This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft File: lPNHF_8y_ix2RK610O6iMBYX8SQ.mft (raw, json) Hash identifier: ygwd8IIuEznnPN+MBlu1iu2cU2BS+zMwsvwEFXdBYbo= Subject key identifier: A6:1D:A4:D9:22:C3:7F:2E:44:8D:80:0C:90:96:1A:8F:03:18:D0:59 Authority key identifier: 94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24 Certificate issuer: /CN=94f34717ff32fe2c7644aeb5d0eea2301617f124 Certificate serial: 019C42462FC22F48F8D41D00B4F05564034F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft Manifest number: 0791 Signing time: Mon 09 Feb 2026 12:00:21 +0000 Manifest this update: Mon 09 Feb 2026 12:00:21 +0000 Manifest next update: Tue 10 Feb 2026 12:00:21 +0000 Files and hashes: 1: lPNHF_8y_ix2RK610O6iMBYX8SQ.crl (hash: Il/FCgJZerKlSHd/bHywLx5/4gr4JNA2A27SApc/ff4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:2f:c2:2f:48:f8:d4:1d:00:b4:f0:55:64:03:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94f34717ff32fe2c7644aeb5d0eea2301617f124 Validity Not Before: Feb 9 12:00:21 2026 GMT Not After : Feb 10 12:00:21 2026 GMT Subject: CN=a61da4d922c37f2e448d800c90961a8f0318d059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:71:a9:24:2c:67:8e:e9:4f:2a:a0:53:86:df: 19:59:c1:5e:4d:23:a8:95:fb:7e:52:71:fe:6b:ba: 2c:ea:07:b1:cf:06:5e:92:ab:53:5a:76:d8:bf:87: f6:54:45:2d:9a:6e:40:52:45:6d:54:21:20:d3:65: 8d:39:5b:ee:e2:b0:f1:b3:7e:c9:98:08:e1:fb:12: 0c:ff:b0:17:78:e3:a2:79:d4:57:b7:d7:04:74:c4: 29:29:d1:1d:e3:e5:00:67:12:5f:a5:fd:08:06:53: 2d:96:93:76:6d:59:52:e9:11:2e:2c:27:48:22:bb: 79:d4:d8:f6:b4:7d:df:29:40:26:af:ce:93:37:d4: 49:ba:cc:76:be:b3:27:95:46:02:e2:50:81:5a:de: 10:9f:f0:ab:57:ac:4d:e5:5c:79:76:f9:9f:46:33: 00:8b:09:a4:98:50:2b:24:eb:0a:6d:c9:29:98:b9: 95:47:f4:6d:88:2e:b0:6f:ed:90:63:0e:0d:ff:99: 41:b0:ab:31:10:54:3c:d9:e5:52:3f:82:c1:d9:75: c8:d6:00:39:cb:23:a0:c9:92:2e:0c:26:89:89:f2: 21:4f:97:f8:42:37:23:4f:a4:35:9b:95:a6:ef:b6: d8:d6:3e:09:d6:9c:44:82:21:e1:15:bb:3e:92:c2: b5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1D:A4:D9:22:C3:7F:2E:44:8D:80:0C:90:96:1A:8F:03:18:D0:59 X509v3 Authority Key Identifier: keyid:94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:88:92:a2:ac:59:19:30:5d:4a:8f:f1:d9:84:75:71:9c:ff: 6d:22:3b:f9:31:fc:f6:15:88:38:fc:1d:23:d1:58:a5:f1:1e: f5:e5:d9:e7:d4:17:3a:d3:0c:2d:c9:86:54:84:bf:ee:26:ac: 