This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
File: L45RIlad5SzVCux5NJS_HOfCX8g.mft (raw, json)
Hash identifier: bZBiAmhHrJVfFjxYlhV63ZrrNUvOf+ZXUd1TGHIqYv8=
Subject key identifier: 38:32:72:CE:82:32:54:35:5C:A2:76:76:5F:E5:99:09:28:8B:9E:F9
Authority key identifier: 2F:8E:51:22:56:9D:E5:2C:D5:0A:EC:79:34:94:BF:1C:E7:C2:5F:C8
Certificate issuer: /CN=2f8e5122569de52cd50aec793494bf1ce7c25fc8
Certificate serial: 019C42B469A24D16F328CD3A636B1EAB9B24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
Manifest number: 0EC4
Signing time: Mon 09 Feb 2026 14:00:45 +0000
Manifest this update: Mon 09 Feb 2026 14:00:45 +0000
Manifest next update: Tue 10 Feb 2026 14:00:45 +0000
Files and hashes: 1: L45RIlad5SzVCux5NJS_HOfCX8g.crl (hash: KwK4hqdP6tNlGcJK/X87ZfAR+G56F3HtgPvv1W2J8ZQ=)
2: MebPMP4MKMDRPcWsqA1RWlWN-u0.roa (hash: EdSN3u2MFCBqnyk+W6CQKHBVKlUmG8nORx98tAwp5Qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:69:a2:4d:16:f3:28:cd:3a:63:6b:1e:ab:9b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8e5122569de52cd50aec793494bf1ce7c25fc8
Validity
Not Before: Feb 9 14:00:45 2026 GMT
Not After : Feb 10 14:00:45 2026 GMT
Subject: CN=383272ce823254355ca276765fe59909288b9ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e7:72:9c:c8:d5:61:9f:9d:1d:0c:25:6c:ae:
8b:c3:6a:d1:fd:d7:6f:4c:d9:79:51:af:ec:94:68:
b0:d7:d7:28:8e:61:e7:f0:f7:31:3c:fa:8d:cb:4b:
8f:91:14:e1:ac:1f:b0:7c:e1:82:db:d5:bc:69:f3:
6e:07:3d:06:84:74:9b:16:a8:1d:0c:28:67:a9:9f:
be:0e:5d:6c:1c:31:65:b2:aa:11:de:55:7a:36:23:
c2:36:8f:fc:13:85:12:45:89:1a:19:53:df:d7:e8:
ee:9c:e6:c9:ef:37:b3:d3:40:df:18:71:60:10:4a:
0c:bb:4a:de:a7:68:1c:df:a0:60:87:ed:82:d3:2e:
f2:59:8b:9c:fc:5e:66:24:e2:48:dc:06:26:78:60:
71:19:fc:53:3b:a4:c3:8c:df:61:0d:73:e7:a9:e6:
bc:7e:64:d6:24:e5:ac:93:a9:69:3b:60:d4:37:4d:
59:04:f3:94:9d:49:09:5d:f4:15:d0:a4:0d:76:a9:
38:b6:81:2d:e4:c2:75:a0:1f:ad:78:5a:18:6c:c8:
e0:71:fb:54:e2:8d:f9:a7:18:68:61:8a:75:44:ba:
cd:8e:9a:af:5f:68:6d:5a:a4:6f:04:b0:c8:0c:e4:
5b:9b:0a:67:d4:41:99:9b:84:58:20:7a:0e:85:1d:
d0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:32:72:CE:82:32:54:35:5C:A2:76:76:5F:E5:99:09:28:8B:9E:F9
X509v3 Authority Key Identifier:
keyid:2F:8E:51:22:56:9D:E5:2C:D5:0A:EC:79:34:94:BF:1C:E7:C2:5F:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:ab:2d:95:66:fe:01:fe:d3:22:46:51:a8:71:a4:0e:64:9b:
ce:01:09:83:af:c3:f5:4f:30:e4:28:e7:6d:fe:1d:75:30:77:
35:91:2c:4e:84:ec:fa:04:a9:f6:ed:22:b0:8c:ca:ff:ce:63:
32:2b:0b:94:1b:f3:cd:f9:80:f2:45:6d:88:a8:ab:7f:9c:b9:
46:9e:22:7e:2e:75:87:26:32:13:de:92:d3:85:81:0f:52:98:
70:44:a0:82:e3:f6:ce:5f:6f:d7:15:8c:ce:ec:70:61:d1:0c:
70:9b:de:4f:d2:67:b8:a6:89:d1:17:6f:81:f3:b4:7b:54:a1:
4a:e3:82:85:86:c1:42:ba:fd:b3:83:2d:8c:df:f5:18:d5:3b:
4f:6a:63:8c:56:ad:c9:b9:ec:61:63:1b:50:79:7c:d4:9d:dc:
3c:c0:c5:b4:71:b5:a7:98:87:5c:e7:78:8f:01:0d:6a:20:81:
2b:5a:82:f4:ca:6e:49:4c:75:72:c6:78:f7:2d:93:66:0b:ca:
7a:f7:2f:51:63:4e:bd:08:94:8b:f4:59:05:9f:ae:39:05:f9:
52:6f:40:c2:4f:a8:81:24:fb:e5:c0:69:18:3e:d4:59:20:27:
29:25:84:61:7c:de:f0:0f:32:7c:76:a2:58:e4:10:0a:b7:e2:
6f:8d:39:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:10 2026 by rpki-client