This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.mft
File: lgxteH5rXrZCSN2aehBlsQU_dFg.mft (raw, json)
Hash identifier: dCsgzYP2kU6w5z1MxZA/wVQKm42/nNRkiOVGAA+MRic=
Subject key identifier: 4B:3E:D1:3C:EF:39:ED:AD:C5:13:63:13:9E:FF:12:23:D9:51:97:E9
Authority key identifier: 96:0C:6D:78:7E:6B:5E:B6:42:48:DD:9A:7A:10:65:B1:05:3F:74:58
Certificate issuer: /CN=960c6d787e6b5eb64248dd9a7a1065b1053f7458
Certificate serial: 019C4358F12DD9DAEBD9D9B628422D12F602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgxteH5rXrZCSN2aehBlsQU_dFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.mft
Manifest number: 0F70
Signing time: Mon 09 Feb 2026 17:00:28 +0000
Manifest this update: Mon 09 Feb 2026 17:00:28 +0000
Manifest next update: Tue 10 Feb 2026 17:00:28 +0000
Files and hashes: 1: aS1ACilZRTqrbOcoV0BzU5rsa0s.roa (hash: 9Yo0a2cgZRu9PRv1j6tfX41H+k9FzWqSbGbTCe992JA=)
2: lgxteH5rXrZCSN2aehBlsQU_dFg.crl (hash: CiYgu0HPfhf9iDg1hQMGs6NQLUFoT2VWtKx6Cl3EZ7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lgxteH5rXrZCSN2aehBlsQU_dFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:58:f1:2d:d9:da:eb:d9:d9:b6:28:42:2d:12:f6:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=960c6d787e6b5eb64248dd9a7a1065b1053f7458
Validity
Not Before: Feb 9 17:00:28 2026 GMT
Not After : Feb 10 17:00:28 2026 GMT
Subject: CN=4b3ed13cef39edadc51363139eff1223d95197e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2d:cd:90:11:39:9f:2e:b4:5f:7d:16:ff:1e:
9d:43:5b:c0:ec:b2:65:b2:a8:29:02:c4:f7:d5:56:
9a:45:90:e3:3c:22:86:fb:13:21:57:2c:4c:27:84:
fd:c9:d4:07:5a:27:4c:e4:b6:f4:61:dd:79:7f:f6:
2f:94:8d:00:d3:64:b2:73:aa:29:45:ab:01:1a:e6:
66:c1:34:58:86:16:2d:13:35:c8:4a:54:ed:91:ea:
34:dd:5b:eb:79:f0:70:b8:e1:a7:85:64:9f:b6:a0:
10:b5:0d:bf:bf:89:95:96:5a:48:32:6f:d5:ba:53:
fc:26:ce:0b:d4:81:73:71:8c:43:ea:d7:64:ca:04:
04:36:10:12:fb:56:00:d8:5d:88:61:23:6f:ca:22:
11:84:b0:2e:f4:6d:a0:4e:20:f4:59:02:84:ac:ea:
29:c9:21:d5:ea:c7:7d:e8:0c:a1:30:8a:7e:ac:de:
73:e9:d7:fb:ba:83:08:9a:9c:d3:80:82:7f:ed:a2:
fb:d7:5d:8a:93:eb:c7:98:7e:45:5d:a9:8a:15:eb:
26:ca:46:f5:03:a3:08:bf:b5:f5:e8:1c:b6:fe:81:
c4:00:b9:84:1b:b8:aa:4d:70:62:b0:20:b7:f7:19:
5a:6b:ed:ba:85:e3:83:39:7f:24:31:60:c8:34:82:
1b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3E:D1:3C:EF:39:ED:AD:C5:13:63:13:9E:FF:12:23:D9:51:97:E9
X509v3 Authority Key Identifier:
keyid:96:0C:6D:78:7E:6B:5E:B6:42:48:DD:9A:7A:10:65:B1:05:3F:74:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgxteH5rXrZCSN2aehBlsQU_dFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:99:5e:57:bb:f8:7e:29:01:ca:81:05:0e:5d:4a:0b:7c:e5:
f9:23:26:cb:ce:e0:e4:2f:0a:39:22:02:ce:80:b0:64:e1:3c:
1f:b1:1e:a1:04:7c:16:2e:9c:ff:e2:ca:d0:85:91:2e:7c:69:
4d:3a:26:9a:e6:2f:22:a8:d3:b2:9c:6e:53:6b:40:df:ee:74:
05:90:cc:00:aa:c5:d8:ed:48:c5:c2:37:da:aa:01:f5:a6:9c:
6f:12:72:18:17:2f:fa:c1:c6:bb:09:30:6b:77:b2:dc:8c:b9:
e6:f6:1b:d2:69:f8:9e:7c:d9:c9:c7:5c:a6:68:2f:dc:ce:dd:
aa:ad:45:e6:bf:9d:08:f9:b6:93:55:b1:ef:b8:1c:76:e1:52:
46:1f:11:46:e5:83:be:ee:76:b8:40:0d:d8:1a:dc:b2:38:f1:
65:d9:39:a0:ef:6e:b9:2e:ac:49:b8:18:51:30:e1:83:6e:ad:
34:9f:99:8c:f3:9a:a7:08:c2:34:62:5d:c0:d3:60:b6:0d:0a:
e3:c1:cf:bd:77:55:45:6c:3d:4a:c1:59:f5:25:57:45:fe:96:
e2:ba:e3:51:09:35:cc:d1:80:5a:8a:6f:31:69:70:d3:9b:19:
78:39:c7:1f:0e:3b:f1:ff:e3:58:63:2b:83:36:42:c2:66:1f:
07:fe:62:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:27 2026 by rpki-client