This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
File: LO4pmOhvp0iOa2T47bwDLOFdG8w.mft (raw, json)
Hash identifier: 8Cp4H64HWJoLwpNumESDGA1sH2PRY3NwwqQPkGYdv64=
Subject key identifier: 41:85:D5:A0:76:B7:BB:06:32:EE:07:3C:F5:EF:27:B3:98:22:F8:A2
Authority key identifier: 2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC
Certificate issuer: /CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc
Certificate serial: 019C43220BFBC8420719AC4519F814E5DC52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
Manifest number: 0F94
Signing time: Mon 09 Feb 2026 16:00:30 +0000
Manifest this update: Mon 09 Feb 2026 16:00:30 +0000
Manifest next update: Tue 10 Feb 2026 16:00:30 +0000
Files and hashes: 1: EJblh9ckO5ZhFdqlQrwkpSLo5w8.roa (hash: KygpTZidDj6IJAoJpYsnybjIOxvZc9DyQui8eumvF1w=)
2: LO4pmOhvp0iOa2T47bwDLOFdG8w.crl (hash: hhJk8sRKlg82/l+UHrBY1+S6sfsIkZvojLw1CtHoPwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:0b:fb:c8:42:07:19:ac:45:19:f8:14:e5:dc:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc
Validity
Not Before: Feb 9 16:00:30 2026 GMT
Not After : Feb 10 16:00:30 2026 GMT
Subject: CN=4185d5a076b7bb0632ee073cf5ef27b39822f8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:74:2b:84:d6:70:81:85:84:ce:df:7d:a6:35:
7f:2e:11:3f:04:34:d6:ef:0b:6c:8c:e5:af:b1:4e:
b0:3c:94:b7:bc:0a:98:3c:ad:a2:a6:ac:58:cc:25:
e5:9b:16:ce:c8:b4:2e:05:01:11:87:82:94:fc:94:
14:05:6a:60:4f:db:8b:9e:48:d2:d5:3f:f2:c9:19:
41:8e:e9:ca:81:8a:9e:4a:71:4a:49:3e:d0:8e:27:
1c:3f:79:95:6d:7c:93:b0:a5:c9:10:15:89:64:29:
70:7f:b1:6e:28:24:75:c3:26:ed:dc:29:a1:78:c6:
53:d9:bd:cc:a1:9f:aa:3b:04:5f:c8:5c:5b:35:f5:
81:44:cc:2a:e1:2b:59:ae:ba:88:ca:1d:f1:b3:97:
49:5d:61:b4:2b:c7:43:72:e2:a8:c6:f1:ec:95:18:
dc:4c:48:62:3c:66:64:77:67:33:1f:25:bf:9f:ec:
43:d9:0f:02:99:63:88:71:e9:f2:55:27:72:c1:8e:
3f:9f:8b:44:64:6e:12:b3:9d:06:6d:8f:c2:48:ec:
61:45:2f:0c:f3:97:d5:24:40:e2:77:4b:97:4c:7a:
f1:1d:a2:75:a4:2e:63:5c:ce:a9:b0:69:dd:14:ce:
ee:fe:ab:e3:67:31:d4:e4:5d:f8:4a:7f:26:91:48:
60:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:85:D5:A0:76:B7:BB:06:32:EE:07:3C:F5:EF:27:B3:98:22:F8:A2
X509v3 Authority Key Identifier:
keyid:2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:18:14:de:69:7d:4d:0a:b5:42:c8:10:40:b6:72:8d:c9:bf:
9e:5e:da:36:35:d9:db:2b:16:34:50:27:8e:0d:56:9d:29:62:
d9:34:62:05:b3:f0:04:07:69:58:92:de:58:f3:5a:1a:0f:8d:
61:bb:4f:fb:9e:e8:07:80:bb:4a:22:ea:9a:e8:ec:7d:19:cb:
17:f6:dc:b2:2e:df:03:69:7f:3a:02:ac:18:c3:1b:2d:26:fd:
fe:04:8b:c6:28:7a:8d:a7:91:df:b2:cd:45:32:49:d5:ed:db:
de:87:da:12:c3:b8:66:1e:92:0d:6f:e3:1d:ba:d5:8b:d1:ac:
4d:28:01:b0:da:6b:79:28:e8:9e:d7:4b:c2:dc:bd:bb:69:2f:
79:e5:a0:7b:71:61:54:4e:6d:7a:cf:44:0f:2d:2a:c1:ad:8f:
6b:eb:32:86:b6:81:07:6a:b6:ba:e6:f3:ef:d2:27:5e:dc:83:
48:d4:ae:52:05:f2:85:51:95:1a:ee:f2:8f:17:cb:a0:ba:2d:
2b:2b:b0:d2:ad:66:f3:2e:0c:08:4d:e1:66:aa:b9:6a:8f:0c:
84:6f:d7:b5:da:27:f2:95:58:7b:f7:66:69:68:37:0f:c9:6e:
93:66:a5:21:6b:da:1c:12:07:e2:6e:e5:e9:22:81:8a:3c:66:
06:ec:a5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:00 2026 by rpki-client