This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
File: lDkZOu8f5NVwPLg033qrr4pL5Cw.mft (raw, json)
Hash identifier: Izq2PiYpuqrcum9MwTCljJA70n3koCVXX4uBx/BHaJA=
Subject key identifier: 6D:3F:15:F2:1C:EC:4F:6A:B1:2E:A4:FE:1A:86:D8:B0:CB:39:BB:4E
Authority key identifier: 94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
Certificate issuer: /CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Certificate serial: 019C4359012CC732CEED7B1EF46329164B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
Manifest number: 16F0
Signing time: Mon 09 Feb 2026 17:00:32 +0000
Manifest this update: Mon 09 Feb 2026 17:00:32 +0000
Manifest next update: Tue 10 Feb 2026 17:00:32 +0000
Files and hashes: 1: BgkebpBhISi7yrdl5zgWc6kxIH4.roa (hash: X8DOyattSG0MTouveclCaC/OSKoml4GgvWQUYGFm67c=)
2: lDkZOu8f5NVwPLg033qrr4pL5Cw.crl (hash: xmidQcmx8sx8rRAD/G24C0BaDBJ1ahjVlA8kEDE9w7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:01:2c:c7:32:ce:ed:7b:1e:f4:63:29:16:4b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Validity
Not Before: Feb 9 17:00:32 2026 GMT
Not After : Feb 10 17:00:32 2026 GMT
Subject: CN=6d3f15f21cec4f6ab12ea4fe1a86d8b0cb39bb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:80:2f:35:fc:b6:e4:54:42:89:47:42:7e:bf:
42:74:b5:bd:e1:59:be:16:ba:f5:3e:bd:5b:d4:d9:
ff:57:bd:11:b5:05:d2:8a:34:82:ce:ea:33:6a:58:
7f:c5:26:55:9b:6d:89:bb:b8:9c:62:64:21:50:2d:
25:97:c2:56:0b:39:9b:2d:65:17:4f:a0:6a:82:92:
e1:54:75:a7:a5:c1:24:b1:7c:ba:f4:79:73:5d:51:
75:9b:fd:02:8c:80:53:3d:9c:c3:7a:c4:30:86:d8:
92:82:24:03:d0:70:1d:21:d9:ba:e5:cb:6e:e9:93:
09:04:89:b9:a0:52:67:eb:c2:ee:1f:4c:8a:5e:63:
cb:ea:d1:ab:b4:d1:a6:6e:25:d6:2b:8c:64:18:e6:
fa:4c:c5:d8:fc:cc:8b:e9:04:1a:bd:7b:78:9c:8b:
6b:cd:d3:76:2e:cb:a4:99:e7:ac:9d:4e:5e:d4:a3:
8e:70:23:d5:95:af:1b:42:49:44:e6:2a:38:f5:8b:
37:11:05:a4:a3:6f:8c:6b:cf:aa:4a:97:68:24:e2:
8d:f5:88:1a:f5:56:b8:d1:a0:fe:53:72:04:14:b6:
32:3e:25:50:ad:1c:b1:7e:05:90:3f:77:60:8d:81:
95:66:ff:f5:18:eb:08:7d:18:05:6a:2f:bb:5f:12:
7a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3F:15:F2:1C:EC:4F:6A:B1:2E:A4:FE:1A:86:D8:B0:CB:39:BB:4E
X509v3 Authority Key Identifier:
keyid:94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7a:70:5c:12:1e:7c:35:8c:ee:a3:c2:63:0f:ec:eb:f4:7b:
91:9c:2f:de:9a:48:69:ca:56:6c:2e:c6:e1:93:ca:fe:0a:98:
67:5c:f6:bb:a8:9c:1d:17:5c:e3:6b:80:22:a7:82:dc:20:93:
82:92:7b:a5:08:d5:ea:04:a9:af:f5:53:e0:73:ef:30:8f:5b:
1b:47:ae:39:fa:a2:4f:7a:ee:b3:73:41:ae:aa:11:c3:83:ae:
44:1f:be:b1:c7:75:54:5f:2d:2c:25:5a:ff:bb:57:3a:bb:1e:
f6:82:9a:e9:53:34:25:77:3f:75:46:e0:0e:f2:05:7f:52:78:
18:eb:12:33:95:32:1c:00:21:94:13:29:a0:3a:69:dd:78:4e:
85:4c:46:dd:a0:d8:36:96:9d:38:d2:c9:4b:49:b7:cf:0a:e1:
3f:71:53:3b:e9:9d:a9:ae:b3:0f:a6:7b:0e:e2:27:51:93:d8:
47:71:05:00:e1:fe:f8:a4:a7:86:ee:01:29:62:b4:3a:41:20:
e9:3b:9b:4b:b6:68:27:86:70:d0:aa:d2:9a:ff:1f:bb:3c:ad:
59:73:2b:39:ac:fa:4a:c3:a4:51:58:26:fd:f9:5d:18:fb:98:
0c:2c:9a:1c:08:36:04:fb:36:0b:a7:f1:6c:e4:1f:ab:37:da:
cf:f2:3a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:57 2026 by rpki-client