This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
File: ljmhp94G13qyrjOH3Kaaf-x2bEM.mft (raw, json)
Hash identifier: 7qN7zmKfhxo4lYrMxu73g7SzyDwbEDJZlIaXv7X64pY=
Subject key identifier: BC:37:1E:94:30:B9:0C:4F:41:9A:3C:D6:E2:B9:E7:9D:67:D9:3D:F7
Authority key identifier: 96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
Certificate issuer: /CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Certificate serial: 019C416A6B4A9F2A3881BAC979519E4F0070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
Manifest number: 15D0
Signing time: Mon 09 Feb 2026 08:00:19 +0000
Manifest this update: Mon 09 Feb 2026 08:00:19 +0000
Manifest next update: Tue 10 Feb 2026 08:00:19 +0000
Files and hashes: 1: 9xn8Rjf1ITh6yy2pKwyE2fhFPtc.roa (hash: nHRnSyHex57iI7eioPI+DbGMbCh0HerKt1S8Mdr+02E=)
2: ljmhp94G13qyrjOH3Kaaf-x2bEM.crl (hash: BP+rMFG5ImKd8U3+9H2GlcflzQ9IWPmuRnJ1mwAFDhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:6a:6b:4a:9f:2a:38:81:ba:c9:79:51:9e:4f:00:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Validity
Not Before: Feb 9 08:00:19 2026 GMT
Not After : Feb 10 08:00:19 2026 GMT
Subject: CN=bc371e9430b90c4f419a3cd6e2b9e79d67d93df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:10:a0:2e:bb:ea:e4:e2:46:d6:a0:18:29:a5:
96:bf:b9:d6:9d:f7:27:96:70:20:d8:fc:e4:97:60:
5c:20:29:3d:90:ac:d4:fe:cf:0e:52:c3:82:a1:86:
e6:65:76:b5:d6:02:5e:d0:96:22:5a:1a:07:a1:d7:
c2:f7:e9:f1:df:9d:bb:9c:84:17:16:7e:c2:e6:7e:
97:68:30:91:01:0f:c5:81:b6:f8:67:ae:67:f5:2c:
a6:7a:e7:1b:08:75:43:64:73:eb:5f:5b:a7:d8:80:
ed:65:39:e1:36:74:5e:3a:70:ae:6a:a8:38:8d:96:
c9:3c:62:cc:6e:af:a3:f2:33:9b:d5:6d:6e:e8:29:
e8:73:dd:ad:fa:2d:7c:bb:b0:84:c8:d7:c1:ee:bb:
27:d2:46:a5:b6:62:38:1e:26:6d:09:be:29:ed:c1:
fd:c6:0a:c3:1a:76:e8:08:58:eb:71:db:46:0e:f7:
7c:f8:75:b8:19:05:9b:1c:c6:32:27:03:e7:19:38:
e0:a6:30:53:82:15:a8:2e:c2:45:43:6e:29:1e:8a:
cc:41:a2:85:4e:6a:a3:6e:cd:b6:3f:61:cc:b0:92:
1a:8e:2a:1f:b2:c2:3b:7a:6d:e9:45:22:8c:9e:cc:
5c:cb:59:f5:da:77:a6:7e:c7:38:72:54:9a:43:e8:
3d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:37:1E:94:30:B9:0C:4F:41:9A:3C:D6:E2:B9:E7:9D:67:D9:3D:F7
X509v3 Authority Key Identifier:
keyid:96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:0e:c5:69:e7:a8:25:80:c4:d9:71:3b:df:b9:17:c5:4d:24:
e4:86:b5:1f:87:65:e5:4d:25:30:d0:ed:7c:67:7c:d5:19:fc:
ab:1c:3b:86:e5:ec:e6:66:4f:53:3b:1c:e5:b0:c6:dc:64:cf:
cf:14:21:0d:6c:54:cf:d8:06:fa:a9:13:d7:40:54:2b:27:ee:
db:a7:fd:d1:2a:34:54:80:45:ae:5d:1d:f0:e3:41:87:bb:8c:
97:bd:1f:a9:10:8f:53:e4:29:99:78:20:31:cf:3e:b8:1d:2e:
3c:6e:2c:7d:a1:99:a0:3b:fa:9f:e0:81:17:af:68:7b:81:fd:
2d:ec:3b:bb:a0:d6:06:46:1d:0b:58:57:b4:17:13:33:53:06:
a9:45:33:23:7d:b7:21:49:27:1d:c7:38:e1:c9:b0:eb:85:34:
fd:b7:a6:92:55:2d:8d:fa:0f:75:e3:c2:d0:09:f2:71:e1:d0:
3d:a1:23:de:ac:36:27:22:d4:f5:84:71:3e:b6:e7:3c:6a:1a:
be:25:76:e2:07:ea:2d:bc:98:aa:ce:12:16:e1:ad:cd:ff:c0:
bc:9b:7b:a9:1e:ac:3c:dd:b3:be:ea:26:95:2e:41:56:a4:7a:
7c:ef:ef:2f:b7:b7:66:9c:9e:63:5d:29:aa:a2:32:68:6a:64:
a9:1b:9f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:36 2026 by rpki-client