This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
File: LxXXiyVtKEWbhptybyMpSrP_Fz8.mft (raw, json)
Hash identifier: L2Be70VWjlf830qRBMtK9OPrHfpfalLVxgeTw5HU7ng=
Subject key identifier: D0:68:9C:C8:BD:83:13:80:6F:3E:BF:E3:2B:46:D9:62:79:91:82:77
Authority key identifier: 2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F
Certificate issuer: /CN=2f15d78b256d28459b869b726f23294ab3ff173f
Certificate serial: 019C446BCCC1258D1A5AA66CBC942190E207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
Manifest number: 0836
Signing time: Mon 09 Feb 2026 22:00:41 +0000
Manifest this update: Mon 09 Feb 2026 22:00:41 +0000
Manifest next update: Tue 10 Feb 2026 22:00:41 +0000
Files and hashes: 1: LxXXiyVtKEWbhptybyMpSrP_Fz8.crl (hash: 3ul9uOyUCZeDw4AF8HW5sY7knxn1KJWCEuKfXmIlCiU=)
2: rOf-HDDDWUjLrbyMntCj7Zxr5hQ.roa (hash: nH33C7dbdrbXUnx2qhd+AcU6xtieasJAwf4EGexUyEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:6b:cc:c1:25:8d:1a:5a:a6:6c:bc:94:21:90:e2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f15d78b256d28459b869b726f23294ab3ff173f
Validity
Not Before: Feb 9 22:00:41 2026 GMT
Not After : Feb 10 22:00:41 2026 GMT
Subject: CN=d0689cc8bd8313806f3ebfe32b46d96279918277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:70:a1:3c:08:12:5b:57:14:14:4a:e9:bb:07:
f0:e2:86:e7:d8:8a:dd:77:4b:e3:b4:f3:5b:58:0b:
d4:2a:3d:ac:50:e6:c8:55:eb:35:30:ed:b7:ed:2c:
cb:0f:9d:98:a1:1f:9c:4d:b3:a1:fb:9e:6d:ad:ff:
b7:3b:89:6d:9d:bf:4c:9d:eb:2e:3a:e9:18:d2:5a:
ac:67:78:36:4e:55:88:2e:2c:22:b9:ca:8d:d7:27:
3a:98:94:0b:26:ea:d7:9b:f6:9d:52:82:03:80:31:
c2:51:35:91:8d:92:3c:a4:94:7e:02:14:54:85:5b:
ca:28:ef:29:a2:93:c2:cd:9a:18:e7:23:95:4c:b3:
4d:5e:b1:ad:55:b4:22:d1:f4:10:25:ff:50:0e:8f:
b8:f0:23:fa:c2:e5:1e:7e:a0:bc:ff:f1:d1:74:ee:
80:8b:ce:15:b0:c5:60:96:ea:d2:cf:bf:00:1d:0e:
f4:ec:dc:d8:67:fd:49:ce:18:e8:fd:06:e6:f7:dc:
23:cc:d3:92:32:ce:f4:a2:dc:58:6b:b1:ee:ef:98:
34:d8:7f:68:35:fe:31:bb:01:45:46:6b:46:9a:59:
13:47:6e:f9:cc:8a:69:0a:cd:18:fd:9a:2f:65:48:
a5:8f:d0:5c:34:ba:58:90:e0:48:e2:99:4a:b7:3d:
62:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:68:9C:C8:BD:83:13:80:6F:3E:BF:E3:2B:46:D9:62:79:91:82:77
X509v3 Authority Key Identifier:
keyid:2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c4:ae:20:17:66:1c:e9:37:40:ef:ec:a0:ae:67:0a:1a:c0:
72:1c:43:a5:cb:1a:70:2e:a2:35:cb:2b:43:78:8c:b9:0d:74:
c0:bf:1f:10:10:30:38:ce:b3:86:3d:01:8c:7d:c7:72:72:87:
a1:a7:09:61:a5:7e:5f:c7:d8:fa:66:bf:2a:e7:20:61:99:95:
ba:ff:39:8f:66:85:d5:85:be:96:dd:d6:59:af:01:b3:79:ee:
07:f7:28:f9:d6:8b:e5:3d:fc:e3:e7:f1:42:26:9a:db:28:86:
9f:2c:48:78:f3:3e:2d:08:9f:1d:9a:26:d3:cb:4e:28:06:24:
01:fd:67:97:66:ee:7a:b7:f4:b3:46:62:ca:74:f7:a8:36:4c:
80:c6:8e:70:a7:52:f4:49:68:a6:df:cf:e8:4b:c6:d4:95:f5:
0b:3b:dd:f7:cc:f1:ed:6f:93:1c:5d:90:f8:50:9c:95:43:8d:
72:74:25:5d:53:72:bb:0b:ac:ab:de:3f:bb:2e:99:3d:51:ac:
e2:3d:fd:0f:43:58:5a:f5:eb:7f:4e:ad:cc:b8:1f:5e:b7:d4:
2c:2b:db:8e:bb:19:14:eb:0d:19:59:2f:ea:1b:cf:1d:ac:b8:
ce:28:04:8d:41:89:68:a2:9a:7d:4b:1b:8a:07:ce:54:5f:ba:
21:33:ba:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:15:43 2026 by rpki-client