This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft File: ltl3-HCvlNbcEWribZDw5mWOMqg.mft (raw, json) Hash identifier: RRNJ0bAFdaIdp7XZ62dqdCGgI+4zwasvBoUT7zbGT1s= Subject key identifier: B5:2B:6F:C8:97:83:84:6D:C8:FC:7D:A4:85:5D:16:6B:1F:B2:30:8E Authority key identifier: 96:D9:77:F8:70:AF:94:D6:DC:11:6A:E2:6D:90:F0:E6:65:8E:32:A8 Certificate issuer: /CN=96d977f870af94d6dc116ae26d90f0e6658e32a8 Certificate serial: 019C432208E3EF0FA26462004C5319BABA6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft Manifest number: 0C1C Signing time: Mon 09 Feb 2026 16:00:29 +0000 Manifest this update: Mon 09 Feb 2026 16:00:29 +0000 Manifest next update: Tue 10 Feb 2026 16:00:29 +0000 Files and hashes: 1: ltl3-HCvlNbcEWribZDw5mWOMqg.crl (hash: yhgNzBHLB4ijgY8ZFoEa5PeueyMaIUMl1CV9GqhAy+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:08:e3:ef:0f:a2:64:62:00:4c:53:19:ba:ba:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96d977f870af94d6dc116ae26d90f0e6658e32a8 Validity Not Before: Feb 9 16:00:29 2026 GMT Not After : Feb 10 16:00:29 2026 GMT Subject: CN=b52b6fc89783846dc8fc7da4855d166b1fb2308e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:06:60:f3:ca:b1:e9:2d:5f:2f:46:ea:bd:d5: ba:7a:a6:04:98:67:1e:21:33:d2:bd:49:da:9a:e8: cc:8a:4b:d9:b4:14:bb:26:f1:3a:3d:bb:03:b0:49: 60:d4:7c:a2:15:57:45:db:61:9d:6b:96:a1:a5:c2: 4e:0c:18:96:0a:8f:ed:49:5c:1f:4e:5b:a3:d1:26: b7:16:6c:04:5d:37:91:28:a1:9a:a6:34:fa:f9:7e: 39:9b:ef:f7:1b:c8:90:61:ad:db:d8:3f:cc:e6:4f: 61:8f:a1:ff:65:4f:e6:d0:14:d0:37:e1:79:bd:29: d6:b9:d6:0e:ac:11:44:03:88:cd:63:9b:ce:50:42: 63:4e:4e:17:dd:fb:e3:05:2d:13:08:a4:a2:17:c4: e1:d9:28:9f:2a:2f:f0:30:d1:22:2d:a3:8c:c6:01: 0e:e1:77:be:ad:6b:de:20:a3:4b:27:d0:9a:72:bf: 3f:d4:ea:69:2c:52:87:34:9b:99:53:d9:63:4b:1f: 9a:0c:69:f5:94:da:26:20:19:c3:7e:af:a1:7c:a0: e0:fa:db:18:a3:ad:33:ca:12:46:e6:f1:44:2b:47: e3:51:5a:9d:32:e1:b4:83:97:72:85:0f:78:37:3b: 3c:b4:7f:6e:c9:76:c5:4d:97:10:95:19:26:54:7d: 9b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:2B:6F:C8:97:83:84:6D:C8:FC:7D:A4:85:5D:16:6B:1F:B2:30:8E X509v3 Authority Key Identifier: keyid:96:D9:77:F8:70:AF:94:D6:DC:11:6A:E2:6D:90:F0:E6:65:8E:32:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:71:9c:67:aa:46:84:3a:2e:12:b5:4e:5d:ea:81:62:7c:7c: 00:2e:7c:93:74:ce:ad:26:1c:1f:20:3a:6a:21:60:63:22:66: 