This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
File: lpblIk_vUX9NzGbBQQNSzIq_si4.mft (raw, json)
Hash identifier: 9u34x98rXjDlu+XtC14+bQETeeNkE6WBXW1W6ocY8f4=
Subject key identifier: 8F:D7:A3:30:2F:38:5B:49:EF:AA:29:75:4A:2D:63:7D:B5:F7:6D:90
Authority key identifier: 96:96:E5:22:4F:EF:51:7F:4D:CC:66:C1:41:03:52:CC:8A:BF:B2:2E
Certificate issuer: /CN=9696e5224fef517f4dcc66c1410352cc8abfb22e
Certificate serial: 019C4322D28CC6E58C60B9673666BABA354C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
Manifest number: 179C
Signing time: Mon 09 Feb 2026 16:01:21 +0000
Manifest this update: Mon 09 Feb 2026 16:01:21 +0000
Manifest next update: Tue 10 Feb 2026 16:01:21 +0000
Files and hashes: 1: lpblIk_vUX9NzGbBQQNSzIq_si4.crl (hash: 6tSJv5tk+UoVly/FngiXrVNkV6EJTGirwv+7UNrA2fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:d2:8c:c6:e5:8c:60:b9:67:36:66:ba:ba:35:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9696e5224fef517f4dcc66c1410352cc8abfb22e
Validity
Not Before: Feb 9 16:01:21 2026 GMT
Not After : Feb 10 16:01:21 2026 GMT
Subject: CN=8fd7a3302f385b49efaa29754a2d637db5f76d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:bb:ed:0c:e6:05:f3:31:22:9f:e0:e7:3a:
e4:04:07:b8:8f:05:0d:10:2d:1f:04:1b:23:b7:25:
e1:26:7f:90:85:8c:39:fa:09:44:9b:90:dc:5c:3d:
30:be:de:9d:36:10:2d:04:08:11:a9:4f:94:d1:4f:
59:74:59:b6:f4:59:d7:0a:6a:43:44:a8:cc:0e:2f:
02:b3:d3:32:18:a3:e2:08:71:c3:b9:53:28:26:10:
10:24:dd:17:2d:86:4e:ef:2d:c3:d7:95:e2:b3:af:
ce:54:cd:b1:09:8b:44:a3:2c:52:c4:e0:52:2b:c1:
7c:e2:c9:1f:cb:50:fa:d6:8b:06:29:91:ae:8f:cb:
97:42:4a:eb:4a:9b:96:81:4b:b2:a9:a7:d4:f8:fb:
9c:96:f5:79:66:fd:5a:76:d5:d0:61:55:f6:8a:d8:
11:43:a5:ef:ea:83:19:7b:e4:83:55:fa:21:3c:13:
ea:f4:b4:61:04:71:81:68:17:2c:d4:c1:a4:bb:d3:
ed:dd:9c:11:bc:b4:27:2a:75:30:31:7c:ed:44:c7:
76:d9:b3:15:fd:86:03:f7:ff:02:30:71:4b:54:3e:
b5:d0:6a:85:0a:5a:66:62:b0:17:c8:d7:7f:1c:6e:
b9:42:30:0e:98:22:d0:f8:d7:2c:4a:dd:2a:81:a2:
29:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D7:A3:30:2F:38:5B:49:EF:AA:29:75:4A:2D:63:7D:B5:F7:6D:90
X509v3 Authority Key Identifier:
keyid:96:96:E5:22:4F:EF:51:7F:4D:CC:66:C1:41:03:52:CC:8A:BF:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b9:59:6b:e3:37:13:7a:cb:1c:da:c1:6e:11:9e:c3:02:65:
76:29:23:a5:85:1a:40:44:e1:30:38:b5:cf:ff:18:db:ac:db:
b5:af:f8:fe:8e:c3:6d:dd:33:6d:4a:ec:52:8d:00:cc:06:3e:
ca:08:e0:22:73:92:57:d2:e9:b5:4b:db:f4:03:86:9f:4e:59:
98:be:ca:fe:88:88:2b:1e:1f:d6:a5:2c:c3:16:a9:e0:cb:25:
36:6c:e1:4e:54:03:93:d4:31:9f:37:35:3c:fa:36:f8:13:4f:
ae:ff:02:c4:f0:3d:e1:71:70:48:38:f2:e8:25:5a:aa:48:28:
98:49:ac:4f:c7:f1:96:7e:a1:d7:05:94:95:e6:bc:07:99:a8:
6d:f5:8f:6f:71:99:37:eb:c3:79:ea:90:b1:09:0b:ea:1b:71:
87:a2:b1:13:7f:27:ad:52:6a:07:81:a7:6a:85:d8:4e:d6:93:
d1:9c:59:25:46:4f:00:bb:0f:0e:13:8e:7a:84:48:d7:be:a1:
21:91:57:cb:81:3d:09:8b:36:8f:e4:5f:2c:29:4d:a4:1e:17:
46:3c:10:95:d7:db:3b:59:f3:ea:11:77:bc:9b:f3:01:7a:6c:
17:6f:f6:b7:0f:58:eb:f1:30:95:4b:38:06:9d:dc:fb:12:e3:
35:c0:4b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:45 2026 by rpki-client