This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft File: LdgAjePP9i0vrKENmf8gw-h43N8.mft (raw, json) Hash identifier: O+iK8L88FppGPRvpVQ2NCq9g2CLcM7WTlmvhvf4oz/k= Subject key identifier: 7F:53:2D:0D:40:3A:B4:5D:33:33:F6:38:BD:E6:62:91:2C:9E:37:C5 Authority key identifier: 2D:D8:00:8D:E3:CF:F6:2D:2F:AC:A1:0D:99:FF:20:C3:E8:78:DC:DF Certificate issuer: /CN=2dd8008de3cff62d2faca10d99ff20c3e878dcdf Certificate serial: 019C4322948E90065528F8BAC4243D8A8270 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft Manifest number: 06D1 Signing time: Mon 09 Feb 2026 16:01:05 +0000 Manifest this update: Mon 09 Feb 2026 16:01:05 +0000 Manifest next update: Tue 10 Feb 2026 16:01:05 +0000 Files and hashes: 1: LdgAjePP9i0vrKENmf8gw-h43N8.crl (hash: 27lOJGjYFqbyKq7ZjHi3RTXZbvD9YcpFwhHklokLdqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:94:8e:90:06:55:28:f8:ba:c4:24:3d:8a:82:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dd8008de3cff62d2faca10d99ff20c3e878dcdf Validity Not Before: Feb 9 16:01:05 2026 GMT Not After : Feb 10 16:01:05 2026 GMT Subject: CN=7f532d0d403ab45d3333f638bde662912c9e37c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ee:c0:2d:76:65:cc:58:47:31:61:75:73:ac: 72:32:68:14:28:2e:21:bd:a7:b4:42:62:b5:8c:53: 84:38:8a:d0:e0:c9:5e:54:99:33:b7:43:d8:75:a0: eb:32:79:e3:5f:c7:b9:6b:20:95:b2:63:76:fe:83: 35:f6:39:a0:f6:fe:b7:6d:2f:3a:79:94:75:25:bb: 8d:a8:4f:df:5f:a5:19:f3:cd:2e:41:85:4e:fa:11: ce:52:d6:c4:15:36:6e:4d:d9:5c:d3:1f:a1:0d:98: d6:fd:5e:2d:31:ef:b5:b7:11:ef:55:52:c2:72:aa: 0e:fb:74:15:be:fd:e1:dc:f4:9e:76:3e:0a:31:07: 76:8c:1f:8a:27:3c:d5:13:47:96:a0:1e:ff:bf:44: 2e:4c:ac:05:49:f1:94:8b:36:4c:8a:64:d5:64:f5: 1e:8b:12:49:0c:d7:bd:b5:87:12:25:18:64:f6:f4: cf:dc:98:3c:67:dc:2e:de:e0:de:ad:14:b6:31:55: 9c:c9:81:cd:78:df:ba:b4:21:0e:5d:97:12:09:5b: f8:e9:a8:0c:79:9f:19:73:fd:7e:0f:60:66:b5:1e: 20:4c:34:6b:06:5e:1c:a8:c3:44:25:04:c6:16:a1: f8:b0:1b:b1:dc:25:3e:cf:82:68:80:99:2a:90:e0: ae:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:53:2D:0D:40:3A:B4:5D:33:33:F6:38:BD:E6:62:91:2C:9E:37:C5 X509v3 Authority Key Identifier: keyid:2D:D8:00:8D:E3:CF:F6:2D:2F:AC:A1:0D:99:FF:20:C3:E8:78:DC:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:4c:44:59:95:40:66:1a:4d:b9:fb:70:cf:9f:90:de:c6:21: a3:4f:05:20:e7:ba:68:f8:01:ab:8e:74:c7:64:58:e3:2b:e1: