:b3:4c:c1:2a:fd:cd:6b:4f:6d:9a:fc:f4:40: b5:6f:6b:b0:30:87:47:3b:d5:9c:67:e2:25:5d:67: ee:95:9f:34:71:ea:14:65:fd:23:64:ae:2f:18:48: 43:fd:64:96:a9:0e:ec:b9:dd:c9:e7:20:90:f1:9d: 64:1d:50:ce:9e:5f:a6:2e:51:90:30:05:22:22:b5: a3:cd:02:79:aa:08:25:3a:e0:0f:e7:41:fe:30:da: dc:c0:bf:c1:2b:d3:26:a5:09:ca:34:a3:9e:3e:da: ff:d5:64:27:c4:9b:e1:4b:82:1f:32:b7:d7:a3:fb: 33:ab:33:58:6b:5b:9f:73:52:8b:8e:6f:5b:c1:7a: b3:a1:88:64:e9:db:24:2c:5f:c5:9e:46:1a:60:77: 6e:7a:e8:18:3d:ba:f0:c5:a6:30:8e:eb:b0:8d:33: b8:9a:cc:89:f8:e0:18:67:88:ed:13:16:48:61:a9: 97:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:FD:35:D5:86:6F:89:30:3C:6B:7A:3F:4E:86:D6:25:E8:D4:B5:27 X509v3 Authority Key Identifier: keyid:96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:15:78:97:70:b5:83:35:b9:41:8d:2e:eb:a2:f9:cf:f4:8c: b8:1f:4b:8d:cc:a8:05:1c:4e:51:72:57:84:59:01:46:24:b7: 11:24:7c:9b:66:b8:a0:8d:53:f1:ef:f3:44:70:49:ad:cd:e7: 5e:54:c5:b0:9e:0c:80:5f:6f:a5:4b:f2:0a:be:49:44:ef:bb: bb:e5:92:1d:ab:77:e5:62:4b:59:58:78:5e:1b:15:1a:fd:87: e0:dd:d0:dd:b1:eb:7a:4a:ef:6e:47:ad:a8:c5:39:17:d9:f2: ab:7f:68:2d:77:e9:79:77:d1:0d:ed:63:40:04:a7:aa:f5:52: af:ec:f1:ef:41:c8:f2:ad:91:60:d5:39:c1:1a:3a:5f:20:8a: a7:a3:e9:22:86:2f:a1:6c:b3:dd:2d:59:02:94:c1:eb:dd:69: 37:8d:4e:8a:93:08:27:4f:6e:4a:44:19:e5:27:0f:43:90:10: 95:95:88:d4:5a:62:c4:4e:0c:8e:be:42:08:75:b3:d0:d1:09: 20:69:13:bf:37:15:5c:e0:86:00:b0:40:65:d7:4d:d4:17:05: ac:cb:73:e6:a9:c4:a8:a7:fd:f7:e0:40:48:1e:f7:d1:ab:ad: 02:5d:85:f9:44:73:3d:b8:46:75:f4:f4:d7:11:d1:b5:36:91: 13:72:f8:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWPOzu7+qR90q47VZLTMNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZWRjNjgyYTk0NDAwNTExN2I4ZmViZWQ2ZGM4YmFjMDYw ZjMyOWEwHhcNMjYwMjA5MTcwMDI4WhcNMjYwMjEwMTcwMDI4WjAzMTEwLwYDVQQD Eyg1NmZkMzVkNTg2NmY4OTMwM2M2YjdhM2Y0ZTg2ZDYyNWU4ZDRiNTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts5WmeQcYNtO6XBnxcWJWCiME6II TMQdAVO2y7/Cg1ALrKnF40S03KYe0/pi10EBuv4kHbeslAZfH2KFgPLvlo/2IVNL pk0ULIY4obNMwSr9zWtPbZr89EC1b2uwMIdHO9WcZ+IlXWfulZ80ceoUZf0jZK4v GEhD/WSWqQ7sud3J5yCQ8Z1kHVDOnl+mLlGQMAUiIrWjzQJ5qgglOuAP50H+MNrc wL/BK9MmpQnKNKOePtr/1WQnxJvhS4IfMrfXo/szqzNYa1ufc1KLjm9bwXqzoYhk 6dskLF/FnkYaYHdueugYPbrwxaYwjuuwjTO4msyJ+OAYZ4jtExZIYamX6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFb9NdWGb4kwPGt6P06G1iXo1LUnMB8GA1UdIwQY MBaAFJbtxoKpRABRF7j+vtbci6wGDzKaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHUzR2dxbEVBRkVYdVA2LTF0eUxyQVlQTXBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jMTI0MzYtNjFiZS00MmUwLWFkMzQt N2Y4YTY3NTBiOGQ3LzEvbHUzR2dxbEVBRkVYdVA2LTF0eUxyQVlQTXBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jMTI0MzYtNjFiZS00MmUwLWFkMzQtN2Y4YTY3NTBiOGQ3 LzEvbHUzR2dxbEVBRkVYdVA2LTF0eUxyQVlQTXBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfRV4l3C1 gzW5QY0u66L5z/SMuB9LjcyoBRxOUXJXhFkBRiS3ESR8m2a4oI1T8e/zRHBJrc3n XlTFsJ4MgF9vpUvyCr5JRO+7u+WSHat35WJLWVh4XhsVGv2H4N3Q3bHrekrvbket qMU5F9nyq39oLXfpeXfRDe1jQASnqvVSr+zx70HI8q2RYNU5wRo6XyCKp6PpIoYv oWyz3S1ZApTB691pN41OipMIJ09uSkQZ5ScPQ5AQlZWI1FpixE4Mjr5CCHWz0NEJ IGkTvzcVXOCGALBAZddN1BcFrMtz5qnEqKf99+BASB730autAl2F+URzPbhGdfT0 1xHRtTaRE3L4ag== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:49 2026 by rpki-client