This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft File: LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft (raw, json) Hash identifier: RSgo9qBynVYF8ytSxu2/kZXw0SrfppQlpT+zHmiUK/M= Subject key identifier: 1F:32:65:12:0C:BF:5F:05:D1:6A:FD:1A:9D:2C:1B:7A:96:82:2C:A6 Authority key identifier: 2C:D0:41:02:C1:99:6B:53:C8:8E:17:1E:5E:4F:8D:1F:A0:A1:30:84 Certificate issuer: /CN=2cd04102c1996b53c88e171e5e4f8d1fa0a13084 Certificate serial: 019C427D8722F165937E99F38C18ED9116FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft Manifest number: 17D3 Signing time: Mon 09 Feb 2026 13:00:48 +0000 Manifest this update: Mon 09 Feb 2026 13:00:48 +0000 Manifest next update: Tue 10 Feb 2026 13:00:48 +0000 Files and hashes: 1: LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl (hash: ORhZqneAmr9vQ4thWStnlUAUD+sVx+/qA06MZsQIOYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:87:22:f1:65:93:7e:99:f3:8c:18:ed:91:16:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cd04102c1996b53c88e171e5e4f8d1fa0a13084 Validity Not Before: Feb 9 13:00:48 2026 GMT Not After : Feb 10 13:00:48 2026 GMT Subject: CN=1f3265120cbf5f05d16afd1a9d2c1b7a96822ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1d:4c:77:64:af:e1:c0:f6:1f:31:88:f1:02: 49:b1:1f:a4:70:f1:61:86:b5:9e:db:c7:32:c4:5d: 04:45:d4:2f:46:62:c9:78:27:15:00:1d:7c:2e:b8: 65:60:48:c9:1e:1a:b8:e0:b5:a2:de:81:20:50:25: 10:12:94:a7:42:9e:18:8f:e1:60:dd:ae:39:6b:ac: 4a:1d:f0:fa:70:8a:35:87:9b:d5:ae:a6:af:b5:44: f0:1e:6d:0d:4f:19:17:90:52:75:03:5d:78:d9:cf: 31:b7:d5:17:a8:0b:3d:46:80:42:c6:b0:84:d1:49: f1:4e:6c:c0:9e:87:65:68:f2:c7:de:27:71:ed:9b: 11:4c:36:f7:cc:98:6f:99:89:29:b0:23:2e:dd:1e: a6:88:8e:3c:bd:50:61:15:e3:d8:a9:99:5b:29:f3: 16:5a:6f:9a:d8:34:91:da:99:9c:81:29:f6:0d:70: e3:e9:eb:e9:33:06:01:5b:7b:f4:d0:c6:af:1f:fe: 5b:0f:f2:5c:f5:21:01:a8:e7:89:64:04:6d:8b:62: a1:2d:56:c0:5f:51:90:04:db:43:39:1e:01:48:4a: 4e:cb:69:51:b1:7a:42:e0:c7:8c:86:44:12:12:96: e8:3e:ac:3c:03:8d:fb:4f:59:56:96:5d:b0:df:53: 25:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:32:65:12:0C:BF:5F:05:D1:6A:FD:1A:9D:2C:1B:7A:96:82:2C:A6 X509v3 Authority Key Identifier: keyid:2C:D0:41:02:C1:99:6B:53:C8:8E:17:1E:5E:4F:8D:1F:A0:A1:30:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:48:60:a3:93:4a:86:6f:6d:e8:89:e7:44:bf:c6:a1:ee:85: 0c:23:d4:9f:42:5e:9d:bf:6f:d8:97:78:17:72:0a:77:82:47: