This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
File: Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft (raw, json)
Hash identifier: sdAAD2uai6u1nk/7j606GWovJsW9ID2Ie6eDyWqjmRM=
Subject key identifier: B6:AE:4E:D7:5E:7E:96:B2:FF:C5:DB:87:2A:8D:76:5D:1B:BC:74:81
Authority key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
Certificate issuer: /CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Certificate serial: 019BFD2F1DC27D3E2471F1154071D3FAE708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
Manifest number: 17C0
Signing time: Tue 27 Jan 2026 02:01:21 +0000
Manifest this update: Tue 27 Jan 2026 02:01:21 +0000
Manifest next update: Wed 28 Jan 2026 02:01:21 +0000
Files and hashes: 1: Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl (hash: eHQTXIMXgfj6aMftwPYvmHCT/FvwhnFCD9WNyZbTDYU=)
2: tDm7AUYKyf97YOJJKUiWr2Dgcg4.roa (hash: /UBoh/wJ/dh6DjZ66cH1C2Cr/EgD7L8aiIxXDUdGpis=)
3: yffg1-eaO6Srh9Uv7AmqsK2NudM.roa (hash: kUfLwWzqj96wDEHYb/yvv+ZIOEIAJHX7rxwFZQvwJsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 02:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fd:2f:1d:c2:7d:3e:24:71:f1:15:40:71:d3:fa:e7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Validity
Not Before: Jan 27 02:01:21 2026 GMT
Not After : Jan 28 02:01:21 2026 GMT
Subject: CN=b6ae4ed75e7e96b2ffc5db872a8d765d1bbc7481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:81:94:19:cf:7b:1b:9d:9a:7d:d2:13:27:09:
8c:8c:32:bf:6e:cb:2b:54:3c:59:12:7b:73:a1:68:
10:c0:27:6b:83:92:1b:ac:e5:ed:6e:0e:08:29:6a:
22:93:ae:5f:8c:9e:44:07:44:8b:eb:16:59:02:13:
05:72:0f:fa:1b:9e:ef:4a:bf:c9:1b:5e:5a:a5:4f:
38:88:91:4c:80:af:41:7b:6e:ad:5c:e1:bc:0a:2a:
42:e5:54:6d:18:c5:a8:c8:fd:b8:4f:27:03:3f:a7:
3e:ce:83:3f:b6:7c:1c:ea:fd:6e:95:23:42:cf:1c:
d5:c3:0f:08:d6:8d:6f:0f:2f:87:ce:9e:a9:d1:46:
00:e6:db:99:08:45:26:46:39:66:3c:90:c3:a0:b9:
0b:ae:bd:d3:87:4e:c4:cf:7e:2e:30:30:56:0b:f4:
77:04:bd:0d:0f:7b:71:5b:b6:cf:f2:12:f4:0d:17:
9d:02:c2:8c:a0:07:3d:4b:3c:ef:6a:cf:81:30:f4:
c1:1d:52:e5:3e:6a:e9:7b:d7:8e:cf:8a:55:bf:19:
7a:c3:ee:fa:2a:29:59:33:70:10:f9:50:22:91:cd:
d1:fe:89:3d:a3:3b:33:4c:3c:a3:92:08:ba:e9:ea:
b8:6a:d2:46:fa:e6:05:52:9d:21:67:89:5e:ce:e2:
f3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AE:4E:D7:5E:7E:96:B2:FF:C5:DB:87:2A:8D:76:5D:1B:BC:74:81
X509v3 Authority Key Identifier:
keyid:2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b2:34:13:7c:41:e9:8d:10:d7:e5:53:d3:4c:38:6b:60:41:
9a:ed:8e:75:c4:ed:52:a6:d3:4e:f0:0c:4e:d9:37:c5:98:a9:
87:93:ee:7b:05:38:f2:89:61:00:0a:b7:68:f9:8b:a9:d9:20:
3c:35:5c:11:28:e2:ea:bb:f1:d5:b9:94:f5:a6:e8:e1:d8:a1:
0b:46:4b:dd:f6:8a:55:95:1d:2b:53:8e:9e:59:d0:f5:71:d3:
bc:18:11:1d:57:27:37:59:ed:7e:20:20:93:b5:c1:a3:43:a1:
e7:2e:af:e5:a6:cb:01:68:25:53:44:3e:14:86:9e:62:3c:db:
c2:a6:9e:13:9a:7b:69:4e:78:1f:4e:99:01:7d:04:55:73:05:
71:40:12:40:92:04:f0:26:20:fd:e7:83:3b:b6:5e:f9:a0:af:
c9:16:71:c4:dc:ac:0f:98:72:17:83:33:14:d4:f6:30:53:96:
07:ec:fa:68:a9:bc:b2:f2:12:20:ee:ef:2b:d9:b9:7b:79:6d:
16:af:5e:23:22:de:b5:b4:54:93:cc:b1:c5:10:03:89:a5:37:
bc:5d:60:a5:2f:2a:77:92:a9:25:bd:95:2f:af:8e:2f:74:b0:
b3:6b:64:9c:d2:41:15:16:a1:14:83:05:55:c4:c2:8d:70:b9:
1d:f0:10:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 11:51:30 2026 by rpki-client