This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft File: lB47mlO74C4stDl6bRoB2Aym5Bg.mft (raw, json) Hash identifier: UydiSuADKWNYnvqhhNlmBbiEEsEbz85sCLWt8FfneR0= Subject key identifier: 33:E5:90:23:0C:AD:48:1D:64:EF:74:75:BC:92:B8:F7:25:01:F7:97 Authority key identifier: 94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18 Certificate issuer: /CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418 Certificate serial: 019C41A220ED9A5B57E2F09A32C41E6BB79E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 09:01:10 +0000 Manifest this update: Mon 09 Feb 2026 09:01:10 +0000 Manifest next update: Tue 10 Feb 2026 09:01:10 +0000 Files and hashes: 1: lB47mlO74C4stDl6bRoB2Aym5Bg.crl (hash: pffE4h+HIMTmkl9vrUUFGeA3phT0MRkOB7r6zNw1GW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:20:ed:9a:5b:57:e2:f0:9a:32:c4:1e:6b:b7:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418 Validity Not Before: Feb 9 09:01:10 2026 GMT Not After : Feb 10 09:01:10 2026 GMT Subject: CN=33e590230cad481d64ef7475bc92b8f72501f797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:be:bf:14:e2:53:f4:20:d7:48:0a:8a:c6:90: d0:8f:e9:79:54:88:ae:2a:01:48:06:68:17:b6:e5: b5:79:e3:3d:49:72:5e:c4:c6:e8:ea:00:ec:31:9c: a2:06:fb:e4:09:a1:a7:ed:a7:49:19:51:45:a4:63: 7d:ac:b7:63:bd:c1:bd:d0:f9:b7:cb:19:be:a4:a7: ae:b5:86:8c:60:19:7a:1e:ca:64:03:18:1a:7e:06: c5:a7:e5:c9:bd:75:20:93:87:77:45:29:f0:3f:06: 80:f5:46:cf:fd:1b:04:3e:8b:51:f7:e9:2c:6f:f3: 57:71:97:f3:a6:f5:57:11:92:cd:be:70:23:c1:9d: 63:c9:bb:65:a4:34:5c:64:ce:99:09:c1:ad:ad:90: 8e:0e:ca:b7:b6:67:b0:a6:3a:bc:b9:36:1a:f0:f3: ca:9c:a3:81:d5:75:0b:8c:38:c9:3c:5f:e7:c2:36: fe:c9:ce:ba:e5:b8:56:80:c8:61:0c:f6:45:29:fe: 93:15:a0:66:92:ce:c6:e7:e7:4d:54:27:b2:29:f8: 38:46:de:7a:dc:37:99:1e:35:35:87:71:3e:ed:78: 1b:ea:f7:e0:3b:ef:96:58:8b:f8:bb:d6:c3:ce:8e: 13:f6:bb:5a:b5:80:0a:b8:6b:91:b1:d6:6b:e7:c5: ca:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E5:90:23:0C:AD:48:1D:64:EF:74:75:BC:92:B8:F7:25:01:F7:97 X509v3 Authority Key Identifier: keyid:94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c3:b8:05:d5:47:30:b9:fb:89:8c:08:ef:6b:38:db:b3:33: bb:9f:58:0a:94:74:cf:35:72:f6:6c:da:98:c9:c1:f1:0d:bd: 61:e0:41:d6:e0:1e:f6:21:2b:4d:86:10:12:71:7a:ef:22:6c: 03:6d:1d:85:e9:8e:c0:72:ff:e8:63:a4:16:5f:94:d6:11:73: 06:01:3e:8b:3f:d5:62:ed:a5:bd:2c:c3:23:c3:71:4e:c5:a5: 55:e7:ec:9a:86:4d:03:03:db:e3:8d:d8:c1:39:da:8b:23:bb: 98:80:c4:7a:50:1d:55:64:3e:e9:5f:6d:6b:d7:6f:be:77:4d: 25:72:a5:8c:2d:f3:3f:2c:15:cc:33:83:a2:67:f5:42:d9:a5: 3e:19:01:c8:94:d2:f8:01:e5:e8:fe:69:60:c8:c9:cf:4e:17: 52:79:5a:da:99:10:54:d7:4f:f2:0c:77:bf:4a:f5:cc:49:9b: 3b:42:18:bd:00:a8:54:25:aa:22:17:65:0d:2f:ed:14:ef:01: aa:26:f7:66:c0:a3:70:61:6a:b1:06:73:ee:af:d3:d7:a8:9d: 6b:3d:bf:dc:d6:a2:a7:d8:d5:57:d7:42:d4:2d:63:dc:65:da: ab:ca:e8:77:4f:89:6b:7b:92:6f:e6:45:3c:66:a7:ba:e0:f3: 98:bb:0f:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoiDtmltX4vCaMsQea7eeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MWUzYjlhNTNiYmUwMmUyY2I0Mzk3YTZkMWEwMWQ4MGNh NmU0MTgwHhcNMjYwMjA5MDkwMTEwWhcNMjYwMjEwMDkwMTEwWjAzMTEwLwYDVQQD EygzM2U1OTAyMzBjYWQ0ODFkNjRlZjc0NzViYzkyYjhmNzI1MDFmNzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw76/FOJT9CDXSAqKxpDQj+l5VIiu KgFIBmgXtuW1eeM9SXJexMbo6gDsMZyiBvvkCaGn7adJGVFFpGN9rLdjvcG90Pm3 yxm+pKeutYaMYBl6HspkAxgafgbFp+XJvXUgk4d3RSnwPwaA9UbP/RsEPotR9+ks b/NXcZfzpvVXEZLNvnAjwZ1jybtlpDRcZM6ZCcGtrZCODsq3tmewpjq8uTYa8PPK nKOB1XULjDjJPF/nwjb+yc665bhWgMhhDPZFKf6TFaBmks7G5+dNVCeyKfg4Rt56 3DeZHjU1h3E+7Xgb6vfgO++WWIv4u9bDzo4T9rtatYAKuGuRsdZr58XKewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPlkCMMrUgdZO90dbySuPclAfeXMB8GA1UdIwQY MBaAFJQeO5pTu+AuLLQ5em0aAdgMpuQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEI0N21sTzc0QzRzdERsNmJSb0IyQXltNUJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wOGU0MDQtZjQyNi00MmUyLTk1OTQt ZGE5OWUzNGNjMzBiLzEvbEI0N21sTzc0QzRzdERsNmJSb0IyQXltNUJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8wOGU0MDQtZjQyNi00MmUyLTk1OTQtZGE5OWUzNGNjMzBi LzEvbEI0N21sTzc0QzRzdERsNmJSb0IyQXltNUJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8O4BdVH MLn7iYwI72s427Mzu59YCpR0zzVy9mzamMnB8Q29YeBB1uAe9iErTYYQEnF67yJs A20dhemOwHL/6GOkFl+U1hFzBgE+iz/VYu2lvSzDI8NxTsWlVefsmoZNAwPb443Y wTnaiyO7mIDEelAdVWQ+6V9ta9dvvndNJXKljC3zPywVzDODomf1QtmlPhkByJTS +AHl6P5pYMjJz04XUnla2pkQVNdP8gx3v0r1zEmbO0IYvQCoVCWqIhdlDS/tFO8B qib3ZsCjcGFqsQZz7q/T16idaz2/3Naip9jVV9dC1C1j3GXaq8rod0+Ja3uSb+ZF PGanuuDzmLsP7w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:49 2026 by rpki-client