This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft File: lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft (raw, json) Hash identifier: EKJ1LHCL6qRDOOS7voNbx0HatsLqwsBpH+MOQNAWMIs= Subject key identifier: E1:9A:F8:F6:78:2B:30:43:E3:E1:6F:33:7F:B2:57:7D:79:2E:DF:B8 Authority key identifier: 96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32 Certificate issuer: /CN=960dd7cdce588bdaa2b7a8cb056d4db016701532 Certificate serial: 019C420F213AC9D65B3395CC186CDD80546E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft Manifest number: 0EEF Signing time: Mon 09 Feb 2026 11:00:13 +0000 Manifest this update: Mon 09 Feb 2026 11:00:13 +0000 Manifest next update: Tue 10 Feb 2026 11:00:13 +0000 Files and hashes: 1: a5gV2iTHliPR8LhFYU-KK7QJJvE.roa (hash: Wf9B8UaHcibkRfA0zFpN6M9JgI+cnQ8hTvGPe2+Coc4=) 2: lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl (hash: BZ7GA1ZMph9qACaCnlxvxlqE3gb/riFwnA91NN+5sZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:21:3a:c9:d6:5b:33:95:cc:18:6c:dd:80:54:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=960dd7cdce588bdaa2b7a8cb056d4db016701532 Validity Not Before: Feb 9 11:00:13 2026 GMT Not After : Feb 10 11:00:13 2026 GMT Subject: CN=e19af8f6782b3043e3e16f337fb2577d792edfb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8f:52:6b:18:ce:45:29:51:f2:22:16:50:08: 07:43:9e:0c:70:37:d5:73:8f:41:3e:ad:ae:e6:23: 19:3d:3b:61:1a:d2:d3:72:9f:31:6e:37:ec:0d:38: fb:f0:f4:86:e9:1d:08:3e:46:fc:33:c3:06:63:1e: 74:3c:a1:72:c9:86:40:00:f4:0d:d0:41:b2:eb:9c: df:5a:39:fc:3a:12:a6:49:95:e0:9a:f8:76:f0:ef: eb:9e:dd:15:5c:ba:e5:d5:7c:9e:55:a6:d2:0f:1e: 90:74:5b:ae:2c:ec:9a:56:93:d6:71:49:a5:69:4f: 1f:ef:27:f8:4a:14:f1:c9:7d:e5:85:ee:0f:05:80: fc:74:26:3e:f4:83:bc:ce:03:fb:f2:2a:f3:64:9b: 1a:cc:9a:1f:b8:c9:3a:31:41:73:33:25:c9:8f:59: af:b4:dc:4a:0f:c8:0b:bf:14:2c:5d:f4:a3:a4:ef: 60:b5:2b:93:90:77:a2:ec:ea:df:23:11:e9:64:7d: 8f:f8:5a:c4:d6:0b:01:98:97:0d:1a:72:7a:b2:fe: 45:7e:6d:d6:fe:2e:e0:73:32:dd:e6:52:98:24:f7: b3:5a:41:e2:8d:67:21:f9:11:01:56:01:f9:bb:4f: 3a:ab:bd:d2:2a:92:ff:cd:19:4c:c5:0f:a1:4c:41: 2b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9A:F8:F6:78:2B:30:43:E3:E1:6F:33:7F:B2:57:7D:79:2E:DF:B8 X509v3 Authority Key Identifier: keyid:96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ef:42:27:f7:ad:bf:ac:02:2a:5a:59:42:d9:95:a5:f6:47: f0:30:8c:1a:09:54:b2:b2:05:ce:59:b1:71:2b:03:ec:18:a4: e4:c4:b2:f1:0e:dd:11:03:93:8a:1a:93:14:89:e6:03:5f:90: b7:1b:d0:ec:a8:be:ac:45:11:fa:4c:83:0d:06:c6:25:96:51: b7:ab:c1:57:e7:a8:73:ec:90:6c:57:92:26:d3:91:3f:aa:a5: 11:d8:af:78:07:4e:ea:04:54:ce:c7:b1:a0:67:e3:43:6d:61: 89:e8:23:69:42:a2:56:ff:d0:27:01:de:e2:1e:76:3e:8c:b1: 67:8d:19:81:8b:e1:85:69:00:e0:79:85:24:90:51:3d:5b:c7: 82:33:13:63:5c:fc:0e:a3:84:9f:a5:cf:9b:53:4b:b1:39:09: 25:b7:67:58:84:9f:19:36:88:cf:71:91:a6:4e:0f:99:5d:20: c9:54:e0:5c:54:b2:12:b9:42:18:4d:62:18:ec:4d:03:df:ea: f1:d4:ef:df:92:30:e3:39:74:12:66:0f:5c:2f:86:d7:8a:a0: 16:45:b8:c0:7c:34:59:8d:72:b1:30:f2:c1:c3:5b:9f:ef:ba: d0:37:fc:c4:79:12:43:33:0f:d0:b6:8e:87:e4:08:1c:8d:1e: 75:cc:aa:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCDyE6ydZbM5XMGGzdgFRuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MGRkN2NkY2U1ODhiZGFhMmI3YThjYjA1NmQ0ZGIwMTY3 MDE1MzIwHhcNMjYwMjA5MTEwMDEzWhcNMjYwMjEwMTEwMDEzWjAzMTEwLwYDVQQD EyhlMTlhZjhmNjc4MmIzMDQzZTNlMTZmMzM3ZmIyNTc3ZDc5MmVkZmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI9SaxjORSlR8iIWUAgHQ54McDfV c49BPq2u5iMZPTthGtLTcp8xbjfsDTj78PSG6R0IPkb8M8MGYx50PKFyyYZAAPQN 0EGy65zfWjn8OhKmSZXgmvh28O/rnt0VXLrl1XyeVabSDx6QdFuuLOyaVpPWcUml aU8f7yf4ShTxyX3lhe4PBYD8dCY+9IO8zgP78irzZJsazJofuMk6MUFzMyXJj1mv tNxKD8gLvxQsXfSjpO9gtSuTkHei7OrfIxHpZH2P+FrE1gsBmJcNGnJ6sv5Ffm3W /i7gczLd5lKYJPezWkHijWch+REBVgH5u086q73SKpL/zRlMxQ+hTEErGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGa+PZ4KzBD4+FvM3+yV315Lt+4MB8GA1UdIwQY MBaAFJYN183OWIvaoreoywVtTbAWcBUyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGczWHpjNVlpOXFpdDZqTEJXMU5zQlp3RlRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kMzEyMzAtY2JkYy00MmMxLTg3MzIt OTAyZmYxN2JjNDk0LzEvbGczWHpjNVlpOXFpdDZqTEJXMU5zQlp3RlRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9kMzEyMzAtY2JkYy00MmMxLTg3MzItOTAyZmYxN2JjNDk0 LzEvbGczWHpjNVlpOXFpdDZqTEJXMU5zQlp3RlRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfO9CJ/et v6wCKlpZQtmVpfZH8DCMGglUsrIFzlmxcSsD7Bik5MSy8Q7dEQOTihqTFInmA1+Q txvQ7Ki+rEUR+kyDDQbGJZZRt6vBV+eoc+yQbFeSJtORP6qlEdiveAdO6gRUzsex oGfjQ21hiegjaUKiVv/QJwHe4h52PoyxZ40ZgYvhhWkA4HmFJJBRPVvHgjMTY1z8 DqOEn6XPm1NLsTkJJbdnWISfGTaIz3GRpk4PmV0gyVTgXFSyErlCGE1iGOxNA9/q 8dTv35Iw4zl0EmYPXC+G14qgFkW4wHw0WY1ysTDywcNbn++60Df8xHkSQzMP0LaO h+QIHI0edcyqUA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:25 2026 by rpki-client