This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
File: l_RnToI2vdw9IyegKwq_unmlSDw.mft (raw, json)
Hash identifier: gJL4lxXRs8IJi9FDMaGeAZMpP5AY/qesyp7D3iKafSo=
Subject key identifier: FC:5A:21:C2:60:19:4C:21:85:E2:91:16:44:65:80:A7:21:9D:23:6F
Authority key identifier: 97:F4:67:4E:82:36:BD:DC:3D:23:27:A0:2B:0A:BF:BA:79:A5:48:3C
Certificate issuer: /CN=97f4674e8236bddc3d2327a02b0abfba79a5483c
Certificate serial: 019C42EBAA2AFC54BCF2A9108A8EE7ECA410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
Manifest number: 180F
Signing time: Mon 09 Feb 2026 15:01:06 +0000
Manifest this update: Mon 09 Feb 2026 15:01:06 +0000
Manifest next update: Tue 10 Feb 2026 15:01:06 +0000
Files and hashes: 1: jWXMDv13AWDAzHmG3AwphA0uU3I.roa (hash: gbSC++TyPC7wR0U95OM82la8DG8eXm7v1JK7SFOBZRE=)
2: l_RnToI2vdw9IyegKwq_unmlSDw.crl (hash: n09h2DuL8de9qtUsrzwDsP82sd6oFIfXYGgMlSRY/N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:aa:2a:fc:54:bc:f2:a9:10:8a:8e:e7:ec:a4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97f4674e8236bddc3d2327a02b0abfba79a5483c
Validity
Not Before: Feb 9 15:01:06 2026 GMT
Not After : Feb 10 15:01:06 2026 GMT
Subject: CN=fc5a21c260194c2185e29116446580a7219d236f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:a8:c4:ee:53:b7:57:1e:db:e0:00:b8:f8:
6d:70:45:da:24:0a:4d:e3:94:64:57:52:9b:3b:63:
21:d6:0f:eb:65:82:89:67:55:d0:f4:66:f6:87:67:
dc:95:08:21:1d:30:a4:1e:56:fc:1f:3e:30:55:19:
5c:bd:e5:58:72:22:c7:c7:76:94:14:f2:1d:94:a5:
f7:c3:c8:04:db:7b:23:0f:ac:25:5a:88:83:8f:a2:
36:aa:d3:a2:f7:88:5d:2a:73:45:68:3e:01:6a:56:
0f:c3:73:2d:07:f9:3e:ed:2d:07:7f:64:50:47:45:
10:da:9a:46:a7:4f:f9:42:75:b9:e0:75:5d:97:80:
08:9c:58:09:b1:dd:09:01:34:de:2a:99:88:a2:03:
48:14:06:7e:88:4c:39:63:ca:b2:95:d0:17:e0:bb:
71:8d:b4:3e:ec:5f:13:2e:62:be:e3:16:2e:a8:a6:
fc:f7:c5:7d:53:dc:94:2e:80:9f:55:e5:ad:7e:3e:
21:f0:95:98:62:8e:76:fc:9a:86:49:3b:86:10:76:
6b:c3:1e:cc:31:bd:7b:5d:35:84:cf:c9:6b:95:30:
35:1c:d8:b3:d6:f9:0d:81:f9:21:dd:c1:f1:63:45:
75:a7:37:1b:70:35:31:18:6e:2b:94:dd:3b:53:95:
31:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5A:21:C2:60:19:4C:21:85:E2:91:16:44:65:80:A7:21:9D:23:6F
X509v3 Authority Key Identifier:
keyid:97:F4:67:4E:82:36:BD:DC:3D:23:27:A0:2B:0A:BF:BA:79:A5:48:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:7d:76:63:58:db:56:d6:bf:0d:3b:6c:8d:56:53:bc:de:34:
4b:8a:5c:e9:e8:6f:32:f5:bf:44:e6:d5:ce:06:0d:42:97:aa:
c9:e2:ed:4d:4f:6f:b6:1c:d5:da:cf:32:74:fd:3a:a6:a9:bf:
ef:6c:67:ee:69:c8:17:4d:a7:bd:1c:9b:81:ae:70:cf:6d:62:
c4:76:00:dc:4a:f5:b9:03:1b:3a:85:8e:07:16:14:7f:53:ef:
a0:da:00:b1:b4:7c:c7:38:75:92:bc:3f:57:19:13:49:22:df:
b7:0c:fe:2a:52:69:bf:c6:e4:9b:79:d4:9a:10:1d:a3:4e:15:
95:0c:e0:0f:23:e4:7b:de:68:c1:8d:05:c1:e7:c9:67:3b:9c:
d2:bb:ad:c1:14:53:bd:f0:05:56:23:c7:27:94:49:cf:92:5a:
3b:5a:0e:8a:1b:d5:25:41:b0:f0:9e:d5:34:f5:ed:f3:42:02:
45:20:18:26:b5:18:7a:10:6b:76:a8:39:d5:07:61:db:26:5a:
49:47:8b:19:ae:9f:a8:06:aa:d4:c6:d0:6c:14:87:8d:f0:a4:
f5:68:a5:d5:04:64:33:8f:83:07:c3:0e:43:69:8e:f7:31:15:
3b:81:aa:08:3d:e1:05:7d:48:d9:9b:c0:1a:01:3c:37:fc:1e:
e6:bd:ef:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:08 2026 by rpki-client