This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft File: lIlI8N1eL7CpArl5ypxcGkT5j6E.mft (raw, json) Hash identifier: ILAPzc8X87wf+3BdkNWD9p5FvpDUXP2kgqGEuSc36eo= Subject key identifier: 71:E0:E3:33:BE:B3:00:75:DF:4F:7F:F4:5D:C0:C9:89:62:C6:8D:B9 Authority key identifier: 94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1 Certificate issuer: /CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1 Certificate serial: 019C43592B1BFEF4A30B8DD32E5265D74A41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft Manifest number: 149F Signing time: Mon 09 Feb 2026 17:00:42 +0000 Manifest this update: Mon 09 Feb 2026 17:00:42 +0000 Manifest next update: Tue 10 Feb 2026 17:00:42 +0000 Files and hashes: 1: Ri4Y_iu8PISs6vsNBzbwCdOr3-s.roa (hash: 0J0gMYHWM02/yJR/SUWZtkK9fwND2HKIpHaXNLv/HHg=) 2: lIlI8N1eL7CpArl5ypxcGkT5j6E.crl (hash: 1cj+5waO126+8/bS4sOmeWKaPbQhEt9nyR4u2bifggc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:2b:1b:fe:f4:a3:0b:8d:d3:2e:52:65:d7:4a:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1 Validity Not Before: Feb 9 17:00:42 2026 GMT Not After : Feb 10 17:00:42 2026 GMT Subject: CN=71e0e333beb30075df4f7ff45dc0c98962c68db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b3:51:68:2a:8b:70:a2:b6:d8:36:88:e1:77: ff:ad:24:23:6b:50:97:68:76:4d:1c:c6:39:4c:b2: 59:7e:09:75:db:4c:5e:0a:d1:5b:9e:c3:78:1b:d7: 4e:41:e7:7e:6a:3c:cd:86:62:c9:b8:b1:9c:48:d2: 45:e1:20:fe:b0:d7:89:a8:5f:88:22:ea:3f:e5:bb: d2:f4:56:5b:29:6f:72:75:e7:d3:fe:2e:f9:5e:36: 5e:80:43:30:1f:c7:83:02:fe:98:d6:f7:41:c0:46: 3c:5c:0d:b5:0b:06:95:f9:28:af:91:8c:43:a9:e3: f4:95:28:00:e7:17:91:69:83:ea:f5:65:27:14:e0: 4f:01:1d:84:cf:f5:2a:07:e7:3e:be:ac:53:21:ed: 5e:52:11:d9:f4:51:e9:6c:8d:e3:3c:30:72:c1:df: 8f:23:ed:fe:1b:b3:6b:5d:60:a8:39:e3:1a:bc:66: ba:4d:09:bd:c6:45:f6:5f:0a:04:35:04:16:1b:25: d3:9c:56:fa:3a:5d:8f:9a:f1:22:a9:5a:d9:77:75: 65:c0:b6:da:62:3c:63:3e:31:10:ab:22:ea:f9:44: 1e:ed:16:45:e3:cc:87:ac:76:12:51:d6:64:3a:b9: dd:73:01:34:b9:f0:14:25:3c:a6:dd:c1:89:ed:da: ae:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E0:E3:33:BE:B3:00:75:DF:4F:7F:F4:5D:C0:C9:89:62:C6:8D:B9 X509v3 Authority Key Identifier: keyid:94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:6b:b6:60:cf:8a:a1:c9:69:5b:27:8e:e6:f9:73:90:e2:f3: 57:c8:74:9b:e5:43:89:37:dc:a1:cd:73:c3:db:7e:ba:4e:cf: 