d4:13:08:68:9f:86:7a:f6:88:62:5f:62:51:a6:c4:e5:7b:29: c8:51:aa:7f:bb:6a:44:bb:2f:4d:60:c6:81:57:77:11:dc:d9: 1b:e2:bc:e4:7d:28:6e:1e:97:d4:c8:65:54:87:fb:f6:c8:25: f6:56:da:73:f0:e0:1a:b5:f6:44:60:54:ed:d8:61:68:53:52: 31:23:de:59:95:73:71:66:31:4d:e2:bb:b5:58:eb:03:09:fe: 90:7d:88:c2:73:ca:d3:e7:de:12:f7:89:99:66:1f:73:fa:61: 5e:37:e5:0e:d6:94:d9:89:f0:76:b4:63:8b:42:03:53:95:94: 28:89:12:f5:fd:fc:ec:36:08:9c:de:1d:59:e4:0b:8d:3a:27: 2e:23:ff:ed:72:8e:23:33:db:66:45:8b:f6:74:b7:65:06:24: ef:fe:63:04:27:87:19:04:de:b0:b2:d0:d3:b0:2f:be:2e:a3: 0d:0d:87:cf:44:45:43:ae:63:70:ff:10:b2:8f:93:79:e2:ca: 9f:21:67:fb:54:e4:f5:e6:65:07:f4:b8:3a:e7:f4:fc:1e:2a: 09:f8:a0:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIpSOkAZVKPi6xCQ9ioJwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZDgwMDhkZTNjZmY2MmQyZmFjYTEwZDk5ZmYyMGMzZTg3 OGRjZGYwHhcNMjYwMjA5MTYwMTA1WhcNMjYwMjEwMTYwMTA1WjAzMTEwLwYDVQQD Eyg3ZjUzMmQwZDQwM2FiNDVkMzMzM2Y2MzhiZGU2NjI5MTJjOWUzN2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoe7ALXZlzFhHMWF1c6xyMmgUKC4h vae0QmK1jFOEOIrQ4MleVJkzt0PYdaDrMnnjX8e5ayCVsmN2/oM19jmg9v63bS86 eZR1JbuNqE/fX6UZ880uQYVO+hHOUtbEFTZuTdlc0x+hDZjW/V4tMe+1txHvVVLC cqoO+3QVvv3h3PSedj4KMQd2jB+KJzzVE0eWoB7/v0QuTKwFSfGUizZMimTVZPUe ixJJDNe9tYcSJRhk9vTP3Jg8Z9wu3uDerRS2MVWcyYHNeN+6tCEOXZcSCVv46agM eZ8Zc/1+D2BmtR4gTDRrBl4cqMNEJQTGFqH4sBux3CU+z4JogJkqkOCu4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9TLQ1AOrRdMzP2OL3mYpEsnjfFMB8GA1UdIwQY MBaAFC3YAI3jz/YtL6yhDZn/IMPoeNzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGRnQWplUFA5aTB2cktFTm1mOGd3LWg0M044LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lNjc5NTYtZGUxOC00MGM0LWIwMTMt OTUxZTVhZmFlOWU3LzEvTGRnQWplUFA5aTB2cktFTm1mOGd3LWg0M044Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9lNjc5NTYtZGUxOC00MGM0LWIwMTMtOTUxZTVhZmFlOWU3 LzEvTGRnQWplUFA5aTB2cktFTm1mOGd3LWg0M044LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMExEWZVA ZhpNuftwz5+Q3sYho08FIOe6aPgBq450x2RY4yvh1BMIaJ+GevaIYl9iUabE5Xsp yFGqf7tqRLsvTWDGgVd3EdzZG+K85H0obh6X1MhlVIf79sgl9lbac/DgGrX2RGBU 7dhhaFNSMSPeWZVzcWYxTeK7tVjrAwn+kH2IwnPK0+feEveJmWYfc/phXjflDtaU 2YnwdrRji0IDU5WUKIkS9f387DYInN4dWeQLjTonLiP/7XKOIzPbZkWL9nS3ZQYk 7/5jBCeHGQTesLLQ07Avvi6jDQ2Hz0RFQ65jcP8Qso+TeeLKnyFn+1Tk9eZlB/S4 Ouf0/B4qCfigPg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:51 2026 by rpki-client