This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft File: LMNcIJCZlCHTPGNZybbmgYKg8nM.mft (raw, json) Hash identifier: gl6yFBBGXaSlBICzIgra6docHJk8aUca5N/DC5OvBdk= Subject key identifier: D1:1C:0C:62:01:50:63:F5:0F:D4:3A:96:B9:2C:86:9D:B3:73:B8:80 Authority key identifier: 2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73 Certificate issuer: /CN=2cc35c2090999421d33c6359c9b6e68182a0f273 Certificate serial: 019C4322D42E72BFED93FCD88360869FEE40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft Manifest number: 179F Signing time: Mon 09 Feb 2026 16:01:21 +0000 Manifest this update: Mon 09 Feb 2026 16:01:21 +0000 Manifest next update: Tue 10 Feb 2026 16:01:21 +0000 Files and hashes: 1: LMNcIJCZlCHTPGNZybbmgYKg8nM.crl (hash: vnlAO0AOs0krfuQXw2vLdpLVtDZYxI4Oa2jnnnhrYm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:d4:2e:72:bf:ed:93:fc:d8:83:60:86:9f:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cc35c2090999421d33c6359c9b6e68182a0f273 Validity Not Before: Feb 9 16:01:21 2026 GMT Not After : Feb 10 16:01:21 2026 GMT Subject: CN=d11c0c62015063f50fd43a96b92c869db373b880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:25:c7:f9:f7:35:8b:3d:18:d9:a6:04:3c:df: 09:e3:b9:1a:7c:02:0f:4e:e3:e8:67:ad:86:3a:e9: 99:b8:bd:be:a6:7d:88:3c:72:6a:00:e4:4f:e0:0f: f4:4c:75:18:a8:e0:d0:19:1d:65:6e:6b:2c:87:79: 80:81:71:56:fe:53:88:f1:51:ec:78:64:da:6f:27: be:a4:7e:4c:5c:21:4e:88:ca:b9:6b:4b:6f:bf:b4: 2f:b0:84:28:a1:a0:45:ba:b3:03:a7:14:27:2a:a6: a8:2d:87:3b:a1:49:38:4c:06:8e:74:2a:df:72:5b: fd:f9:ec:99:2b:f6:f5:b6:50:24:29:a6:60:43:7a: 41:ef:b8:5f:3f:a2:94:39:cb:95:4b:99:46:7a:bb: d8:48:79:c2:84:28:b8:43:05:bf:d9:4d:d1:39:3c: 25:0f:3d:19:95:34:cd:35:6c:52:ea:18:da:a1:38: 89:5f:93:a0:e5:11:77:d3:8b:44:82:21:49:f0:7f: 8e:3e:be:3c:73:9d:66:0a:26:9d:63:ef:84:45:b9: db:b6:90:ee:ac:9e:92:11:a6:2f:ea:a2:49:77:bb: ca:b2:60:9b:3b:cb:e1:b7:42:db:8b:26:1b:f7:e3: c0:74:d4:47:fb:c1:bf:7a:d8:60:a7:45:d6:24:88: 78:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1C:0C:62:01:50:63:F5:0F:D4:3A:96:B9:2C:86:9D:B3:73:B8:80 X509v3 Authority Key Identifier: keyid:2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:3c:09:49:22:63:17:b6:56:20:d5:05:41:59:80:72:57:e6: a1:f1:e3:e0:bb:2a:8b:be:1b:e0:4d:6d:ea:02:f9:1e:c4:e4: 2a:0d:31:56:d7:8c:d1:56:05:1d:0e:1c:da:0e:cc:f5:a0:9e: 