This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.mft File: lJQumzXZGQbREkXXO9WM3Y7KSdE.mft (raw, json) Hash identifier: ZeL0YigGqMbNKQBCWwRuf4haE2+F4uwwUspojuYgoeg= Subject key identifier: 52:EF:92:77:F4:09:64:81:23:DB:E0:67:6B:18:91:0A:FC:0E:C4:53 Authority key identifier: 94:94:2E:9B:35:D9:19:06:D1:12:45:D7:3B:D5:8C:DD:8E:CA:49:D1 Certificate issuer: /CN=94942e9b35d91906d11245d73bd58cdd8eca49d1 Certificate serial: 019C44A2F1EE84200C56C5E2A5D3A69496B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJQumzXZGQbREkXXO9WM3Y7KSdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.mft Manifest number: 1768 Signing time: Mon 09 Feb 2026 23:00:55 +0000 Manifest this update: Mon 09 Feb 2026 23:00:55 +0000 Manifest next update: Tue 10 Feb 2026 23:00:55 +0000 Files and hashes: 1: lJQumzXZGQbREkXXO9WM3Y7KSdE.crl (hash: U+QdXD81+gIrHM4X3FriEAiMhbNqAZoi5oMwpJ/XAo4=) 2: lRB94ldr7rgqeGjPRMI9ABoba14.roa (hash: SLe56IHD80WuKPH4ey2PGtoGoV+VHvwhtrqQxiN+bUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.mft rsync://rpki.ripe.net/repository/DEFAULT/lJQumzXZGQbREkXXO9WM3Y7KSdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:a2:f1:ee:84:20:0c:56:c5:e2:a5:d3:a6:94:96:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94942e9b35d91906d11245d73bd58cdd8eca49d1 Validity Not Before: Feb 9 23:00:55 2026 GMT Not After : Feb 10 23:00:55 2026 GMT Subject: CN=52ef9277f409648123dbe0676b18910afc0ec453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cb:f8:4f:ea:e8:87:18:0d:c6:b9:ac:52:99: 6b:d1:69:29:1f:41:f1:47:78:ea:0c:6b:44:fc:7f: 9a:8d:94:5b:7c:2a:dd:63:a3:ba:59:32:f8:73:a6: d8:33:2e:18:dd:b7:4f:f9:a2:6a:43:0f:30:3d:54: 37:f2:77:25:23:4e:5b:ea:16:d3:45:59:ee:46:21: fd:75:6d:df:50:da:d0:f3:5f:71:df:c2:48:69:6a: 30:98:02:91:3e:e1:e8:08:88:9f:3a:99:e6:1c:01: 0b:5b:70:88:92:77:e1:a3:9d:80:c4:5e:7b:a2:17: cf:9e:5f:36:ac:1c:9b:eb:61:67:32:70:0c:79:1a: 59:bb:9b:51:0e:7d:ef:8d:73:28:47:ae:c2:1d:8d: da:03:05:bc:74:8c:2d:0c:2a:e0:07:29:68:34:c2: c4:56:59:96:3c:f5:1c:b7:61:df:58:64:63:bd:cd: e2:84:1e:81:d9:8e:8b:27:7a:a6:7e:46:6c:c2:88: 89:03:da:e7:53:e5:d6:2a:bb:ec:03:2e:f9:3e:c1: 1b:85:da:a7:30:6b:99:c8:24:ea:e4:ae:f4:e8:e4: b8:2d:fb:db:98:d6:e9:6f:48:fd:f5:55:92:9b:de: b7:a9:55:47:3a:83:42:39:2a:1a:71:0c:38:4a:cc: 10:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:EF:92:77:F4:09:64:81:23:DB:E0:67:6B:18:91:0A:FC:0E:C4:53 X509v3 Authority Key Identifier: