This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft File: lSCTFQ9KRhAazX6jomu0OFExI7U.mft (raw, json) Hash identifier: 93aYGszuedeN/8EX4ZpNih1cfN9V9VNCjSKF8m/7xAg= Subject key identifier: 28:E1:A1:26:C3:41:62:98:AB:EB:1A:60:37:29:45:08:73:1F:13:77 Authority key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5 Certificate issuer: /CN=952093150f4a46101acd7ea3a26bb438513123b5 Certificate serial: 019C44D9837459502AC3BF11B8C521AEA819 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft Manifest number: 1813 Signing time: Tue 10 Feb 2026 00:00:31 +0000 Manifest this update: Tue 10 Feb 2026 00:00:31 +0000 Manifest next update: Wed 11 Feb 2026 00:00:31 +0000 Files and hashes: 1: 3rjMBVFe8uKBxeuV296UIWDteN0.roa (hash: BWIf1Yq2kYJ+acS7y1zpLt/FLnKlwt4+VzDbiu9Tn9U=) 2: lSCTFQ9KRhAazX6jomu0OFExI7U.crl (hash: vhzWM1lXJ5TpjeWSIvjVTbiuIYyMQuvc024u2wOPpM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:d9:83:74:59:50:2a:c3:bf:11:b8:c5:21:ae:a8:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=952093150f4a46101acd7ea3a26bb438513123b5 Validity Not Before: Feb 10 00:00:31 2026 GMT Not After : Feb 11 00:00:31 2026 GMT Subject: CN=28e1a126c3416298abeb1a6037294508731f1377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:18:07:76:72:5a:d2:3e:ea:e8:cd:bd:5f:f5: 3e:a8:e3:5b:5b:22:11:ad:7a:cb:bb:64:da:76:14: 92:83:2a:d3:3c:be:95:67:b4:34:6e:81:aa:09:66: 48:f9:43:ab:8f:81:c7:a5:e4:53:f1:e5:87:80:4b: 8b:72:15:e9:9a:2e:ee:b6:ce:d0:86:35:a7:d9:bc: dd:44:9b:b1:79:81:4e:b6:aa:43:f9:b5:e1:fa:1d: 37:ed:bb:c5:5d:b5:68:78:d4:80:05:4c:73:d9:b9: 50:64:85:80:88:9f:55:ce:23:72:e1:e8:e2:7b:4e: 97:c0:ef:bd:17:d9:65:20:14:1f:43:6a:f4:ab:f8: 9c:54:9e:f8:82:91:0f:ea:2d:d4:a6:0c:d8:3f:31: c0:ba:bf:2b:e6:94:6d:4b:83:f3:58:d2:ce:75:fc: 67:07:9a:d8:d4:1c:7f:89:49:a3:45:e5:32:54:20: f1:57:e3:21:ac:7b:30:bf:4c:bc:bf:c0:73:a4:27: b0:bc:3f:b6:35:3d:16:2d:ce:24:c6:bc:ca:7e:d3: 1f:36:72:7e:79:52:a1:0c:13:e6:5f:e1:b5:f7:5d: 09:a9:b3:1c:84:52:48:b7:7e:82:18:0f:38:cd:c0: 6f:6d:10:a7:d7:a2:1f:e7:a2:36:69:58:7f:f2:92: 5e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E1:A1:26:C3:41:62:98:AB:EB:1A:60:37:29:45:08:73:1F:13:77 X509v3 Authority Key Identifier: keyid:95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:3e:45:53:59:c0:a9:75:b7:9f:3c:93:a5:3a:55:20:7d:d1: 7a:ac:61:17:4e:21:51:e9:9c:98:aa:20:51:97:60:b8:5c:d9: