This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
File: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft (raw, json)
Hash identifier: SPGTlf7X1q7xFb4fYpSMjPlBgov9fBDXTBcfz5tZYXQ=
Subject key identifier: 76:FB:8B:B6:0A:B0:1B:54:71:C6:4D:9C:F6:71:37:64:CE:FF:E6:27
Authority key identifier: 95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
Certificate issuer: /CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Certificate serial: 019C427E0EC5886C20A8607797F648AC0BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
Manifest number: 0707
Signing time: Mon 09 Feb 2026 13:01:23 +0000
Manifest this update: Mon 09 Feb 2026 13:01:23 +0000
Manifest next update: Tue 10 Feb 2026 13:01:23 +0000
Files and hashes: 1: XCAs1bdvDVK0mf6fnpHwHSrCy_s.roa (hash: vPe5QDgsOEWj+wwao+43Qg6PstZ+Q+ujB68nk8LOfvM=)
2: lMbrVRARiCtxbw4rV7uiKYJABbQ.roa (hash: ArJG5NTDy7CYItxIRIVnQaO1q2a53EHq1s7L+RB3qkw=)
3: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl (hash: aphcEGErML6JbVbeTYA8nKInK6yGB4aLEa+kpthoTPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7e:0e:c5:88:6c:20:a8:60:77:97:f6:48:ac:0b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Validity
Not Before: Feb 9 13:01:23 2026 GMT
Not After : Feb 10 13:01:23 2026 GMT
Subject: CN=76fb8bb60ab01b5471c64d9cf6713764ceffe627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:58:49:36:35:40:00:b1:8a:28:ae:3e:0d:71:
e1:c5:63:8a:42:bd:7f:be:3f:2a:13:ac:1f:1a:5b:
b7:a9:d4:e3:99:b9:ba:ad:22:bd:10:e9:73:46:24:
4f:11:e3:ad:63:2f:14:b5:3d:93:65:bc:25:fd:fd:
e3:b6:4d:a9:03:08:03:1d:07:8e:00:55:95:dd:55:
bd:a0:dc:99:2b:8f:14:89:5b:0e:bf:33:4d:6f:c2:
c0:87:dc:cf:c2:62:cd:d6:7f:bf:a9:eb:6e:c4:15:
13:20:90:e4:53:9a:30:9c:21:2e:5e:92:63:7f:64:
fd:21:4c:10:f0:42:bd:b7:d4:18:fc:20:d5:e7:c5:
6b:b1:63:6e:6d:cc:f0:3b:3d:2e:7f:ca:a1:ae:87:
0b:d9:cb:78:d9:6f:7e:83:bc:85:a8:26:b4:d4:74:
d7:18:c6:69:03:54:8b:f3:46:0a:6c:eb:ff:2c:f2:
20:8d:a4:3c:c4:8a:bc:14:c9:93:33:ba:d3:12:34:
2a:0e:16:db:9c:30:b2:d9:bb:ca:89:4b:f7:55:5f:
12:43:5c:a8:30:5a:ee:bd:61:06:27:11:99:1f:89:
b1:b6:f7:ae:b4:3f:fb:45:96:2d:6c:bd:83:5f:8d:
2b:da:aa:07:a3:28:59:e9:91:56:55:fe:c9:80:0d:
58:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FB:8B:B6:0A:B0:1B:54:71:C6:4D:9C:F6:71:37:64:CE:FF:E6:27
X509v3 Authority Key Identifier:
keyid:95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:55:ea:63:52:3e:96:8b:9a:3f:26:7d:28:0a:b0:42:07:52:
5c:a5:24:89:25:06:11:d3:3a:86:0f:28:b6:a2:e2:74:77:bc:
c5:9d:9b:f0:61:a0:cd:f4:a5:f7:d6:2e:46:d3:8e:14:03:4e:
1e:aa:de:82:3a:3d:79:1d:6f:f7:7d:ed:f9:7a:3e:1f:3c:ee:
2f:4d:7a:2d:5b:1c:aa:ae:ba:bc:ef:f1:dd:1d:49:52:95:3c:
da:1c:f5:fb:e7:81:af:ea:65:55:ec:51:43:83:47:dc:d8:3f:
cb:9c:1f:99:b4:98:17:5f:c1:73:76:08:fc:a8:dc:69:bb:04:
62:b2:ab:c1:0e:de:b8:0e:40:e0:e6:77:d5:a6:a1:97:e5:54:
1b:80:d4:f5:bb:77:67:71:38:b3:9a:20:1f:28:1e:cc:a9:66:
f5:37:f4:8c:66:a4:33:55:6b:44:d2:11:9a:4f:ba:6d:93:b2:
35:62:7b:7c:3c:1e:a0:ef:9f:c7:1f:f3:ed:62:b8:99:62:46:
de:14:6d:69:a1:a2:c0:59:ac:f4:0c:d3:73:76:6e:90:66:1f:
fb:a4:49:5d:cf:19:db:7b:7f:50:8b:67:fc:42:48:45:80:22:
a6:9d:15:df:46:62:b6:7f:98:2e:cf:d8:1f:0f:77:b7:12:0b:
63:a8:dc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:08 2026 by rpki-client