This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
File: lSGiYvUHXiSys8m2nIr0DimIoeQ.mft (raw, json)
Hash identifier: gpmY0fB/9HiS42KmW9LDhX+IAZx1NYmhegLFhAgtxj4=
Subject key identifier: 66:FB:1B:DB:63:9A:E3:D5:99:22:20:9D:97:DF:DC:BA:29:1D:66:C5
Authority key identifier: 95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
Certificate issuer: /CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Certificate serial: 019C43C719EAA89C76E303B98D1244899A50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
Manifest number: 0531
Signing time: Mon 09 Feb 2026 19:00:47 +0000
Manifest this update: Mon 09 Feb 2026 19:00:47 +0000
Manifest next update: Tue 10 Feb 2026 19:00:47 +0000
Files and hashes: 1: Us6LmDa2YeON0ni7ME7KB6TjHTo.roa (hash: 3dbTQjtAd+rn0Ht0LtA0Xi1wOrgAsw7gilT3TC7acgs=)
2: arPUcXSO6F2hXmotLmbEkPslkyo.roa (hash: +PNrD3DQwa3lDAFBlDnjQZ5Mt4rCaOW5cH8zFw/pSq0=)
3: lSGiYvUHXiSys8m2nIr0DimIoeQ.crl (hash: UnbGsdzbJgPsqxYTZeCCbbpDFNBBKllhadAzjuuNTZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c7:19:ea:a8:9c:76:e3:03:b9:8d:12:44:89:9a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Validity
Not Before: Feb 9 19:00:47 2026 GMT
Not After : Feb 10 19:00:47 2026 GMT
Subject: CN=66fb1bdb639ae3d59922209d97dfdcba291d66c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:94:8d:69:23:85:e0:32:2c:17:fb:e2:0e:da:
bc:cc:ed:0d:02:e6:b7:14:60:88:a4:5b:d4:92:1b:
60:56:5c:0b:75:af:a6:51:a6:be:c1:d8:8f:f9:0d:
56:db:d6:fe:53:3e:f7:91:fe:46:58:3c:d1:c0:28:
89:27:e3:fa:5f:d9:08:e9:bf:d6:f0:e4:6c:84:65:
68:44:0d:92:3a:e8:f8:85:62:d2:be:e5:b9:40:05:
1c:66:89:19:12:ef:3a:5e:df:25:4f:1e:2f:9f:b1:
89:44:24:49:44:f7:d7:45:21:f0:d2:ac:71:07:5d:
57:de:1d:b0:f5:4f:d5:14:65:6b:ed:d4:63:ab:45:
11:8f:0d:8d:24:46:a8:e5:71:b2:9c:85:c5:e0:61:
52:14:b9:85:4b:91:ba:16:9e:3a:bc:cd:22:bc:ea:
8b:ec:a7:80:43:88:1f:2c:20:ad:44:a1:ba:6d:0e:
c9:46:ae:88:54:88:db:66:ef:f6:a1:e6:d8:34:06:
ec:bf:75:85:04:24:aa:89:83:66:0c:41:1f:7f:f6:
98:bc:8a:24:cc:ea:ba:24:55:0b:ea:b7:45:bc:a4:
cb:56:74:71:44:ec:e2:5d:f1:5f:bd:c5:df:ed:71:
7c:20:0c:fa:79:c9:a2:f2:87:eb:a2:fa:23:29:1a:
3a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FB:1B:DB:63:9A:E3:D5:99:22:20:9D:97:DF:DC:BA:29:1D:66:C5
X509v3 Authority Key Identifier:
keyid:95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:44:b8:7c:68:95:21:de:6d:62:81:88:8d:32:ec:aa:19:a3:
04:2b:31:58:43:90:2d:a4:de:5e:76:d3:1e:5a:fe:32:42:9e:
27:eb:36:ad:52:26:48:f0:26:e0:b3:73:5b:bb:0b:bf:02:13:
6e:a2:13:a7:4f:a9:37:b3:19:0d:26:02:b3:2d:2d:d0:72:33:
cc:74:2b:f9:54:06:24:7a:22:6f:01:8b:58:d6:7c:bb:7e:0c:
8d:7b:49:14:4c:0e:41:32:be:9c:2d:3e:27:1b:9d:40:af:73:
23:b8:2a:a1:d1:80:bb:0f:eb:fe:af:1f:98:e6:78:04:1b:f5:
18:09:fc:a0:d3:71:80:7a:7a:79:22:74:56:49:0e:a4:c6:13:
13:02:f7:fb:e7:a2:61:15:46:53:c0:78:bc:d4:1a:dc:4e:ff:
89:3b:8d:9d:b6:c5:46:7f:36:c6:9c:eb:73:76:11:cc:9b:08:
d6:5b:50:15:92:ab:41:78:b8:5f:28:86:dc:b3:fd:71:6c:fc:
2d:ca:36:2f:b6:44:0b:13:48:e8:b8:d3:35:05:be:33:77:cc:
e1:9b:06:70:06:da:b1:54:31:aa:f9:2b:53:be:79:ac:33:ec:
a7:92:e8:80:70:c8:57:42:d7:e8:b9:31:12:35:07:fb:1b:c0:
36:89:85:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:41:33 2026 by rpki-client