e1:97:86:76:d8:30:65:9d:1f:c5:89:b9:53:c7:2e:60:78:12: f5:68:2d:99:c3:a2:99:a4:fd:a2:4b:6d:58:ee:02:ae:9c:03: ec:d8:4e:36:90:89:ad:42:4d:40:87:23:7e:f8:ef:41:50:9e: b7:9d:77:ff:b0:46:97:bb:11:56:00:55:33:58:22:05:84:f9: 4d:e8:fe:42:35:0f:70:a1:7e:42:a1:cc:30:f0:82:7e:c1:22: 3b:52:d5:55:c0:17:07:a6:03:d1:b8:8c:48:a5:53:a3:d7:33: 0b:6d:44:0a:63:4e:b2:c6:16:17:68:ef:95:91:b4:0f:4b:93: ba:75:53:a8:98:6a:c4:5a:17:ee:5e:5c:76:8e:9d:9b:5b:da: 5f:df:93:0e:5f:68:bb:61:ae:5c:ff:83:d5:9b:75:4b:5c:a9: 64:aa:5d:49:bd:02:f1:13:21:d6:01:fa:c1:8d:ed:c1:e9:23: 4d:33:ef:70:41:d4:89:24:8d:39:ed:70:25:56:65:23:17:15: ba:88:fd:04:19:6c:e9:d4:ee:0d:5b:35:71:9e:8e:d0:34:ab: b0:d1:3d:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2YN0WVAqw78RuMUhrqgZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjA5MzE1MGY0YTQ2MTAxYWNkN2VhM2EyNmJiNDM4NTEz MTIzYjUwHhcNMjYwMjEwMDAwMDMxWhcNMjYwMjExMDAwMDMxWjAzMTEwLwYDVQQD EygyOGUxYTEyNmMzNDE2Mjk4YWJlYjFhNjAzNzI5NDUwODczMWYxMzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhgHdnJa0j7q6M29X/U+qONbWyIR rXrLu2TadhSSgyrTPL6VZ7Q0boGqCWZI+UOrj4HHpeRT8eWHgEuLchXpmi7uts7Q hjWn2bzdRJuxeYFOtqpD+bXh+h037bvFXbVoeNSABUxz2blQZIWAiJ9VziNy4eji e06XwO+9F9llIBQfQ2r0q/icVJ74gpEP6i3UpgzYPzHAur8r5pRtS4PzWNLOdfxn B5rY1Bx/iUmjReUyVCDxV+MhrHswv0y8v8BzpCewvD+2NT0WLc4kxrzKftMfNnJ+ eVKhDBPmX+G1910JqbMchFJIt36CGA84zcBvbRCn16If56I2aVh/8pJeNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjhoSbDQWKYq+saYDcpRQhzHxN3MB8GA1UdIwQY MBaAFJUgkxUPSkYQGs1+o6JrtDhRMSO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNDVEZROUtSaEFhelg2am9tdTBPRkV4STdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85NThjYmMtYzJmNC00OGY3LWFkZGQt ZTgwNGRjYmRkNzYyLzEvbFNDVEZROUtSaEFhelg2am9tdTBPRkV4STdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi85NThjYmMtYzJmNC00OGY3LWFkZGQtZTgwNGRjYmRkNzYy LzEvbFNDVEZROUtSaEFhelg2am9tdTBPRkV4STdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoD5FU1nA qXW3nzyTpTpVIH3ReqxhF04hUemcmKogUZdguFzZ4ZeGdtgwZZ0fxYm5U8cuYHgS 9WgtmcOimaT9okttWO4CrpwD7NhONpCJrUJNQIcjfvjvQVCet513/7BGl7sRVgBV M1giBYT5Tej+QjUPcKF+QqHMMPCCfsEiO1LVVcAXB6YD0biMSKVTo9czC21ECmNO ssYWF2jvlZG0D0uTunVTqJhqxFoX7l5cdo6dm1vaX9+TDl9ou2GuXP+D1Zt1S1yp ZKpdSb0C8RMh1gH6wY3twekjTTPvcEHUiSSNOe1wJVZlIxcVuoj9BBls6dTuDVs1 cZ6O0DSrsNE9eQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:21:38 2026 by rpki-client