This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
File: lV_PknmKnbswq9K5-im_qIBCIPM.mft (raw, json)
Hash identifier: tXmGOh6s3k8KMnXEoojzQDXC/+9Qg4ouI2lMIcMVssM=
Subject key identifier: 36:96:A9:B6:C6:6D:3D:98:5F:28:EF:41:80:BD:37:EE:B6:6E:EE:2C
Authority key identifier: 95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
Certificate issuer: /CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Certificate serial: 019C43C76935E25FB374DD67DA9C771C07ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 19:01:07 +0000
Manifest this update: Mon 09 Feb 2026 19:01:07 +0000
Manifest next update: Tue 10 Feb 2026 19:01:07 +0000
Files and hashes: 1: EV5B5CDx-yO9QhQKgIOGKQuwu8Y.roa (hash: BneDEJ5QoDJkAJJC30tOaDJaCQOMhWb/wOIFibxQ6Ms=)
2: L8bZH6SZP0Do8W2usy05gMWTJfA.roa (hash: GqrUrTcZzLpiG3dkPkOQYKLJl/nz6um2HMjJRvXU0cM=)
3: N8RSRMP8UAQKEFAGsHIuhNlTork.roa (hash: ApP8TEU/5MswzkOImjIl/nU5p8uqAw/j2QPZ3Oxhfdg=)
4: lV_PknmKnbswq9K5-im_qIBCIPM.crl (hash: 7uZOhGY5BfS5/cOG2ZEEnSoHgA75GzO+KNHN+QXxKaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c7:69:35:e2:5f:b3:74:dd:67:da:9c:77:1c:07:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Validity
Not Before: Feb 9 19:01:07 2026 GMT
Not After : Feb 10 19:01:07 2026 GMT
Subject: CN=3696a9b6c66d3d985f28ef4180bd37eeb66eee2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:97:a2:9f:e3:2f:de:aa:41:67:ab:a8:27:76:
f0:e7:da:00:f5:e5:b7:6e:dd:ed:fd:d6:39:03:e2:
e5:33:ec:9b:3c:2c:62:a0:f4:23:14:b1:ba:00:0d:
52:75:0e:fd:15:82:d4:97:b6:46:dd:7c:59:78:98:
50:09:db:b4:b0:45:5c:2a:b1:e0:e0:c0:14:77:40:
90:9f:09:2b:f8:88:ab:10:0d:a6:4e:8d:c1:4a:ad:
14:46:ac:d3:12:3b:02:5e:db:1a:bd:e6:af:47:b6:
3b:b6:60:0e:94:c4:aa:c3:48:60:de:11:bf:2c:1d:
60:0f:f1:29:b4:b2:11:dc:cd:33:46:7d:b0:38:1f:
dc:94:cf:d4:8f:ad:cf:e1:38:c8:fe:2e:29:99:e2:
ea:a9:98:45:e5:26:a4:40:31:bd:3c:09:c4:55:94:
c8:80:44:26:e0:be:76:39:74:3f:eb:c9:34:8f:fa:
9b:6b:d0:7d:4d:1b:c8:3d:9a:fc:69:eb:b2:46:45:
42:c6:9b:88:89:8c:18:77:e7:c6:40:9c:d3:ab:8d:
fb:f2:b7:f5:dc:ae:23:93:fe:7c:5c:d2:c7:f4:93:
38:10:77:e2:78:7d:5d:0b:bc:fa:45:64:78:71:9e:
df:f9:de:c2:5e:35:29:50:35:39:58:b0:0e:42:c8:
ad:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:96:A9:B6:C6:6D:3D:98:5F:28:EF:41:80:BD:37:EE:B6:6E:EE:2C
X509v3 Authority Key Identifier:
keyid:95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:42:2b:f0:34:55:3c:da:07:62:2c:4d:21:2b:53:a0:8d:75:
b5:23:98:56:43:32:f8:7b:fc:3e:d9:c3:c4:14:34:9d:1f:10:
48:28:8e:f6:53:97:41:b3:a8:d6:68:46:d0:fa:67:36:03:d4:
3f:b1:79:50:e0:57:aa:90:7f:fd:a7:ee:fb:b5:96:c0:67:1b:
65:fb:b5:f9:0d:3b:97:b8:4d:7f:09:2e:95:6a:40:cd:54:b0:
79:41:20:3e:7d:25:14:bf:4a:39:ae:e2:51:cf:b5:41:0d:ca:
5c:38:72:e4:3f:23:a4:79:8a:c7:8a:28:da:db:dc:2c:04:5a:
91:99:0b:fa:74:e0:33:e7:10:7c:19:b6:21:b3:9d:b9:7b:4a:
e7:1f:ad:38:a4:3f:ba:6d:f9:85:21:ea:d5:70:fb:df:3c:10:
e9:9b:e0:6e:43:ed:b6:38:b4:65:7e:fc:19:41:48:1d:fe:83:
21:1a:64:2e:11:a3:05:eb:6e:1c:b7:7d:64:b6:d8:54:dc:96:
90:ac:8b:1d:43:58:63:67:26:9b:bb:27:e7:d0:1f:c9:4a:e4:
8d:3f:ce:96:54:b3:98:f2:f9:ac:95:3f:c7:1f:ee:7c:8d:ce:
5f:8f:a3:4a:a6:c6:1b:57:0f:2f:17:50:0b:d5:98:65:4a:ae:
d1:e6:dc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:43 2026 by rpki-client