This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft File: LjC09SIqRoXFTNJcTLjW-TIzrHs.mft (raw, json) Hash identifier: 6CdTHRVfP+im6IQqH2yF3UROJ5CCTM/oKaL+NHA/KO4= Subject key identifier: D5:82:C9:52:42:43:05:3A:B9:E1:A7:1D:90:16:74:AE:2E:F9:90:EF Authority key identifier: 2E:30:B4:F5:22:2A:46:85:C5:4C:D2:5C:4C:B8:D6:F9:32:33:AC:7B Certificate issuer: /CN=2e30b4f5222a4685c54cd25c4cb8d6f93233ac7b Certificate serial: 019C4322AE299FA3BC4EB61F5C88C3387E44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft Manifest number: 057B Signing time: Mon 09 Feb 2026 16:01:12 +0000 Manifest this update: Mon 09 Feb 2026 16:01:12 +0000 Manifest next update: Tue 10 Feb 2026 16:01:12 +0000 Files and hashes: 1: LjC09SIqRoXFTNJcTLjW-TIzrHs.crl (hash: 9v5jMhBVQCh50SkrLHmR5tzowuh3kPQOGVWrxqISPF4=) 2: g_5AMoFOj5a0mYwjqCP6X5Eogc0.roa (hash: wHZf0niCFW9Zgd1CxrKbTTjY8FLkaeRzaQjI2AnGqqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:ae:29:9f:a3:bc:4e:b6:1f:5c:88:c3:38:7e:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e30b4f5222a4685c54cd25c4cb8d6f93233ac7b Validity Not Before: Feb 9 16:01:12 2026 GMT Not After : Feb 10 16:01:12 2026 GMT Subject: CN=d582c9524243053ab9e1a71d901674ae2ef990ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c6:06:44:d8:5e:c2:c6:48:b2:ef:63:82:f4: 6d:32:13:ff:b7:07:da:5b:16:52:ba:9d:97:b3:8a: 51:ce:52:51:fb:b5:9f:26:99:c3:95:a6:ee:77:6d: 08:e7:06:d9:c8:94:09:a7:d6:e1:1b:e2:c1:17:d9: 02:3c:78:9d:20:30:64:00:28:0e:7f:cb:7e:d4:f8: fa:38:04:6e:5c:d4:fd:c3:1b:13:60:27:40:f6:e1: 97:5a:e0:5a:c7:82:57:ab:93:d6:5d:11:be:c5:f8: 7d:ad:c9:aa:b9:9a:84:f1:76:19:0e:e4:f6:55:16: 08:18:5f:28:a1:de:eb:a9:13:fe:fe:a1:83:db:d7: 43:4f:31:26:e9:21:89:50:59:9c:8c:e7:02:ba:8d: c1:8e:03:cf:86:ac:ee:4b:5f:2a:2e:7f:e8:24:e3: b0:f5:73:88:62:b4:a8:7a:9c:d5:c9:e8:1e:65:8d: 5b:27:69:87:e6:1a:bd:71:57:54:df:6e:86:8c:58: be:d4:88:9b:79:86:34:25:77:ff:31:f2:f4:ec:ec: 37:34:0b:e3:c1:3c:23:88:d0:28:b6:a4:9e:8d:79: 72:9d:57:06:57:4c:17:0c:c5:0e:8b:c0:35:1b:f3: fe:8e:d9:45:f9:4e:f8:18:cb:d8:43:3f:06:c0:39: fe:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:82:C9:52:42:43:05:3A:B9:E1:A7:1D:90:16:74:AE:2E:F9:90:EF X509v3 Authority Key Identifier: keyid:2E:30:B4:F5:22:2A:46:85:C5:4C:D2:5C:4C:B8:D6:F9:32:33:AC:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:33:d3:74:0a:9a:f0:b9:83:b5:81:0a:a3:01:62:ad:6f:d5: 