92:46:c9:7c:48:9e:b7:81:60:d6:b8:bb:d3:73:53:0d:8f:f9: f5:7a:81:9c:3c:1e:44:9c:ea:ae:91:b7:50:ba:a6:8a:6f:c8: 2f:56:3e:3d:16:07:00:66:ae:1a:ef:97:18:7d:eb:62:6e:b0: 6d:4c:57:ac:da:5b:94:7c:5e:4f:ad:24:31:0c:61:3e:07:50: 7c:6c:96:55:dd:bc:2f:ed:70:4c:63:43:ab:42:8d:32:91:ca: c1:e5:a3:b0:8a:42:d1:f8:17:de:73:54:71:da:65:dc:5d:56: 21:43:da:d4:09:6a:bb:ca:6b:f3:75:00:fa:fe:37:2c:0e:ed: 3e:d3:68:4a:25:e6:3e:33:50:30:77:7e:99:47:5d:d8:bb:7e: 15:03:b5:da:ac:f4:10:ad:4c:bd:5a:e3:78:c4:ec:68:87:03: 69:ea:3c:ac:13:30:02:c9:dc:50:fb:dc:63:c2:59:86:04:7a: ed:31:cf:3d:66:4b:9d:dd:07:0c:b9:35:ec:ad:2a:11:13:d1: ba:5a:7a:d7:b4:33:d2:50:c1:22:79:52:f3:ca:16:7d:6d:68: c0:79:2f:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIgjj7w+iZGIATFMZurpvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZDk3N2Y4NzBhZjk0ZDZkYzExNmFlMjZkOTBmMGU2NjU4 ZTMyYTgwHhcNMjYwMjA5MTYwMDI5WhcNMjYwMjEwMTYwMDI5WjAzMTEwLwYDVQQD EyhiNTJiNmZjODk3ODM4NDZkYzhmYzdkYTQ4NTVkMTY2YjFmYjIzMDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gZg88qx6S1fL0bqvdW6eqYEmGce ITPSvUnamujMikvZtBS7JvE6PbsDsElg1HyiFVdF22Gda5ahpcJODBiWCo/tSVwf Tluj0Sa3FmwEXTeRKKGapjT6+X45m+/3G8iQYa3b2D/M5k9hj6H/ZU/m0BTQN+F5 vSnWudYOrBFEA4jNY5vOUEJjTk4X3fvjBS0TCKSiF8Th2SifKi/wMNEiLaOMxgEO 4Xe+rWveIKNLJ9Cacr8/1OppLFKHNJuZU9ljSx+aDGn1lNomIBnDfq+hfKDg+tsY o60zyhJG5vFEK0fjUVqdMuG0g5dyhQ94Nzs8tH9uyXbFTZcQlRkmVH2b2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUrb8iXg4RtyPx9pIVdFmsfsjCOMB8GA1UdIwQY MBaAFJbZd/hwr5TW3BFq4m2Q8OZljjKoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHRsMy1IQ3ZsTmJjRVdyaWJaRHc1bVdPTXFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy80MTBiZTItMzc0ZC00MzliLTllYzkt Y2MzMzdiZmI1OGIxLzEvbHRsMy1IQ3ZsTmJjRVdyaWJaRHc1bVdPTXFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy80MTBiZTItMzc0ZC00MzliLTllYzktY2MzMzdiZmI1OGIx LzEvbHRsMy1IQ3ZsTmJjRVdyaWJaRHc1bVdPTXFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjnGcZ6pG hDouErVOXeqBYnx8AC58k3TOrSYcHyA6aiFgYyJmkkbJfEiet4Fg1ri703NTDY/5 9XqBnDweRJzqrpG3ULqmim/IL1Y+PRYHAGauGu+XGH3rYm6wbUxXrNpblHxeT60k MQxhPgdQfGyWVd28L+1wTGNDq0KNMpHKweWjsIpC0fgX3nNUcdpl3F1WIUPa1Alq u8pr83UA+v43LA7tPtNoSiXmPjNQMHd+mUdd2Lt+FQO12qz0EK1MvVrjeMTsaIcD aeo8rBMwAsncUPvcY8JZhgR67THPPWZLnd0HDLk17K0qERPRulp617Qz0lDBInlS 88oWfW1owHkvNA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:45 2026 by rpki-client