This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft File: LeznL7uve9CXXt2mdjtoB3Nk4gI.mft (raw, json) Hash identifier: JMPfj90ihxiVkZ3Atj9SH/uIdWYu19v/fTHKiTq7Ld4= Subject key identifier: 43:93:1C:AC:CB:7F:B1:0D:37:1C:4A:EE:55:A7:1D:DE:8C:D0:20:2F Authority key identifier: 2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02 Certificate issuer: /CN=2dece72fbbaf7bd0975edda6763b68077364e202 Certificate serial: 019C427D221FB15880EED2FCD42B5A82246C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft Manifest number: 0F06 Signing time: Mon 09 Feb 2026 13:00:22 +0000 Manifest this update: Mon 09 Feb 2026 13:00:22 +0000 Manifest next update: Tue 10 Feb 2026 13:00:22 +0000 Files and hashes: 1: LeznL7uve9CXXt2mdjtoB3Nk4gI.crl (hash: Yb520RUn0zVFpovkX7u80mIMTfmYX3hGkWIU2fwYJt4=) 2: TA0cz_6zsJUKfNluQZhCxktBkLY.roa (hash: uvzonztC0nUJaKss/c/7QmJOjzTq+4kXZeDu1iN/DMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:22:1f:b1:58:80:ee:d2:fc:d4:2b:5a:82:24:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dece72fbbaf7bd0975edda6763b68077364e202 Validity Not Before: Feb 9 13:00:22 2026 GMT Not After : Feb 10 13:00:22 2026 GMT Subject: CN=43931caccb7fb10d371c4aee55a71dde8cd0202f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5e:a2:c6:31:1a:6e:17:e8:4a:85:7f:16:42: 68:e8:64:9e:fb:02:1a:ab:79:a7:e7:57:f1:22:94: 74:79:4c:9b:94:6c:7e:1b:a7:15:c0:e9:31:46:c9: 5f:94:44:a8:42:0f:94:9c:3b:fc:92:21:9b:79:09: 67:c8:86:cc:b7:a7:da:22:c5:54:56:f4:6e:df:31: 0e:10:77:08:64:52:00:2d:5b:dd:01:3a:b7:7f:87: ea:29:84:b9:f4:b1:a6:0e:cf:fc:86:95:e6:4f:ac: 6f:d9:d0:6d:6c:c9:79:9f:4e:24:1e:cd:b8:46:4a: 56:6c:42:d5:aa:47:e8:57:b9:1c:89:5b:0a:37:66: 46:db:a7:0c:58:54:84:3b:87:26:99:ff:ee:bd:79: e3:9d:b9:61:71:0d:e1:88:45:11:6f:7e:39:ae:49: 49:7e:a1:76:54:0e:47:ac:bf:82:3b:8e:e9:20:3b: 05:bc:33:50:3b:37:5f:fe:3c:69:5d:4b:4d:9c:86: 40:ec:ae:5e:67:9e:1e:0d:77:5c:46:c4:54:eb:47: e9:93:a4:14:43:78:fc:44:0e:61:c2:19:c9:be:c4: d8:df:1a:3b:29:57:44:42:de:f8:43:6f:31:93:26: fb:78:ea:4c:c8:c6:f8:4f:c4:1d:5a:02:bf:2c:ce: 3f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:93:1C:AC:CB:7F:B1:0D:37:1C:4A:EE:55:A7:1D:DE:8C:D0:20:2F X509v3 Authority Key Identifier: keyid:2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:1e:b6:a5:9c:e0:57:39:81:fb:b2:aa:e1:3d:17:96:e9:ad: c1:a1:bd:00:89:bb:45:1d:b9:50:2a:b6:5d:91:7d:e0:1d:9c: 