This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
File: LQSlVAgkJpvlwR8gEouGQUzVWUU.mft (raw, json)
Hash identifier: 4zloBrV/I1amJUTXz+DoO9W5S+b8G80LHHP4VTQJir8=
Subject key identifier: 69:61:24:9A:62:C9:F5:92:B2:D6:B7:CF:99:C5:71:61:0F:40:17:1D
Authority key identifier: 2D:04:A5:54:08:24:26:9B:E5:C1:1F:20:12:8B:86:41:4C:D5:59:45
Certificate issuer: /CN=2d04a5540824269be5c11f20128b86414cd55945
Certificate serial: 019C42B43B6D7F845C6FDB340C49308A3A4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
Manifest number: 0360
Signing time: Mon 09 Feb 2026 14:00:33 +0000
Manifest this update: Mon 09 Feb 2026 14:00:33 +0000
Manifest next update: Tue 10 Feb 2026 14:00:33 +0000
Files and hashes: 1: LQSlVAgkJpvlwR8gEouGQUzVWUU.crl (hash: xfbXq9NFn4/W4gO99H9dK5TmuELTdswWYwVmG3sZo6s=)
2: mkoR_2Qj1P7ucMa0xTA2WyuYFT0.roa (hash: N937OZCdBilb1OADuX8QhLksdpQ9AoFfCxgf7tzf5mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:3b:6d:7f:84:5c:6f:db:34:0c:49:30:8a:3a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d04a5540824269be5c11f20128b86414cd55945
Validity
Not Before: Feb 9 14:00:33 2026 GMT
Not After : Feb 10 14:00:33 2026 GMT
Subject: CN=6961249a62c9f592b2d6b7cf99c571610f40171d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:13:36:04:5b:4a:2c:dd:44:aa:80:bb:fb:c2:
8e:57:50:9a:0c:72:c6:b8:42:7f:20:9e:a6:7c:e4:
da:ff:b4:b6:9a:27:81:34:7b:82:86:ad:98:c4:c4:
5c:4c:3c:a3:a8:ad:48:b2:29:cf:99:79:44:12:ad:
23:97:41:fe:57:36:6b:9e:37:8e:fd:dd:7d:6f:fa:
36:a9:44:61:d2:ad:c3:53:e1:7b:1e:dd:3b:ac:1d:
fe:c9:b3:21:48:1d:40:ec:a2:37:da:a9:5b:31:02:
d9:df:9a:9e:33:cc:14:81:70:44:5c:fa:7a:cd:09:
28:a7:a6:97:4d:d3:bf:d5:80:9d:26:19:32:be:a5:
c6:e4:85:ff:e0:0b:e4:03:18:3c:73:6c:b1:1a:dc:
98:32:bd:c5:6a:7b:0f:f8:35:1b:a5:5f:d3:bf:12:
24:c7:46:f9:81:bb:94:bd:2d:ad:7c:96:dd:0b:c3:
f0:1f:55:2c:4e:8e:3b:4a:5f:25:c9:62:e6:26:41:
ee:dc:83:1e:c0:11:a0:53:1d:16:5a:fc:b2:9b:26:
0c:87:b0:b2:70:e3:c9:c5:41:4b:2d:b9:80:15:eb:
b1:2e:85:5e:b5:83:78:87:af:31:74:bf:b6:46:ed:
4a:57:f1:d4:c7:f6:cc:82:0d:ee:02:6a:9b:1d:79:
f1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:61:24:9A:62:C9:F5:92:B2:D6:B7:CF:99:C5:71:61:0F:40:17:1D
X509v3 Authority Key Identifier:
keyid:2D:04:A5:54:08:24:26:9B:E5:C1:1F:20:12:8B:86:41:4C:D5:59:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:90:b2:a9:18:16:a6:46:50:a7:49:b1:bb:6b:a1:07:57:f7:
