This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft File: lvgJYTh33quHSpQB0VbbFP9NKBQ.mft (raw, json) Hash identifier: ItzvWsv/mG3g/JuirkX+M6O54Hqtge/YbWgxH+Ht7zk= Subject key identifier: 73:AC:40:14:7F:80:63:B4:BC:68:EB:A3:DF:2B:37:47:AF:84:0B:17 Authority key identifier: 96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14 Certificate issuer: /CN=96f809613877deab874a9401d156db14ff4d2814 Certificate serial: 019C4322AF15D7D8BC214A1CA9A6514FF38F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft Manifest number: 13A9 Signing time: Mon 09 Feb 2026 16:01:12 +0000 Manifest this update: Mon 09 Feb 2026 16:01:12 +0000 Manifest next update: Tue 10 Feb 2026 16:01:12 +0000 Files and hashes: 1: VYI9qa8JCE6VkIqD0V54pQu3Jdo.roa (hash: pJTrpDe7OIckvsF3AmZnqqPmgPvtyMz/7jk3tJQykek=) 2: lvgJYTh33quHSpQB0VbbFP9NKBQ.crl (hash: 6mW2a9gY2baVn4vou1eu3Y3kiMImUfrCTkvUb0/t2tk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:af:15:d7:d8:bc:21:4a:1c:a9:a6:51:4f:f3:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96f809613877deab874a9401d156db14ff4d2814 Validity Not Before: Feb 9 16:01:12 2026 GMT Not After : Feb 10 16:01:12 2026 GMT Subject: CN=73ac40147f8063b4bc68eba3df2b3747af840b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:13:06:64:07:38:77:a0:73:89:06:b4:e4:38: 5d:49:4c:ad:f0:fb:da:e9:f0:d0:b8:12:40:82:b7: 35:8f:27:3c:d4:bd:26:a7:3f:b0:8b:d5:63:33:0b: 55:a9:a8:ba:a4:ca:16:97:95:78:af:a5:03:ae:8b: 77:ee:4a:5a:32:77:fb:70:f2:86:c2:cc:c7:6b:21: a4:bb:a1:53:c6:e6:1f:07:b7:c7:ea:95:cc:86:35: 95:13:da:72:85:44:37:5e:b3:64:27:c1:6b:45:f8: f6:aa:51:a0:58:58:80:70:7c:da:8d:9f:2b:25:e9: 12:7f:41:94:67:c8:f1:80:8d:1c:1a:f3:ec:ef:f3: 14:c4:88:33:9e:35:9c:3f:be:fd:38:bd:58:e1:d2: 70:1a:30:3c:62:7b:76:29:d3:e3:99:83:bc:2f:d3: 60:3c:60:6d:a9:f9:8f:c3:f4:cb:fd:a7:2f:4d:82: a3:07:d8:c5:8f:8b:85:62:f7:6d:59:a2:8c:f3:07: 5a:9f:b9:42:84:7c:b1:f9:42:7d:6c:19:a8:0f:db: 41:2f:5e:d7:f4:0c:36:ce:fc:40:6b:cd:17:27:a5: 5a:8e:4b:15:66:ec:74:79:96:b5:54:39:17:2e:f9: 56:a5:af:d9:0a:db:94:44:27:82:18:c9:e2:9a:cd: e5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:AC:40:14:7F:80:63:B4:BC:68:EB:A3:DF:2B:37:47:AF:84:0B:17 X509v3 Authority Key Identifier: keyid:96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:25:6b:29:b7:45:8c:44:d3:88:87:71:6c:ac:41:b7:3a:21: 20:84:3d:2d:59:af:5d:53:95:ce:29:c7:3a:14:df:d0:f2:10: f4:84:27:4f:05:dc:26:09:1e:26:95:d1:59:79:51:fe:aa:b9: 87:fa:bb:29:30:02:7f:6c:e7:b3:57:14:c8:50:f1:4a:04:65: 7a:cb:88:81:b6:46:0b:37:bb:a9:7a:a9:0e:23:00:6a:0e:9f: 47:5b:05:73:06:f2:2a:c1:cb:02:1f:71:d4:d7:f8:7d:83:ef: a6:ab:9e:fc:96:bc:53:30:4c:1f:9b:6a:89:70:b8:c1:d3:ef: a2:9d:eb:7d:36:02:ce:07:49:ea:7c:4c:d8:99:94:f9:67:2a: 78:7a:18:b4:5c:5f:be:2e:af:36:16:b2:55:ec:4b:60:98:76: dc:44:6e:2e:7d:b7:e6:ea:6c:2d:4e:26:24:c1:dd:72:10:cc: ac:48:66:28:d9:0e:b9:cf:b8:b8:43:b7:ee:21:b2:49:d9:be: ec:d8:4f:07:7f:25:23:f7:14:4e:39:99:5d:b8:91:be:4f:58: fb:b7:56:20:2d:dd:ce:5c:bc:bd:68:69:40:c1:02:a8:7c:31: 2e:b3:7a:8b:33:f5:9f:b7:0e:26:43:c6:79:3f:d6:26:e3:1f: ee:0d:a0:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIq8V19i8IUocqaZRT/OPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZjgwOTYxMzg3N2RlYWI4NzRhOTQwMWQxNTZkYjE0ZmY0 ZDI4MTQwHhcNMjYwMjA5MTYwMTEyWhcNMjYwMjEwMTYwMTEyWjAzMTEwLwYDVQQD Eyg3M2FjNDAxNDdmODA2M2I0YmM2OGViYTNkZjJiMzc0N2FmODQwYjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxMGZAc4d6BziQa05DhdSUyt8Pva 6fDQuBJAgrc1jyc81L0mpz+wi9VjMwtVqai6pMoWl5V4r6UDrot37kpaMnf7cPKG wszHayGku6FTxuYfB7fH6pXMhjWVE9pyhUQ3XrNkJ8FrRfj2qlGgWFiAcHzajZ8r JekSf0GUZ8jxgI0cGvPs7/MUxIgznjWcP779OL1Y4dJwGjA8Ynt2KdPjmYO8L9Ng PGBtqfmPw/TL/acvTYKjB9jFj4uFYvdtWaKM8wdan7lChHyx+UJ9bBmoD9tBL17X 9Aw2zvxAa80XJ6VajksVZux0eZa1VDkXLvlWpa/ZCtuURCeCGMnims3lyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOsQBR/gGO0vGjro98rN0evhAsXMB8GA1UdIwQY MBaAFJb4CWE4d96rh0qUAdFW2xT/TSgUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHZnSllUaDMzcXVIU3BRQjBWYmJGUDlOS0JRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hZDI3ODItZjUzYS00YmI0LWI4ZDct NjQ2NmQ0ODM0NTljLzEvbHZnSllUaDMzcXVIU3BRQjBWYmJGUDlOS0JRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hZDI3ODItZjUzYS00YmI0LWI4ZDctNjQ2NmQ0ODM0NTlj LzEvbHZnSllUaDMzcXVIU3BRQjBWYmJGUDlOS0JRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAviVrKbdF jETTiIdxbKxBtzohIIQ9LVmvXVOVzinHOhTf0PIQ9IQnTwXcJgkeJpXRWXlR/qq5 h/q7KTACf2zns1cUyFDxSgRlesuIgbZGCze7qXqpDiMAag6fR1sFcwbyKsHLAh9x 1Nf4fYPvpque/Ja8UzBMH5tqiXC4wdPvop3rfTYCzgdJ6nxM2JmU+WcqeHoYtFxf vi6vNhayVexLYJh23ERuLn235upsLU4mJMHdchDMrEhmKNkOuc+4uEO37iGySdm+ 7NhPB38lI/cUTjmZXbiRvk9Y+7dWIC3dzly8vWhpQMECqHwxLrN6izP1n7cOJkPG eT/WJuMf7g2gow== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:37 2026 by rpki-client