keyid:94:94:2E:9B:35:D9:19:06:D1:12:45:D7:3B:D5:8C:DD:8E:CA:49:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJQumzXZGQbREkXXO9WM3Y7KSdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:e4:5e:ea:8f:0b:3b:87:81:60:cf:02:48:b7:e3:c8:d3:e8: 78:5d:2c:32:e5:1f:b6:67:a6:fa:f4:52:be:47:97:36:4f:ad: e2:91:bd:f6:a3:67:f0:94:ad:eb:81:62:cd:ad:b8:d3:b1:52: 5a:d9:7d:1a:21:e2:32:c9:d8:e0:48:be:d5:90:cf:f1:f2:64: cb:42:64:05:ee:c3:e5:33:0e:0b:2f:a7:b2:5c:52:5b:8b:e7: ac:3f:94:d5:ed:31:69:40:02:69:00:ef:1b:49:71:28:90:f5: e0:08:3a:e4:45:cf:72:da:29:dc:97:e4:45:a8:49:9b:09:18: af:0f:13:32:4c:d3:11:52:d0:73:5d:d3:8d:0e:cd:0a:86:23: 31:d9:64:88:cb:68:29:3c:1c:8a:aa:8f:19:00:9d:8c:81:79: 6b:36:e9:22:7a:85:9f:ef:0c:12:af:5d:67:99:a0:9f:1f:79: a3:3c:ea:e5:02:de:60:26:95:91:5b:23:c5:91:76:44:f3:b9: 53:9f:65:4d:3f:50:cc:83:e9:aa:8a:fa:1c:92:24:c5:76:f1: 12:94:bf:88:33:63:35:e3:24:59:3c:45:2b:37:81:26:8b:ea: 16:cc:cc:01:43:03:25:2a:6f:69:2a:fc:6f:c8:8e:2a:77:88: 3a:8e:5a:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEovHuhCAMVsXipdOmlJa1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0OTQyZTliMzVkOTE5MDZkMTEyNDVkNzNiZDU4Y2RkOGVj YTQ5ZDEwHhcNMjYwMjA5MjMwMDU1WhcNMjYwMjEwMjMwMDU1WjAzMTEwLwYDVQQD Eyg1MmVmOTI3N2Y0MDk2NDgxMjNkYmUwNjc2YjE4OTEwYWZjMGVjNDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8v4T+rohxgNxrmsUplr0WkpH0Hx R3jqDGtE/H+ajZRbfCrdY6O6WTL4c6bYMy4Y3bdP+aJqQw8wPVQ38nclI05b6hbT RVnuRiH9dW3fUNrQ819x38JIaWowmAKRPuHoCIifOpnmHAELW3CIknfho52AxF57 ohfPnl82rByb62FnMnAMeRpZu5tRDn3vjXMoR67CHY3aAwW8dIwtDCrgByloNMLE VlmWPPUct2HfWGRjvc3ihB6B2Y6LJ3qmfkZswoiJA9rnU+XWKrvsAy75PsEbhdqn MGuZyCTq5K706OS4LfvbmNbpb0j99VWSm963qVVHOoNCOSoacQw4SswQjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLvknf0CWSBI9vgZ2sYkQr8DsRTMB8GA1UdIwQY MBaAFJSULps12RkG0RJF1zvVjN2OyknRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEpRdW16WFpHUWJSRWtYWE85V00zWTdLU2RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9jNjA5ODAtYTFkZS00MzkwLWEwYTMt MzJjMjBjYWYwOGVkLzEvbEpRdW16WFpHUWJSRWtYWE85V00zWTdLU2RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9jNjA5ODAtYTFkZS00MzkwLWEwYTMtMzJjMjBjYWYwOGVk LzEvbEpRdW16WFpHUWJSRWtYWE85V00zWTdLU2RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsuRe6o8L O4eBYM8CSLfjyNPoeF0sMuUftmem+vRSvkeXNk+t4pG99qNn8JSt64Fiza2407FS Wtl9GiHiMsnY4Ei+1ZDP8fJky0JkBe7D5TMOCy+nslxSW4vnrD+U1e0xaUACaQDv G0lxKJD14Ag65EXPctop3JfkRahJmwkYrw8TMkzTEVLQc13TjQ7NCoYjMdlkiMto KTwciqqPGQCdjIF5azbpInqFn+8MEq9dZ5mgnx95ozzq5QLeYCaVkVsjxZF2RPO5 U59lTT9QzIPpqor6HJIkxXbxEpS/iDNjNeMkWTxFKzeBJovqFszMAUMDJSpvaSr8 b8iOKneIOo5ahg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:37:00 2026 by rpki-client