This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
File: LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft (raw, json)
Hash identifier: BkBPvDxa46qtevFnvkKWryWXpO7OVKOd+9kQPhOy1Rg=
Subject key identifier: 5C:14:CB:D7:A4:13:54:44:06:2A:D8:5D:2E:DA:EE:5C:76:44:B1:CB
Authority key identifier: 2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98
Certificate issuer: /CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98
Certificate serial: 019C416A6F31F278A4288F6350866C3A840A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 08:00:20 +0000
Manifest this update: Mon 09 Feb 2026 08:00:20 +0000
Manifest next update: Tue 10 Feb 2026 08:00:20 +0000
Files and hashes: 1: LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl (hash: 5kVqUBcV2Qe1ZRKEwyUludEJ2uwqezYrZ3h4RFX35gM=)
2: iH-W1KrCxFHlEwTj-N3qmKRJjJM.roa (hash: KY2lJTniA4rnCiE0KdvRBg56MPlz79jziBGeziSB/MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:6a:6f:31:f2:78:a4:28:8f:63:50:86:6c:3a:84:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98
Validity
Not Before: Feb 9 08:00:20 2026 GMT
Not After : Feb 10 08:00:20 2026 GMT
Subject: CN=5c14cbd7a4135444062ad85d2edaee5c7644b1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a3:6c:d1:85:4a:61:8c:cf:05:01:0d:aa:a0:
a8:06:92:db:e7:92:f6:0c:87:47:36:bb:b7:34:a6:
88:63:44:cc:41:ae:fc:3d:00:e1:1b:93:e7:09:87:
9f:31:3a:bc:46:31:4e:b1:d4:c4:8f:bc:08:de:db:
74:ba:95:c9:9d:fe:32:63:03:fb:53:a2:b9:c7:d4:
d4:9f:4a:05:6a:2c:e6:05:7a:5f:d4:61:fa:5c:79:
b4:f2:ce:a8:c3:ba:0c:3b:83:3b:82:4a:33:9d:8b:
c0:05:ca:f4:7f:22:c6:ca:3d:af:1a:3d:d0:5c:7c:
e8:ce:95:b5:e8:59:a7:27:ba:74:f4:34:ce:ec:12:
ad:ed:16:ec:d7:fc:b0:ed:d5:22:1d:bd:4c:60:28:
b0:40:ed:c7:9b:ad:18:89:1f:a0:32:00:ce:01:0e:
64:64:f3:5d:22:2e:91:62:d8:d9:e9:09:8d:33:ac:
eb:20:fb:68:a5:1b:f1:fd:cb:bc:9e:73:ae:d0:66:
bf:e9:f1:98:9e:0c:e8:d1:2a:a3:9e:0f:6f:8d:25:
ba:24:f8:5e:a1:5c:ad:60:a2:c5:3b:3b:4a:12:fe:
b2:9b:36:9b:28:28:bf:2c:d3:d7:38:35:f8:a0:49:
50:2a:c0:cc:1a:30:99:0b:09:f1:3e:1c:3f:11:f2:
1f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:14:CB:D7:A4:13:54:44:06:2A:D8:5D:2E:DA:EE:5C:76:44:B1:CB
X509v3 Authority Key Identifier:
keyid:2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:16:61:72:b7:f1:45:b0:ce:5f:04:c5:ea:bd:06:9d:30:44:
8d:65:f3:e5:09:d8:87:e7:09:b5:0e:c6:bd:09:39:f8:20:1f:
fd:14:82:95:86:58:20:a8:92:46:2f:40:d5:4e:60:78:2f:f8:
20:77:59:c7:06:04:c0:4f:41:13:2e:7c:9c:51:54:ef:a7:3a:
bd:e9:1c:ec:05:37:23:8f:bc:8b:76:92:10:9a:02:4e:b3:ba:
af:98:5d:02:a6:c9:a7:69:1f:bd:ae:e2:98:cb:fa:e3:4f:d9:
38:5e:03:b5:55:e0:d1:02:ee:ca:57:bc:6e:49:bc:73:87:c9:
ff:a4:66:cb:db:ca:51:ab:ad:28:af:99:d5:73:af:d7:94:75:
c6:a1:53:a6:53:86:2d:f1:17:06:31:ea:26:65:4b:3d:34:28:
b3:af:66:3e:a5:23:a9:7a:7f:f2:59:91:30:71:8b:22:4b:ab:
ef:a1:0f:ff:c4:19:4b:f8:f0:b8:38:29:85:2b:c6:ed:ce:ef:
6c:15:53:5c:79:c7:ad:3b:cc:54:ba:9d:30:ab:53:6b:58:1f:
3e:94:d6:c9:2a:f5:cd:6c:af:7d:cc:76:15:71:a8:49:39:3e:
9c:89:c9:19:f2:c4:ac:45:f6:f3:74:5d:77:8c:78:81:62:be:
77:56:fc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:56 2026 by rpki-client