This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
File: cLqzJoCFMIofjVcIS52qHr-V4Nw.mft (raw, json)
Hash identifier: yTkB6x4mgAZLj3xdfdojUcoqMuTu+a6flaQ7DrJ7Kwc=
Subject key identifier: E4:E4:8B:7E:05:65:92:DF:A6:09:E2:D5:52:8B:E2:8F:BE:4A:08:F8
Authority key identifier: 70:BA:B3:26:80:85:30:8A:1F:8D:57:08:4B:9D:AA:1E:BF:95:E0:DC
Certificate issuer: /CN=70bab3268085308a1f8d57084b9daa1ebf95e0dc
Certificate serial: 019C4322624228F653F1D33721E2DA4A76C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
Manifest number: 180A
Signing time: Mon 09 Feb 2026 16:00:52 +0000
Manifest this update: Mon 09 Feb 2026 16:00:52 +0000
Manifest next update: Tue 10 Feb 2026 16:00:52 +0000
Files and hashes: 1: cLqzJoCFMIofjVcIS52qHr-V4Nw.crl (hash: R4Tg5ZHN4jg/zIZegXUF2jyFC4qYtOB76N3YLPgPB0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:62:42:28:f6:53:f1:d3:37:21:e2:da:4a:76:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bab3268085308a1f8d57084b9daa1ebf95e0dc
Validity
Not Before: Feb 9 16:00:52 2026 GMT
Not After : Feb 10 16:00:52 2026 GMT
Subject: CN=e4e48b7e056592dfa609e2d5528be28fbe4a08f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:83:33:65:c2:54:e2:b7:5b:8d:25:ad:ba:86:
8b:01:4d:fd:81:fc:7d:0b:5b:cf:65:ea:c7:82:6d:
50:9c:ed:b6:a5:74:40:2e:33:a2:14:21:fd:32:bd:
e1:cc:72:a1:aa:59:c6:d3:c7:36:db:22:17:82:5b:
33:d2:9f:a5:18:9a:b1:98:04:8f:d1:97:a2:79:97:
67:84:e9:fe:f0:31:e2:3b:7f:f9:54:2f:16:39:61:
c5:a6:9e:28:0d:12:2e:ba:d4:ad:70:11:31:ec:a6:
87:9b:eb:71:02:7a:d5:56:a6:6b:18:25:60:4c:b6:
9b:d5:4f:b7:42:83:b9:f4:c2:24:d1:46:09:25:70:
8f:80:54:02:47:cf:13:94:17:57:8b:3d:31:fd:0a:
0f:2c:73:e2:d8:49:d3:a4:5d:92:c2:82:70:2b:1d:
74:e8:7b:c6:3c:4a:f3:c3:b5:ad:3e:d7:0e:e2:6d:
ea:66:39:78:96:55:15:7f:f5:d0:d8:83:32:87:89:
43:6e:32:bf:f9:4e:91:f7:ad:a2:e0:c2:46:02:91:
91:a0:4f:0f:41:f2:25:77:77:c7:07:a6:1f:bd:ac:
14:9c:45:db:40:d1:c9:54:a9:f4:94:59:48:17:c2:
73:3f:ba:ce:03:61:36:34:5b:8d:fd:e8:99:94:d2:
db:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E4:8B:7E:05:65:92:DF:A6:09:E2:D5:52:8B:E2:8F:BE:4A:08:F8
X509v3 Authority Key Identifier:
keyid:70:BA:B3:26:80:85:30:8A:1F:8D:57:08:4B:9D:AA:1E:BF:95:E0:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:7c:7f:22:cc:3c:c2:a9:f0:11:31:2f:4e:2b:7b:fe:87:6e:
c6:fe:1a:d8:6c:c5:3b:a2:de:95:07:a5:60:8d:0b:99:03:c0:
8b:0d:40:fa:c6:b6:fe:3e:5f:5f:16:0f:25:a4:ca:9e:be:8e:
c8:de:65:18:3c:58:1c:db:13:69:58:16:98:6a:bb:55:4c:8f:
86:77:25:e9:ed:95:ae:05:bb:97:8a:d1:21:ed:b4:64:a4:9e:
d5:d3:20:c6:c8:a3:ee:30:f1:f5:7b:a3:f8:3c:f6:71:86:6b:
6c:95:64:9b:06:08:df:f5:4c:01:5f:1d:b3:1c:c6:3d:2f:2a:
e2:35:9a:6e:86:a1:02:2f:90:90:8f:12:4f:18:3b:f1:32:c5:
a0:26:66:2f:39:83:e8:76:57:24:a5:5e:44:ea:ee:75:91:27:
3c:7e:83:be:d0:2c:f6:95:6c:1c:07:0a:6b:a1:c3:6f:72:56:
53:a3:f4:2b:21:27:ec:d3:4e:87:1f:cd:af:0f:f4:d5:0b:8f:
79:67:e7:73:23:fe:98:04:4a:58:2d:d0:14:5a:35:9b:ba:c8:
10:d9:60:0a:f0:e0:8b:cd:a2:ba:37:55:09:4c:5c:e2:be:84:
cd:4b:1a:72:e1:49:e6:ba:bc:e6:49:e9:a7:57:95:0b:1c:b8:
56:07:c8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:45:44 2026 by rpki-client