This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft File: _l1M3gmNHKh_Tgqe64VZKOg9KT4.mft (raw, json) Hash identifier: LXA8RkQ+d7wlTx+KdswdS31ms1J8zdJ04LbwzB09Svg= Subject key identifier: CC:43:B7:FB:69:28:EE:F0:8A:16:7F:F2:15:E4:26:9A:76:EF:A8:47 Authority key identifier: FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E Certificate issuer: /CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e Certificate serial: 019C439016707089FFFB13978C7615EDFD2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft Manifest number: 086A Signing time: Mon 09 Feb 2026 18:00:42 +0000 Manifest this update: Mon 09 Feb 2026 18:00:42 +0000 Manifest next update: Tue 10 Feb 2026 18:00:42 +0000 Files and hashes: 1: IHQGYZycBDyAVTPAum8XIrj47kQ.roa (hash: S11IX6oJmfauUmzmopL+w4IEvy2f52JVhN8t0Q5+tAM=) 2: _l1M3gmNHKh_Tgqe64VZKOg9KT4.crl (hash: m4pn4HkyiNS+ION+YkU5rSIu/6mqZF3IrO8OESVpk1s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:16:70:70:89:ff:fb:13:97:8c:76:15:ed:fd:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e Validity Not Before: Feb 9 18:00:42 2026 GMT Not After : Feb 10 18:00:42 2026 GMT Subject: CN=cc43b7fb6928eef08a167ff215e4269a76efa847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:47:bd:00:8b:b8:43:fb:26:12:00:e8:60:4a: 31:64:3a:36:bd:24:f6:3c:d4:63:e3:b0:ba:77:74: ef:9c:e3:39:83:12:43:89:11:9d:8d:eb:bd:b9:81: 6d:34:4a:e3:e9:2a:4a:1e:da:7d:ff:22:18:31:8d: 30:16:42:f5:12:8e:02:22:64:89:c1:9a:ab:b0:5f: af:8e:b9:48:c6:ab:ac:1b:cb:96:ed:ce:9f:76:ea: 41:fe:b2:3f:fb:6c:dc:e5:9c:82:21:e3:c2:0d:7c: f7:0c:dd:b5:b6:ea:a1:c0:c8:b8:67:ca:60:4c:6f: 31:30:8a:04:26:77:84:d1:81:e5:e4:25:a3:8b:e7: c9:5e:a4:2c:d6:1b:98:a5:bc:33:b3:fd:8f:2c:d8: 00:c9:fe:cc:43:95:db:13:09:f2:34:3b:ff:60:a7: d8:d8:f9:43:9b:2e:00:0a:7d:26:d8:e1:dd:a3:41: d3:54:6d:8b:60:c3:0e:9e:af:7f:50:b7:c9:8a:6d: cd:a3:b9:bd:ce:e7:eb:8f:c3:6b:27:68:dc:2c:10: bf:9e:71:a0:ab:14:ff:0e:85:51:08:d6:77:54:7e: 91:a3:d2:1f:dc:58:13:37:87:d0:ef:4a:d1:82:5d: 32:cd:06:50:ea:f6:a0:83:c1:ca:e1:7b:92:9b:31: 29:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:43:B7:FB:69:28:EE:F0:8A:16:7F:F2:15:E4:26:9A:76:EF:A8:47 X509v3 Authority Key Identifier: keyid:FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:18:99:07:4e:0a:e9:ec:1e:9f:eb:17:cf:1e:5f:d1:77:0e: 35:7d:48:67:6b:bd:37:9e:ec:fc:57:7b:f0:61:af:b4:71:3c: 