73:22:7d:ff:3b:c7:a2:f1:b6:2d:41:fd:4c:35:7f:bd:28:6c: 62:29:20:63:bf:f4:4a:69:49:18:42:33:a9:7a:76:d8:5a:1f: c0:ed:6a:2f:e1:e3:e0:7f:47:59:3c:8b:7d:6c:83:ec:45:9e: 3d:07:39:ce:96:be:8e:0f:78:61:af:d6:46:6d:f9:a4:50:24: 14:ee:9f:1d:25:2d:88:1a:59:d9:79:4f:fa:e2:0f:0d:ba:9b: 30:b2:c8:94:e0:da:31:31:52:10:93:38:4d:06:76:7e:de:41: 9a:7f:2c:18:89:3d:1c:d4:40:76:3e:c5:fd:c2:81:b0:ef:01: c6:eb:2d:b7:e8:90:7e:c0:80:f3:45:91:4d:75:ee:fd:f1:16: 33:6e:15:a7:3d:9a:c1:91:58:03:81:3d:a8:86:d1:b6:3b:18: 5d:b0:7c:ad:28:02:77:08:05:09:0d:65:c3:51:77:c5:01:a0: 51:75:da:32:ed:be:18:3a:cf:bd:b0:37:72:a5:ca:c5:5a:30: 52:cf:29:ad:76:7f:30:3a:66:f1:9b:09:dd:8e:31:19:51:53: eb:64:76:7e:3d:d1:99:b6:ff:02:b6:2d:3b:fe:57:6c:89:cd: 87:2b:93:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIq4pn6O8TrYfXIjDOH5EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMzBiNGY1MjIyYTQ2ODVjNTRjZDI1YzRjYjhkNmY5MzIz M2FjN2IwHhcNMjYwMjA5MTYwMTEyWhcNMjYwMjEwMTYwMTEyWjAzMTEwLwYDVQQD EyhkNTgyYzk1MjQyNDMwNTNhYjllMWE3MWQ5MDE2NzRhZTJlZjk5MGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sYGRNhewsZIsu9jgvRtMhP/twfa WxZSup2Xs4pRzlJR+7WfJpnDlabud20I5wbZyJQJp9bhG+LBF9kCPHidIDBkACgO f8t+1Pj6OARuXNT9wxsTYCdA9uGXWuBax4JXq5PWXRG+xfh9rcmquZqE8XYZDuT2 VRYIGF8ood7rqRP+/qGD29dDTzEm6SGJUFmcjOcCuo3BjgPPhqzuS18qLn/oJOOw 9XOIYrSoepzVyegeZY1bJ2mH5hq9cVdU326GjFi+1IibeYY0JXf/MfL07Ow3NAvj wTwjiNAotqSejXlynVcGV0wXDMUOi8A1G/P+jtlF+U74GMvYQz8GwDn+1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWCyVJCQwU6ueGnHZAWdK4u+ZDvMB8GA1UdIwQY MBaAFC4wtPUiKkaFxUzSXEy41vkyM6x7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGpDMDlTSXFSb1hGVE5KY1RMalctVEl6ckhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZTRjOGEtMWViMi00NTE4LThiNWIt ODYxNmEzMTBlODAzLzEvTGpDMDlTSXFSb1hGVE5KY1RMalctVEl6ckhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lZTRjOGEtMWViMi00NTE4LThiNWItODYxNmEzMTBlODAz LzEvTGpDMDlTSXFSb1hGVE5KY1RMalctVEl6ckhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDPTdAqa 8LmDtYEKowFirW/VcyJ9/zvHovG2LUH9TDV/vShsYikgY7/0SmlJGEIzqXp22Fof wO1qL+Hj4H9HWTyLfWyD7EWePQc5zpa+jg94Ya/WRm35pFAkFO6fHSUtiBpZ2XlP +uIPDbqbMLLIlODaMTFSEJM4TQZ2ft5Bmn8sGIk9HNRAdj7F/cKBsO8Bxustt+iQ fsCA80WRTXXu/fEWM24Vpz2awZFYA4E9qIbRtjsYXbB8rSgCdwgFCQ1lw1F3xQGg UXXaMu2+GDrPvbA3cqXKxVowUs8prXZ/MDpm8ZsJ3Y4xGVFT62R2fj3Rmbb/ArYt O/5XbInNhyuTew== -----END CERTIFICATE-----Generated at Tue Feb 10 00:30:27 2026 by rpki-client