This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
File: LXR59FZDorguENq_c-_vdwOx4tI.mft (raw, json)
Hash identifier: 4NCxaxDe72Q+iNXejOC2hwkT6iF5oe7b6uKsO8qKbtQ=
Subject key identifier: CB:3D:AB:50:40:6E:FC:17:83:CA:4D:E8:05:99:C9:52:1E:55:75:91
Authority key identifier: 2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2
Certificate issuer: /CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2
Certificate serial: 019C427DE6EEAFBB5F5646B25BAE107B4B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
Manifest number: 180F
Signing time: Mon 09 Feb 2026 13:01:13 +0000
Manifest this update: Mon 09 Feb 2026 13:01:13 +0000
Manifest next update: Tue 10 Feb 2026 13:01:13 +0000
Files and hashes: 1: 7GKSUsC2-EZN7XkuEfWum4yKSTg.roa (hash: 0/D0ft4/Akr9FC1mkgoFrsHQKcBzONWj8zopSzgBrVU=)
2: LXR59FZDorguENq_c-_vdwOx4tI.crl (hash: EeZ2aBHbRT3y0DHGeHFSy9spPPK1uz7LqyRgeDR+XnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:e6:ee:af:bb:5f:56:46:b2:5b:ae:10:7b:4b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2
Validity
Not Before: Feb 9 13:01:13 2026 GMT
Not After : Feb 10 13:01:13 2026 GMT
Subject: CN=cb3dab50406efc1783ca4de80599c9521e557591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e3:9e:e0:2a:5a:4b:fe:a8:cd:02:6e:35:bf:
41:d2:f0:31:99:e2:dc:31:cb:b0:54:a2:fa:8e:30:
64:02:89:6b:1a:ce:3f:65:6e:b5:cc:d5:16:d9:57:
0e:7a:da:69:03:36:b8:d8:6f:5e:2e:d3:f3:37:33:
64:e3:a9:fe:de:85:9f:4e:68:2f:f3:88:1f:4f:e2:
db:ec:05:a5:23:93:dc:07:18:33:34:8c:48:15:e7:
51:a5:d8:49:4a:b5:00:d2:86:06:d5:3c:e3:34:cd:
03:ea:ac:53:b0:32:68:a0:d1:da:42:37:89:3f:bb:
c6:58:93:12:e2:06:f3:98:40:5e:9c:f2:73:5c:44:
82:ca:f2:78:2a:1a:32:f8:f9:c4:ce:3c:67:12:25:
d6:f6:ee:bd:96:c9:d0:f7:14:ec:5e:47:74:5c:1b:
23:4d:42:13:95:42:67:02:0e:cc:b9:26:0a:80:29:
3b:53:8b:76:9d:25:17:c2:87:69:ff:84:2c:fc:11:
cf:01:16:c4:d5:06:cf:19:6e:bb:64:04:65:c2:32:
02:bf:88:b2:e4:cd:e6:6d:b6:da:2b:ea:c9:49:f6:
d6:40:bd:c0:55:dd:4f:99:ca:13:89:0b:b6:93:60:
8f:c9:15:a3:6e:3b:4c:55:14:11:7b:45:58:9e:2a:
e5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3D:AB:50:40:6E:FC:17:83:CA:4D:E8:05:99:C9:52:1E:55:75:91
X509v3 Authority Key Identifier:
keyid:2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:32:6c:7b:0c:69:e7:8d:53:1c:3c:2a:da:00:c5:69:eb:01:
06:c6:93:75:4e:70:d9:0e:5e:c8:c0:dc:59:23:ba:99:06:56:
b0:dd:dc:5b:d8:7c:6d:66:5c:39:c4:4c:e0:fb:55:06:2e:29:
61:66:99:f7:a9:c3:3c:ff:d2:1d:29:04:02:c4:94:9a:9a:8b:
f5:13:55:57:71:c3:61:a7:c0:3c:6b:d6:f3:d5:9a:3f:9b:bb:
62:54:e5:1e:e2:80:50:3e:8f:07:bd:f6:be:57:84:b7:13:70:
ba:fe:70:cf:89:27:8a:11:c0:69:35:c7:35:dd:23:63:f9:7f:
fb:19:a6:94:b8:a9:84:39:2a:e9:ab:46:33:69:94:a0:86:2a:
5e:02:51:00:eb:0f:1f:c3:61:5f:e1:ea:3a:30:4d:b5:25:5f:
f0:83:93:05:0c:25:6b:e9:b4:bc:94:52:d6:09:c6:32:dd:54:
25:cd:43:fe:92:aa:ab:f2:4e:1b:72:00:ed:11:69:50:9e:90:
43:4e:68:c1:13:5b:f0:05:b6:8c:7d:9d:60:ad:d9:3c:e8:90:
25:83:19:61:90:7f:af:51:02:04:10:39:9d:30:78:2a:74:6b:
aa:b2:e5:2f:9a:a0:7d:cc:d8:ce:97:54:7e:35:fa:7a:5a:0d:
b7:f4:27:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:49 2026 by rpki-client