This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft File: LokBk3Q73yTdIsPtbyizAxouyAY.mft (raw, json) Hash identifier: HocDLY4VF+BE0+lYfg/71LfoVP//zMHKvkCe44LdyHY= Subject key identifier: 1F:6C:F0:5F:AB:D0:A6:52:D8:D4:57:0A:5A:60:71:4B:89:7F:45:92 Authority key identifier: 2E:89:01:93:74:3B:DF:24:DD:22:C3:ED:6F:28:B3:03:1A:2E:C8:06 Certificate issuer: /CN=2e890193743bdf24dd22c3ed6f28b3031a2ec806 Certificate serial: 019C42EB9AA873AA04D1B9ACE8E302ADF38E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft Manifest number: 139E Signing time: Mon 09 Feb 2026 15:01:02 +0000 Manifest this update: Mon 09 Feb 2026 15:01:02 +0000 Manifest next update: Tue 10 Feb 2026 15:01:02 +0000 Files and hashes: 1: D53jq87Ju_5W2NurMBsvi2B8EpQ.roa (hash: EUilHlQj2DNSvq/wFdSzVtzevf4M4P6120duAQtu7rI=) 2: LokBk3Q73yTdIsPtbyizAxouyAY.crl (hash: bH51F//xElxEw0gKe2PTtXS0bHz0rBXoe53tNNwECno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:9a:a8:73:aa:04:d1:b9:ac:e8:e3:02:ad:f3:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e890193743bdf24dd22c3ed6f28b3031a2ec806 Validity Not Before: Feb 9 15:01:02 2026 GMT Not After : Feb 10 15:01:02 2026 GMT Subject: CN=1f6cf05fabd0a652d8d4570a5a60714b897f4592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:79:30:99:cf:cc:9d:80:1b:35:a4:e2:17:37: cb:c2:16:19:da:9b:a4:b7:55:5c:81:ef:ba:cf:c1: 0f:3e:84:7f:85:e7:ac:1f:7e:e1:d6:5b:2c:4e:2e: d6:5c:ed:26:e0:a0:27:56:c0:80:d5:e6:22:88:80: 82:5f:13:fc:f7:54:09:73:ad:59:c3:f7:a9:6b:59: 62:58:51:26:1d:28:e6:be:99:79:09:7e:a2:38:38: fe:17:fb:f3:6e:05:cc:6a:dc:2d:eb:7f:64:ee:37: 1c:55:83:53:22:39:db:7f:83:d3:b4:03:2d:71:1e: 51:4a:d4:5f:cd:f8:22:1e:10:db:b7:6b:ba:ae:43: 76:4c:d9:fb:9f:3a:87:0f:91:71:ba:e1:18:c1:7a: 97:15:74:24:8d:a0:5a:12:51:d0:21:70:c3:50:c1: e6:a1:0c:71:14:49:34:51:5d:cc:e3:6f:4d:dd:79: 62:66:41:fa:f9:08:ca:66:6e:9c:b1:a7:80:ef:74: 3e:91:e3:bf:f7:26:07:a9:2e:f9:ea:69:85:ee:7f: ed:43:26:04:2d:c1:10:3f:ea:c1:7e:5a:ac:28:17: 7c:f7:1a:27:d6:51:35:b4:86:9d:fd:e4:3a:d5:0a: c6:01:0e:49:b8:cc:dc:07:25:47:b1:04:0c:c5:aa: a6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:6C:F0:5F:AB:D0:A6:52:D8:D4:57:0A:5A:60:71:4B:89:7F:45:92 X509v3 Authority Key Identifier: keyid:2E:89:01:93:74:3B:DF:24:DD:22:C3:ED:6F:28:B3:03:1A:2E:C8:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:d9:30:36:cb:68:51:f2:85:8f:4e:8f:90:1d:7e:e7:57:22: 