This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft
File: leBbGUrhvlKWmltBBFV_8ELBYCo.mft (raw, json)
Hash identifier: QhIPDT2r9AcLhU753xe280uxD1Lus8KA+33QEj2YLDg=
Subject key identifier: D7:70:A4:F7:F6:5A:BE:FF:4A:5E:17:06:A6:8E:76:F4:87:0B:93:AD
Authority key identifier: 95:E0:5B:19:4A:E1:BE:52:96:9A:5B:41:04:55:7F:F0:42:C1:60:2A
Certificate issuer: /CN=95e05b194ae1be52969a5b4104557ff042c1602a
Certificate serial: 019C42B44EE4A6F5F6C1C987D18BEDC67F6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leBbGUrhvlKWmltBBFV_8ELBYCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft
Manifest number: 0667
Signing time: Mon 09 Feb 2026 14:00:38 +0000
Manifest this update: Mon 09 Feb 2026 14:00:38 +0000
Manifest next update: Tue 10 Feb 2026 14:00:38 +0000
Files and hashes: 1: leBbGUrhvlKWmltBBFV_8ELBYCo.crl (hash: C9oclGoOhxmQJ5UEiPIXY+RMp0forNzUWBKtkeSeC8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/leBbGUrhvlKWmltBBFV_8ELBYCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:4e:e4:a6:f5:f6:c1:c9:87:d1:8b:ed:c6:7f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e05b194ae1be52969a5b4104557ff042c1602a
Validity
Not Before: Feb 9 14:00:38 2026 GMT
Not After : Feb 10 14:00:38 2026 GMT
Subject: CN=d770a4f7f65abeff4a5e1706a68e76f4870b93ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:43:9c:f7:6a:6c:49:32:d1:52:e6:71:f9:ae:
69:03:d4:53:f0:41:9a:17:00:ae:cc:47:26:5a:47:
54:a1:29:73:d9:17:e3:0b:e5:c6:28:91:27:d7:b8:
85:ec:66:e2:ac:ec:fe:71:66:4f:97:96:af:23:3c:
aa:ae:dd:dd:87:47:dd:c6:77:d8:2a:c3:de:3d:1b:
ab:55:20:5a:09:31:03:66:a4:b6:ab:02:8e:06:0c:
a3:f5:49:38:23:88:10:b1:28:8a:5d:d1:60:ec:89:
3d:56:fd:df:96:c1:ce:56:11:da:28:44:01:b4:43:
55:5e:03:0c:df:cf:de:34:0d:38:4f:9b:92:f9:d5:
61:94:fe:b7:7b:8f:85:83:30:50:de:c4:29:d6:cd:
1b:d7:ce:57:16:68:cb:5f:60:7a:b4:a4:e1:6b:d6:
57:bd:0c:68:9c:9b:d1:ac:ee:43:da:cf:06:98:c6:
44:7b:46:a5:2e:b1:ae:09:e9:4c:e9:6e:54:42:ca:
6c:8f:69:75:66:a8:55:c9:76:c1:09:b4:e1:d0:bb:
27:51:1a:fc:a6:84:86:08:af:73:70:ef:01:0c:9d:
4a:7e:7d:0c:fe:64:9a:70:cd:b8:cf:fe:a1:2e:1a:
e9:4a:44:8c:f3:0d:00:21:eb:b4:58:5f:cc:23:29:
85:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:70:A4:F7:F6:5A:BE:FF:4A:5E:17:06:A6:8E:76:F4:87:0B:93:AD
X509v3 Authority Key Identifier:
keyid:95:E0:5B:19:4A:E1:BE:52:96:9A:5B:41:04:55:7F:F0:42:C1:60:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leBbGUrhvlKWmltBBFV_8ELBYCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:32:01:c0:02:96:c2:96:a3:8e:25:42:18:25:b5:48:85:06:
b4:7e:9a:29:33:f6:37:cd:f0:2c:70:3e:fe:68:c1:d0:c4:8c:
9c:bf:f7:bb:c8:9e:39:de:25:27:36:e3:4b:bf:e8:5c:b5:ed:
77:6f:e3:48:fe:52:ab:48:7d:a2:43:12:dd:ca:ca:36:43:ca:
54:42:af:34:6a:a2:79:68:0f:87:9e:31:bf:e6:6a:aa:38:c0:
80:bd:f7:c7:8a:7e:8f:4e:d6:dd:e7:db:08:7b:2b:a6:e4:e6:
a6:e0:81:a2:33:75:cf:85:d4:77:2a:d3:20:b9:0b:54:4a:88:
b7:eb:51:f5:3c:47:9e:4f:fc:91:d9:9d:83:0c:76:e3:41:9f:
ec:56:20:81:50:dd:fb:59:cc:5b:71:b4:1f:09:87:cf:c0:2e:
cb:dd:de:cb:b8:b2:cb:f8:43:80:71:4e:b9:4c:f5:bc:99:1b:
f0:27:72:b2:40:e2:d0:fb:8d:3b:f4:88:80:2c:9b:df:f3:03:
84:c3:78:80:a8:a6:67:0f:95:a1:5c:8e:23:71:ac:94:a8:c4:
21:c4:72:03:29:15:00:c8:81:1b:0c:28:31:f3:76:9f:5d:8d:
fc:3d:a3:29:91:40:fa:22:1b:66:5d:bf:4a:64:ff:9f:37:aa:
a6:ce:95:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtE7kpvX2wcmH0Yvtxn9rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZTA1YjE5NGFlMWJlNTI5NjlhNWI0MTA0NTU3ZmYwNDJj
MTYwMmEwHhcNMjYwMjA5MTQwMDM4WhcNMjYwMjEwMTQwMDM4WjAzMTEwLwYDVQQD
EyhkNzcwYTRmN2Y2NWFiZWZmNGE1ZTE3MDZhNjhlNzZmNDg3MGI5M2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEOc92psSTLRUuZx+a5pA9RT8EGa
FwCuzEcmWkdUoSlz2RfjC+XGKJEn17iF7GbirOz+cWZPl5avIzyqrt3dh0fdxnfY
KsPePRurVSBaCTEDZqS2qwKOBgyj9Uk4I4gQsSiKXdFg7Ik9Vv3flsHOVhHaKEQB
tENVXgMM38/eNA04T5uS+dVhlP63e4+FgzBQ3sQp1s0b185XFmjLX2B6tKTha9ZX
vQxonJvRrO5D2s8GmMZEe0alLrGuCelM6W5UQspsj2l1ZqhVyXbBCbTh0LsnURr8
poSGCK9zcO8BDJ1Kfn0M/mSacM24z/6hLhrpSkSM8w0AIeu0WF/MIymFGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdwpPf2Wr7/Sl4XBqaOdvSHC5OtMB8GA1UdIwQY
MBaAFJXgWxlK4b5SlppbQQRVf/BCwWAqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGVCYkdVcmh2bEtXbWx0QkJGVl84RUxCWUNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC84ZWZjMGYtYjk2OC00NmVkLTk5MjQt
ZGQxODVjNzM1NWI4LzEvbGVCYkdVcmh2bEtXbWx0QkJGVl84RUxCWUNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC84ZWZjMGYtYjk2OC00NmVkLTk5MjQtZGQxODVjNzM1NWI4
LzEvbGVCYkdVcmh2bEtXbWx0QkJGVl84RUxCWUNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhTIBwAKW
wpajjiVCGCW1SIUGtH6aKTP2N83wLHA+/mjB0MSMnL/3u8ieOd4lJzbjS7/oXLXt
d2/jSP5Sq0h9okMS3crKNkPKVEKvNGqieWgPh54xv+ZqqjjAgL33x4p+j07W3efb
CHsrpuTmpuCBojN1z4XUdyrTILkLVEqIt+tR9TxHnk/8kdmdgwx240Gf7FYggVDd
+1nMW3G0HwmHz8Auy93ey7iyy/hDgHFOuUz1vJkb8CdyskDi0PuNO/SIgCyb3/MD
hMN4gKimZw+VoVyOI3GslKjEIcRyAykVAMiBGwwoMfN2n12N/D2jKZFA+iIbZl2/
SmT/nzeqps6Vjg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:52 2026 by rpki-client