This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
File: lrN3ZE5BQQHbberQ61ghBj9Yjow.mft (raw, json)
Hash identifier: klaaz4v7XUq7Ou6AsJZrA7y7Z7WvPedqLlag0eTHBw0=
Subject key identifier: EC:30:A7:D2:AD:49:BE:C7:B2:D2:80:DE:3A:7D:30:5D:70:46:4C:BA
Authority key identifier: 96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
Certificate issuer: /CN=96b377644e414101db6dead0eb5821063f588e8c
Certificate serial: 019C424693A08A8AF5891639AD4C28CD54C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
Manifest number: 1791
Signing time: Mon 09 Feb 2026 12:00:47 +0000
Manifest this update: Mon 09 Feb 2026 12:00:47 +0000
Manifest next update: Tue 10 Feb 2026 12:00:47 +0000
Files and hashes: 1: Ym03Um_5UobxPOr6olPKeapW7cU.roa (hash: D9DmLZwMQ1tx/ZxbrikY71GnEw+e659ZH43TIYC63lo=)
2: lrN3ZE5BQQHbberQ61ghBj9Yjow.crl (hash: Uo0cFkvMwP4rh09GE750EUirpxFubkQsqOMPi7cHYGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:93:a0:8a:8a:f5:89:16:39:ad:4c:28:cd:54:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b377644e414101db6dead0eb5821063f588e8c
Validity
Not Before: Feb 9 12:00:47 2026 GMT
Not After : Feb 10 12:00:47 2026 GMT
Subject: CN=ec30a7d2ad49bec7b2d280de3a7d305d70464cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3a:df:b6:43:09:21:f0:89:a3:fd:78:4f:4e:
3c:17:91:1f:db:2b:db:15:52:b2:f2:a7:31:e3:8d:
c1:da:19:34:50:6f:49:e0:8e:42:66:56:c7:e4:1e:
fe:97:e7:3b:5c:3b:12:f8:18:3f:5c:18:be:81:cf:
8d:ae:0d:57:a1:4b:28:36:f5:3b:b6:ab:99:5a:48:
1d:9b:ce:70:20:a2:47:8c:55:69:79:fb:72:90:bc:
f5:72:52:63:e0:d7:f1:94:18:23:ed:5e:11:aa:dc:
5e:49:a8:58:32:20:d7:50:4a:be:dd:ff:0b:68:91:
bc:5c:12:3b:46:e2:e9:25:e6:65:3d:2c:7b:58:60:
4f:31:4b:eb:5e:3b:e8:5c:f3:df:3d:16:8c:57:bd:
5e:ba:2d:51:38:73:d4:a1:8e:c6:e8:5e:2c:82:fe:
c0:50:93:20:e1:41:00:48:8e:58:3e:16:d1:05:72:
0e:c5:af:f1:db:e3:10:81:7e:c4:14:e4:b0:b5:d4:
60:5d:60:60:7f:1a:f6:67:91:b8:42:72:8a:fa:66:
ca:d3:3b:c4:c0:da:f3:b1:ae:4e:f6:0c:72:59:15:
44:0a:7d:30:de:c2:2c:a3:da:1e:15:85:53:9a:e8:
3e:72:48:a0:f7:47:e3:d8:6f:6f:c4:6d:73:eb:52:
fc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:30:A7:D2:AD:49:BE:C7:B2:D2:80:DE:3A:7D:30:5D:70:46:4C:BA
X509v3 Authority Key Identifier:
keyid:96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:72:47:8d:01:c2:9e:f6:31:18:8e:bf:31:c2:bd:97:ef:dc:
8d:23:e9:05:47:71:eb:d4:28:75:3b:24:cb:7a:59:62:ac:d2:
33:b0:f3:73:a1:dc:e1:07:0e:0e:9a:f3:5b:83:f4:3f:bb:98:
74:01:d6:4c:86:9d:4f:2e:6d:ea:c7:d6:f4:81:04:fa:4e:23:
f1:67:f0:96:3e:12:00:60:0c:30:cd:13:3f:82:51:b9:20:88:
ed:70:96:b2:a9:2b:c9:ff:c8:0d:c4:e8:88:2d:2b:e7:6a:4c:
a3:8d:41:49:5a:65:66:3b:b3:e1:13:d9:50:c1:f1:71:b4:3f:
16:b0:2c:23:59:b1:fb:d7:2e:80:37:2c:af:51:6d:02:c9:35:
14:50:db:44:5d:f4:dd:65:7f:9e:e8:50:b0:57:a0:a8:f9:0d:
10:55:c3:49:f0:33:3d:d9:34:ca:cb:b8:71:c4:ff:12:da:00:
b2:6c:aa:c2:2b:2a:a1:57:4a:c0:ae:18:8e:fd:34:c8:d1:1c:
84:19:08:34:79:47:d4:71:67:03:e0:52:6b:42:08:59:50:c8:
68:ca:34:21:06:dd:f9:c3:59:ec:2a:44:9f:82:3d:33:ab:5f:
ce:a2:1c:c7:90:74:76:1a:11:3b:d8:d7:69:7e:e8:82:6d:93:
2b:8d:f9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:26 2026 by rpki-client