This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
File: LMV0mVRsTv1zD_hx3zvRr787nwE.mft (raw, json)
Hash identifier: iLdbXYp5Dgpm9oVfpchaPKdKbL1Tf5JjPq2fsetmCSU=
Subject key identifier: A6:5F:DD:E5:8A:B2:71:33:08:53:1F:2F:99:2B:96:1C:9A:53:64:A3
Authority key identifier: 2C:C5:74:99:54:6C:4E:FD:73:0F:F8:71:DF:3B:D1:AF:BF:3B:9F:01
Certificate issuer: /CN=2cc57499546c4efd730ff871df3bd1afbf3b9f01
Certificate serial: 019C4322DE874F1BFAB43CC28D8D12829082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMV0mVRsTv1zD_hx3zvRr787nwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
Manifest number: 0FC2
Signing time: Mon 09 Feb 2026 16:01:24 +0000
Manifest this update: Mon 09 Feb 2026 16:01:24 +0000
Manifest next update: Tue 10 Feb 2026 16:01:24 +0000
Files and hashes: 1: 3WItZ4mhefefk4OFRU301cRZ_vQ.roa (hash: dtdvArxYE5qEj5Mf66z8Nr0a//V3Hh8mgQw7uOvKT6M=)
2: LMV0mVRsTv1zD_hx3zvRr787nwE.crl (hash: jelHdRN51AhgQ6SaPwho/GpkvCqU2vGfLUvVtfc67fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMV0mVRsTv1zD_hx3zvRr787nwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:de:87:4f:1b:fa:b4:3c:c2:8d:8d:12:82:90:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc57499546c4efd730ff871df3bd1afbf3b9f01
Validity
Not Before: Feb 9 16:01:24 2026 GMT
Not After : Feb 10 16:01:24 2026 GMT
Subject: CN=a65fdde58ab2713308531f2f992b961c9a5364a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:85:e7:d3:53:fc:9a:ce:a3:e2:0d:b4:66:53:
4e:b1:fc:58:3c:80:8e:b8:c2:1e:86:6d:6c:23:b9:
b3:06:cd:72:fc:1f:55:d7:97:84:2c:14:7d:b5:1e:
e7:ec:af:16:a0:4d:ab:0b:7d:b2:84:00:b3:b8:96:
11:91:6e:f8:1e:5b:0b:82:3e:2d:51:a7:b3:b9:0a:
6b:c2:89:6b:ad:bb:c5:02:79:b1:a3:41:1b:03:f1:
a7:3c:35:84:7e:3a:8d:a8:dc:7d:94:d9:aa:01:04:
e1:69:6b:f3:27:c1:c6:5c:2e:15:04:99:92:37:9d:
b7:7b:a7:91:72:43:7f:2a:b3:1e:44:be:09:7f:30:
4c:a8:32:2e:cd:56:e9:c0:12:33:86:99:33:c0:57:
9f:53:9c:d1:7e:af:11:7e:ff:08:0f:49:4d:a1:10:
31:b6:f0:9a:ec:88:04:42:ce:ba:f3:f6:01:2b:e5:
df:9b:6a:e8:2c:6a:b0:3b:20:92:0b:bf:dd:5d:d9:
77:83:98:3f:1a:a9:34:63:c9:d1:42:21:c4:86:bc:
2e:10:85:1b:2d:6c:00:e3:47:40:62:dc:3c:75:6b:
02:56:30:36:d2:56:2b:ec:52:9a:59:50:d7:d5:b7:
9e:92:ab:bd:ac:eb:e8:b1:61:ef:c9:b1:6b:64:46:
fc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5F:DD:E5:8A:B2:71:33:08:53:1F:2F:99:2B:96:1C:9A:53:64:A3
X509v3 Authority Key Identifier:
keyid:2C:C5:74:99:54:6C:4E:FD:73:0F:F8:71:DF:3B:D1:AF:BF:3B:9F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMV0mVRsTv1zD_hx3zvRr787nwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:dd:75:34:73:8d:3c:8a:01:2e:08:08:f2:50:38:9a:2a:3f:
02:42:9d:6c:af:9b:91:52:dd:2d:95:ed:82:a0:10:36:c6:8e:
1b:dd:a7:c1:91:fd:c0:2d:f7:52:4c:ac:d9:dd:50:f4:a6:76:
66:11:20:73:67:fd:2d:b7:af:38:bb:e4:eb:84:c4:5e:ae:3c:
c8:5a:1b:36:3b:b3:fb:34:42:50:61:28:59:18:8b:08:da:df:
9b:5d:de:bf:9d:9e:df:3e:22:9b:33:68:44:f8:20:bb:23:4a:
da:04:be:0f:ab:fc:54:99:9f:28:c8:6b:fc:a4:2f:47:95:04:
9f:51:3b:4e:44:ff:f6:08:b4:09:0e:bd:a1:c3:50:f4:42:bc:
f6:31:a4:78:c1:03:72:aa:61:85:ed:30:b2:2c:68:16:5f:44:
fd:b0:42:bc:2e:f6:0e:1e:2d:aa:8a:c9:7c:0c:b9:82:33:30:
ee:c4:cb:9c:d0:27:4c:b4:cf:93:20:f1:a4:c4:7a:c9:47:d9:
b8:60:3f:a4:12:6a:77:46:a0:38:5a:81:cc:0e:c3:af:3d:2b:
ff:fd:ed:eb:2e:68:a9:12:cd:65:59:35:ed:e9:56:4c:42:49:
8b:c1:d3:38:99:da:46:8f:ec:2d:81:b5:1e:7e:fb:53:5c:81:
71:84:40:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:07:21 2026 by rpki-client