89:9f:b3:32:8b:39:94:ec:57:a0:7e:ad:e7:3c:41:d6:5c:04: db:0c:97:ea:1a:7b:e5:1e:88:55:db:67:8a:52:bc:ac:fa:24: f1:ca:f9:58:83:1f:85:a7:52:bc:9b:ed:89:a6:45:47:1d:47: d7:a4:d4:46:44:05:11:98:d1:8a:6c:e3:8a:40:9f:54:da:7d: 29:eb:1d:55:31:d2:67:64:38:b1:0a:a7:02:aa:00:61:46:1e: c7:31:d4:d9:72:d4:e4:f3:a9:33:04:e0:97:b0:de:91:d6:45: 59:d8:dc:13:da:46:50:19:7e:9d:46:46:8e:05:28:37:ce:23: 49:f9:51:19:e2:91:b5:23:bc:aa:af:f2:95:d9:c7:e0:17:5c: 23:d7:3a:a2:32:b3:f1:d9:67:7e:6f:b8:38:d5:81:57:e2:35: 05:07:5c:4d:2c:dc:94:88:42:fb:af:f9:4d:6d:a7:d8:6c:38: 59:a5:1a:52:c8:c7:db:c5:8f:53:1d:5f:be:0f:d0:da:34:bb: 65:26:53:5e:9f:f1:7e:ce:67:a4:c4:6f:37:6b:ba:0b:d0:a4: 2e:0e:51:4e:2a:14:d5:6a:1d:3a:6c:8b:08:14:32:43:3f:82: 41:85:b3:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC65qoc6oE0bms6OMCrfOOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODkwMTkzNzQzYmRmMjRkZDIyYzNlZDZmMjhiMzAzMWEy ZWM4MDYwHhcNMjYwMjA5MTUwMTAyWhcNMjYwMjEwMTUwMTAyWjAzMTEwLwYDVQQD EygxZjZjZjA1ZmFiZDBhNjUyZDhkNDU3MGE1YTYwNzE0Yjg5N2Y0NTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnkwmc/MnYAbNaTiFzfLwhYZ2puk t1Vcge+6z8EPPoR/heesH37h1lssTi7WXO0m4KAnVsCA1eYiiICCXxP891QJc61Z w/epa1liWFEmHSjmvpl5CX6iODj+F/vzbgXMatwt639k7jccVYNTIjnbf4PTtAMt cR5RStRfzfgiHhDbt2u6rkN2TNn7nzqHD5FxuuEYwXqXFXQkjaBaElHQIXDDUMHm oQxxFEk0UV3M429N3XliZkH6+QjKZm6csaeA73Q+keO/9yYHqS756mmF7n/tQyYE LcEQP+rBflqsKBd89xon1lE1tIad/eQ61QrGAQ5JuMzcByVHsQQMxaqmKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9s8F+r0KZS2NRXClpgcUuJf0WSMB8GA1UdIwQY MBaAFC6JAZN0O98k3SLD7W8oswMaLsgGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9rQmszUTczeVRkSXNQdGJ5aXpBeG91eUFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy84YzI3YWEtYjUwMC00Yzk2LTg0ZWMt ZjhiZTQ5NTI1MmIwLzEvTG9rQmszUTczeVRkSXNQdGJ5aXpBeG91eUFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy84YzI3YWEtYjUwMC00Yzk2LTg0ZWMtZjhiZTQ5NTI1MmIw LzEvTG9rQmszUTczeVRkSXNQdGJ5aXpBeG91eUFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEdkwNsto UfKFj06PkB1+51ciiZ+zMos5lOxXoH6t5zxB1lwE2wyX6hp75R6IVdtnilK8rPok 8cr5WIMfhadSvJvtiaZFRx1H16TURkQFEZjRimzjikCfVNp9KesdVTHSZ2Q4sQqn AqoAYUYexzHU2XLU5POpMwTgl7DekdZFWdjcE9pGUBl+nUZGjgUoN84jSflRGeKR tSO8qq/yldnH4BdcI9c6ojKz8dlnfm+4ONWBV+I1BQdcTSzclIhC+6/5TW2n2Gw4 WaUaUsjH28WPUx1fvg/Q2jS7ZSZTXp/xfs5npMRvN2u6C9CkLg5RTioU1WodOmyL CBQyQz+CQYWzFQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:45:15 2026 by rpki-client