This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
File: lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft (raw, json)
Hash identifier: JMJoxjO/EP5X8dL6CiNDHtefHvCQAugpT/f5LRI2tUI=
Subject key identifier: 8B:94:84:D9:0F:F0:FE:55:25:7B:27:93:0D:C2:8E:A0:94:36:6A:C4
Authority key identifier: 97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C
Certificate issuer: /CN=9717bafb7018dc43bdae53b23a23e16567e1f21c
Certificate serial: 019BFE0A1BF22096117F5F5516208F5266CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
Manifest number: 13B6
Signing time: Tue 27 Jan 2026 06:00:33 +0000
Manifest this update: Tue 27 Jan 2026 06:00:33 +0000
Manifest next update: Wed 28 Jan 2026 06:00:33 +0000
Files and hashes: 1: FoFknui6N7AV-MVsL0GcCguJMuY.roa (hash: zSrSbQATu/hSvIQfL/GtZLhgnMs95GytYnvic5x5vKc=)
2: lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl (hash: OX5AtU0t87U96s38Mi+J9k3t+yAap24srvFTQXohWWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fe:0a:1b:f2:20:96:11:7f:5f:55:16:20:8f:52:66:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9717bafb7018dc43bdae53b23a23e16567e1f21c
Validity
Not Before: Jan 27 06:00:33 2026 GMT
Not After : Jan 28 06:00:33 2026 GMT
Subject: CN=8b9484d90ff0fe55257b27930dc28ea094366ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:03:35:b8:38:9b:9d:f8:76:bf:4b:f8:4c:9b:
fc:f6:82:8b:3f:99:bb:2f:14:f6:88:67:e2:27:b0:
29:dd:c3:94:39:44:dd:22:89:a9:27:85:b9:51:41:
d8:be:50:51:61:4b:b3:4f:13:f8:94:a8:ba:80:bd:
cd:40:02:ff:d6:4f:3c:58:96:da:3c:9d:d3:06:75:
bd:8a:43:17:8c:16:52:ad:e5:62:92:64:c8:cb:da:
f9:66:12:f0:bc:49:61:cd:9b:56:ad:86:da:78:d2:
eb:24:ff:26:30:4f:ba:fb:15:29:ed:23:4c:b2:66:
75:38:13:83:81:a5:e2:bd:b3:c4:7a:44:4a:de:94:
ca:9e:0f:fa:d2:3f:34:4e:db:88:2c:68:f9:c4:da:
65:cb:d9:90:08:5c:99:1b:38:8d:5b:97:eb:37:81:
9c:a5:73:ef:93:11:08:ac:57:f3:1c:78:2e:b6:25:
d1:10:f4:3e:27:77:2f:2f:65:f1:93:f4:04:d1:bd:
d2:70:79:95:e3:42:3e:73:2d:a9:84:3e:38:84:3c:
3e:08:58:a7:7c:b3:8f:09:f4:a5:99:b6:9c:f6:a2:
e4:d6:b2:b2:73:36:5d:c4:f3:8b:e2:18:e3:a9:25:
3f:72:bb:f1:54:c0:65:46:41:d1:b0:ee:9f:20:dc:
c0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:94:84:D9:0F:F0:FE:55:25:7B:27:93:0D:C2:8E:A0:94:36:6A:C4
X509v3 Authority Key Identifier:
keyid:97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:74:33:a7:c9:10:d0:8a:03:70:dc:a9:23:e5:e0:85:bb:ff:
