This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
File: lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft (raw, json)
Hash identifier: 0bXVi8FhUPl3LhGDzQxD+4k6DruyY//ELOTJA5qBBIc=
Subject key identifier: F9:29:49:8A:C5:AE:89:8E:69:AC:02:D9:9B:41:DC:77:98:DC:97:F4
Authority key identifier: 96:F7:52:3A:7B:33:2E:BD:F1:14:A5:C0:8D:C1:D5:F3:2C:BD:73:C6
Certificate issuer: /CN=96f7523a7b332ebdf114a5c08dc1d5f32cbd73c6
Certificate serial: 019C4390564F0E1175C99FE67AC5C7E3AFAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
Manifest number: 06DA
Signing time: Mon 09 Feb 2026 18:00:58 +0000
Manifest this update: Mon 09 Feb 2026 18:00:58 +0000
Manifest next update: Tue 10 Feb 2026 18:00:58 +0000
Files and hashes: 1: lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl (hash: IGBnQxRYPBmUIyZV/BzOFS6iNAI+sJ501RLX87MMFF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:56:4f:0e:11:75:c9:9f:e6:7a:c5:c7:e3:af:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f7523a7b332ebdf114a5c08dc1d5f32cbd73c6
Validity
Not Before: Feb 9 18:00:58 2026 GMT
Not After : Feb 10 18:00:58 2026 GMT
Subject: CN=f929498ac5ae898e69ac02d99b41dc7798dc97f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:60:5e:a2:f6:d2:c5:a6:1b:4b:66:0e:e0:df:
2d:13:a9:14:c9:96:7f:5b:16:9d:0b:26:09:ff:34:
1b:f3:dd:5c:fc:4b:89:a6:40:df:33:97:4e:e0:c1:
6c:5f:9f:83:c0:97:0a:21:a8:a1:f4:76:31:e9:c0:
2f:44:44:d6:f2:65:8f:53:30:41:ff:ff:57:9a:44:
1a:5c:c8:f9:6d:0e:f5:a0:85:9a:87:46:97:37:e4:
14:65:ce:9a:58:b6:1c:dd:02:0e:56:46:0a:df:77:
d4:f7:55:1e:1b:0e:2b:70:2c:b7:95:2f:34:92:d0:
64:80:ed:3d:bf:29:60:13:2d:f9:73:cc:1b:cb:eb:
db:4a:f1:1e:e3:e1:75:8f:07:74:2a:9b:97:12:21:
ea:02:51:05:c7:bb:94:a6:dc:f8:ff:d4:a4:29:87:
0c:41:66:d3:2d:be:3d:e5:b5:e7:a5:22:56:45:f9:
79:15:04:0d:11:68:4f:40:bd:bf:a5:14:56:ec:a5:
e4:e8:ae:a2:06:e1:0a:64:fb:12:4a:fe:fb:10:44:
7d:50:68:a8:3a:55:48:e0:49:83:43:1b:7f:e9:89:
83:d3:3a:75:3d:fb:ce:a8:ee:c8:7b:c5:54:cd:db:
1c:a4:99:3c:dd:4b:f1:f6:91:32:6c:73:db:90:04:
25:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:29:49:8A:C5:AE:89:8E:69:AC:02:D9:9B:41:DC:77:98:DC:97:F4
X509v3 Authority Key Identifier:
keyid:96:F7:52:3A:7B:33:2E:BD:F1:14:A5:C0:8D:C1:D5:F3:2C:BD:73:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:99:31:2f:2f:02:74:57:d3:4b:c3:6f:30:a1:7e:89:bb:9d:
5b:5b:3d:cd:43:1b:66:21:93:f7:51:a0:bf:5f:3e:10:ec:29:
1c:65:a5:2a:33:6b:56:9b:cd:7e:9d:97:8c:f0:71:ff:2c:82:
e5:c6:07:b1:97:44:1e:c1:e6:08:57:fd:30:80:cd:53:61:e4:
9b:f4:21:96:4e:f2:62:86:1c:06:fb:1f:d6:3f:0b:ce:c9:9b:
bb:95:d2:ef:41:b1:03:03:4f:17:13:97:47:32:48:ec:51:48:
5b:17:ac:84:27:45:17:aa:0b:00:f4:2b:3e:d0:2c:27:98:7e:
59:61:88:7b:71:0d:69:d0:b8:6e:db:09:12:a8:e8:aa:c7:6e:
dc:6c:0b:8a:28:3a:9b:37:b4:e5:07:51:e9:9a:f7:bb:12:13:
59:8c:3f:51:29:3f:8e:ec:e5:dd:31:d5:a0:69:3b:02:14:31:
8d:63:b9:63:5f:56:9f:2a:b3:4f:62:24:22:25:5b:cd:e4:29:
4f:ee:48:79:16:fc:32:5a:b5:46:4e:ca:92:ef:01:79:3f:22:
b6:09:7a:27:2a:14:b7:b3:47:6d:1a:ac:52:21:a4:4f:b9:4c:
d6:24:59:45:08:9d:4b:b2:c8:b6:5f:f6:e2:47:65:b6:06:26:
69:19:20:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:31 2026 by rpki-client