This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft File: lnL-hxW2OhIO19Bn61Jf5LbekPc.mft (raw, json) Hash identifier: fG3rvMvl7T7Q6M5FMwhJqbg/VxadSSg6o73BDA+uQxU= Subject key identifier: 14:41:20:9F:A2:96:2F:75:EC:62:C9:63:2A:69:8D:4E:8C:39:AA:08 Authority key identifier: 96:72:FE:87:15:B6:3A:12:0E:D7:D0:67:EB:52:5F:E4:B6:DE:90:F7 Certificate issuer: /CN=9672fe8715b63a120ed7d067eb525fe4b6de90f7 Certificate serial: 019C41A1480FAF75E85725C781DF9BC2F9E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnL-hxW2OhIO19Bn61Jf5LbekPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft Manifest number: 17CA Signing time: Mon 09 Feb 2026 09:00:14 +0000 Manifest this update: Mon 09 Feb 2026 09:00:14 +0000 Manifest next update: Tue 10 Feb 2026 09:00:14 +0000 Files and hashes: 1: lnL-hxW2OhIO19Bn61Jf5LbekPc.crl (hash: od8f5RPnW4bq3/Xq1gIVaYOGN3MAjl8S9WBRnjhZD2M=) 2: zUjhpvzG-Lc2pgcOBOyUOhZ_jQc.roa (hash: hHpsqIho1J3apISkIRQoEpNvpz7x6zawHtlFWWSFpsI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft rsync://rpki.ripe.net/repository/DEFAULT/lnL-hxW2OhIO19Bn61Jf5LbekPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:48:0f:af:75:e8:57:25:c7:81:df:9b:c2:f9:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9672fe8715b63a120ed7d067eb525fe4b6de90f7 Validity Not Before: Feb 9 09:00:14 2026 GMT Not After : Feb 10 09:00:14 2026 GMT Subject: CN=1441209fa2962f75ec62c9632a698d4e8c39aa08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:cf:32:d4:c7:cd:8b:a1:9e:9a:47:d8:3e:0e: 36:23:87:6e:51:3e:5f:b7:c4:df:1b:4c:39:9f:ca: 95:c3:8a:ee:41:23:b1:bf:e6:b0:09:a6:d1:4c:39: 8b:eb:6b:f8:c0:dc:64:52:74:5c:a5:af:ee:89:b1: 58:1c:1a:c7:76:9f:14:19:49:58:3d:ea:07:1e:63: 8f:f6:4c:87:72:04:26:b2:43:ce:c6:77:26:77:d1: e1:a0:de:0c:65:37:e3:55:a7:af:1f:e5:a8:12:ea: 14:23:8f:a9:7d:84:73:1d:c4:08:b3:db:99:23:b1: 4b:37:ee:b5:bc:fb:2a:16:ee:c1:ad:b9:d4:26:2e: c1:38:f8:d2:7c:e9:b5:86:f1:aa:dc:0b:93:1b:13: 1e:1f:40:b7:ab:b8:01:3e:6d:89:ca:e5:82:dd:bf: 37:f0:6b:a7:3b:95:19:0d:c6:80:1e:4a:37:c2:e2: de:81:e7:0a:39:a4:18:02:90:b7:56:7e:51:0b:f8: c9:1a:0a:8b:49:77:51:0a:13:e8:12:bb:d5:0c:0a: 5d:0e:b6:44:21:16:21:94:b5:32:ef:af:4a:c5:37: 70:e7:d6:dd:95:f7:71:21:01:7d:90:d6:d4:f5:07: de:65:2a:7b:38:fd:15:34:36:22:b4:1c:79:3a:6e: 53:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:41:20:9F:A2:96:2F:75:EC:62:C9:63:2A:69:8D:4E:8C:39:AA:08 X509v3 Authority Key Identifier: keyid:96:72:FE:87:15:B6:3A:12:0E:D7:D0:67:EB:52:5F:E4:B6:DE:90:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnL-hxW2OhIO19Bn61Jf5LbekPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:eb:f4:36:dd:05:86:3c:45:4f:04:45:10:91:6b:bb:82:b7: 