This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
File: lZI0IMz-4DjNyutDkjEKBZivej4.mft (raw, json)
Hash identifier: iqEhUEXoNu9gtlBBK60hl3Gh7TvLeT/YQlE2ga8gmyg=
Subject key identifier: 15:BB:29:84:0D:C4:B3:2C:FD:52:4A:2D:3C:B9:54:4B:FD:FD:9C:C7
Authority key identifier: 95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
Certificate issuer: /CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Certificate serial: 019C43C6CAAFF68612278C052567C2E50C04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
Manifest number: 0418
Signing time: Mon 09 Feb 2026 19:00:27 +0000
Manifest this update: Mon 09 Feb 2026 19:00:27 +0000
Manifest next update: Tue 10 Feb 2026 19:00:27 +0000
Files and hashes: 1: IM21zWEfSOh921Z1zwkT3vvGFfs.roa (hash: W640/PCpAKPhrBYklv0d8kY3i3xSr0Wn6L53wsJDrnQ=)
2: b9vcmhhWmTdDD16HAHP6D8RbDkA.roa (hash: FBfH9P35YtWY9xE6pYzf6Mz1MG4bSL4q1phGJQRtJTw=)
3: lZI0IMz-4DjNyutDkjEKBZivej4.crl (hash: Sn3IrulbMbRXDA4sab9ZUS00rAIbzsOLAqGIr1p5IPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c6:ca:af:f6:86:12:27:8c:05:25:67:c2:e5:0c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Validity
Not Before: Feb 9 19:00:27 2026 GMT
Not After : Feb 10 19:00:27 2026 GMT
Subject: CN=15bb29840dc4b32cfd524a2d3cb9544bfdfd9cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1e:69:38:1c:90:f3:44:54:08:9b:4f:af:a1:
17:95:f4:75:0e:a6:27:8b:f2:2f:df:48:91:05:6a:
66:17:10:43:85:16:d3:cc:fb:2a:15:3b:10:28:55:
1c:3a:06:d6:b2:07:55:24:2d:63:21:12:3f:21:04:
ef:6f:04:a3:2c:1c:ba:bc:b0:25:3b:cb:7a:90:22:
ae:88:38:89:ae:7c:81:31:42:59:2b:c2:31:24:c4:
76:4e:17:b7:36:a7:99:8c:16:17:55:34:6d:e5:cf:
9a:8f:40:b1:dc:51:dd:83:7b:e3:75:7f:c8:c0:f0:
27:b1:81:7f:8b:45:50:98:d2:fe:8b:68:c5:d0:b5:
da:cc:60:0a:14:b8:af:8a:92:16:5d:f5:27:d7:f7:
1c:15:2c:63:7b:2f:0d:9d:f3:22:f5:bd:c2:76:93:
c5:c2:35:16:7e:7f:34:c4:d7:be:0b:55:48:5a:4e:
e8:73:93:07:d9:9d:2b:f2:13:dd:1c:5f:e1:d7:d0:
0a:b6:83:be:97:e3:4f:60:c6:41:2b:7b:1a:f0:4e:
a9:47:da:af:7b:5f:2d:ee:ce:ab:af:8b:ca:cb:12:
62:45:6f:72:f5:b5:8d:f2:1e:e1:c1:fb:cf:2f:b2:
c0:a5:4c:6f:ed:ee:98:0c:ef:c6:9c:c0:c3:4a:a2:
d7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BB:29:84:0D:C4:B3:2C:FD:52:4A:2D:3C:B9:54:4B:FD:FD:9C:C7
X509v3 Authority Key Identifier:
keyid:95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4c:3b:00:82:49:ca:63:5f:4e:01:60:97:9f:96:1a:9e:72:
f0:8b:7f:13:77:38:c4:a7:30:c0:57:ee:93:40:0c:ce:1e:38:
45:4f:e8:dd:5d:9d:63:db:d4:89:f1:f9:b4:08:c6:ba:3c:e2:
63:b4:96:03:0d:11:f3:31:7f:cb:66:8d:54:f7:1c:5b:bb:99:
11:e3:f6:4f:70:33:c1:6b:6b:93:61:06:60:76:a5:11:a0:db:
89:eb:d6:1c:79:b6:fe:45:eb:50:31:d4:7a:2b:12:6a:bb:c5:
45:ef:5a:79:62:3e:bf:51:5d:ff:da:2d:78:99:9c:d7:c9:89:
1c:b7:45:75:c0:f0:19:9b:15:69:2f:6d:17:05:85:0b:b6:45:
9a:89:1a:b8:4c:a8:99:5a:32:3c:02:77:11:45:ad:6d:bb:fc:
d7:33:76:85:51:b6:04:d9:5e:b5:e8:45:13:68:cd:06:81:1d:
1b:0f:12:11:4c:d4:e8:b6:3b:73:f2:a6:14:f5:7d:33:34:f6:
c3:5b:44:f3:42:ff:a7:bd:71:93:f2:bc:5d:aa:1f:a2:0f:6f:
52:5e:d3:88:b5:48:7c:73:48:43:70:92:33:46:7e:87:3c:5c:
98:1a:48:db:67:2f:11:74:80:7f:5d:ee:70:b0:d8:8c:34:5d:
dd:b2:20:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:34:54 2026 by rpki-client