This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft File: LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft (raw, json) Hash identifier: XAujQgru/hkO6dAr9K+7jCEcKtCz+JmjFMeIVUbj3QE= Subject key identifier: 11:68:79:CC:4D:F0:E8:D6:8D:64:DA:4D:9F:CD:29:E2:15:03:3E:89 Authority key identifier: 2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA Certificate issuer: /CN=2c754ae473d9c154b804b70ed31881e025d926aa Certificate serial: 019C41D8D8B876BB6158C4CDDE827D8EE874 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft Manifest number: 0DEB Signing time: Mon 09 Feb 2026 10:00:56 +0000 Manifest this update: Mon 09 Feb 2026 10:00:56 +0000 Manifest next update: Tue 10 Feb 2026 10:00:56 +0000 Files and hashes: 1: LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl (hash: fUTXWaObkc7VKPSkd086V6PyhvbBZCx96u2dLL/AnXg=) 2: fR1OIjQ-gaEggW5Bu6WoCSw3-_8.roa (hash: +Q1EnV2TJw70P8F3SyId8vDlQiAvs3dvJ0FDJPliX6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:d8:b8:76:bb:61:58:c4:cd:de:82:7d:8e:e8:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c754ae473d9c154b804b70ed31881e025d926aa Validity Not Before: Feb 9 10:00:56 2026 GMT Not After : Feb 10 10:00:56 2026 GMT Subject: CN=116879cc4df0e8d68d64da4d9fcd29e215033e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8e:ac:0e:29:46:69:52:f9:f1:af:87:a6:e1: 89:98:e9:90:69:9e:c4:69:0e:9b:4e:ce:51:98:df: b4:a2:87:7c:cd:42:b1:0d:3c:46:54:b0:5c:e2:14: 08:cd:d2:2d:c1:e6:c7:f0:a3:d1:9d:c2:bd:2e:8a: b3:40:55:e8:5d:f5:59:b6:60:6a:8b:86:9b:2a:45: 29:6c:5f:bd:1e:24:4b:8e:de:2f:2d:8c:ee:79:f0: 72:7c:b8:f9:1f:d4:eb:ae:ba:67:57:6e:43:73:e4: 73:fd:94:48:aa:45:d6:eb:83:b1:8b:99:0a:d4:58: b0:ce:74:c0:fc:7c:ec:5d:68:d5:1c:a5:e1:dd:43: e0:44:53:fa:ea:3b:62:fc:db:a0:d0:7e:81:ea:08: 76:fb:91:83:53:6c:15:8d:06:af:0e:12:3d:6e:d5: e0:14:a4:61:8d:44:6f:44:14:69:79:b6:04:10:79: 80:ab:71:96:61:e3:c8:c9:34:58:3b:c9:e5:d0:2d: bf:76:7c:f9:e2:39:fe:45:c6:b7:d7:a5:55:2a:82: 78:f5:ff:25:58:98:fd:0b:06:a2:8d:87:20:be:b9: 7b:0a:42:37:a9:ae:27:db:02:af:c7:ec:20:33:78: 01:59:d2:76:5f:a8:d6:22:3e:e1:d5:13:bc:26:1f: 4e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:68:79:CC:4D:F0:E8:D6:8D:64:DA:4D:9F:CD:29:E2:15:03:3E:89 X509v3 Authority Key Identifier: keyid:2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:d2:e1:b5:68:e6:f8:47:4d:42:73:fa:79:26:01:c1:43:e1: fe:1f:69:19:64:57:06:71:8d:bf:dc:76:00:4d:37:0b:ed:9a: e0:c9:d3:21:08:a4:9d:f2:c8:73:cd:d1:e2:92:8f:1a:95:d3: 8f:43:7a:4d:45:1a:0b:f8:87:e5:aa:89:66:d4:aa:ef:aa:cc: 81:3a:4c:09:88:54:eb:ac:dc:55:4d:57:0d:fd:59:0f:98:21: 5a:46:95:35:8d:92:94:58:27:39:ff:b2:d1:3b:d7:80:7a:49: f2:83:54:f4:38:0c:97:2c:c0:19:b7:eb:46:4f:fa:c1:0f:76: b2:2a:b9:ad:75:e0:f4:ce:07:16:1b:5b:2f:67:f3:6e:ec:bd: 12:4f:9f:de:ad:3b:a8:37:42:a8:c5:8f:f1:9e:74:b6:1b:ac: db:00:39:c6:79:50:49:72:b4:31:a9:79:58:65:76:77:ee:2d: 67:78:f6:27:91:10:7e:03:3c:9b:9d:d2:fd:b7:d6:74:72:dc: 75:c1:d7:6b:98:19:8d:e6:54:d5:b7:de:e4:2b:8a:d7:32:ac: f3:25:f5:22:53:8b:8e:c2:24:52:c7:32:e5:2a:f0:fd:50:ad: ad:c1:e6:98:37:87:dc:c9:10:01:60:bd:37:f4:09:56:01:f6: 32:a6:14:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2Ni4drthWMTN3oJ9juh0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzU0YWU0NzNkOWMxNTRiODA0YjcwZWQzMTg4MWUwMjVk OTI2YWEwHhcNMjYwMjA5MTAwMDU2WhcNMjYwMjEwMTAwMDU2WjAzMTEwLwYDVQQD EygxMTY4NzljYzRkZjBlOGQ2OGQ2NGRhNGQ5ZmNkMjllMjE1MDMzZTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o6sDilGaVL58a+HpuGJmOmQaZ7E aQ6bTs5RmN+0ood8zUKxDTxGVLBc4hQIzdItwebH8KPRncK9LoqzQFXoXfVZtmBq i4abKkUpbF+9HiRLjt4vLYzuefByfLj5H9TrrrpnV25Dc+Rz/ZRIqkXW64Oxi5kK 1FiwznTA/HzsXWjVHKXh3UPgRFP66jti/Nug0H6B6gh2+5GDU2wVjQavDhI9btXg FKRhjURvRBRpebYEEHmAq3GWYePIyTRYO8nl0C2/dnz54jn+Rca316VVKoJ49f8l WJj9CwaijYcgvrl7CkI3qa4n2wKvx+wgM3gBWdJ2X6jWIj7h1RO8Jh9O2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFoecxN8OjWjWTaTZ/NKeIVAz6JMB8GA1UdIwQY MBaAFCx1SuRz2cFUuAS3DtMYgeAl2SaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhWSzVIUFp3VlM0QkxjTzB4aUI0Q1haSnFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80YTA5NDktZGY1OC00MDA1LTk3Njgt ZmM1MzkzYzU3ODg3LzEvTEhWSzVIUFp3VlM0QkxjTzB4aUI0Q1haSnFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC80YTA5NDktZGY1OC00MDA1LTk3NjgtZmM1MzkzYzU3ODg3 LzEvTEhWSzVIUFp3VlM0QkxjTzB4aUI0Q1haSnFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmdLhtWjm +EdNQnP6eSYBwUPh/h9pGWRXBnGNv9x2AE03C+2a4MnTIQiknfLIc83R4pKPGpXT j0N6TUUaC/iH5aqJZtSq76rMgTpMCYhU66zcVU1XDf1ZD5ghWkaVNY2SlFgnOf+y 0TvXgHpJ8oNU9DgMlyzAGbfrRk/6wQ92siq5rXXg9M4HFhtbL2fzbuy9Ek+f3q07 qDdCqMWP8Z50thus2wA5xnlQSXK0Mal5WGV2d+4tZ3j2J5EQfgM8m53S/bfWdHLc dcHXa5gZjeZU1bfe5CuK1zKs8yX1IlOLjsIkUscy5Srw/VCtrcHmmDeH3MkQAWC9 N/QJVgH2MqYU+Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:57:09 2026 by rpki-client