This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
File: LDe0vsl9YIq-I7xXujmCRszFd2A.mft (raw, json)
Hash identifier: 1jiCCM0sTA6SkXnryEWo/5K89Ue4xX0AD72C7Piq4/Y=
Subject key identifier: 12:E7:8A:D4:79:DB:A7:9C:01:2A:8C:4B:32:5A:D8:69:76:63:F4:BC
Authority key identifier: 2C:37:B4:BE:C9:7D:60:8A:BE:23:BC:57:BA:39:82:46:CC:C5:77:60
Certificate issuer: /CN=2c37b4bec97d608abe23bc57ba398246ccc57760
Certificate serial: 019C4358D3A202B8DFBBB149987E13F1C7ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 17:00:20 +0000
Manifest this update: Mon 09 Feb 2026 17:00:20 +0000
Manifest next update: Tue 10 Feb 2026 17:00:20 +0000
Files and hashes: 1: LDe0vsl9YIq-I7xXujmCRszFd2A.crl (hash: nceo3EPIwq5GeLBIFaCMnHCdj07E18CIDjnywaunz8I=)
2: ayl3vnvrrdmk5cZvehuS-xb9kOo.roa (hash: RrcMxnc59zE7RGrIC4ZPK4DT+x6V2IkZuo1eiCNAHss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:58:d3:a2:02:b8:df:bb:b1:49:98:7e:13:f1:c7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c37b4bec97d608abe23bc57ba398246ccc57760
Validity
Not Before: Feb 9 17:00:20 2026 GMT
Not After : Feb 10 17:00:20 2026 GMT
Subject: CN=12e78ad479dba79c012a8c4b325ad8697663f4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b5:44:08:33:d2:26:cb:87:89:35:ce:f5:64:
dd:48:1a:6b:a0:ad:1e:3e:dc:6c:b4:ff:e3:fd:f8:
8d:2f:91:9f:dc:08:1d:b6:fd:c6:ee:d8:04:99:d7:
87:80:a9:8f:82:b4:65:e0:37:da:6b:3e:3f:25:4e:
67:3b:49:b4:95:50:df:ef:c3:8e:0d:58:0d:32:35:
38:ca:b3:e8:b1:22:08:68:bb:46:da:af:ab:3b:ed:
f5:88:f8:e8:12:3e:fd:4c:47:ba:78:2f:a1:a3:5e:
39:73:ee:0c:80:52:d3:0c:83:32:49:87:4c:e3:09:
d5:ff:90:8e:6c:b6:74:a8:9d:0c:bf:44:58:1f:b0:
70:98:d5:dd:45:d0:d1:4d:c0:e9:ca:cf:e2:9e:30:
99:30:1c:e4:2d:b3:fe:47:90:3f:c0:76:d1:a8:ac:
e2:88:71:45:ec:7b:47:dd:c5:14:b7:23:bf:01:86:
3e:1e:0c:95:b8:c1:a7:91:19:5f:de:ed:95:a8:5e:
f9:ee:ad:f5:90:07:12:43:bb:c4:6e:63:94:ba:e0:
cd:61:7a:ce:b6:cf:47:ed:d7:38:80:27:de:d6:28:
64:f6:d3:f4:98:4d:0c:68:cb:57:5b:39:c7:49:41:
9b:2c:11:09:6e:20:7e:7f:2e:a8:e7:d6:69:da:d4:
c5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E7:8A:D4:79:DB:A7:9C:01:2A:8C:4B:32:5A:D8:69:76:63:F4:BC
X509v3 Authority Key Identifier:
keyid:2C:37:B4:BE:C9:7D:60:8A:BE:23:BC:57:BA:39:82:46:CC:C5:77:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:6e:77:88:fc:bf:d9:ef:52:46:05:87:2c:0b:ba:6f:ce:d8:
0c:ef:fb:06:02:62:2c:fa:61:ef:a9:fb:bf:f2:25:2c:1e:bb:
