This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
File: llpqv9sIdPL-wiYs3qM3Otyy3FU.mft (raw, json)
Hash identifier: NyzghrmXpZ5Gfv8GRpcmgBa8leXUkoTOIjeGksfjvos=
Subject key identifier: BE:54:40:A6:8E:0B:A9:86:6C:4A:D7:15:2C:B1:93:F7:80:7F:2D:A1
Authority key identifier: 96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
Certificate issuer: /CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Certificate serial: 019BFA2DA5967D76BFC87C7076CDE0839328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
Manifest number: 0F50
Signing time: Mon 26 Jan 2026 12:00:53 +0000
Manifest this update: Mon 26 Jan 2026 12:00:53 +0000
Manifest next update: Tue 27 Jan 2026 12:00:53 +0000
Files and hashes: 1: llpqv9sIdPL-wiYs3qM3Otyy3FU.crl (hash: f8+5hsz/n1J04c7HbU10mRJfh0K1bvOxGGn0zJPxuGM=)
2: vsmnrTln0FKIYbUICJTrn_gYJUQ.roa (hash: 8GWosWzTHZxxvdZfNNXEvhtfiz2Ewi4ZMP6/Lvtvauc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fa:2d:a5:96:7d:76:bf:c8:7c:70:76:cd:e0:83:93:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Validity
Not Before: Jan 26 12:00:53 2026 GMT
Not After : Jan 27 12:00:53 2026 GMT
Subject: CN=be5440a68e0ba9866c4ad7152cb193f7807f2da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7d:6b:b7:bc:42:fd:94:e8:d9:c4:3d:7c:a3:
19:de:56:70:f0:d0:15:47:60:fa:f9:26:87:45:a8:
3d:69:b9:95:6c:60:56:87:93:27:e5:59:aa:98:fe:
a1:f1:11:b6:f3:c7:73:c3:75:ff:e9:fe:d0:af:3c:
79:c1:01:d5:d5:c6:7a:16:8d:b3:79:ad:c4:a8:0f:
76:0b:f4:53:a6:77:93:b3:cd:c4:ce:2b:05:ff:f5:
4a:f9:30:f5:71:be:95:1a:02:15:47:89:64:da:0f:
a7:72:a9:21:42:d8:23:ab:0b:e9:60:22:e6:c0:b4:
1c:2f:8e:42:40:0d:58:11:f5:17:8a:18:89:64:f3:
fd:24:b0:a0:cd:bc:b0:48:84:31:53:24:8e:f1:f2:
cd:aa:b9:9c:98:ed:94:55:94:e0:12:ce:a9:c5:3c:
79:58:2f:ec:d6:fd:2d:d9:9a:97:31:99:65:36:0c:
a8:f5:1a:98:15:b5:37:e5:2d:2c:13:c2:76:3d:14:
6b:74:3c:aa:bb:44:8a:2b:1f:fd:53:fd:82:3a:fb:
b0:68:7f:68:8e:61:d9:ea:55:24:0d:42:29:9e:54:
11:c4:f7:f4:71:ad:f3:41:5c:54:94:9f:b3:a3:97:
78:28:19:01:29:76:b4:f9:10:44:d8:74:27:2b:8d:
85:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:54:40:A6:8E:0B:A9:86:6C:4A:D7:15:2C:B1:93:F7:80:7F:2D:A1
X509v3 Authority Key Identifier:
keyid:96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:02:ed:b6:a2:08:05:db:91:bf:df:f8:79:ef:bb:f5:b8:d4:
ba:25:f7:a5:09:9b:b6:72:4b:61:08:0e:7b:41:4e:ef:9c:11:
aa:c9:f5:ec:c1:be:7a:68:3c:69:db:3a:ab:ce:7e:5d:51:13:
6d:de:5b:f4:a9:be:b9:96:81:e9:f0:d4:ab:bc:d8:fb:ff:73:
29:74:6c:cc:47:03:a9:2c:04:f2:c7:4e:28:7a:3f:3c:8f:e9:
5a:1e:16:b9:fb:b5:7b:a0:92:82:a6:4c:52:4a:ec:f2:d1:8d:
b6:c1:dc:a1:ba:a4:5d:14:b2:c7:0c:be:17:0b:04:2b:0c:19:
8f:51:18:9c:c5:cf:4e:48:1c:db:6c:25:0d:06:22:38:bd:67:
6b:4d:81:29:c1:3b:63:75:fc:0e:59:ec:e4:12:28:25:1f:36:
c2:65:cf:54:e0:fb:60:0c:f2:cf:36:93:c7:12:3a:b3:b0:7b:
d1:54:91:c0:36:71:a7:82:d7:b4:24:33:de:0d:8a:1c:1b:cc:
cc:dc:21:f1:56:4c:86:20:89:0e:81:15:a9:41:55:d1:fe:c1:
bd:32:91:6d:ed:5f:e6:2b:e2:ed:85:bd:2e:22:b4:9a:ed:c8:
bb:80:ab:0d:95:b9:68:17:92:df:49:c0:df:9d:a1:31:bf:42:
e9:7d:c7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:11:56 2026 by rpki-client