This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
File: L7GbEAHBEHH7osw0FMxHW2wpCcc.mft (raw, json)
Hash identifier: XnCl8iobF+nYYGQBgA4KAvIVof0oatjtuQJwk8c7exU=
Subject key identifier: 5B:6E:E6:67:72:4D:27:8E:75:6C:A3:53:E3:D9:95:33:9A:8F:34:EB
Authority key identifier: 2F:B1:9B:10:01:C1:10:71:FB:A2:CC:34:14:CC:47:5B:6C:29:09:C7
Certificate issuer: /CN=2fb19b1001c11071fba2cc3414cc475b6c2909c7
Certificate serial: 019C438FE6C7F57FE47E91317DA6E273D478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
Manifest number: 180B
Signing time: Mon 09 Feb 2026 18:00:29 +0000
Manifest this update: Mon 09 Feb 2026 18:00:29 +0000
Manifest next update: Tue 10 Feb 2026 18:00:29 +0000
Files and hashes: 1: L7GbEAHBEHH7osw0FMxHW2wpCcc.crl (hash: 8+48pTIPSzp5IHv9j8oUi8eAi+56Yavz8Zb2g9OjyB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:e6:c7:f5:7f:e4:7e:91:31:7d:a6:e2:73:d4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb19b1001c11071fba2cc3414cc475b6c2909c7
Validity
Not Before: Feb 9 18:00:29 2026 GMT
Not After : Feb 10 18:00:29 2026 GMT
Subject: CN=5b6ee667724d278e756ca353e3d995339a8f34eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9c:a8:fc:96:08:76:50:f2:0d:68:9d:68:08:
8f:fc:fd:ac:0f:c2:4e:e1:57:d8:85:d7:ce:9c:8b:
40:86:d3:78:8a:47:5c:18:be:ec:a5:2c:5a:bb:e3:
85:8b:d1:ad:2f:94:83:5e:40:00:2c:8d:67:72:07:
54:72:12:70:70:c8:b9:9e:24:a6:26:9c:04:32:44:
5e:1c:27:1f:df:f4:6a:f0:24:a9:2c:a1:a1:27:75:
cc:bd:ae:c6:53:4a:e2:18:16:2b:0d:8e:0c:06:66:
93:6b:66:d6:54:7f:af:5e:81:7c:46:28:a8:f2:a5:
1f:d1:7f:06:8d:e5:ba:a5:e3:f4:56:af:56:28:fd:
e4:dc:90:83:da:0c:ef:ec:20:bf:0a:c2:e3:19:17:
87:b0:62:e3:b8:f8:12:06:02:75:f6:06:58:06:f8:
c1:2d:20:99:80:b3:ac:a9:a5:b4:8d:d8:6d:eb:cb:
99:49:c6:30:ff:e2:8c:32:ad:bc:f9:de:36:7f:c2:
d6:cf:e6:1d:8f:db:e9:ae:17:ba:0f:bf:4f:a4:89:
7b:d1:e7:f5:7f:5d:e4:31:6d:4d:28:9a:eb:f9:ac:
a0:14:22:12:17:f3:7e:ae:b1:2a:33:e6:39:72:86:
70:f5:d1:7e:30:18:df:1d:36:f3:30:5a:8f:9d:56:
77:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6E:E6:67:72:4D:27:8E:75:6C:A3:53:E3:D9:95:33:9A:8F:34:EB
X509v3 Authority Key Identifier:
keyid:2F:B1:9B:10:01:C1:10:71:FB:A2:CC:34:14:CC:47:5B:6C:29:09:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:5d:0c:a9:64:50:a4:47:dd:5d:4f:5c:b2:5d:63:95:fe:37:
ca:fb:e9:b6:e1:b9:bf:02:6f:c5:60:8d:40:b2:64:62:79:52:
ce:f7:9e:54:2d:cb:85:51:8d:53:36:09:db:95:ee:f4:a3:a1:
3b:7a:1d:f7:01:4c:c9:b7:50:84:4e:43:6f:71:53:23:c2:b6:
bb:60:44:48:2f:57:80:fe:a3:8a:df:62:67:be:04:e8:f6:95:
1e:4e:00:d8:77:a3:ec:02:43:95:a8:01:75:3e:25:65:37:e0:
d0:69:e8:be:84:2d:a0:09:48:6b:ba:25:0a:b4:0a:0a:2a:47:
f2:ce:17:ab:48:3f:16:20:5e:bd:05:66:a6:d2:a1:29:fd:24:
11:b8:0c:9c:f2:95:74:23:5d:a1:91:56:29:8e:aa:af:25:1f:
e7:58:cd:d2:9c:14:6d:a9:8d:08:cc:a7:ad:54:9a:94:8a:68:
ce:be:de:79:e4:5b:33:a1:06:b1:bb:f8:42:0d:76:78:a5:3c:
f3:41:94:35:77:85:61:75:82:d4:d9:68:70:66:6c:48:ec:fe:
de:b6:d6:5d:b3:d3:b1:34:59:b6:c0:e6:a6:55:80:b6:d6:60:
9d:02:a7:26:ff:26:2c:d9:8c:88:c5:bf:5e:7d:15:53:2f:fa:
ec:02:b2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:59 2026 by rpki-client