2d:3e:d8:28:49:33:ea:4d:e1:ce:30:47:18:56:b8:f6:f1:78:
98:a6:0b:56:e4:c7:b6:8b:0f:29:2d:d1:9a:11:2a:b9:bb:51:
d0:2a:e2:34:e0:18:4c:f0:f4:41:83:bb:00:1f:d8:f1:86:69:
b4:8b:85:82:7e:2a:65:9a:ba:85:b7:36:e0:e8:af:08:13:c8:
c7:a2:ac:8f:4b:88:11:6d:3f:ba:be:24:57:d1:3f:8c:24:cd:
50:4c:76:30:4a:8a:da:4d:0d:bf:10:8f:36:88:8a:c9:5a:4f:
04:71:b0:73:e8:d0:5e:35:5c:c8:b2:b2:e4:54:51:fa:e0:f7:
c4:52:77:3e:35:09:9a:b8:f2:f3:4e:89:84:bd:19:26:fe:e1:
51:e6:45:76:ac:e1:4e:d6:09:a5:dd:89:ef:93:f2:a4:6c:c2:
63:c7:42:22:8b:b8:2d:c8:9c:5e:cc:0a:34:8c:93:3f:7d:17:
62:60:1f:b5:63:4c:3b:19:77:ea:fe:76:d3:54:2e:23:bc:ea:
c4:31:d6:60:08:98:59:f1:0f:8e:30:b7:d0:75:0b:af:3c:37:
9c:ae:c3:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWNOiArjfu7FJmH4T8cftMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMzdiNGJlYzk3ZDYwOGFiZTIzYmM1N2JhMzk4MjQ2Y2Nj
NTc3NjAwHhcNMjYwMjA5MTcwMDIwWhcNMjYwMjEwMTcwMDIwWjAzMTEwLwYDVQQD
EygxMmU3OGFkNDc5ZGJhNzljMDEyYThjNGIzMjVhZDg2OTc2NjNmNGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrVECDPSJsuHiTXO9WTdSBproK0e
PtxstP/j/fiNL5Gf3Agdtv3G7tgEmdeHgKmPgrRl4Dfaaz4/JU5nO0m0lVDf78OO
DVgNMjU4yrPosSIIaLtG2q+rO+31iPjoEj79TEe6eC+ho145c+4MgFLTDIMySYdM
4wnV/5CObLZ0qJ0Mv0RYH7BwmNXdRdDRTcDpys/injCZMBzkLbP+R5A/wHbRqKzi
iHFF7HtH3cUUtyO/AYY+HgyVuMGnkRlf3u2VqF757q31kAcSQ7vEbmOUuuDNYXrO
ts9H7dc4gCfe1ihk9tP0mE0MaMtXWznHSUGbLBEJbiB+fy6o59Zp2tTFrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLnitR526ecASqMSzJa2Gl2Y/S8MB8GA1UdIwQY
MBaAFCw3tL7JfWCKviO8V7o5gkbMxXdgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTERlMHZzbDlZSXEtSTd4WHVqbUNSc3pGZDJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9iMTI2MDQtYjQ4MS00MTZkLWIwODgt
MjEwNzY3YmQwYmEyLzEvTERlMHZzbDlZSXEtSTd4WHVqbUNSc3pGZDJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9iMTI2MDQtYjQ4MS00MTZkLWIwODgtMjEwNzY3YmQwYmEy
LzEvTERlMHZzbDlZSXEtSTd4WHVqbUNSc3pGZDJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAom53iPy/
2e9SRgWHLAu6b87YDO/7BgJiLPph76n7v/IlLB67LT7YKEkz6k3hzjBHGFa49vF4
mKYLVuTHtosPKS3RmhEqubtR0CriNOAYTPD0QYO7AB/Y8YZptIuFgn4qZZq6hbc2
4OivCBPIx6Ksj0uIEW0/ur4kV9E/jCTNUEx2MEqK2k0NvxCPNoiKyVpPBHGwc+jQ
XjVcyLKy5FRR+uD3xFJ3PjUJmrjy806JhL0ZJv7hUeZFdqzhTtYJpd2J75PypGzC
Y8dCIou4LcicXswKNIyTP30XYmAftWNMOxl36v5201QuI7zqxDHWYAiYWfEPjjC3
0HULrzw3nK7DmQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:43 2026 by rpki-client