This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft File: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft (raw, json) Hash identifier: xLASx3XjQrVBFLI7pwZQJMeY+v2LY/LIsr1AwBR6kDY= Subject key identifier: 93:D7:B7:9D:88:15:7A:82:29:6B:A9:62:20:73:C3:E7:27:34:18:42 Authority key identifier: 95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44 Certificate issuer: /CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044 Certificate serial: 019C438FB159E1F308F49390C9CE119D2909 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft Manifest number: 0529 Signing time: Mon 09 Feb 2026 18:00:16 +0000 Manifest this update: Mon 09 Feb 2026 18:00:16 +0000 Manifest next update: Tue 10 Feb 2026 18:00:16 +0000 Files and hashes: 1: 1teBGWyrdeMcfN_5PnazQXWLD1E.roa (hash: WrL5v9AFdVY6509NouX1fyjcl0G8QjZ4sA1Zzo1jtEc=) 2: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl (hash: 2+pWPnlbJ7D2K85meuc4USqwavrImmK172Ay6ST29qY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:b1:59:e1:f3:08:f4:93:90:c9:ce:11:9d:29:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044 Validity Not Before: Feb 9 18:00:16 2026 GMT Not After : Feb 10 18:00:16 2026 GMT Subject: CN=93d7b79d88157a82296ba9622073c3e727341842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:19:6a:6e:5e:c7:61:42:fe:c0:db:d4:28:05: b4:ca:fd:eb:40:8d:d3:32:b5:9d:64:39:74:54:e9: cf:a2:c8:64:85:89:2a:d5:92:f2:b3:bf:62:02:6b: 5a:3b:2f:b6:12:e7:f1:fd:a7:7c:57:34:73:2f:2a: a0:14:b3:94:c4:a5:ba:55:6b:a6:15:d1:c0:81:08: 15:da:44:dd:e6:25:03:e2:18:c1:4f:15:33:e4:01: 4e:bb:34:06:de:9b:c3:5a:b4:f9:94:69:62:fa:31: 3e:ae:6d:c9:71:1f:01:4a:65:a7:16:49:7e:5d:46: 7a:ea:29:ac:45:5c:34:e9:62:84:46:f3:ed:ef:80: e6:26:74:9b:87:a4:95:11:37:78:48:0c:b0:05:1e: 30:06:fe:22:ca:87:9f:f8:5a:ce:34:19:6b:22:2b: ae:31:1e:d7:27:fd:f1:dc:61:be:1b:37:3e:6a:56: 87:92:f0:17:e8:2a:ff:e0:03:9b:77:20:6d:dc:ac: 52:b5:4c:90:66:0d:fb:89:f4:00:8f:4e:ee:70:d8: 63:77:2e:d1:bd:75:63:4d:eb:82:f0:30:4a:9a:7c: 30:08:0e:00:84:22:1c:d5:f2:b8:c8:2f:3d:32:b4: 51:94:ec:d5:89:d6:e0:97:86:d9:97:ae:b2:f6:40: 66:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D7:B7:9D:88:15:7A:82:29:6B:A9:62:20:73:C3:E7:27:34:18:42 X509v3 Authority Key Identifier: keyid:95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:02:8b:a7:9e:38:c4:fa:9f:a1:08:ae:8c:66:98:0f:30:3b: 27:17:2f:6e:d7:f7:92:df:c7:a4:fa:22:09:08:cd:60:a5:67: d1:b4:a0:31:cb:72:47:ad:68:28:d5:36:e4:57:de:83:52:2c: ce:cc:78:fe:40:b8:71:01:7e:54:f0:e7:f6:b0:2b:c4:4a:78: 58:4c:42:c4:4f:e1:13:6c:ee:ef:64:38:e0:ad:94:e1:94:14: fe:9f:ea:c0:c8:03:2d:6a:f6:d5:47:03:0c:76:6f:c4:82:b7: 4e:57:23:42:2a:af:41:49:2b:08:e6:20:4b:dc:9b:8f:f2:30: e8:ac:98:bf:19:07:d4:a3:b7:aa:4d:8d:e1:be:36:2d:0d:2f: b9:4c:59:2c:94:e7:b1:45:88:91:ee:b2:52:16:1b:02:43:18: 1f:a8:42:22:4a:ba:49:92:90:de:42:48:cd:79:ef:ca:99:8e: bc:44:a8:5b:02:63:c9:c4:ec:79:7a:f9:11:14:54:3b:03:fe: f5:9b:1c:3b:ef:83:40:59:8b:61:26:f5:41:92:88:40:53:c4: 64:01:38:cf:6d:c0:9c:f1:b0:43:9c:be:64:f3:d5:4d:03:5f: 8a:f6:fe:91:5c:4f:75:65:1f:8f:54:95:81:ff:23:d1:d8:c8: d4:a2:a7:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj7FZ4fMI9JOQyc4RnSkJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1Y2IxOGM3ZWNlNmJkZGM5NTcwZjM3ZmY3ODY2MGI1OGU2 YzIwNDQwHhcNMjYwMjA5MTgwMDE2WhcNMjYwMjEwMTgwMDE2WjAzMTEwLwYDVQQD Eyg5M2Q3Yjc5ZDg4MTU3YTgyMjk2YmE5NjIyMDczYzNlNzI3MzQxODQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Rlqbl7HYUL+wNvUKAW0yv3rQI3T MrWdZDl0VOnPoshkhYkq1ZLys79iAmtaOy+2Eufx/ad8VzRzLyqgFLOUxKW6VWum FdHAgQgV2kTd5iUD4hjBTxUz5AFOuzQG3pvDWrT5lGli+jE+rm3JcR8BSmWnFkl+ XUZ66imsRVw06WKERvPt74DmJnSbh6SVETd4SAywBR4wBv4iyoef+FrONBlrIiuu MR7XJ/3x3GG+Gzc+alaHkvAX6Cr/4AObdyBt3KxStUyQZg37ifQAj07ucNhjdy7R vXVjTeuC8DBKmnwwCA4AhCIc1fK4yC89MrRRlOzVidbgl4bZl66y9kBm/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPXt52IFXqCKWupYiBzw+cnNBhCMB8GA1UdIwQY MBaAFJXLGMfs5r3clXDzf/eGYLWObCBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGNzWXgtem12ZHlWY1BOXzk0Wmd0WTVzSUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84ZjRhMmItNDkyYy00MzMxLTg0Zjgt MDI2ZTBhNGNjYWFhLzEvbGNzWXgtem12ZHlWY1BOXzk0Wmd0WTVzSUVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi84ZjRhMmItNDkyYy00MzMxLTg0ZjgtMDI2ZTBhNGNjYWFh LzEvbGNzWXgtem12ZHlWY1BOXzk0Wmd0WTVzSUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiwKLp544 xPqfoQiujGaYDzA7Jxcvbtf3kt/HpPoiCQjNYKVn0bSgMctyR61oKNU25Ffeg1Is zsx4/kC4cQF+VPDn9rArxEp4WExCxE/hE2zu72Q44K2U4ZQU/p/qwMgDLWr21UcD DHZvxIK3TlcjQiqvQUkrCOYgS9ybj/Iw6KyYvxkH1KO3qk2N4b42LQ0vuUxZLJTn sUWIke6yUhYbAkMYH6hCIkq6SZKQ3kJIzXnvypmOvESoWwJjycTseXr5ERRUOwP+ 9ZscO++DQFmLYSb1QZKIQFPEZAE4z23AnPGwQ5y+ZPPVTQNfivb+kVxPdWUfj1SV gf8j0djI1KKnJA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:08 2026 by rpki-client