This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft File: lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft (raw, json) Hash identifier: z/6XYsdkJeVeeUUz5KGMV8/2OCEPyPDDUQ6d6+EQWJk= Subject key identifier: 31:F9:E4:6A:1A:C2:4E:F1:5A:DD:41:8D:07:D9:21:52:77:8A:76:2F Authority key identifier: 96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13 Certificate issuer: /CN=96b8121d556df453456553dcb45c4143f4cdd213 Certificate serial: 019C420F1F7C00DDBF0BEDF469C39D3EBB96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft Manifest number: 0A90 Signing time: Mon 09 Feb 2026 11:00:13 +0000 Manifest this update: Mon 09 Feb 2026 11:00:13 +0000 Manifest next update: Tue 10 Feb 2026 11:00:13 +0000 Files and hashes: 1: KKTxvi4QT-uw2rVsD47tdsRqIEw.roa (hash: xejVwgC/oSDE2f2FYXW8noid3jsDDlJ6in2DKcaZdI8=) 2: lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl (hash: qudB7WFwpY/ksiwfbh6hk9MMcnMuaL1w9WzYzbiF3hQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:1f:7c:00:dd:bf:0b:ed:f4:69:c3:9d:3e:bb:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96b8121d556df453456553dcb45c4143f4cdd213 Validity Not Before: Feb 9 11:00:13 2026 GMT Not After : Feb 10 11:00:13 2026 GMT Subject: CN=31f9e46a1ac24ef15add418d07d92152778a762f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:a9:8d:e2:30:40:a3:34:5e:9a:a3:1a:a6:b0: b4:6d:69:43:28:38:9a:f6:27:8a:fb:be:61:08:a6: 78:07:e4:24:3f:e6:64:50:3b:48:0a:99:7f:d6:36: b5:5b:fb:c7:e8:c0:59:4d:56:25:54:d1:43:47:7d: 99:1d:e0:d0:8a:17:b0:11:08:18:1a:1e:51:bc:32: a8:b0:cd:23:41:3f:f3:b2:bd:22:c7:b8:6a:96:c7: 77:ce:e5:f2:9a:f1:95:33:4e:86:74:1f:f6:4a:ea: 4b:91:1c:6e:4a:f5:91:b4:fd:c5:99:49:7b:53:97: c0:84:84:45:eb:8c:95:72:fe:ee:cf:01:c4:61:69: e1:fd:b9:ee:83:9b:88:2b:df:93:17:02:4d:00:69: 72:60:b2:9c:a1:f5:18:37:b1:7d:ca:9e:3f:23:a9: 13:23:6d:85:e8:20:f7:fa:af:e5:2a:9f:38:e3:01: 24:98:87:1c:d5:7c:24:79:37:65:71:f6:57:37:ec: f8:e7:9e:b1:3c:e6:0b:87:46:12:30:2e:d6:5c:a9: ae:c9:70:f7:a5:3c:92:b1:f7:29:08:0c:05:06:f6: 7b:99:f0:b1:42:4b:d4:73:13:47:1e:c4:f9:84:2c: 3f:79:22:ff:fe:14:73:3e:b9:9b:72:d4:13:cd:df: e0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F9:E4:6A:1A:C2:4E:F1:5A:DD:41:8D:07:D9:21:52:77:8A:76:2F X509v3 Authority Key Identifier: keyid:96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:82:68:81:0f:53:67:08:56:7d:1a:6c:b3:5c:8f:bf:12:bc: a7:17:83:c5:ae:17:cb:77:98:34:bb:3b:06:7d:10:0b:26:77: 8a:e3:f8:04:38:ce:2f:d4:f1:31:e9:a2:26:1e:5f:47:60:b7: 36:7d:7a:8e:c5:26:cb:61:ee:e6:ea:bf:9a:96:85:84:1c:ad: f9:92:98:c9:33:b6:05:ce:e3:83:9b:cc:c3:4a:6d:10:aa:c7: 2a:b4:d7:2a:2f:bb:d5:74:b0:04:67:b5:75:8d:fd:2a:ad:ea: 39:07:d2:6c:7b:61:f8:c6:61:5e:c4:37:76:69:77:ca:df:f1: 6c:2d:37:0d:b9:7d:f9:d6:10:5d:93:8a:a2:22:0f:65:91:6f: 02:41:74:31:f7:cc:c9:19:ca:f2:c0:61:b5:50:d6:94:05:8c: 12:08:6a:51:c2:35:35:36:d4:f5:42:70:44:dd:d5:2f:d5:7e: d4:76:6c:2a:d5:b7:38:32:7b:41:84:18:75:06:4f:b5:5b:90: 35:ea:f3:5a:59:8c:41:10:9e:3a:54:49:e9:9c:3c:e2:a8:16: 2b:04:2a:cf:1a:da:0d:f5:58:b8:3f:fc:e8:ac:49:5b:17:64: ad:30:8d:b9:d1:45:90:ff:9f:29:2d:62:bb:49:0c:97:08:0a: 9d:bf:f9:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCDx98AN2/C+30acOdPruWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YjgxMjFkNTU2ZGY0NTM0NTY1NTNkY2I0NWM0MTQzZjRj ZGQyMTMwHhcNMjYwMjA5MTEwMDEzWhcNMjYwMjEwMTEwMDEzWjAzMTEwLwYDVQQD EygzMWY5ZTQ2YTFhYzI0ZWYxNWFkZDQxOGQwN2Q5MjE1Mjc3OGE3NjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9KmN4jBAozRemqMaprC0bWlDKDia 9ieK+75hCKZ4B+QkP+ZkUDtICpl/1ja1W/vH6MBZTVYlVNFDR32ZHeDQihewEQgY Gh5RvDKosM0jQT/zsr0ix7hqlsd3zuXymvGVM06GdB/2SupLkRxuSvWRtP3FmUl7 U5fAhIRF64yVcv7uzwHEYWnh/bnug5uIK9+TFwJNAGlyYLKcofUYN7F9yp4/I6kT I22F6CD3+q/lKp844wEkmIcc1XwkeTdlcfZXN+z4556xPOYLh0YSMC7WXKmuyXD3 pTySsfcpCAwFBvZ7mfCxQkvUcxNHHsT5hCw/eSL//hRzPrmbctQTzd/gbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDH55Goawk7xWt1BjQfZIVJ3inYvMB8GA1UdIwQY MBaAFJa4Eh1VbfRTRWVT3LRcQUP0zdITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHJnU0hWVnQ5Rk5GWlZQY3RGeEJRX1ROMGhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kNjY1ZTYtZjk1ZC00MzQ3LTg1NjUt ZDRmNTMxN2M1ODMwLzEvbHJnU0hWVnQ5Rk5GWlZQY3RGeEJRX1ROMGhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9kNjY1ZTYtZjk1ZC00MzQ3LTg1NjUtZDRmNTMxN2M1ODMw LzEvbHJnU0hWVnQ5Rk5GWlZQY3RGeEJRX1ROMGhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQoJogQ9T ZwhWfRpss1yPvxK8pxeDxa4Xy3eYNLs7Bn0QCyZ3iuP4BDjOL9TxMemiJh5fR2C3 Nn16jsUmy2Hu5uq/mpaFhByt+ZKYyTO2Bc7jg5vMw0ptEKrHKrTXKi+71XSwBGe1 dY39Kq3qOQfSbHth+MZhXsQ3dml3yt/xbC03Dbl9+dYQXZOKoiIPZZFvAkF0MffM yRnK8sBhtVDWlAWMEghqUcI1NTbU9UJwRN3VL9V+1HZsKtW3ODJ7QYQYdQZPtVuQ NerzWlmMQRCeOlRJ6Zw84qgWKwQqzxraDfVYuD/86KxJWxdkrTCNudFFkP+fKS1i u0kMlwgKnb/51w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:18 2026 by rpki-client