This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
File: LnOtRfij6-Znq7GWoonWcZvruC0.mft (raw, json)
Hash identifier: 5L+26v6H8OAeWHFhLVKpJU1OzqTZp47QueHpIYCFzfI=
Subject key identifier: 23:45:AD:7D:DD:2A:F1:0D:38:B3:AB:6F:66:62:92:BF:F7:F4:09:ED
Authority key identifier: 2E:73:AD:45:F8:A3:EB:E6:67:AB:B1:96:A2:89:D6:71:9B:EB:B8:2D
Certificate issuer: /CN=2e73ad45f8a3ebe667abb196a289d6719bebb82d
Certificate serial: 019C4133979E70AADDD6C16EC8B283FE6341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 07:00:25 +0000
Manifest this update: Mon 09 Feb 2026 07:00:25 +0000
Manifest next update: Tue 10 Feb 2026 07:00:25 +0000
Files and hashes: 1: LnOtRfij6-Znq7GWoonWcZvruC0.crl (hash: N1+o+O+j0gM9oPoyruN2xEkcKSELLFwhGUp+Fyd2BDA=)
2: Nl65Np2NbEnihFgj_3m0_3bzCWY.roa (hash: 7UhBMBB84iPxUUXErAiMT9ZI08Sl9FFg4+ED0ZMQtcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:33:97:9e:70:aa:dd:d6:c1:6e:c8:b2:83:fe:63:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e73ad45f8a3ebe667abb196a289d6719bebb82d
Validity
Not Before: Feb 9 07:00:25 2026 GMT
Not After : Feb 10 07:00:25 2026 GMT
Subject: CN=2345ad7ddd2af10d38b3ab6f666292bff7f409ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f2:f2:c5:f3:a4:1b:1a:11:56:61:b5:13:f8:
e5:62:bf:e6:51:37:0b:d2:e8:dd:4b:fa:0f:71:bb:
2d:01:8d:a8:74:30:89:f2:81:63:46:27:ea:0c:9a:
b9:a4:23:c7:4c:b4:2c:d2:b5:d0:06:25:1c:35:99:
b9:8b:fe:e6:d4:a5:43:ba:5a:c8:64:4b:ef:77:e2:
f0:16:5c:35:39:1a:2a:93:f0:fb:a0:0f:92:ab:c6:
cc:6a:37:36:d8:91:36:92:16:98:e6:c1:84:9e:07:
28:e3:ed:fd:37:2b:e5:99:83:ae:0d:69:93:31:8b:
26:5f:5f:b4:34:af:b8:46:58:21:f4:a1:a2:4a:13:
b4:49:6e:ae:f0:26:16:0b:a0:87:31:b8:be:94:f1:
49:bd:ee:6b:a0:52:31:f6:84:9d:18:07:b4:12:ea:
b4:9c:83:6e:e4:6c:15:7c:c9:ee:ed:05:bb:a7:f5:
91:70:9b:9e:9f:51:e5:6d:37:ba:c3:26:2e:a4:5a:
ee:de:8b:86:0a:fb:71:1b:bc:2e:d4:f0:af:47:77:
a2:d4:24:de:46:c0:12:77:5d:f9:fa:b6:3e:b7:80:
9b:02:b5:f9:bf:7c:8c:1e:7e:37:9a:45:5a:19:07:
22:55:02:1a:56:0f:94:16:80:78:5c:46:0a:d4:e6:
79:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:45:AD:7D:DD:2A:F1:0D:38:B3:AB:6F:66:62:92:BF:F7:F4:09:ED
X509v3 Authority Key Identifier:
keyid:2E:73:AD:45:F8:A3:EB:E6:67:AB:B1:96:A2:89:D6:71:9B:EB:B8:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:25:1b:e3:57:e2:62:b6:a0:43:66:57:ed:64:57:d4:4b:7a:
26:28:50:4e:4d:83:d1:7b:a1:96:69:b2:79:92:ca:a1:47:bb:
20:41:b9:49:9f:8b:61:e7:28:9d:fc:97:9d:f0:d8:69:b5:6d:
4d:01:65:37:be:0b:49:37:36:42:07:95:6e:a5:79:21:28:3f:
d0:88:0b:1d:a1:6d:bf:0a:d1:2c:ba:b5:ca:a0:ea:e6:b4:48:
f9:87:1f:ce:43:09:8d:04:86:ff:05:e6:ae:39:2c:04:38:b9:
c2:17:c6:4a:ff:70:6a:2d:b7:11:72:9d:c9:fe:ec:39:ee:43:
8e:83:ef:ce:e7:55:2f:97:b3:24:53:db:c3:0c:68:61:28:a4:
46:3a:3c:d5:52:eb:53:b4:ae:dc:81:ec:ba:48:f1:7c:3e:47:
5e:69:bc:37:c1:cc:26:b6:f6:7e:78:20:31:86:da:f2:e4:a8:
3b:fe:d4:39:d5:2d:f0:eb:48:2c:38:c0:39:a8:57:14:f9:58:
86:95:24:0d:d2:ef:dd:16:9c:83:58:c0:b5:50:f6:e7:c3:26:
22:81:ff:00:29:71:1a:76:b5:c7:cf:11:f3:49:a7:46:37:cc:
bc:d5:eb:46:da:23:e6:d9:48:c2:41:38:8a:22:21:6c:aa:11:
91:09:5f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:37 2026 by rpki-client