This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
File: lZmz54I3DcKBT1JcHW7OhNj3DzY.mft (raw, json)
Hash identifier: B6hk2F7tR1+zFDDsPrlGgqorBX7NTcchpTzs5vYgb7c=
Subject key identifier: 64:D2:43:C3:18:A8:0A:F8:78:20:1F:09:AD:F8:64:05:7F:67:BC:F2
Authority key identifier: 95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
Certificate issuer: /CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Certificate serial: 019C1C82C8A60DA47002329243A77F0B4756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
Manifest number: 049D
Signing time: Mon 02 Feb 2026 04:00:58 +0000
Manifest this update: Mon 02 Feb 2026 04:00:58 +0000
Manifest next update: Tue 03 Feb 2026 04:00:58 +0000
Files and hashes: 1: INyi55Cem-fKRbCyhWoBxset2V8.roa (hash: ewguotn20Zrkv6k2+CkZNOeCi50wOffr5aj3RIiSuA0=)
2: lZmz54I3DcKBT1JcHW7OhNj3DzY.crl (hash: 1lOvYjrIj1FKdqr56r7VOdwHR+78X6eXPGc1N+k8Z8E=)
3: lot016U7U6JL43wtM60yljMjF4I.roa (hash: 18/d/s7/WmFdWb3qjzEB9yH+6YTufgLNjpNy8KhdOs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1c:82:c8:a6:0d:a4:70:02:32:92:43:a7:7f:0b:47:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Validity
Not Before: Feb 2 04:00:58 2026 GMT
Not After : Feb 3 04:00:58 2026 GMT
Subject: CN=64d243c318a80af878201f09adf864057f67bcf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3a:57:94:35:16:98:4e:fe:72:3d:1c:22:46:
50:f7:c0:96:52:03:37:fb:24:9f:0e:b5:81:65:fd:
1f:40:86:0a:0a:49:b3:5a:c7:46:2b:c5:e1:d6:8d:
77:3f:b0:a4:2d:6a:ae:ab:e4:8c:04:1b:b4:dc:87:
35:38:5c:ff:c7:38:4d:29:53:ed:52:84:a6:4e:90:
66:0c:b8:3a:05:7a:68:1b:a6:75:18:50:d7:79:12:
14:c9:ca:49:87:4e:51:fe:73:6e:e3:ab:01:4a:3a:
b1:de:8b:86:27:b0:d9:3d:fb:81:c7:c9:bd:11:fd:
63:5a:86:fd:12:46:fe:58:db:53:8b:db:ff:90:c0:
5c:72:d7:c7:92:3f:e0:b9:b0:91:3a:e9:94:9d:7c:
ad:ce:18:97:cd:bf:34:58:24:a5:a7:c1:28:26:b7:
3f:77:91:6f:2e:81:ba:55:4b:a2:d6:07:0a:f1:1f:
35:07:fa:98:da:f3:0a:cb:72:dc:3f:38:bd:41:7b:
6f:8d:76:3f:75:a8:29:76:8c:ed:85:0c:19:ec:45:
d9:7c:f2:f7:71:c2:e1:aa:68:ea:43:a8:f8:e6:76:
32:50:83:19:d8:74:ca:75:9e:7d:b0:9a:d2:fc:7d:
0b:eb:39:81:e0:2d:3f:e1:4a:f0:b1:d1:22:42:ce:
76:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D2:43:C3:18:A8:0A:F8:78:20:1F:09:AD:F8:64:05:7F:67:BC:F2
X509v3 Authority Key Identifier:
keyid:95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:94:56:f5:9c:bf:95:ee:35:b5:91:b2:1a:61:06:4e:70:37:
fa:2d:0b:37:29:d0:26:e2:4d:f3:cb:04:34:df:c7:29:d8:ac:
c7:5e:b4:97:e7:3a:38:f1:df:9d:19:09:56:1c:e5:54:bd:75:
91:72:4f:f3:b1:55:28:87:4a:1f:63:f5:14:2f:86:61:4b:fb:
4e:51:a4:75:b8:5f:20:98:f1:14:ae:b1:b8:af:9e:b0:1f:5e:
bb:83:2d:35:50:89:27:9e:d5:06:06:af:b1:63:57:da:5e:4a:
39:40:4f:0e:25:02:22:0e:a9:49:b2:d9:bf:c8:7e:75:1f:d7:
40:46:ee:8d:77:24:7a:d1:fd:45:8c:84:8e:41:6b:bd:d8:be:
d0:82:be:d3:7f:9a:6d:4e:d0:5f:94:86:11:cc:5d:26:bc:b9:
55:29:cc:97:49:a4:a8:e1:f2:67:a6:0d:f0:8a:c2:f0:ae:41:
35:f2:8c:11:ce:d9:e4:2e:5a:ce:3c:aa:5b:67:6e:93:b4:95:
82:b1:b1:9b:9f:f4:c4:3a:46:2d:61:66:a0:2b:c5:be:a6:46:
d1:88:22:93:73:8a:4c:e4:a9:ab:39:4f:4d:9d:6a:49:39:fb:
ea:64:b2:2d:22:27:56:5a:9e:ce:44:32:b0:eb:a2:42:78:f0:
a7:33:df:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:32 2026 by rpki-client