This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2a67af-893d-4a16-9b5d-d369de30123d/1/lRA3CHxvfGzzPIDGzNS_RdjpPDg.mft File: lRA3CHxvfGzzPIDGzNS_RdjpPDg.mft (raw, json) Hash identifier: pG8ZUyWNQD5LEEU1AZVjwN61/+YdLmQtIXqce1TpKNg= Subject key identifier: 1D:AD:2D:3C:0F:A1:0A:C3:FB:39:58:53:75:11:43:E7:EC:32:88:9C Authority key identifier: 95:10:37:08:7C:6F:7C:6C:F3:3C:80:C6:CC:D4:BF:45:D8:E9:3C:38 Certificate issuer: /CN=951037087c6f7c6cf33c80c6ccd4bf45d8e93c38 Certificate serial: 019C42B41CBA644506BAE926418CF99F94D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRA3CHxvfGzzPIDGzNS_RdjpPDg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a67af-893d-4a16-9b5d-d369de30123d/1/lRA3CHxvfGzzPIDGzNS_RdjpPDg.mft Manifest number: 0A Signing time: Mon 09 Feb 2026 14:00:25 +0000 Manifest this update: Mon 09 Feb 2026 14:00:25 +0000 Manifest next update: Tue 10 Feb 2026 14:00:25 +0000 Files and hashes: 1: lRA3CHxvfGzzPIDGzNS_RdjpPDg.crl (hash: EQ15EUaUza6W5WTTGRXEY4GzPg7GQq60E69HNHufATY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a67af-893d-4a16-9b5d-d369de30123d/1/lRA3CHxvfGzzPIDGzNS_RdjpPDg.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/2a67af-893d-4a16-9b5d-d369de30123d/1/lRA3CHxvfGzzPIDGzNS_RdjpPDg.mft rsync://rpki.ripe.net/repository/DEFAULT/lRA3CHxvfGzzPIDGzNS_RdjpPDg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:1c:ba:64:45:06:ba:e9:26:41:8c:f9:9f:94:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=951037087c6f7c6cf33c80c6ccd4bf45d8e93c38 Validity Not Before: Feb 9 14:00:25 2026 GMT Not After : Feb 10 14:00:25 2026 GMT Subject: CN=1dad2d3c0fa10ac3fb395853751143e7ec32889c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cc:74:3b:a4:3a:8b:a2:54:21:86:1a:cd:3d: a7:8d:bd:f4:9b:1b:fb:b2:03:55:13:bc:f8:8f:64: 28:46:89:30:5b:90:69:2d:38:a3:f1:48:e1:ad:b2: 66:00:f9:3b:6e:0b:7d:40:63:6b:51:7e:37:ff:d5: 18:64:2c:a2:cc:58:93:ed:32:0d:68:c5:02:a6:79: 61:84:fc:45:1a:bb:dc:b0:b4:b8:eb:cf:8b:71:38: 4b:05:18:7b:9e:0a:62:da:54:4b:e4:0c:e8:26:a5: c2:37:48:00:f9:db:69:4a:42:88:06:f3:42:6c:bf: 2a:bb:5b:68:97:55:20:d3:16:87:7d:d6:ed:e7:da: 3c:75:81:08:3c:72:eb:9c:5e:83:f6:7d:67:c4:4e: 0e:f0:e7:34:4b:06:26:cf:58:f6:b3:cf:e5:f3:00: bd:d7:96:6a:3b:9b:49:59:f1:7e:72:1d:8f:29:05: 3d:47:df:2e:d0:03:a3:4f:9f:e2:f0:e8:d0:bc:28: 4d:28:4c:35:6f:ce:cb:46:67:77:e5:36:b7:de:ff: 7a:e8:7b:e9:c5:47:ca:90:68:be:58:1c:fe:31:08: b0:f9:48:73:bc:dc:c9:8c:70:3a:3a:d5:d8:41:94: bd:d5:94:8b:2b:c0:d9:8f:da:b8:e2:81:c4:55:d2: 26:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AD:2D:3C:0F:A1:0A:C3:FB:39:58:53:75:11:43:E7:EC:32:88:9C X509v3 Authority Key Identifier: keyid:95:10:37:08:7C:6F:7C:6C:F3:3C:80:C6:CC:D4:BF:45:D8:E9:3C:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRA3CHxvfGzzPIDGzNS_RdjpPDg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a67af-893d-4a16-9b5d-d369de30123d/1/lRA3CHxvfGzzPIDGzNS_RdjpPDg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a67af-893d-4a16-9b5d-d369de30123d/1/lRA3CHxvfGzzPIDGzNS_RdjpPDg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:a0:00:ec:ee:8d:f6:ac:e0:30:1a:77:2f:1d:fe:d7:57:85: b9:55:1e:1b:54:01:25:35:28:f8:6f:2d:11:78:55:b9:6e:4b: e4:69:7c:78:fc:5c:2d:29:56:22:8e:a9:4d:50:ad:85:07:54: 09:46:39:5b:30:e5:f0:db:40:aa:c0:40:b6:f3:6c:3b:39:33: d2:d6:61:3e:e1:ab:c0:e8:3c:0a:c5:0a:6c:35:8d:28:6d:1a: eb:f1:cf:76:58:7b:ee:98:8a:ef:93:5a:a7:7c:30:2d:e6:f8: 37:b0:ad:26:fa:cb:0e:e0:da:03:f6:ff:8e:87:a0:02:12:44: 98:76:5b:8c:4d:eb:1a:05:af:d0:51:d5:64:d9:a4:da:c9:be: a5:e9:12:99:d3:a9:75:0a:1c:6e:94:5e:c3:e7:d7:27:e6:d9: 8f:74:09:39:26:03:9c:9b:7b:15:70:fe:35:4a:90:6e:65:72: f5:7d:7e:96:de:64:fc:fa:8a:d9:34:57:f8:05:f1:ae:2a:28: e9:ee:c1:c2:d6:12:6d:94:29:47:95:53:68:e0:f3:bb:74:e0: 8a:70:d8:2a:c7:8b:5d:20:3b:03:ab:8a:b6:54:ad:d2:50:6a: a4:ff:d0:b1:10:7b:42:2b:f5:9e:6f:e5:76:ac:84:69:fc:7d: 8f:c2:6a:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtBy6ZEUGuukmQYz5n5TZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MTAzNzA4N2M2ZjdjNmNmMzNjODBjNmNjZDRiZjQ1ZDhl OTNjMzgwHhcNMjYwMjA5MTQwMDI1WhcNMjYwMjEwMTQwMDI1WjAzMTEwLwYDVQQD EygxZGFkMmQzYzBmYTEwYWMzZmIzOTU4NTM3NTExNDNlN2VjMzI4ODljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8x0O6Q6i6JUIYYazT2njb30mxv7 sgNVE7z4j2QoRokwW5BpLTij8UjhrbJmAPk7bgt9QGNrUX43/9UYZCyizFiT7TIN aMUCpnlhhPxFGrvcsLS468+LcThLBRh7ngpi2lRL5AzoJqXCN0gA+dtpSkKIBvNC bL8qu1tol1Ug0xaHfdbt59o8dYEIPHLrnF6D9n1nxE4O8Oc0SwYmz1j2s8/l8wC9 15ZqO5tJWfF+ch2PKQU9R98u0AOjT5/i8OjQvChNKEw1b87LRmd35Ta33v966Hvp xUfKkGi+WBz+MQiw+UhzvNzJjHA6OtXYQZS91ZSLK8DZj9q44oHEVdImxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2tLTwPoQrD+zlYU3URQ+fsMoicMB8GA1UdIwQY MBaAFJUQNwh8b3xs8zyAxszUv0XY6Tw4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFJBM0NIeHZmR3p6UElER3pOU19SZGpwUERnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yYTY3YWYtODkzZC00YTE2LTliNWQt ZDM2OWRlMzAxMjNkLzEvbFJBM0NIeHZmR3p6UElER3pOU19SZGpwUERnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8yYTY3YWYtODkzZC00YTE2LTliNWQtZDM2OWRlMzAxMjNk LzEvbFJBM0NIeHZmR3p6UElER3pOU19SZGpwUERnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGaAA7O6N 9qzgMBp3Lx3+11eFuVUeG1QBJTUo+G8tEXhVuW5L5Gl8ePxcLSlWIo6pTVCthQdU CUY5WzDl8NtAqsBAtvNsOzkz0tZhPuGrwOg8CsUKbDWNKG0a6/HPdlh77piK75Na p3wwLeb4N7CtJvrLDuDaA/b/joegAhJEmHZbjE3rGgWv0FHVZNmk2sm+pekSmdOp dQocbpRew+fXJ+bZj3QJOSYDnJt7FXD+NUqQbmVy9X1+lt5k/PqK2TRX+AXxrioo 6e7BwtYSbZQpR5VTaODzu3TginDYKseLXSA7A6uKtlSt0lBqpP/QsRB7Qiv1nm/l dqyEafx9j8JqGQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:26 2026 by rpki-client