50:47:14:64:74:32:ca:e8:b2:36:1a:9e:8f:64:11:74:67:e3: b9:d6:92:46:60:3b:80:f9:ab:67:a7:1b:9d:64:67:53:63:7c: d7:5d:de:2f:fb:de:99:40:0e:ab:e1:fa:bf:73:12:18:c1:51: b3:6d:4e:7c:77:ef:a6:ea:1c:fd:2f:3a:10:54:0f:be:12:39: b1:ae:6d:04:7d:ef:47:a6:c2:fd:fc:6f:1d:76:06:b7:d7:85: b3:e0:a5:68:cc:ab:65:9b:d3:68:d8:4f:c5:1d:46:0e:99:c4: d8:a0:5b:ef:92:f0:5a:20:b2:0a:e2:ce:bc:70:e1:e0:26:34: 09:45:d0:c3:04:54:20:6f:6c:77:87:98:8a:0f:21:4f:ce:57: 9e:e0:b2:70:27:37:fe:56:e0:ca:63:8c:be:aa:a6:fa:04:f8: 59:2b:b6:0e:ff:fe:6f:a5:f3:9f:20:1a:a6:22:11:28:e7:85: 84:f5:a7:16:35:12:73:3c:d3:6d:2c:9b:d6:5b:b5:06:cf:7f: 80:2a:25:00:90:59:e5:34:b6:ae:75:eb:32:a8:f8:3a:56:eb: 56:6a:14:2b:fc:36:36:24:37:40:9e:e3:a5:e0:27:42:4c:37: c1:36:c7:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoUgPr3XoVyXHgd+bwvnhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NzJmZTg3MTViNjNhMTIwZWQ3ZDA2N2ViNTI1ZmU0YjZk ZTkwZjcwHhcNMjYwMjA5MDkwMDE0WhcNMjYwMjEwMDkwMDE0WjAzMTEwLwYDVQQD EygxNDQxMjA5ZmEyOTYyZjc1ZWM2MmM5NjMyYTY5OGQ0ZThjMzlhYTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4s8y1MfNi6GemkfYPg42I4duUT5f t8TfG0w5n8qVw4ruQSOxv+awCabRTDmL62v4wNxkUnRcpa/uibFYHBrHdp8UGUlY PeoHHmOP9kyHcgQmskPOxncmd9HhoN4MZTfjVaevH+WoEuoUI4+pfYRzHcQIs9uZ I7FLN+61vPsqFu7BrbnUJi7BOPjSfOm1hvGq3AuTGxMeH0C3q7gBPm2JyuWC3b83 8GunO5UZDcaAHko3wuLegecKOaQYApC3Vn5RC/jJGgqLSXdRChPoErvVDApdDrZE IRYhlLUy769KxTdw59bdlfdxIQF9kNbU9QfeZSp7OP0VNDYitBx5Om5TnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRBIJ+ili917GLJYyppjU6MOaoIMB8GA1UdIwQY MBaAFJZy/ocVtjoSDtfQZ+tSX+S23pD3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG5MLWh4VzJPaElPMTlCbjYxSmY1TGJla1BjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC85NmI1OTctY2EyYi00YTljLWJiODIt NWJiZTdiMjBmM2ZjLzEvbG5MLWh4VzJPaElPMTlCbjYxSmY1TGJla1BjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC85NmI1OTctY2EyYi00YTljLWJiODItNWJiZTdiMjBmM2Zj LzEvbG5MLWh4VzJPaElPMTlCbjYxSmY1TGJla1BjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu+v0Nt0F hjxFTwRFEJFru4K3UEcUZHQyyuiyNhqej2QRdGfjudaSRmA7gPmrZ6cbnWRnU2N8 113eL/vemUAOq+H6v3MSGMFRs21OfHfvpuoc/S86EFQPvhI5sa5tBH3vR6bC/fxv HXYGt9eFs+ClaMyrZZvTaNhPxR1GDpnE2KBb75LwWiCyCuLOvHDh4CY0CUXQwwRU IG9sd4eYig8hT85XnuCycCc3/lbgymOMvqqm+gT4WSu2Dv/+b6XznyAapiIRKOeF hPWnFjUSczzTbSyb1lu1Bs9/gColAJBZ5TS2rnXrMqj4OlbrVmoUK/w2NiQ3QJ7j peAnQkw3wTbHag== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:36 2026 by rpki-client