9e:8d:e1:45:8f:08:1c:da:3d:49:fe:44:75:e1:e6:b0:e4:d3: bf:d7:97:28:c3:0a:8c:66:63:e1:fa:43:22:e2:e6:28:17:81: b8:c3:57:29:4b:ba:20:f9:89:d9:f6:f5:c2:9d:89:e2:54:20: 24:b3:84:05:85:6e:25:54:d9:64:ec:70:37:c2:34:96:96:c5: 65:ad:56:b0:aa:49:61:a3:2c:4e:74:4d:e4:7b:a1:93:5c:77: 28:51:56:47:15:45:18:66:10:49:87:64:8d:54:a5:b4:28:66: 3a:94:c1:c2:b7:6c:9b:14:7b:13:0a:0a:86:4b:96:00:73:b8: e5:2a:6e:98:96:c5:74:60:ff:9e:77:ad:53:c2:5b:a7:ec:ca: ca:47:55:f1:12:ba:96:ac:45:9b:9d:24:56:71:f5:38:00:f6: 7e:ea:91:58:f8:3a:d4:51:7c:8c:6a:a9:2b:1c:61:0e:48:cb: fc:86:d5:fa:d7:66:5e:45:73:54:76:02:b4:52:e5:7a:14:0f: 39:0e:6e:ba:2f:ee:ba:0a:28:67:34:d4:6d:4b:89:8a:2d:b2: c6:85:c5:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkBZwcIn/+xOXjHYV7f0tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNWQ0Y2RlMDk4ZDFjYTg3ZjRlMGE5ZWViODU1OTI4ZTgz ZDI5M2UwHhcNMjYwMjA5MTgwMDQyWhcNMjYwMjEwMTgwMDQyWjAzMTEwLwYDVQQD EyhjYzQzYjdmYjY5MjhlZWYwOGExNjdmZjIxNWU0MjY5YTc2ZWZhODQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0e9AIu4Q/smEgDoYEoxZDo2vST2 PNRj47C6d3TvnOM5gxJDiRGdjeu9uYFtNErj6SpKHtp9/yIYMY0wFkL1Eo4CImSJ wZqrsF+vjrlIxqusG8uW7c6fdupB/rI/+2zc5ZyCIePCDXz3DN21tuqhwMi4Z8pg TG8xMIoEJneE0YHl5CWji+fJXqQs1huYpbwzs/2PLNgAyf7MQ5XbEwnyNDv/YKfY 2PlDmy4ACn0m2OHdo0HTVG2LYMMOnq9/ULfJim3No7m9zufrj8NrJ2jcLBC/nnGg qxT/DoVRCNZ3VH6Ro9If3FgTN4fQ70rRgl0yzQZQ6vagg8HK4XuSmzEpfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxDt/tpKO7wihZ/8hXkJpp276hHMB8GA1UdIwQY MBaAFP5dTN4JjRyof04KnuuFWSjoPSk+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2wxTTNnbU5IS2hfVGdxZTY0VlpLT2c5S1Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9mOTgwMTQtZjFjOS00YTNhLWFmMzMt YjAzZWYzZjAzMjI4LzEvX2wxTTNnbU5IS2hfVGdxZTY0VlpLT2c5S1Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9mOTgwMTQtZjFjOS00YTNhLWFmMzMtYjAzZWYzZjAzMjI4 LzEvX2wxTTNnbU5IS2hfVGdxZTY0VlpLT2c5S1Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASRiZB04K 6ewen+sXzx5f0XcONX1IZ2u9N57s/Fd78GGvtHE8no3hRY8IHNo9Sf5EdeHmsOTT v9eXKMMKjGZj4fpDIuLmKBeBuMNXKUu6IPmJ2fb1wp2J4lQgJLOEBYVuJVTZZOxw N8I0lpbFZa1WsKpJYaMsTnRN5Huhk1x3KFFWRxVFGGYQSYdkjVSltChmOpTBwrds mxR7EwoKhkuWAHO45SpumJbFdGD/nnetU8Jbp+zKykdV8RK6lqxFm50kVnH1OAD2 fuqRWPg61FF8jGqpKxxhDkjL/IbV+tdmXkVzVHYCtFLlehQPOQ5uui/uugooZzTU bUuJii2yxoXFgQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:10:29 2026 by rpki-client