This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
File: L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft (raw, json)
Hash identifier: SRINfHWj72l+TqyJUWL6qPwReY7tjS/vpz2I7mzt4aM=
Subject key identifier: 8A:0D:59:A4:0F:AC:7F:03:B2:CD:7C:39:EA:2B:4B:89:44:D3:05:78
Authority key identifier: 2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
Certificate issuer: /CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Certificate serial: 019C1D5EBF25DF2300CB7F7B35740BBF7DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
Manifest number: 07CB
Signing time: Mon 02 Feb 2026 08:01:14 +0000
Manifest this update: Mon 02 Feb 2026 08:01:14 +0000
Manifest next update: Tue 03 Feb 2026 08:01:14 +0000
Files and hashes: 1: 6UAwXFwNdHuV1iQYxvSZ8tT58fc.roa (hash: dAiX0DScSQAyOd84M+cVyRLFZIlldEdcCXOLorNDi0g=)
2: L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl (hash: OwtOWVshD7dQQxhM703iJvTHOCqal4sJVx239lAm4mA=)
3: mmEWbwMVtZjQGxBQLSEBMLV6FOM.roa (hash: mLo+dfNoXAcPZy5zgB6iNGDzY/FzsmVzavePETyu5qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1d:5e:bf:25:df:23:00:cb:7f:7b:35:74:0b:bf:7d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Validity
Not Before: Feb 2 08:01:14 2026 GMT
Not After : Feb 3 08:01:14 2026 GMT
Subject: CN=8a0d59a40fac7f03b2cd7c39ea2b4b8944d30578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:60:c3:60:fc:c4:17:2b:b7:0b:5f:0b:33:f8:
70:2f:c9:7d:a4:ed:c3:47:cd:a3:2b:40:e4:17:93:
7e:42:a0:e1:41:36:ff:0e:b1:90:25:48:92:c7:3a:
7d:39:43:62:fe:b8:4d:55:f8:b0:65:bb:94:99:a1:
ae:dd:a2:42:af:b8:6a:2d:e6:06:51:da:af:7a:b3:
0f:52:f3:91:48:c9:62:65:6f:c7:4b:1d:99:2b:03:
b9:ff:f1:34:56:b6:57:59:ca:be:bc:55:86:71:ae:
50:8f:e5:26:a3:b4:8f:4d:26:87:6e:bf:68:3d:66:
d1:b7:bc:a5:ef:7e:f3:f0:f3:9c:23:e6:52:e7:b6:
db:fb:77:0a:a5:79:8a:cd:e1:7c:a9:e2:31:8c:cc:
b2:76:53:a9:c5:57:42:3d:2d:c7:bd:1f:fa:87:a1:
84:1d:23:0d:2f:d6:49:5f:cd:53:90:73:31:1e:55:
7e:fe:74:fb:8a:27:60:eb:95:2b:af:f1:f7:e2:6b:
98:b3:f2:bb:38:a9:a4:35:5c:ac:e8:66:b7:52:13:
70:84:9e:c3:fc:2c:03:b9:ce:81:cb:e0:a3:84:23:
0f:4d:21:fd:5c:16:d8:45:f7:76:ed:0a:5e:9d:17:
27:f4:36:84:1c:ad:17:0d:41:6f:4b:ad:a8:b3:4c:
43:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0D:59:A4:0F:AC:7F:03:B2:CD:7C:39:EA:2B:4B:89:44:D3:05:78
X509v3 Authority Key Identifier:
keyid:2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0a:b0:cf:6e:48:9f:71:00:72:4c:08:f5:04:04:b8:cd:b8:
81:c3:f5:27:0e:15:a8:57:e3:29:9b:49:e9:34:34:b7:70:9e:
82:4e:07:79:47:92:79:da:07:8e:8d:68:c9:63:37:57:55:a3:
12:dc:81:36:96:49:ee:a2:26:e7:85:e1:02:65:c9:43:41:c5:
39:a2:bd:a0:05:da:a7:8c:18:ed:4d:2c:ea:0e:de:46:80:df:
67:44:c0:c8:58:9e:ec:6c:b6:fe:34:c3:91:34:c7:34:0e:0d:
1d:5d:08:cd:f4:65:d5:62:ff:29:ac:0f:ed:ba:de:de:d1:fa:
74:db:c4:b1:5e:61:18:0f:12:6d:b8:5d:31:3a:f2:2c:eb:70:
c1:07:82:86:a6:12:e1:43:72:da:42:13:01:75:df:b3:1d:54:
c6:ab:29:99:22:c7:71:f0:f2:d9:08:49:41:50:06:4e:70:7d:
70:22:49:72:24:80:38:d8:ff:32:8c:e3:eb:22:74:84:77:b5:
8e:49:d1:27:8e:33:8d:50:f5:43:98:54:f8:c8:6f:d5:3b:f0:
70:03:f0:ba:91:e9:2e:08:21:ff:f7:49:fa:b8:84:ce:15:86:
b4:29:57:95:6c:33:23:96:56:0e:37:62:18:d8:42:8d:81:d5:
e9:98:fc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 15:48:35 2026 by rpki-client