This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
File: 0LkE317sIhazQwFsXLJLuQpD06Q.mft (raw, json)
Hash identifier: 2ifJWeD95Kc3AKPhBgVD3W2ySJSitLnSC0I7fXV0CE4=
Subject key identifier: 40:D7:D7:A4:11:14:9F:7C:A9:DF:70:BE:DE:BA:D2:FF:8A:6E:BA:5F
Authority key identifier: D0:B9:04:DF:5E:EC:22:16:B3:43:01:6C:5C:B2:4B:B9:0A:43:D3:A4
Certificate issuer: /CN=d0b904df5eec2216b343016c5cb24bb90a43d3a4
Certificate serial: 019C4359078678A8964087B6EBE267DD175C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
Manifest number: 180D
Signing time: Mon 09 Feb 2026 17:00:33 +0000
Manifest this update: Mon 09 Feb 2026 17:00:33 +0000
Manifest next update: Tue 10 Feb 2026 17:00:33 +0000
Files and hashes: 1: 0LkE317sIhazQwFsXLJLuQpD06Q.crl (hash: DydA4jNGUhhmPOrTEbmFJa91Cdkd3B7zVHcXy+j2I9E=)
2: nqFedlELDT6btqVr2PyQaNO_Pfw.roa (hash: 8tqaPkj8LtydCchM9fMrH7we2nm/JziMXiNEi0lLF+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:07:86:78:a8:96:40:87:b6:eb:e2:67:dd:17:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b904df5eec2216b343016c5cb24bb90a43d3a4
Validity
Not Before: Feb 9 17:00:33 2026 GMT
Not After : Feb 10 17:00:33 2026 GMT
Subject: CN=40d7d7a411149f7ca9df70bedebad2ff8a6eba5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3e:72:11:5a:a3:34:b5:3d:4d:dd:ac:fc:72:
c0:cc:9f:2d:c3:64:f6:09:03:c9:8d:73:3a:23:e6:
06:ac:46:d7:8d:ae:8d:8c:82:52:e3:ee:39:ba:83:
39:9c:ac:8b:fd:0f:7e:e6:a7:0c:a1:82:9b:d1:b5:
e6:fb:1e:27:19:d8:11:88:93:ff:ca:d9:b9:6a:46:
fb:fc:be:be:cf:39:53:de:17:66:37:c5:ec:44:8d:
8e:09:09:20:54:81:6b:7a:67:1f:01:19:e8:37:d4:
6d:23:fc:d1:f6:06:d1:ce:d8:9d:0b:b6:e2:54:2c:
93:4e:c6:a6:53:8b:11:3b:8a:a1:a6:54:c8:95:84:
bb:cc:00:6a:12:16:69:d4:ca:82:e7:56:9d:b2:b0:
ec:9c:5a:98:83:84:26:ae:8a:d1:cd:de:88:00:6c:
ec:15:bb:65:c7:03:2f:be:52:66:50:01:0b:2e:e2:
00:46:23:4a:72:eb:23:35:ab:30:7e:8d:68:46:b1:
a3:23:66:84:f0:33:25:87:c0:ec:d4:38:e5:bd:b0:
93:8d:fa:1d:98:25:d7:d2:02:6a:57:06:5f:70:5c:
8e:34:a6:ce:52:3c:02:34:46:eb:ba:2c:86:04:21:
bf:56:a2:35:3c:74:aa:39:f5:28:01:88:cd:f1:d4:
bd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D7:D7:A4:11:14:9F:7C:A9:DF:70:BE:DE:BA:D2:FF:8A:6E:BA:5F
X509v3 Authority Key Identifier:
keyid:D0:B9:04:DF:5E:EC:22:16:B3:43:01:6C:5C:B2:4B:B9:0A:43:D3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e5:b2:6c:3f:4e:d4:80:36:03:3b:90:d7:0c:fe:61:02:ee:
ac:6e:a9:19:bd:d8:87:12:4a:28:52:bb:44:01:7a:6e:01:89:
49:dc:7c:94:cf:66:c9:97:3f:8e:53:0e:c7:04:32:2f:4a:69:
78:93:ff:35:58:90:06:42:80:93:b0:0f:7d:ca:3a:d2:47:9b:
fa:f3:0a:59:5e:35:db:1d:af:fe:99:65:30:97:f2:c2:48:f0:
a0:19:90:5e:15:cc:a0:56:fe:46:7b:6a:21:47:48:4a:05:86:
a2:2f:77:c0:34:bc:46:33:2b:9e:ae:c0:99:4e:06:f5:04:af:
e5:9b:19:69:de:4c:c6:48:5b:62:e1:f8:0a:c6:c7:5b:5a:67:
a8:db:12:7e:91:09:fc:2b:d4:86:4d:42:f0:55:ce:37:36:4d:
b5:ef:c1:c5:7e:44:b5:fc:e5:ba:27:23:4c:e0:5e:a5:1c:bb:
ad:55:ce:78:f3:61:a7:d2:f1:43:4f:0c:45:de:b8:17:1f:ce:
08:1b:42:fa:61:bf:4f:28:c1:b7:c1:e4:92:9d:36:04:00:bc:
5c:b3:f9:89:70:c4:47:8b:de:bb:50:6c:0d:da:60:92:0d:8b:
7d:a7:23:8c:2d:1e:fe:7c:29:83:d7:ae:ba:f2:d3:da:a4:6e:
03:66:f6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:44:33 2026 by rpki-client