This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
File: lBZrcEhD09l1QJXIOpG0k4KCAKI.mft (raw, json)
Hash identifier: 22BrkSXWSJHWKbWaOCfdhzj01hcBPH++xGDyZ+F5vIY=
Subject key identifier: CD:8F:37:92:A4:03:FF:EA:30:66:49:BF:A3:15:FC:D7:EE:75:9E:9A
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 019C4434856CF44274DACBFB0A67CAD6882C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
Manifest number: 18CC
Signing time: Mon 09 Feb 2026 21:00:18 +0000
Manifest this update: Mon 09 Feb 2026 21:00:18 +0000
Manifest next update: Tue 10 Feb 2026 21:00:18 +0000
Files and hashes: 1: F8c1izE-9RJV-qYbebPoSy0OO04.roa (hash: R4SfTxNG21QdwRjkrLqrgaOvhx8zK8zawB+KroMpRRM=)
2: KHKpEj2THKj58bA0t2ta3IDNpvE.roa (hash: Pq1zZUJA84ZOxc7RlsG24SrZSENVQ5pv+oFLBtS7LdY=)
3: W1K36nFyRe3GO6LHSXW_xcUBvII.roa (hash: hh6AYmLXtgLewtNw636WPRnIQ2JOylUsUYuSi0Z4HrQ=)
4: W9TRnPvGSQFXZxTwR6cGDbvkC0s.roa (hash: 5I/HEPYZKTntiCYEI7nPEapNYrVs9Kn8rc2HGNnA5T8=)
5: Xp1cuH5GckRebQbl04bBVOXl9c0.roa (hash: G9DoetqG3+uFPEjScRTeA6vdZfkVk+8JEJjCMtB7vJ4=)
6: ckfmY3WSPr_4BWpV0qlaPUwbu8I.roa (hash: rA5xc/5hb1tqN7XSQMe8RP1nVeaWX6f+VPTMMamNxv0=)
7: hLfXGEFHSPSFIRmHT89SmE3DoGk.roa (hash: Eiep4sckLWzhbRgW2S6VD1L+Sv3uTwyQ+7x6JyTQ2C4=)
8: lBZrcEhD09l1QJXIOpG0k4KCAKI.crl (hash: sq3JwUO+tA0UjVfPcFni7+heYN49m3jRVbcpDKqGk7E=)
9: oFjLnFx0PgjFBuwtiF_MYSFpqmA.roa (hash: VK+JXOgRMBfH6LlIiFROL5a7HEYqeypevfrTL4MJN2k=)
10: q0Gyvx-ZiHxcKNkf4PDmV8rVtMo.roa (hash: 8B8ddw7jmxJRHKVeQXwP5L4m3Sp7+TCMkXH7l7ipLJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:34:85:6c:f4:42:74:da:cb:fb:0a:67:ca:d6:88:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Feb 9 21:00:18 2026 GMT
Not After : Feb 10 21:00:18 2026 GMT
Subject: CN=cd8f3792a403ffea306649bfa315fcd7ee759e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:17:e6:af:42:34:b8:f7:43:4a:35:01:03:f4:
40:7e:d9:52:1e:08:0a:c4:4a:3e:22:d2:84:c0:01:
f1:ea:20:f6:b7:29:4f:84:6c:91:93:e0:c2:5f:bc:
d5:18:49:25:95:6e:da:b2:c0:61:27:f3:d3:66:c5:
ae:4a:de:0c:7d:69:3a:fa:ee:83:e8:69:66:d1:f1:
d9:4c:c6:38:d9:4d:b3:1f:5f:a4:aa:7d:5c:2f:ad:
66:53:cd:6a:f2:34:f1:a0:80:2a:27:90:e9:8b:7e:
7c:ca:00:f4:eb:cd:5e:87:b8:1d:95:d5:4f:68:ee:
ef:14:c0:c2:35:7d:d4:c5:34:75:ed:0b:a6:87:2f:
c4:0a:08:bc:47:26:51:ad:48:c8:23:23:b6:ed:cc:
1e:9f:73:16:22:41:de:7d:ae:b5:f8:21:c1:31:7b:
af:4a:6d:fd:cc:c4:bc:0d:8a:e1:39:17:ee:61:78:
bb:9e:25:b3:f8:cf:9b:76:47:ee:44:c3:6f:2d:2d:
1d:7b:3c:77:69:ed:45:8e:26:da:d8:50:98:cf:83:
82:10:e5:00:98:cc:aa:3d:2e:80:31:b5:e0:4d:6d:
d5:1c:89:03:3c:53:06:b3:f8:67:06:73:2a:06:bc:
08:0c:8b:91:c6:24:ef:84:33:e9:ee:ea:39:a0:d9:
dd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8F:37:92:A4:03:FF:EA:30:66:49:BF:A3:15:FC:D7:EE:75:9E:9A
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ff:7e:45:a3:51:7e:e9:00:08:57:e8:7c:55:77:6f:14:42:
18:01:93:d1:4a:8c:2a:61:fd:29:70:88:7f:94:b0:6e:56:d0:
d0:ab:47:4c:27:35:29:3f:ab:bc:a3:5f:50:de:75:12:b1:d6:
44:93:ab:0b:8e:44:e3:2e:74:0b:ae:e7:74:01:a0:a0:4e:82:
e9:a8:07:96:10:0e:1b:65:af:3e:f0:22:a7:35:02:6c:17:48:
6a:0d:2b:ec:d5:15:a2:57:0b:83:bb:39:eb:9b:39:45:3b:96:
6a:b7:a6:a5:63:d8:4c:6d:20:b3:e1:98:7c:8f:cb:a4:40:ef:
81:00:24:51:a4:11:a0:b7:fc:c7:e8:46:74:c7:1a:4a:2d:37:
c6:9b:a7:db:50:e8:b6:ea:bc:c5:cd:f2:04:24:89:2f:05:f9:
5e:19:03:1f:3d:09:5f:0d:4e:9f:a3:7e:ea:61:15:e6:59:f8:
18:3d:66:46:70:1c:d4:80:30:36:02:57:83:a2:36:74:57:00:
70:47:9e:95:4b:6f:5c:10:13:97:6c:02:b6:a9:c7:c9:97:4d:
27:da:d4:f5:b0:60:57:94:c7:30:03:1c:1f:2e:ab:02:22:7c:
72:92:15:17:f4:f0:53:ef:63:bd:03:69:4b:30:9a:1e:08:54:
90:60:c1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:59:49 2026 by rpki-client