This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
File: LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft (raw, json)
Hash identifier: ocik5sHPB8839vHTBsbXvzo/Z/6r0rKfUoLaZe4PtJM=
Subject key identifier: BB:D4:00:46:1C:82:69:02:45:A9:A6:97:94:C9:1C:19:6B:A9:A4:BB
Authority key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
Certificate issuer: /CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Certificate serial: 019BFCC0B967A88452087C35ADB5870CD401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
Manifest number: 17ED
Signing time: Tue 27 Jan 2026 00:00:47 +0000
Manifest this update: Tue 27 Jan 2026 00:00:47 +0000
Manifest next update: Wed 28 Jan 2026 00:00:47 +0000
Files and hashes: 1: LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl (hash: YW/qTP8JEmqgpTOTDa/12syXAA6V7dyqLA2cTb5X0K4=)
2: SizhTkIG2sATNsv1VQNzH4wHchc.roa (hash: 2PYBEpDEAGt3SnEGmQvvCFiLA489Fe6L2n4/O/hryFQ=)
3: cMMwTPV9hTcR-LW3CCNoNNI7ghU.roa (hash: D27oXJgFuXlMx0AdNp5xIFlLxsheQv6fczl4XU0D9Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fc:c0:b9:67:a8:84:52:08:7c:35:ad:b5:87:0c:d4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Validity
Not Before: Jan 27 00:00:47 2026 GMT
Not After : Jan 28 00:00:47 2026 GMT
Subject: CN=bbd400461c82690245a9a69794c91c196ba9a4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f7:3f:4e:c4:b3:15:1d:9a:44:61:d2:4c:00:
76:95:1e:b2:d7:af:10:25:dc:ee:e3:89:0e:d7:1b:
25:38:63:92:39:31:93:4c:7b:e7:ac:eb:37:ae:fc:
7d:0b:f9:ea:d3:df:b1:2f:38:35:49:9b:7f:29:6b:
36:93:c3:52:53:8e:06:48:6f:df:84:10:27:55:bf:
70:3e:3a:6d:86:62:aa:ad:2f:dd:02:c8:ce:e2:b1:
5b:18:42:44:50:aa:eb:6f:d0:9e:22:39:11:86:08:
b4:20:21:f2:ed:34:b7:63:9f:5c:47:a9:67:f7:4b:
8b:e6:20:ba:47:e6:aa:fd:5e:29:a8:92:bd:8a:7c:
e6:ed:b4:f3:0e:b5:e4:22:63:f5:66:1c:dd:29:b8:
7b:86:9a:68:22:90:86:18:0b:b8:19:aa:ce:f6:ce:
d6:50:24:c6:ac:40:a3:96:81:fa:8f:b9:5d:1e:13:
a8:c7:ef:77:ea:f6:3d:d3:72:f1:b1:bb:57:29:73:
d8:ad:63:25:62:ac:fd:58:f3:52:bc:68:2a:df:bf:
df:21:bf:af:cd:de:b5:84:d8:95:f3:19:ca:34:63:
6f:2a:55:aa:ec:39:b8:b2:8d:42:65:ad:fb:95:69:
39:f8:56:35:af:56:7c:ac:09:16:24:36:1b:38:16:
dc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D4:00:46:1C:82:69:02:45:A9:A6:97:94:C9:1C:19:6B:A9:A4:BB
X509v3 Authority Key Identifier:
keyid:2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c9:46:a7:13:e3:3f:14:a5:e3:a6:29:b4:d7:82:06:c8:3e:
57:9e:9e:74:a9:03:c4:43:1a:52:4e:d6:71:e1:e0:44:e4:eb:
6e:f3:c9:fb:65:49:d1:2f:29:6c:87:f4:43:77:28:d6:3d:bb:
1c:37:94:5c:f1:1e:de:dd:0e:62:5e:9f:74:44:3e:d4:cf:0a:
0f:48:94:df:8d:38:50:4f:c1:c4:59:1c:9f:fb:bc:4e:6c:b3:
28:3f:58:01:1f:8a:6c:91:91:d0:79:d1:46:7a:9f:59:ce:8c:
28:bc:ff:97:bd:0c:e4:17:cf:56:e6:19:30:45:eb:a9:13:b4:
0b:83:09:d7:f0:ad:73:75:48:77:f0:41:70:50:81:d3:41:c4:
c5:50:f2:5b:e8:7b:e7:16:86:fa:9a:11:06:e8:f5:34:89:d3:
c4:45:12:11:09:87:0e:ee:25:0f:c2:4d:c5:2b:1a:1f:78:11:
78:51:64:ae:96:87:72:41:06:4e:10:dc:3f:bd:d4:a8:14:6d:
23:c8:63:61:ad:37:2e:00:2e:98:10:14:e7:03:b2:c4:a4:f1:
4f:3a:4d:48:db:37:d6:03:70:cf:7f:73:b0:88:1c:16:2c:b9:
f6:61:ac:aa:6b:41:c3:4d:f1:6d:05:7f:73:a7:4a:54:3f:c2:
78:4c:18:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 11:01:16 2026 by rpki-client