18:67:35:f5:91:d6:a9:d3:b6:96:12:3e:9b:ca:85:36:54:1a:
e8:92:bd:4e:68:3c:10:22:19:56:71:f3:68:e0:41:bf:3b:71:
de:e5:bb:45:e7:c7:28:2c:1e:22:86:24:08:ea:d9:6b:69:be:
ba:fb:a6:b8:5b:23:c7:60:c9:ee:b8:40:8d:9c:d4:6c:3b:f2:
71:37:71:c4:d1:09:21:75:7b:92:ae:3a:0f:2d:50:6c:90:a6:
3e:5f:59:19:39:e9:42:15:a2:7e:9c:40:59:f0:08:14:c0:0f:
8e:19:fb:25:f4:17:2d:d3:5e:f3:1d:28:5a:38:7b:a2:57:07:
43:98:30:ad:9e:ce:c7:42:c8:91:d6:6a:d6:f9:27:f7:3c:cb:
60:d1:fa:fc:0b:cd:a3:e4:d2:7a:e7:07:86:b2:56:71:5c:7a:
ae:c1:49:0b:21:38:d2:da:9d:52:00:94:d7:fb:b0:89:6e:a0:
02:a5:41:b0:b1:bd:06:a5:19:83:ed:5c:59:81:83:bf:b7:16:
9b:7e:22:35:93:b0:7c:b7:be:0f:76:39:4b:04:76:15:21:b9:
8e:2f:cb:60:c6:ba:21:9c:c7:b6:e9:7e:70:7f:76:ae:0e:a6:
cb:53:9f:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv+ChvyIJYRf19VFiCPUmbNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MTdiYWZiNzAxOGRjNDNiZGFlNTNiMjNhMjNlMTY1Njdl
MWYyMWMwHhcNMjYwMTI3MDYwMDMzWhcNMjYwMTI4MDYwMDMzWjAzMTEwLwYDVQQD
Eyg4Yjk0ODRkOTBmZjBmZTU1MjU3YjI3OTMwZGMyOGVhMDk0MzY2YWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQM1uDibnfh2v0v4TJv89oKLP5m7
LxT2iGfiJ7Ap3cOUOUTdIompJ4W5UUHYvlBRYUuzTxP4lKi6gL3NQAL/1k88WJba
PJ3TBnW9ikMXjBZSreVikmTIy9r5ZhLwvElhzZtWrYbaeNLrJP8mME+6+xUp7SNM
smZ1OBODgaXivbPEekRK3pTKng/60j80TtuILGj5xNply9mQCFyZGziNW5frN4Gc
pXPvkxEIrFfzHHgutiXREPQ+J3cvL2Xxk/QE0b3ScHmV40I+cy2phD44hDw+CFin
fLOPCfSlmbac9qLk1rKyczZdxPOL4hjjqSU/crvxVMBlRkHRsO6fINzADQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIuUhNkP8P5VJXsnkw3CjqCUNmrEMB8GA1UdIwQY
MBaAFJcXuvtwGNxDva5Tsjoj4WVn4fIcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHhlNi0zQVkzRU85cmxPeU9pUGhaV2ZoOGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi80Y2U5MzMtNDg4Zi00NmI5LWFjMmMt
N2M5M2NhZTIyN2JkLzEvbHhlNi0zQVkzRU85cmxPeU9pUGhaV2ZoOGh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi80Y2U5MzMtNDg4Zi00NmI5LWFjMmMtN2M5M2NhZTIyN2Jk
LzEvbHhlNi0zQVkzRU85cmxPeU9pUGhaV2ZoOGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEnQzp8kQ
0IoDcNypI+Xghbv/GGc19ZHWqdO2lhI+m8qFNlQa6JK9Tmg8ECIZVnHzaOBBvztx
3uW7RefHKCweIoYkCOrZa2m+uvumuFsjx2DJ7rhAjZzUbDvycTdxxNEJIXV7kq46
Dy1QbJCmPl9ZGTnpQhWifpxAWfAIFMAPjhn7JfQXLdNe8x0oWjh7olcHQ5gwrZ7O
x0LIkdZq1vkn9zzLYNH6/AvNo+TSeucHhrJWcVx6rsFJCyE40tqdUgCU1/uwiW6g
AqVBsLG9BqUZg+1cWYGDv7cWm34iNZOwfLe+D3Y5SwR2FSG5ji/LYMa6IZzHtul+
cH92rg6my1OfWQ==
-----END CERTIFICATE-----
Generated at Tue Jan 27 07:47:21 2026 by rpki-client