c7:7a:a9:70:81:1e:4f:48:43:da:f6:fd:08:22:dc:48:fd:b6: bc:7f:34:41:85:04:96:ce:29:b3:d1:8a:b3:74:98:44:7b:fe: 47:ab:f4:c5:a9:2c:d5:a0:61:89:48:59:ca:db:f2:2a:93:84: 10:59:5e:11:0a:f3:49:2b:1b:2c:26:21:80:f1:29:7b:d7:ec: 15:20:84:ef:5a:c5:15:00:b7:48:67:d5:c8:03:4b:a2:fd:43: b9:3f:cc:0b:ac:4c:e6:9f:1f:a1:21:c0:5a:ee:43:50:1f:ce: 32:e9:7f:10:5e:0a:40:90:b5:d8:6e:67:04:8a:ff:1b:1c:d2: f4:9d:d9:d0:79:df:a8:c7:a4:be:f2:22:d5:56:a3:0a:5a:3a: 54:3d:ca:8f:7f:41:b4:2d:a6:4a:ea:1b:b8:87:a2:3c:17:99: 21:93:40:dd:24:f0:96:33:5b:df:d3:96:50:f9:37:c6:f1:58: 94:69:fa:a0:83:de:59:e4:45:7d:70:7f:a1:2e:95:77:9a:c5: c5:c5:ef:ca:46:c3:5e:c3:78:55:06:75:39:e0:7a:40:47:e3: 84:2f:94:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfYci8WWTfpnzjBjtkRb+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZDA0MTAyYzE5OTZiNTNjODhlMTcxZTVlNGY4ZDFmYTBh MTMwODQwHhcNMjYwMjA5MTMwMDQ4WhcNMjYwMjEwMTMwMDQ4WjAzMTEwLwYDVQQD EygxZjMyNjUxMjBjYmY1ZjA1ZDE2YWZkMWE5ZDJjMWI3YTk2ODIyY2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR1Md2Sv4cD2HzGI8QJJsR+kcPFh hrWe28cyxF0ERdQvRmLJeCcVAB18LrhlYEjJHhq44LWi3oEgUCUQEpSnQp4Yj+Fg 3a45a6xKHfD6cIo1h5vVrqavtUTwHm0NTxkXkFJ1A1142c8xt9UXqAs9RoBCxrCE 0UnxTmzAnodlaPLH3idx7ZsRTDb3zJhvmYkpsCMu3R6miI48vVBhFePYqZlbKfMW Wm+a2DSR2pmcgSn2DXDj6evpMwYBW3v00MavH/5bD/Jc9SEBqOeJZARti2KhLVbA X1GQBNtDOR4BSEpOy2lRsXpC4MeMhkQSEpboPqw8A437T1lWll2w31MlwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8yZRIMv18F0Wr9Gp0sG3qWgiymMB8GA1UdIwQY MBaAFCzQQQLBmWtTyI4XHl5PjR+goTCEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE5CQkFzR1phMVBJamhjZVhrLU5INkNoTUlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8yMDA5ODgtMzlkYi00NGEzLTllNDkt NWUwNDc0MzNiMjM0LzEvTE5CQkFzR1phMVBJamhjZVhrLU5INkNoTUlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8yMDA5ODgtMzlkYi00NGEzLTllNDktNWUwNDc0MzNiMjM0 LzEvTE5CQkFzR1phMVBJamhjZVhrLU5INkNoTUlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr0hgo5NK hm9t6InnRL/Goe6FDCPUn0Jenb9v2Jd4F3IKd4JHx3qpcIEeT0hD2vb9CCLcSP22 vH80QYUEls4ps9GKs3SYRHv+R6v0xaks1aBhiUhZytvyKpOEEFleEQrzSSsbLCYh gPEpe9fsFSCE71rFFQC3SGfVyANLov1DuT/MC6xM5p8foSHAWu5DUB/OMul/EF4K QJC12G5nBIr/GxzS9J3Z0HnfqMekvvIi1VajClo6VD3Kj39BtC2mSuobuIeiPBeZ IZNA3STwljNb39OWUPk3xvFYlGn6oIPeWeRFfXB/oS6Vd5rFxcXvykbDXsN4VQZ1 OeB6QEfjhC+Upw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:55 2026 by rpki-client