2f:db:5e:6b:29:72:df:49:12:c1:06:be:e1:98:2f:ac:0f:4e:
2a:17:ce:d2:45:b6:28:51:06:9b:a3:99:4c:3b:d7:c8:d6:ac:
6b:3b:50:70:86:e0:94:e6:7e:d6:a8:0a:4e:d8:cc:b9:15:54:
90:81:42:ed:ba:d0:15:16:c5:d8:c3:bd:a7:ec:7d:80:a5:92:
75:3d:2d:52:e8:67:cc:9e:e3:9a:e6:0a:55:63:27:7c:c5:bd:
e1:93:df:c1:71:42:19:7a:29:7b:2b:1f:eb:ed:ff:5b:0d:eb:
d1:b2:60:f6:f4:09:ee:d9:8d:93:cc:fa:be:7f:81:b2:d2:9f:
e4:e9:76:75:1f:d2:33:9e:5c:42:c1:7d:ac:da:31:be:30:ec:
3c:14:58:ca:cf:90:9d:94:be:97:4d:bb:b5:b2:ab:54:2a:39:
c1:83:81:03:4b:95:71:f2:a6:1e:c8:fc:9b:cc:81:f5:55:31:
bf:d3:27:c4:9c:3c:fe:75:62:10:0a:08:d9:64:2b:89:4e:e0:
54:8d:a4:ce:25:d8:4b:d0:55:29:07:ac:62:1d:30:aa:f5:dd:
96:cf:b7:32:6a:a0:0b:af:d5:bb:02:86:f7:72:80:07:80:60:
e3:71:75:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtDttf4Rcb9s0DEkwijpMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMDRhNTU0MDgyNDI2OWJlNWMxMWYyMDEyOGI4NjQxNGNk
NTU5NDUwHhcNMjYwMjA5MTQwMDMzWhcNMjYwMjEwMTQwMDMzWjAzMTEwLwYDVQQD
Eyg2OTYxMjQ5YTYyYzlmNTkyYjJkNmI3Y2Y5OWM1NzE2MTBmNDAxNzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxM2BFtKLN1EqoC7+8KOV1CaDHLG
uEJ/IJ6mfOTa/7S2mieBNHuChq2YxMRcTDyjqK1IsinPmXlEEq0jl0H+VzZrnjeO
/d19b/o2qURh0q3DU+F7Ht07rB3+ybMhSB1A7KI32qlbMQLZ35qeM8wUgXBEXPp6
zQkop6aXTdO/1YCdJhkyvqXG5IX/4AvkAxg8c2yxGtyYMr3FansP+DUbpV/TvxIk
x0b5gbuUvS2tfJbdC8PwH1UsTo47Sl8lyWLmJkHu3IMewBGgUx0WWvyymyYMh7Cy
cOPJxUFLLbmAFeuxLoVetYN4h68xdL+2Ru1KV/HUx/bMgg3uAmqbHXnxnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlhJJpiyfWSsta3z5nFcWEPQBcdMB8GA1UdIwQY
MBaAFC0EpVQIJCab5cEfIBKLhkFM1VlFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFFTbFZBZ2tKcHZsd1I4Z0VvdUdRVXpWV1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8wOWQ4NTQtOTk0MC00ZGQ1LWE3NDct
Y2ViMjdiZmNiOTQ3LzEvTFFTbFZBZ2tKcHZsd1I4Z0VvdUdRVXpWV1VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8wOWQ4NTQtOTk0MC00ZGQ1LWE3NDctY2ViMjdiZmNiOTQ3
LzEvTFFTbFZBZ2tKcHZsd1I4Z0VvdUdRVXpWV1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5CyqRgW
pkZQp0mxu2uhB1f3L9teayly30kSwQa+4ZgvrA9OKhfO0kW2KFEGm6OZTDvXyNas
aztQcIbglOZ+1qgKTtjMuRVUkIFC7brQFRbF2MO9p+x9gKWSdT0tUuhnzJ7jmuYK
VWMnfMW94ZPfwXFCGXopeysf6+3/Ww3r0bJg9vQJ7tmNk8z6vn+BstKf5Ol2dR/S
M55cQsF9rNoxvjDsPBRYys+QnZS+l027tbKrVCo5wYOBA0uVcfKmHsj8m8yB9VUx
v9MnxJw8/nViEAoI2WQriU7gVI2kziXYS9BVKQesYh0wqvXdls+3MmqgC6/VuwKG
93KAB4Bg43F18g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:21 2026 by rpki-client