This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
File: lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft (raw, json)
Hash identifier: zGgbR875T4GkYmOmLwjnmqYrNTXX0cd0A+3msq+XxOw=
Subject key identifier: 94:96:6E:0C:D7:80:71:8E:82:0C:C8:9E:02:9E:18:14:0B:E4:75:38
Authority key identifier: 95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
Certificate issuer: /CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Certificate serial: 019C43C7343DAC4266C380F3F147F4D4103E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
Manifest number: 17A2
Signing time: Mon 09 Feb 2026 19:00:54 +0000
Manifest this update: Mon 09 Feb 2026 19:00:54 +0000
Manifest next update: Tue 10 Feb 2026 19:00:54 +0000
Files and hashes: 1: Ma4-s3p8OYdm49PN9wCv4RVM25E.roa (hash: yb+AmQCW6F3wk6Dw7rJ8p1d4IUrMtPkPRMTUiBpQr9Q=)
2: lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl (hash: GfmsVYuF8xVP+xLGaIDUKNjT7gdtUc52fR4cJyd2pxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c7:34:3d:ac:42:66:c3:80:f3:f1:47:f4:d4:10:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Validity
Not Before: Feb 9 19:00:54 2026 GMT
Not After : Feb 10 19:00:54 2026 GMT
Subject: CN=94966e0cd780718e820cc89e029e18140be47538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:65:1b:a3:54:f1:8a:4c:d9:ad:21:74:55:0f:
cd:ac:03:f9:86:80:17:87:1d:a3:85:c3:c3:3f:8d:
e0:db:e3:5d:c0:2b:b3:e4:57:95:01:ff:6e:aa:98:
2e:e3:69:71:5a:98:1c:fc:da:b3:78:65:ff:61:4b:
04:7e:ad:13:af:b1:1e:5d:df:dc:00:b5:e6:21:c0:
d8:4c:85:40:98:f4:e5:7d:14:96:e4:43:57:dc:48:
c8:d6:bd:ca:1f:80:fd:6f:0f:4a:47:1a:2f:ed:46:
27:b5:74:04:50:c4:66:ed:bc:7a:bd:39:43:d0:e7:
4f:1e:12:8e:e1:24:75:f6:42:c2:79:dd:f8:17:98:
b9:c9:8c:01:51:a3:dc:8a:59:6e:3d:38:71:79:5c:
ee:5d:3d:2a:64:72:bb:0e:2d:87:33:27:5e:3a:5d:
ca:56:75:a4:41:5c:06:e6:48:44:08:4a:ac:1d:43:
9b:ea:1b:51:ea:bf:5c:64:5e:07:23:ae:07:c4:e7:
9a:29:1c:af:df:52:21:44:e7:eb:e7:3a:03:9b:e6:
51:70:48:b6:50:50:0f:2d:4b:ec:82:bf:c9:28:f9:
40:da:12:52:5b:e4:65:df:83:9c:9e:13:8c:1e:c5:
e5:cd:66:62:96:41:8a:cb:84:c1:21:00:20:47:f4:
5b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:96:6E:0C:D7:80:71:8E:82:0C:C8:9E:02:9E:18:14:0B:E4:75:38
X509v3 Authority Key Identifier:
keyid:95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7d:10:d6:e6:2c:55:04:fc:a4:42:08:13:d7:ad:ac:eb:81:
76:ca:8a:94:71:ae:57:51:8b:9b:4b:8d:ec:5e:2e:8f:99:85:
73:26:5a:bc:7d:7f:15:b0:3e:57:4b:09:2d:5a:b5:cf:bb:a4:
d6:94:10:05:c0:af:5c:6d:87:5f:4b:52:cb:1f:00:84:b5:a9:
e8:8f:10:25:0a:50:31:fe:a3:a6:bb:96:2f:96:76:77:b9:f7:
3a:b8:4c:8d:9a:87:ba:db:38:e7:06:9b:ef:73:2d:f5:e7:44:
0e:97:bd:a3:8c:b2:e6:f2:45:2c:be:3f:56:08:38:b2:26:77:
8a:f9:1c:6a:45:02:90:b0:d3:e2:58:a8:10:ba:21:40:b3:60:
2e:44:86:2c:ec:ab:15:9b:27:29:21:c5:8e:9c:70:20:70:64:
f3:81:e4:ae:8a:14:d6:7e:ec:cf:31:0f:41:af:97:37:08:5c:
7f:a1:71:5f:22:7a:0e:8e:e3:41:a1:13:59:39:98:a1:b8:cf:
e4:c3:04:8b:de:41:ba:ce:89:ef:d2:9e:9a:a8:ab:bc:8c:64:
bb:b2:70:8e:f1:0e:2d:8c:6c:e5:d0:f5:69:d2:0b:92:89:77:
bf:44:18:58:eb:ba:b1:78:e4:46:0f:2c:55:ff:18:7b:20:2f:
fc:fd:c8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:07:09 2026 by rpki-client