This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft File: L821BdHaE20AniDvGzY7AuMyUZ8.mft (raw, json) Hash identifier: 9SguFcngmYrHK8asx9PhnIADOeYKl7j94w+GyNrfFdM= Subject key identifier: 45:43:0F:F3:5A:ED:50:91:B1:FD:ED:8A:A5:C4:5E:EF:5B:D7:8F:3F Authority key identifier: 2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F Certificate issuer: /CN=2fcdb505d1da136d009e20ef1b363b02e332519f Certificate serial: 019C41A1575BDBF0710297135E50CE4BB12F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft Manifest number: 101C Signing time: Mon 09 Feb 2026 09:00:18 +0000 Manifest this update: Mon 09 Feb 2026 09:00:18 +0000 Manifest next update: Tue 10 Feb 2026 09:00:18 +0000 Files and hashes: 1: L821BdHaE20AniDvGzY7AuMyUZ8.crl (hash: YiiWAPpUjM3xdfiwijYYsHjrUq3L0VYdyLZo2PIA+QE=) 2: VWTOJ2jbvR1Qd3_jcYIVkSaTtaM.roa (hash: 4yjY0Y/5nyei1ONwFqlQ/gYOuf/J9WjX6PHuI2NreOo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:57:5b:db:f0:71:02:97:13:5e:50:ce:4b:b1:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fcdb505d1da136d009e20ef1b363b02e332519f Validity Not Before: Feb 9 09:00:18 2026 GMT Not After : Feb 10 09:00:18 2026 GMT Subject: CN=45430ff35aed5091b1fded8aa5c45eef5bd78f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:84:39:30:0e:84:05:04:5b:01:65:db:7b:e6: 1c:88:67:08:ce:0a:4d:5a:24:42:2b:4e:05:b9:30: 44:d5:ef:b9:a1:15:39:71:1c:a9:c0:dc:49:31:ce: 70:f3:cf:66:7e:46:65:c3:a1:4d:2c:ad:c7:4a:4d: 85:e2:09:2e:21:14:39:d5:1f:02:06:fd:d5:dd:78: 74:39:82:08:66:b4:fe:d5:a7:45:90:80:9b:d0:45: d5:2a:42:f7:b5:90:12:16:c5:51:94:59:32:cc:d7: 2d:a7:23:18:2f:97:b7:c3:e5:47:77:3a:5d:b2:50: d3:b8:1d:bb:22:df:de:e0:ff:38:69:63:ba:23:fe: 32:b7:5e:bf:e7:3d:ca:20:ae:bd:c4:e8:f8:aa:07: 18:4b:45:25:81:e2:bd:4c:74:9a:53:38:fd:64:92: fc:45:ba:d0:7d:83:b0:df:bb:10:5b:29:32:00:88: c0:45:6c:0a:53:13:87:73:d7:47:1e:eb:30:7f:83: 60:78:74:8c:cf:29:66:78:a3:df:55:48:18:98:92: 80:ce:b9:0d:f6:03:ff:6d:05:10:58:01:c4:9b:0f: 8f:3b:38:a0:13:b9:57:39:d2:93:91:1b:21:a7:de: cd:ba:78:c3:42:ac:63:86:c7:e9:da:0a:4a:f2:20: bc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:43:0F:F3:5A:ED:50:91:B1:FD:ED:8A:A5:C4:5E:EF:5B:D7:8F:3F X509v3 Authority Key Identifier: keyid:2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:bf:97:22:48:40:d1:02:5e:bd:b9:72:63:47:50:a6:b1:b1: 00:29:81:d5:f5:5b:20:ce:af:7f:43:8e:7e:9a:1d:e6:97:7b: b5:88:0d:12:64:45:4b:a4:e1:e9:91:8f:b0:36:7b:1b:bb:e9: 7c:35:dc:f9:72:f9:e7:c0:02:d8:26:47:a6:0f:74:87:c9:db: 76:9e:b5:82:4a:85:db:46:21:e5:77:da:b5:c9:05:e5:63:5f: a5:53:2b:5f:8e:a5:52:a6:c7:9f:d8:d2:55:61:46:c8:00:86: 93:76:ce:19:71:7f:32:ad:52:53:cb:4f:51:14:a1:df:15:d0: 8a:84:20:61:ac:8a:27:8a:54:2d:86:7c:de:3c:83:00:39:80: 06:d0:85:d4:dc:6b:7b:8f:f0:8d:76:48:ef:9d:de:8b:b8:b0: b5:5e:68:e8:4e:23:df:8b:51:93:82:6b:e6:8f:1a:ae:95:ed: bc:e5:31:93:39:4b:74:69:a9:28:a7:34:95:4d:84:2a:85:2c: d9:01:83:87:ce:a2:55:77:a7:d5:ed:0e:5c:82:73:1f:b9:39: bc:11:d2:fa:18:61:7c:6c:be:34:50:74:8d:fb:75:05:df:85: ad:b8:24:ce:48:20:26:80:55:1e:48:3b:74:e7:66:0d:a3:ec: 6b:7a:5c:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoVdb2/BxApcTXlDOS7EvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmY2RiNTA1ZDFkYTEzNmQwMDllMjBlZjFiMzYzYjAyZTMz MjUxOWYwHhcNMjYwMjA5MDkwMDE4WhcNMjYwMjEwMDkwMDE4WjAzMTEwLwYDVQQD Eyg0NTQzMGZmMzVhZWQ1MDkxYjFmZGVkOGFhNWM0NWVlZjViZDc4ZjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIQ5MA6EBQRbAWXbe+YciGcIzgpN WiRCK04FuTBE1e+5oRU5cRypwNxJMc5w889mfkZlw6FNLK3HSk2F4gkuIRQ51R8C Bv3V3Xh0OYIIZrT+1adFkICb0EXVKkL3tZASFsVRlFkyzNctpyMYL5e3w+VHdzpd slDTuB27It/e4P84aWO6I/4yt16/5z3KIK69xOj4qgcYS0UlgeK9THSaUzj9ZJL8 RbrQfYOw37sQWykyAIjARWwKUxOHc9dHHuswf4NgeHSMzylmeKPfVUgYmJKAzrkN 9gP/bQUQWAHEmw+POzigE7lXOdKTkRshp97NunjDQqxjhsfp2gpK8iC8EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEVDD/Na7VCRsf3tiqXEXu9b148/MB8GA1UdIwQY MBaAFC/NtQXR2hNtAJ4g7xs2OwLjMlGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDgyMUJkSGFFMjBBbmlEdkd6WTdBdU15VVo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yYTRiZmUtNzY4OC00NmExLTlhZmYt Y2ViMDcxMGEwNzUxLzEvTDgyMUJkSGFFMjBBbmlEdkd6WTdBdU15VVo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8yYTRiZmUtNzY4OC00NmExLTlhZmYtY2ViMDcxMGEwNzUx LzEvTDgyMUJkSGFFMjBBbmlEdkd6WTdBdU15VVo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFb+XIkhA 0QJevblyY0dQprGxACmB1fVbIM6vf0OOfpod5pd7tYgNEmRFS6Th6ZGPsDZ7G7vp fDXc+XL558AC2CZHpg90h8nbdp61gkqF20Yh5XfatckF5WNfpVMrX46lUqbHn9jS VWFGyACGk3bOGXF/Mq1SU8tPURSh3xXQioQgYayKJ4pULYZ83jyDADmABtCF1Nxr e4/wjXZI753ei7iwtV5o6E4j34tRk4Jr5o8arpXtvOUxkzlLdGmpKKc0lU2EKoUs 2QGDh86iVXen1e0OXIJzH7k5vBHS+hhhfGy+NFB0jft1Bd+FrbgkzkggJoBVHkg7 dOdmDaPsa3pc9g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:25 2026 by rpki-client