0e:c5:26:9f:53:0f:42:fe:16:52:40:0b:a6:ed:b1:de:d3:34: 15:a9:44:87:4c:c5:79:d0:46:bd:9d:4c:bc:1c:8a:62:c5:37: ad:d4:e8:bb:88:be:85:af:3f:f2:01:23:d5:dc:17:65:71:50: cc:f0:56:ce:af:a3:62:30:10:9e:ce:74:e8:6c:05:dd:38:a3: b2:8e:65:25:9d:5d:96:d7:d8:02:fb:8e:9f:88:2e:d3:e1:f9: 79:b1:9c:9b:0e:4d:e6:12:61:d5:1f:9c:67:72:a7:69:e4:0f: 73:ae:f8:19:95:31:aa:61:a3:3d:8d:e9:26:5e:ca:a8:d4:69: d6:81:a4:0d:6d:6e:5a:ca:05:a6:62:52:12:fe:d9:39:86:9f: e3:39:d7:c7:6a:ac:db:71:78:ca:e5:9e:45:4d:fe:0d:e4:48: 47:a4:df:ab:f7:ea:45:35:2d:7e:c6:de:91:78:24:c4:93:f9: 01:3b:01:0c:c0:53:85:53:c3:46:21:9e:0b:c5:ef:66:fd:c9: 5c:2a:31:bf:8a:0b:36:eb:2f:55:ac:41:c1:19:48:75:aa:97: fa:f7:2a:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfSIfsViA7tL81CtagiRsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZWNlNzJmYmJhZjdiZDA5NzVlZGRhNjc2M2I2ODA3NzM2 NGUyMDIwHhcNMjYwMjA5MTMwMDIyWhcNMjYwMjEwMTMwMDIyWjAzMTEwLwYDVQQD Eyg0MzkzMWNhY2NiN2ZiMTBkMzcxYzRhZWU1NWE3MWRkZThjZDAyMDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0V6ixjEabhfoSoV/FkJo6GSe+wIa q3mn51fxIpR0eUyblGx+G6cVwOkxRslflESoQg+UnDv8kiGbeQlnyIbMt6faIsVU VvRu3zEOEHcIZFIALVvdATq3f4fqKYS59LGmDs/8hpXmT6xv2dBtbMl5n04kHs24 RkpWbELVqkfoV7kciVsKN2ZG26cMWFSEO4cmmf/uvXnjnblhcQ3hiEURb345rklJ fqF2VA5HrL+CO47pIDsFvDNQOzdf/jxpXUtNnIZA7K5eZ54eDXdcRsRU60fpk6QU Q3j8RA5hwhnJvsTY3xo7KVdEQt74Q28xkyb7eOpMyMb4T8QdWgK/LM4/dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOTHKzLf7ENNxxK7lWnHd6M0CAvMB8GA1UdIwQY MBaAFC3s5y+7r3vQl17dpnY7aAdzZOICMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGV6bkw3dXZlOUNYWHQybWRqdG9CM05rNGdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wMjZjYjEtNGMwZi00N2Q4LWI3MDAt ZDUxYWU0YWExMjdiLzEvTGV6bkw3dXZlOUNYWHQybWRqdG9CM05rNGdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8wMjZjYjEtNGMwZi00N2Q4LWI3MDAtZDUxYWU0YWExMjdi LzEvTGV6bkw3dXZlOUNYWHQybWRqdG9CM05rNGdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJx62pZzg VzmB+7Kq4T0XlumtwaG9AIm7RR25UCq2XZF94B2cDsUmn1MPQv4WUkALpu2x3tM0 FalEh0zFedBGvZ1MvByKYsU3rdTou4i+ha8/8gEj1dwXZXFQzPBWzq+jYjAQns50 6GwF3Tijso5lJZ1dltfYAvuOn4gu0+H5ebGcmw5N5hJh1R+cZ3KnaeQPc674GZUx qmGjPY3pJl7KqNRp1oGkDW1uWsoFpmJSEv7ZOYaf4znXx2qs23F4yuWeRU3+DeRI R6Tfq/fqRTUtfsbekXgkxJP5ATsBDMBThVPDRiGeC8XvZv3JXCoxv4oLNusvVaxB wRlIdaqX+vcqzQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:43 2026 by rpki-client