90:b3:db:d6:99:d5:6d:57:29:06:66:3b:6d:e7:ed:ec:07:58: 87:97:d6:a0:91:d0:ea:52:ea:f1:a9:0d:93:d9:b9:00:8f:13: 09:31:5c:2d:86:7d:41:76:b1:b9:ce:60:e0:44:5a:9d:db:aa: 82:e4:e9:d7:e6:00:a7:18:07:2b:18:4e:a2:79:36:ae:9c:cd: e1:fb:ea:d2:6a:94:83:e2:b8:ae:cc:6c:75:fc:fe:40:93:3f: b9:2e:28:fb:69:22:36:e3:00:5a:97:ea:37:13:e9:f9:cd:f8: c7:58:51:9c:cc:5f:a0:57:88:7c:d1:b2:7b:32:14:89:49:eb: 08:5f:a3:d7:4c:b9:ac:5b:27:df:be:b7:a9:24:a1:20:c7:dd: 75:34:64:23:dc:c2:4f:e6:c8:ce:d6:0f:cb:6d:a4:ad:bd:2d: 94:aa:19:b4:26:94:5c:e8:cc:65:49:6e:2c:19:66:9c:f6:9d: eb:4e:30:4d:09:aa:f5:7f:ad:3b:7d:03:ba:74:9b:3b:fe:d7: 42:44:85:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDItQucr/tk/zYg2CGn+5AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYzM1YzIwOTA5OTk0MjFkMzNjNjM1OWM5YjZlNjgxODJh MGYyNzMwHhcNMjYwMjA5MTYwMTIxWhcNMjYwMjEwMTYwMTIxWjAzMTEwLwYDVQQD EyhkMTFjMGM2MjAxNTA2M2Y1MGZkNDNhOTZiOTJjODY5ZGIzNzNiODgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySXH+fc1iz0Y2aYEPN8J47kafAIP TuPoZ62GOumZuL2+pn2IPHJqAORP4A/0THUYqODQGR1lbmssh3mAgXFW/lOI8VHs eGTabye+pH5MXCFOiMq5a0tvv7QvsIQooaBFurMDpxQnKqaoLYc7oUk4TAaOdCrf clv9+eyZK/b1tlAkKaZgQ3pB77hfP6KUOcuVS5lGervYSHnChCi4QwW/2U3ROTwl Dz0ZlTTNNWxS6hjaoTiJX5Og5RF304tEgiFJ8H+OPr48c51mCiadY++ERbnbtpDu rJ6SEaYv6qJJd7vKsmCbO8vht0LbiyYb9+PAdNRH+8G/ethgp0XWJIh4NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNEcDGIBUGP1D9Q6lrkshp2zc7iAMB8GA1UdIwQY MBaAFCzDXCCQmZQh0zxjWcm25oGCoPJzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE1OY0lKQ1psQ0hUUEdOWnliYm1nWUtnOG5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jNjM3ZGUtYmVmNy00ZGEzLTgwM2Yt ODRlNWYxYWY2ZTkyLzEvTE1OY0lKQ1psQ0hUUEdOWnliYm1nWUtnOG5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9jNjM3ZGUtYmVmNy00ZGEzLTgwM2YtODRlNWYxYWY2ZTky LzEvTE1OY0lKQ1psQ0hUUEdOWnliYm1nWUtnOG5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOjwJSSJj F7ZWINUFQVmAclfmofHj4Lsqi74b4E1t6gL5HsTkKg0xVteM0VYFHQ4c2g7M9aCe kLPb1pnVbVcpBmY7beft7AdYh5fWoJHQ6lLq8akNk9m5AI8TCTFcLYZ9QXaxuc5g 4ERanduqguTp1+YApxgHKxhOonk2rpzN4fvq0mqUg+K4rsxsdfz+QJM/uS4o+2ki NuMAWpfqNxPp+c34x1hRnMxfoFeIfNGyezIUiUnrCF+j10y5rFsn3763qSShIMfd dTRkI9zCT+bIztYPy22krb0tlKoZtCaUXOjMZUluLBlmnPad604wTQmq9X+tO30D unSbO/7XQkSFng== -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:03 2026 by rpki-client