This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/776f58-c9fa-4e2f-9ff1-756d2a6fc7bc/1/lvwwAHd_a3tF8DtuyBwcAQv5l94.mft
File: lvwwAHd_a3tF8DtuyBwcAQv5l94.mft (raw, json)
Hash identifier: Q875oanl23Es4dQnTvMrLbxhVg0kUaNLP75aWzm++6U=
Subject key identifier: AF:17:0A:29:A2:3E:33:D3:12:CC:FE:42:AD:7D:34:9D:CF:47:FD:33
Authority key identifier: 96:FC:30:00:77:7F:6B:7B:45:F0:3B:6E:C8:1C:1C:01:0B:F9:97:DE
Certificate issuer: /CN=96fc3000777f6b7b45f03b6ec81c1c010bf997de
Certificate serial: 019C42B45124E4B2A2D0BCD68365C5D65C86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvwwAHd_a3tF8DtuyBwcAQv5l94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/776f58-c9fa-4e2f-9ff1-756d2a6fc7bc/1/lvwwAHd_a3tF8DtuyBwcAQv5l94.mft
Manifest number: 020C
Signing time: Mon 09 Feb 2026 14:00:39 +0000
Manifest this update: Mon 09 Feb 2026 14:00:39 +0000
Manifest next update: Tue 10 Feb 2026 14:00:39 +0000
Files and hashes: 1: lvwwAHd_a3tF8DtuyBwcAQv5l94.crl (hash: Dit4pFZoFQSRoH6PXikO4gjo7VZ569WzRbaJmh/8TLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/776f58-c9fa-4e2f-9ff1-756d2a6fc7bc/1/lvwwAHd_a3tF8DtuyBwcAQv5l94.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/776f58-c9fa-4e2f-9ff1-756d2a6fc7bc/1/lvwwAHd_a3tF8DtuyBwcAQv5l94.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvwwAHd_a3tF8DtuyBwcAQv5l94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:51:24:e4:b2:a2:d0:bc:d6:83:65:c5:d6:5c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96fc3000777f6b7b45f03b6ec81c1c010bf997de
Validity
Not Before: Feb 9 14:00:39 2026 GMT
Not After : Feb 10 14:00:39 2026 GMT
Subject: CN=af170a29a23e33d312ccfe42ad7d349dcf47fd33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:de:28:62:47:63:ab:43:6b:35:e8:7d:77:1a:
4e:25:47:47:11:24:88:d1:0d:d1:c9:ee:bc:2c:1c:
15:cb:a5:56:2d:cc:92:24:cd:e4:a7:dc:23:26:37:
ab:96:39:0e:03:25:2b:8a:ea:3b:1c:5f:66:51:59:
da:b2:6a:ca:81:9a:53:7e:0d:0f:f5:e0:5c:0f:4b:
4e:b7:cf:0f:b5:a7:6a:f5:f9:1a:2c:eb:c8:0c:4e:
68:c3:81:5a:2d:fd:a0:3e:90:12:95:4b:ca:74:09:
0e:08:20:b4:fe:68:00:55:18:02:44:c4:fb:c8:93:
5a:ec:fd:f9:e0:b3:31:d6:a8:97:ae:89:3e:36:66:
52:c0:8f:3c:b9:b0:56:cd:88:cd:de:42:41:f5:08:
80:e5:a8:26:52:21:ff:31:ae:84:c5:5e:33:30:01:
97:ce:31:99:87:c3:85:bc:93:85:fb:7e:43:34:2d:
59:55:be:d9:cb:ba:3c:b4:d4:b3:93:e3:c4:6c:e2:
ef:11:26:d9:19:07:d1:e9:7b:19:bf:7c:1c:a8:6e:
34:00:56:6b:9b:fa:5d:ac:bc:86:d9:49:51:9b:4b:
30:d1:cf:a0:b6:65:f0:52:db:1a:b7:a8:22:6f:67:
07:af:e4:dc:dd:8c:03:d1:23:b3:eb:fa:7f:64:b8:
fa:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:17:0A:29:A2:3E:33:D3:12:CC:FE:42:AD:7D:34:9D:CF:47:FD:33
X509v3 Authority Key Identifier:
keyid:96:FC:30:00:77:7F:6B:7B:45:F0:3B:6E:C8:1C:1C:01:0B:F9:97:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvwwAHd_a3tF8DtuyBwcAQv5l94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/776f58-c9fa-4e2f-9ff1-756d2a6fc7bc/1/lvwwAHd_a3tF8DtuyBwcAQv5l94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/776f58-c9fa-4e2f-9ff1-756d2a6fc7bc/1/lvwwAHd_a3tF8DtuyBwcAQv5l94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:01:6a:f4:0e:73:e5:77:fd:ee:cd:81:cf:41:bc:ce:5e:27:
5a:57:e7:8f:da:6f:e6:56:a7:f0:c1:ca:17:6d:d1:49:b2:93:
94:9f:1e:26:70:d7:ea:0f:5f:d8:3c:1f:b1:8b:03:6d:db:75:
5f:33:a2:b1:7a:12:f3:81:72:7d:8c:a1:50:f5:80:91:32:4f:
3e:62:7e:e7:c5:6d:6b:d6:40:89:be:15:fd:1e:ce:dc:55:92:
c7:84:2b:59:86:d5:74:cb:2c:a7:d8:5e:a8:af:57:2e:07:17:
ad:5a:e7:72:27:51:86:09:5f:df:a6:c4:1f:d0:d8:db:ee:60:
1d:36:56:a3:64:60:4d:36:6e:95:a4:09:89:f1:fc:39:05:d7:
52:43:64:11:26:3d:54:2d:df:58:05:b2:05:07:cd:30:26:53:
e1:22:1b:7d:7d:85:c3:79:e1:3b:9c:4c:7d:08:79:23:76:23:
70:2d:66:ee:ca:0f:69:c8:91:35:84:98:e0:d4:3c:2c:e8:c5:
28:a3:ce:82:3e:05:99:bb:b7:ce:d3:d2:bb:df:4a:05:01:2d:
c7:17:76:ee:23:c3:36:49:1c:6f:a9:71:c8:fb:5d:7e:11:76:
c3:d8:55:d8:f8:87:1c:42:ef:f7:d7:b1:a7:3f:db:b1:84:08:
d1:41:f4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:41 2026 by rpki-client