This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft File: lnRtO9Pi3eYWQCDesLXYkixkdm0.mft (raw, json) Hash identifier: pja1iXD8/hbkZRuRzI+YCZndyvqa/r6RApxbNjPH4Z0= Subject key identifier: C4:F0:28:C5:62:E9:B9:D4:6A:D9:1E:A3:60:93:55:A7:98:CC:EC:03 Authority key identifier: 96:74:6D:3B:D3:E2:DD:E6:16:40:20:DE:B0:B5:D8:92:2C:64:76:6D Certificate issuer: /CN=96746d3bd3e2dde6164020deb0b5d8922c64766d Certificate serial: 019C43C6DB736809755F6BF4276383222A6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnRtO9Pi3eYWQCDesLXYkixkdm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft Manifest number: 04C6 Signing time: Mon 09 Feb 2026 19:00:31 +0000 Manifest this update: Mon 09 Feb 2026 19:00:31 +0000 Manifest next update: Tue 10 Feb 2026 19:00:31 +0000 Files and hashes: 1: lnRtO9Pi3eYWQCDesLXYkixkdm0.crl (hash: JUdVMd0meUBQSGi9Rv6gXlMZV3H1cchD2Sab+NASon4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft rsync://rpki.ripe.net/repository/DEFAULT/lnRtO9Pi3eYWQCDesLXYkixkdm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:db:73:68:09:75:5f:6b:f4:27:63:83:22:2a:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96746d3bd3e2dde6164020deb0b5d8922c64766d Validity Not Before: Feb 9 19:00:31 2026 GMT Not After : Feb 10 19:00:31 2026 GMT Subject: CN=c4f028c562e9b9d46ad91ea3609355a798ccec03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:be:eb:06:11:27:16:de:47:04:85:c7:db:4b: 4d:6a:9c:51:95:61:79:bd:da:26:07:99:54:10:21: c9:5b:1c:04:4a:07:08:da:b1:50:2e:f7:d4:11:17: d7:ac:42:53:20:5b:b9:6d:bd:c2:20:fa:34:1c:63: 59:84:ca:4d:81:09:66:8d:22:36:dd:a6:8b:14:63: eb:d2:ed:95:92:7d:5b:d6:db:e1:b0:c7:9a:83:69: 77:7d:f9:89:93:da:b6:3b:b1:f3:9f:06:08:63:0f: 07:f9:94:87:2a:ba:83:3b:1b:2b:f4:65:44:51:42: e8:f3:f7:09:59:6f:89:02:46:44:5a:a7:3b:8b:63: 87:c2:ba:68:be:42:e7:98:54:dd:33:e8:a3:0e:20: 33:12:13:5b:ca:f5:a9:94:b6:c5:ab:82:63:95:08: ce:d2:6b:cc:a5:2c:61:e8:1c:81:6e:74:d7:5a:64: ae:9d:47:f7:d0:fe:89:32:71:8e:0d:78:e7:19:8e: 7a:60:53:6d:81:0f:3a:ea:e9:f5:b0:74:4f:96:26: a5:5e:16:12:8d:49:a7:6c:bf:b4:60:ae:b6:df:73: ab:e8:c0:1d:21:10:3c:d4:c7:bf:b1:ff:87:d1:7c: 96:8b:14:48:a0:ad:63:9c:3b:bc:63:c4:0d:b3:b3: 14:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F0:28:C5:62:E9:B9:D4:6A:D9:1E:A3:60:93:55:A7:98:CC:EC:03 X509v3 Authority Key Identifier: keyid:96:74:6D:3B:D3:E2:DD:E6:16:40:20:DE:B0:B5:D8:92:2C:64:76:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnRtO9Pi3eYWQCDesLXYkixkdm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:7e:1f:18:e8:13:f0:94:6a:00:1a:2e:4a:d1:30:19:e9:ee: ff:83:6d:64:7c:e5:3c:bb:e5:6e:75:5a:be:c2:1d:ba:38:cd: 8e:35:2b:2e:2f:3b:ea:df:52:73:73:5a:3d:64:b7:04:ed:e5: 7b:40:99:e5:99:4c:d0:5d:60:03:b3:2d:7c:ba:df:1e:de:3d: fb:3a:e8:af:af:50:14:af:20:fe:00:7c:ba:e7:4b:39:c0:f3: 1e:25:48:27:60:ae:d1:c3:aa:b4:f6:ae:d0:14:09:54:9c:35: 4d:5d:0e:47:97:5f:c7:ff:fe:99:4d:0e:17:35:6c:d1:ca:40: 0f:38:6f:71:f6:95:c9:ba:17:49:a5:d4:73:5a:d3:06:bf:2c: 1e:e9:9a:91:57:e8:64:b0:9f:83:e2:30:30:94:67:eb:cb:95: 03:75:45:7e:7a:33:df:21:9b:8c:17:97:8e:13:f5:c3:14:cf: b2:c7:6c:a2:2c:33:d3:65:5d:89:8a:b5:42:ca:ba:5e:87:dd: 39:bf:3f:db:1f:21:9d:b3:47:85:07:ce:bf:71:f9:87:1e:ab: 05:d9:33:2e:16:e8:c3:d7:20:0c:e3:e8:8a:20:d5:31:54:93: 4d:14:4e:09:2a:99:e7:48:89:88:d0:23:14:16:a2:c4:77:df: 44:69:86:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxttzaAl1X2v0J2ODIipsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NzQ2ZDNiZDNlMmRkZTYxNjQwMjBkZWIwYjVkODkyMmM2 NDc2NmQwHhcNMjYwMjA5MTkwMDMxWhcNMjYwMjEwMTkwMDMxWjAzMTEwLwYDVQQD EyhjNGYwMjhjNTYyZTliOWQ0NmFkOTFlYTM2MDkzNTVhNzk4Y2NlYzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL7rBhEnFt5HBIXH20tNapxRlWF5 vdomB5lUECHJWxwESgcI2rFQLvfUERfXrEJTIFu5bb3CIPo0HGNZhMpNgQlmjSI2 3aaLFGPr0u2Vkn1b1tvhsMeag2l3ffmJk9q2O7HznwYIYw8H+ZSHKrqDOxsr9GVE UULo8/cJWW+JAkZEWqc7i2OHwrpovkLnmFTdM+ijDiAzEhNbyvWplLbFq4JjlQjO 0mvMpSxh6ByBbnTXWmSunUf30P6JMnGODXjnGY56YFNtgQ866un1sHRPlialXhYS jUmnbL+0YK6233Or6MAdIRA81Me/sf+H0XyWixRIoK1jnDu8Y8QNs7MUiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTwKMVi6bnUatkeo2CTVaeYzOwDMB8GA1UdIwQY MBaAFJZ0bTvT4t3mFkAg3rC12JIsZHZtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG5SdE85UGkzZVlXUUNEZXNMWFlraXhrZG0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9lMWYxNzEtYTg4OS00Mzk1LTljZmMt MDgwNTQxOWQ3MjFhLzEvbG5SdE85UGkzZVlXUUNEZXNMWFlraXhrZG0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9lMWYxNzEtYTg4OS00Mzk1LTljZmMtMDgwNTQxOWQ3MjFh LzEvbG5SdE85UGkzZVlXUUNEZXNMWFlraXhrZG0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApn4fGOgT 8JRqABouStEwGenu/4NtZHzlPLvlbnVavsIdujjNjjUrLi876t9Sc3NaPWS3BO3l e0CZ5ZlM0F1gA7MtfLrfHt49+zror69QFK8g/gB8uudLOcDzHiVIJ2Cu0cOqtPau 0BQJVJw1TV0OR5dfx//+mU0OFzVs0cpADzhvcfaVyboXSaXUc1rTBr8sHumakVfo ZLCfg+IwMJRn68uVA3VFfnoz3yGbjBeXjhP1wxTPssdsoiwz02VdiYq1Qsq6Xofd Ob8/2x8hnbNHhQfOv3H5hx6rBdkzLhbow9cgDOPoiiDVMVSTTRROCSqZ50iJiNAj FBaixHffRGmGyw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:02 2026 by rpki-client