This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
File: LMJf8ykY8LSTBiWdSDr7njgaORU.mft (raw, json)
Hash identifier: IlVsmYCjplqDhEXClAO8bJhGXDBwxxLbqYRXsT5ZNKY=
Subject key identifier: 26:8A:32:A1:9E:73:00:08:5A:74:10:D8:41:70:A8:7D:1D:12:48:16
Authority key identifier: 2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
Certificate issuer: /CN=2cc25ff32918f0b49306259d483afb9e381a3915
Certificate serial: 019BFD65C534FD893BF016E16DAFA6FC40FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
Manifest number: 17F6
Signing time: Tue 27 Jan 2026 03:01:03 +0000
Manifest this update: Tue 27 Jan 2026 03:01:03 +0000
Manifest next update: Wed 28 Jan 2026 03:01:03 +0000
Files and hashes: 1: 8uIunmSufptpB5lmSVg6A9jx6Nk.roa (hash: ve9WmCeaTlTVE+tbJ9aHlzcgLCklf/8U5Uf/masbFx8=)
2: LMJf8ykY8LSTBiWdSDr7njgaORU.crl (hash: sXqsJiTNEiDS9iSlUSlTA8naNQx9prs+fpDXllJyqKs=)
3: kwn4ZdvrIv6hl400pgtVWpsd9lk.roa (hash: eyoTNP4CeFTLuxttmf6toqGd/JyyxtdCqToHMpNrH6E=)
4: oCe9xKAx3gPI7iUETaqklwJOVSg.roa (hash: Hl/RVZt4ha0REz41RabhXwcOue4AeE9NninK5nqE8vY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 20:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fd:65:c5:34:fd:89:3b:f0:16:e1:6d:af:a6:fc:40:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc25ff32918f0b49306259d483afb9e381a3915
Validity
Not Before: Jan 27 03:01:03 2026 GMT
Not After : Jan 28 03:01:03 2026 GMT
Subject: CN=268a32a19e7300085a7410d84170a87d1d124816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:93:03:95:ec:4e:65:74:20:73:41:3e:aa:97:
89:3d:95:2e:23:0f:1e:24:75:28:3d:ad:32:3c:f4:
59:8f:f3:a9:72:54:d7:9a:42:c6:ba:01:34:02:0d:
3f:7e:8d:08:dd:a5:13:0c:71:86:db:76:1f:f7:6a:
ad:69:31:97:bf:c6:4a:76:16:e3:8f:f2:16:3b:31:
7d:5c:3a:43:20:18:de:27:22:ee:0e:f7:c4:a3:da:
c4:05:45:5a:32:33:95:46:e3:6e:7a:3c:45:1d:46:
c7:b2:d8:86:ac:17:52:41:3f:be:23:61:62:92:11:
e7:1c:6a:ad:dd:7f:fd:8f:91:5c:47:3f:3d:16:31:
45:92:4c:27:5e:65:89:45:73:cf:86:f6:cc:22:d3:
5b:68:1a:8b:5c:d2:74:b1:31:fc:11:1a:a6:a5:63:
c0:0e:5d:2a:af:b5:50:24:2f:e3:39:5f:dd:2b:71:
2b:08:08:38:07:65:5a:54:c0:20:69:a0:b4:a0:c0:
9c:dc:ae:8d:19:fc:46:fd:36:0d:02:2b:7c:d4:3f:
00:be:c1:64:af:b2:5c:9c:27:e9:47:b5:c6:81:a1:
9a:58:45:4d:42:03:80:24:e8:d7:58:35:63:19:34:
6f:aa:a4:a1:dc:7a:c3:e6:24:16:e4:06:17:6a:34:
f6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8A:32:A1:9E:73:00:08:5A:74:10:D8:41:70:A8:7D:1D:12:48:16
X509v3 Authority Key Identifier:
keyid:2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:10:78:c5:15:15:11:6e:62:03:83:bd:ea:fb:ba:38:70:d7:
c5:c1:f2:30:2e:cd:b9:da:1f:93:1a:f1:62:f2:41:f4:f3:1a:
c3:32:62:77:b4:58:52:e3:1d:52:ca:47:45:c2:0a:50:30:03:
a8:d3:df:dc:48:87:b8:a9:69:8a:57:33:f0:2c:22:91:24:41:
a0:c9:0f:77:15:77:21:da:f8:36:be:86:a2:1f:73:12:2a:4f:
e6:70:86:b2:13:89:3f:a1:3e:89:24:34:c9:6b:a2:ab:f5:22:
f7:3a:3f:12:be:fb:26:e1:9d:f6:2e:4b:0e:ff:c8:9d:fa:da:
b1:b0:e4:50:c6:8a:59:ba:97:6c:01:3c:c7:2e:63:bb:21:8f:
66:21:0a:0e:9d:87:8c:be:fc:68:75:5a:51:6c:c1:61:88:f0:
83:e6:54:e5:d5:49:fd:c7:eb:99:db:dc:de:3d:9f:e2:6b:1a:
08:29:2b:cb:fd:f6:cb:37:c1:6f:cd:55:b7:c8:77:3f:6e:f0:
72:81:58:fe:0d:7d:5c:0c:74:2f:4f:9a:9d:46:a6:e3:7a:5e:
78:f4:56:f7:49:76:3e:e2:a5:d2:0e:a9:d8:32:43:bf:b3:26:
51:c1:22:14:53:11:97:81:b5:36:cf:3c:52:92:aa:b8:b3:0f:
48:10:04:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 06:06:28 2026 by rpki-client