93:c0:0a:d9:62:07:a9:90:52:80:5e:0e:b5:fb:9e:41:4b:e4: 5e:0e:81:16:71:83:50:a6:d7:07:43:f6:31:5c:23:15:6f:a8: df:d4:7d:5e:47:0a:1b:bc:4a:e3:e6:a4:05:4b:8c:34:22:7c: 73:b8:73:96:22:73:eb:ff:98:29:51:2f:0d:c7:07:a2:cf:19: 15:8e:37:6a:66:22:97:3f:13:0a:f4:52:81:de:a9:6f:d8:64: c2:f6:57:3c:3d:5a:06:59:f9:4d:f0:26:d0:47:33:61:66:05: 21:8d:4e:23:3c:95:d2:23:33:5d:bd:bb:33:66:19:51:7b:80: c0:44:7f:05:80:92:98:f3:d1:b8:a2:c2:e9:b5:fb:d6:4e:29: bd:62:df:16:fa:81:bd:98:fe:3a:c2:1e:6b:b0:67:e3:f3:df: 47:ac:54:f4:fe:43:a9:2c:42:93:04:da:b5:c6:6c:b1:e9:8d: 13:44:ef:b2:8a:2b:a0:36:43:11:88:7d:6b:1f:02:dd:5a:09: f2:14:2c:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRi/CL0j41B0AtPBVZANPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZjM0NzE3ZmYzMmZlMmM3NjQ0YWViNWQwZWVhMjMwMTYx N2YxMjQwHhcNMjYwMjA5MTIwMDIxWhcNMjYwMjEwMTIwMDIxWjAzMTEwLwYDVQQD EyhhNjFkYTRkOTIyYzM3ZjJlNDQ4ZDgwMGM5MDk2MWE4ZjAzMThkMDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7XGpJCxnjulPKqBTht8ZWcFeTSOo lft+UnH+a7os6gexzwZekqtTWnbYv4f2VEUtmm5AUkVtVCEg02WNOVvu4rDxs37J mAjh+xIM/7AXeOOiedRXt9cEdMQpKdEd4+UAZxJfpf0IBlMtlpN2bVlS6REuLCdI Irt51Nj2tH3fKUAmr86TN9RJusx2vrMnlUYC4lCBWt4Qn/CrV6xN5Vx5dvmfRjMA iwmkmFArJOsKbckpmLmVR/RtiC6wb+2QYw4N/5lBsKsxEFQ82eVSP4LB2XXI1gA5 yyOgyZIuDCaJifIhT5f4QjcjT6Q1m5Wm77bY1j4J1pxEgiHhFbs+ksK1MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKYdpNkiw38uRI2ADJCWGo8DGNBZMB8GA1UdIwQY MBaAFJTzRxf/Mv4sdkSutdDuojAWF/EkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFBOSEZfOHlfaXgyUks2MTBPNmlNQllYOFNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jYWIxOTgtM2U4NC00YjAxLWJmYmEt ODJiOWU1ZmU5YjA2LzEvbFBOSEZfOHlfaXgyUks2MTBPNmlNQllYOFNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jYWIxOTgtM2U4NC00YjAxLWJmYmEtODJiOWU1ZmU5YjA2 LzEvbFBOSEZfOHlfaXgyUks2MTBPNmlNQllYOFNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYiSoqxZ GTBdSo/x2YR1cZz/bSI7+TH89hWIOPwdI9FYpfEe9eXZ59QXOtMMLcmGVIS/7ias k8AK2WIHqZBSgF4OtfueQUvkXg6BFnGDUKbXB0P2MVwjFW+o39R9XkcKG7xK4+ak BUuMNCJ8c7hzliJz6/+YKVEvDccHos8ZFY43amYilz8TCvRSgd6pb9hkwvZXPD1a Bln5TfAm0EczYWYFIY1OIzyV0iMzXb27M2YZUXuAwER/BYCSmPPRuKLC6bX71k4p vWLfFvqBvZj+OsIea7Bn4/PfR6xU9P5DqSxCkwTatcZssemNE0TvsooroDZDEYh9 ax8C3VoJ8hQsKA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:59 2026 by rpki-client