This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
File: lKMuRFwk3tm4UhLUebiACBZevbo.mft (raw, json)
Hash identifier: XehGup0qbdToooKm0v0101PSvif1XI88r3wHp64RdZY=
Subject key identifier: 41:2F:4C:64:51:55:61:09:AD:B5:1A:46:69:57:CE:A0:42:03:CC:BE
Authority key identifier: 94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
Certificate issuer: /CN=94a32e445c24ded9b85212d479b88008165ebdba
Certificate serial: 019C43FDD18A248AA5B48FA694A196F37910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
Manifest number: 1813
Signing time: Mon 09 Feb 2026 20:00:33 +0000
Manifest this update: Mon 09 Feb 2026 20:00:33 +0000
Manifest next update: Tue 10 Feb 2026 20:00:33 +0000
Files and hashes: 1: lKMuRFwk3tm4UhLUebiACBZevbo.crl (hash: sf0WWL1P22a9U62W/1eT/QjgtPTBaap6g6QAESuVJYo=)
2: q_6rXYE5naFTYIqL8Xb1V5kt0hw.roa (hash: oNdTo6cg1MBLR8xzU20UilfpNxSC7GvJArzxlqR/iAg=)
3: sdkmYCTpxXVubPzt0Vusqo9p2cM.roa (hash: cR5IHtVLgA9zfYhE/lZgYLsMdhZ5hl2OfHWB5ot/8mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fd:d1:8a:24:8a:a5:b4:8f:a6:94:a1:96:f3:79:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a32e445c24ded9b85212d479b88008165ebdba
Validity
Not Before: Feb 9 20:00:33 2026 GMT
Not After : Feb 10 20:00:33 2026 GMT
Subject: CN=412f4c6451556109adb51a466957cea04203ccbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c0:66:da:3a:c5:49:7c:1c:3e:71:41:39:78:
a8:28:3b:e0:f8:c2:d2:a4:f9:34:ff:70:f9:e0:17:
e3:0d:31:ff:d1:5a:32:d9:74:9a:16:19:69:0f:13:
ae:01:2c:6e:05:62:85:4a:b4:aa:20:fa:4a:16:f2:
de:41:20:fb:2f:84:7d:9c:ce:df:27:bc:6a:71:ce:
f6:b5:02:15:97:8f:7f:47:59:17:cd:48:04:aa:41:
29:eb:52:d4:26:ac:fa:8e:75:b6:87:44:d8:0d:d2:
81:b9:0e:8f:bd:27:58:74:2c:b6:e9:cc:01:dd:2e:
d8:9d:e0:a0:0e:e4:39:07:20:cf:44:0f:dc:7f:be:
09:aa:52:60:0e:b7:5d:f4:ec:71:95:8a:37:6c:0b:
5e:5c:ce:39:76:dc:bf:e7:96:96:5f:dd:f7:0f:8e:
03:98:4b:0c:85:d1:82:ea:74:28:67:e8:ca:97:a7:
34:f5:14:5f:b1:1f:4a:98:7a:cd:fa:2d:4b:dc:a5:
aa:12:16:e6:a6:5c:cf:4a:29:22:40:e3:57:cd:89:
3d:f9:4d:05:d9:7d:3f:77:52:61:6c:ce:ae:76:e6:
b1:37:c8:27:83:d5:ec:91:69:e6:9e:95:ae:a9:fb:
97:fc:5f:13:2e:bc:d0:6c:1d:96:53:86:8e:55:83:
70:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2F:4C:64:51:55:61:09:AD:B5:1A:46:69:57:CE:A0:42:03:CC:BE
X509v3 Authority Key Identifier:
keyid:94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:10:9e:71:91:ca:32:b3:df:95:3e:fc:7b:63:49:1e:21:f7:
a7:fd:c8:52:93:c0:ed:95:14:fd:c8:d3:ab:b8:29:d0:94:58:
dd:d2:17:71:81:a9:ec:6d:71:5e:29:7a:d5:50:a4:b2:88:c7:
43:ea:8e:a0:ac:56:b5:9d:3d:f3:ce:32:7a:5d:6a:d5:c6:be:
10:90:7b:ea:4d:f1:8f:fa:d4:d2:ec:45:0e:be:0e:c1:2b:41:
b3:86:0c:22:5e:c8:8b:1e:33:27:d5:2e:e1:da:57:d8:9b:3a:
c2:d0:a5:9b:f9:90:3d:b4:ec:41:07:17:59:6c:72:5b:a3:99:
a7:9c:0a:ea:a5:38:9d:86:b7:5b:e5:54:e1:f0:c9:78:3b:3e:
eb:8c:94:76:06:d1:01:65:5b:35:35:36:1c:e9:48:45:e3:6b:
38:60:36:27:6f:4c:eb:72:12:29:a3:65:f0:8d:89:56:ce:4d:
06:65:20:a6:46:18:e4:61:56:02:c9:a6:a8:fd:98:7f:f3:c0:
e6:93:60:6d:60:a1:ae:92:56:6f:d1:4b:2b:0b:8d:75:8c:f2:
e4:09:b0:53:46:80:f9:ac:c5:d7:a7:33:ee:75:20:db:88:21:
59:f1:8b:89:d3:21:92:92:b2:66:20:40:c9:b7:d6:28:f5:ad:
55:52:f6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 05:56:44 2026 by rpki-client