4d:bd:8a:e1:27:2b:24:22:83:9c:93:49:2b:53:ca:e5:b6:7f: 82:96:61:0f:ad:3c:19:fa:39:ec:a5:45:c0:8b:94:85:a9:a7: 09:04:07:fa:d0:6d:38:4d:6b:2b:d5:59:b3:2d:6a:a8:c2:7c: 4e:53:f0:ea:bd:57:84:c1:0e:e4:27:7e:8e:a3:6c:02:05:e0: 3d:7f:5a:fd:03:fa:3d:79:3a:ee:99:14:3f:69:d3:b9:e2:9d: 7f:73:1b:f3:ec:3b:52:11:5a:46:09:a8:e1:09:15:0b:07:15: 75:86:da:fb:04:cd:27:9f:01:3c:f9:81:a1:d4:3f:e9:58:2a: e8:00:91:25:17:e2:71:e4:73:97:bb:96:1a:b6:ac:11:9b:0c: a3:7a:49:eb:a8:4a:a0:11:01:50:45:91:8a:60:8f:cd:8b:d2: 90:b2:26:42:dd:aa:25:23:a5:e4:bf:fc:54:f1:da:c9:83:e6: d9:b0:24:cc:94:de:47:c8:8b:44:00:08:8b:e3:a7:63:7b:ed: 17:27:53:fd:d6:96:80:d2:b5:12:28:d2:87:af:d2:9c:36:55: c8:8b:b8:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWSsb/vSjC43TLlJl10pBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ODk0OGYwZGQ1ZTJmYjBhOTAyYjk3OWNhOWM1YzFhNDRm OThmYTEwHhcNMjYwMjA5MTcwMDQyWhcNMjYwMjEwMTcwMDQyWjAzMTEwLwYDVQQD Eyg3MWUwZTMzM2JlYjMwMDc1ZGY0ZjdmZjQ1ZGMwYzk4OTYyYzY4ZGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrNRaCqLcKK22DaI4Xf/rSQja1CX aHZNHMY5TLJZfgl120xeCtFbnsN4G9dOQed+ajzNhmLJuLGcSNJF4SD+sNeJqF+I Iuo/5bvS9FZbKW9ydefT/i75XjZegEMwH8eDAv6Y1vdBwEY8XA21CwaV+SivkYxD qeP0lSgA5xeRaYPq9WUnFOBPAR2Ez/UqB+c+vqxTIe1eUhHZ9FHpbI3jPDBywd+P I+3+G7NrXWCoOeMavGa6TQm9xkX2XwoENQQWGyXTnFb6Ol2PmvEiqVrZd3VlwLba YjxjPjEQqyLq+UQe7RZF48yHrHYSUdZkOrndcwE0ufAUJTym3cGJ7dquKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHg4zO+swB1309/9F3AyYlixo25MB8GA1UdIwQY MBaAFJSJSPDdXi+wqQK5ecqcXBpE+Y+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbElsSThOMWVMN0NwQXJsNXlweGNHa1Q1ajZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hYmI4ODUtYTc5NC00YmQ1LTg2MWUt ODk2MWM3YTNiYmFiLzEvbElsSThOMWVMN0NwQXJsNXlweGNHa1Q1ajZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9hYmI4ODUtYTc5NC00YmQ1LTg2MWUtODk2MWM3YTNiYmFi LzEvbElsSThOMWVMN0NwQXJsNXlweGNHa1Q1ajZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmu2YM+K oclpWyeO5vlzkOLzV8h0m+VDiTfcoc1zw9t+uk7PTb2K4ScrJCKDnJNJK1PK5bZ/ gpZhD608Gfo57KVFwIuUhamnCQQH+tBtOE1rK9VZsy1qqMJ8TlPw6r1XhMEO5Cd+ jqNsAgXgPX9a/QP6PXk67pkUP2nTueKdf3Mb8+w7UhFaRgmo4QkVCwcVdYba+wTN J58BPPmBodQ/6Vgq6ACRJRficeRzl7uWGrasEZsMo3pJ66hKoBEBUEWRimCPzYvS kLImQt2qJSOl5L/8VPHayYPm2bAkzJTeR8iLRAAIi+OnY3vtFydT/daWgNK1EijS h6/SnDZVyIu4PQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:40:40 2026 by rpki-client