This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
File: LnKImCrdg2QvgaPeuo-FbxTgmQo.mft (raw, json)
Hash identifier: kBQGJ/+ENBQ3pL60e/Abye7yzHH5aGmQOlqVAxMYTG8=
Subject key identifier: 6F:03:DC:34:3F:38:06:FF:C7:9E:F4:67:F1:68:96:95:E0:F5:2F:C2
Authority key identifier: 2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
Certificate issuer: /CN=2e7288982add83642f81a3deba8f856f14e0990a
Certificate serial: 019C44DA15E19B070E6C8A456F612A12FFBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
Manifest number: 13E2
Signing time: Tue 10 Feb 2026 00:01:08 +0000
Manifest this update: Tue 10 Feb 2026 00:01:08 +0000
Manifest next update: Wed 11 Feb 2026 00:01:08 +0000
Files and hashes: 1: LnKImCrdg2QvgaPeuo-FbxTgmQo.crl (hash: szkiQAFUZAifs3hJ7SYszzNa9N1cJtry0wk8oVJorTI=)
2: PdB7yHgtRY5AbRPzGQ7Kal7stk0.roa (hash: ZfhLG4tdAsP3dDzk6eFVvwC/Pe3dDXcwaTLLVzg2Rko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:da:15:e1:9b:07:0e:6c:8a:45:6f:61:2a:12:ff:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7288982add83642f81a3deba8f856f14e0990a
Validity
Not Before: Feb 10 00:01:08 2026 GMT
Not After : Feb 11 00:01:08 2026 GMT
Subject: CN=6f03dc343f3806ffc79ef467f1689695e0f52fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dd:68:16:56:ca:5a:8c:f5:10:07:3a:d8:2e:
91:3e:60:9a:f8:88:cc:93:34:ac:8a:34:14:6b:87:
f7:f4:d2:ab:a7:2f:cf:a8:fb:82:d0:33:a1:b5:cc:
0d:20:41:76:b5:e1:92:26:d0:46:10:58:d5:09:93:
70:a1:1f:f5:fc:3d:71:44:a9:49:cf:ff:f4:91:50:
52:67:b0:1a:2c:1e:89:ac:12:b2:95:ef:86:1d:b5:
05:b9:3d:48:fc:33:d7:c4:21:bb:32:29:e3:6d:29:
53:fd:1c:c9:ad:53:a8:cf:90:10:17:45:37:72:4f:
3c:e7:19:81:93:a4:86:a3:92:c0:b6:de:a8:8c:9d:
c6:f1:59:8a:3e:a2:4d:6b:55:cd:ca:b0:68:0b:de:
f8:b4:47:83:41:d0:15:96:69:e6:e2:9c:46:df:16:
84:48:70:6b:9e:10:d4:e8:4d:04:ed:b6:e7:54:1f:
ab:8c:3a:6e:21:5c:86:55:84:ab:a5:f9:91:aa:cc:
cc:f8:1c:ce:a2:80:e0:76:19:d0:ac:fb:36:10:d4:
92:37:ed:8b:ca:58:6b:2d:99:c3:20:81:92:6e:de:
a1:c6:28:9e:3f:2a:d5:15:e5:9c:52:da:bc:93:23:
99:16:56:8c:32:4f:18:78:80:f2:1e:95:d3:d3:e1:
cc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:03:DC:34:3F:38:06:FF:C7:9E:F4:67:F1:68:96:95:E0:F5:2F:C2
X509v3 Authority Key Identifier:
keyid:2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a0:56:2d:ff:b4:08:5c:4e:30:19:be:f9:d9:f8:8a:e7:5b:
01:63:01:a1:96:59:30:dd:ee:18:b6:42:a1:e3:fd:b6:a8:bd:
fb:ea:78:2f:1e:dc:b1:a1:b6:40:a9:65:4c:d5:7e:e3:f3:67:
ec:a6:68:86:68:f9:53:62:93:db:7e:d2:69:aa:bd:8d:7a:7f:
26:9f:b2:75:b4:c0:02:89:40:75:7e:ad:cb:ca:59:e3:5a:0c:
90:71:d5:c2:10:90:1c:c0:82:36:30:48:92:89:ae:9b:12:4a:
d7:a9:69:6b:0c:1d:2f:b2:d8:86:1c:b7:83:ff:a4:38:fd:f3:
8e:6f:14:58:b8:a0:43:dd:0b:96:52:10:5c:ba:5e:33:57:46:
46:47:22:5f:9a:2a:00:2f:a1:10:e7:c0:3f:ed:98:a7:79:82:
c9:d2:cc:f3:14:7c:eb:95:73:18:4c:29:a7:24:ce:dc:d2:aa:
3b:9b:58:02:ba:4b:5b:2b:31:a1:64:7c:07:7d:f5:9f:77:f0:
89:16:9c:07:5c:d5:7d:c0:ae:a6:7a:90:ff:4f:0f:50:4a:4c:
70:9c:4e:11:18:81:0d:ed:96:42:34:90:a8:08:26:00:3f:12:
3a:95:23:7a:35:40:47:a3:96:b4:cc:55:7e:ce:9e:ec:5d:29:
30:fc:6a:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxE2hXhmwcObIpFb2EqEv++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNzI4ODk4MmFkZDgzNjQyZjgxYTNkZWJhOGY4NTZmMTRl
MDk5MGEwHhcNMjYwMjEwMDAwMTA4WhcNMjYwMjExMDAwMTA4WjAzMTEwLwYDVQQD
Eyg2ZjAzZGMzNDNmMzgwNmZmYzc5ZWY0NjdmMTY4OTY5NWUwZjUyZmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN1oFlbKWoz1EAc62C6RPmCa+IjM
kzSsijQUa4f39NKrpy/PqPuC0DOhtcwNIEF2teGSJtBGEFjVCZNwoR/1/D1xRKlJ
z//0kVBSZ7AaLB6JrBKyle+GHbUFuT1I/DPXxCG7MinjbSlT/RzJrVOoz5AQF0U3
ck885xmBk6SGo5LAtt6ojJ3G8VmKPqJNa1XNyrBoC974tEeDQdAVlmnm4pxG3xaE
SHBrnhDU6E0E7bbnVB+rjDpuIVyGVYSrpfmRqszM+BzOooDgdhnQrPs2ENSSN+2L
ylhrLZnDIIGSbt6hxiiePyrVFeWcUtq8kyOZFlaMMk8YeIDyHpXT0+HMiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8D3DQ/OAb/x570Z/FolpXg9S/CMB8GA1UdIwQY
MBaAFC5yiJgq3YNkL4Gj3rqPhW8U4JkKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kNWM0NWEtODQ0OC00N2I4LWI1Nzct
YWY5ZDY5NWU5NDBmLzEvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kNWM0NWEtODQ0OC00N2I4LWI1NzctYWY5ZDY5NWU5NDBm
LzEvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKBWLf+0
CFxOMBm++dn4iudbAWMBoZZZMN3uGLZCoeP9tqi9++p4Lx7csaG2QKllTNV+4/Nn
7KZohmj5U2KT237Saaq9jXp/Jp+ydbTAAolAdX6ty8pZ41oMkHHVwhCQHMCCNjBI
komumxJK16lpawwdL7LYhhy3g/+kOP3zjm8UWLigQ90LllIQXLpeM1dGRkciX5oq
AC+hEOfAP+2Yp3mCydLM8xR865VzGEwppyTO3NKqO5tYArpLWysxoWR8B331n3fw
iRacB1zVfcCupnqQ/08PUEpMcJxOERiBDe2WQjSQqAgmAD8SOpUjejVAR6OWtMxV
fs6e7F0pMPxqEA==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:34:10 2026 by rpki-client