This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
File: LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft (raw, json)
Hash identifier: OMvZyfc4Dc9YUuSbJGhIgzeXG8XYBw+GNBBrHuZRPiU=
Subject key identifier: 00:DB:25:F3:09:4D:5D:E7:09:49:44:91:06:06:84:55:6A:E0:1C:FF
Authority key identifier: 2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37
Certificate issuer: /CN=2e872826fce02bd9485ef276641d2b584f599b37
Certificate serial: 019BFD660A8031F809934A858F45150468E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
Manifest number: 0440
Signing time: Tue 27 Jan 2026 03:01:21 +0000
Manifest this update: Tue 27 Jan 2026 03:01:21 +0000
Manifest next update: Wed 28 Jan 2026 03:01:21 +0000
Files and hashes: 1: HaWtTdrWNQ-t6zZT5H1gUiuvM20.roa (hash: 0sFtW/YmMWQlHvSbwsZ/uJJjwIq+PFyrE/S9UMa92io=)
2: LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl (hash: jd52ni1wzmUn+IIUP/8qSuNspeku5AWidGSAnjSo3Ps=)
3: lnjlGqeSJRjiZXGR9UWwM1AXf_Q.roa (hash: aNa57xkBvP6KhWbTSSYB2DdXOWY3tvwB5/a1u/Dvisw=)
4: v8LWp32qq67uplk0Xqd0ZZoljJ4.roa (hash: zYG0YI6w/6VMAP0TQxIzvMtmh1Zr4RP+zGoFbX+CKtQ=)
5: wQ__3mS7AnuqJ-EruyFAAIOStfU.roa (hash: bg7mzla/XbjHEcTtbDSzPbOrSMtA7vkNn21Gj+YjuwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 20:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fd:66:0a:80:31:f8:09:93:4a:85:8f:45:15:04:68:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e872826fce02bd9485ef276641d2b584f599b37
Validity
Not Before: Jan 27 03:01:21 2026 GMT
Not After : Jan 28 03:01:21 2026 GMT
Subject: CN=00db25f3094d5de709494491060684556ae01cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:59:26:d6:14:f0:94:c3:68:46:18:0f:d6:7b:
8c:ba:aa:77:a7:e6:31:aa:06:c7:a9:e5:bb:fa:38:
eb:a2:79:01:72:26:12:1b:d9:53:4f:d4:9a:7d:56:
ee:2b:ff:45:11:9e:5a:c0:e0:7d:2c:a3:72:69:a5:
10:7a:b8:25:72:5f:ee:66:c3:16:0b:58:1e:d9:e9:
d6:50:d8:5f:e0:49:ae:8d:b3:61:56:23:3c:34:82:
c4:36:e1:9b:d1:8b:e8:19:5c:46:aa:08:35:24:e3:
ef:12:29:42:66:a6:5d:c2:fb:4c:a1:ba:df:34:f4:
4c:c0:29:71:b2:93:ac:94:57:51:4e:53:87:37:15:
9f:b7:3c:53:04:02:53:0f:c1:6c:4f:41:30:3a:13:
4d:3c:5b:f7:67:b5:29:eb:d8:93:1c:b8:65:86:c3:
73:be:ca:4d:d8:e5:02:b6:cb:2d:ba:7c:14:8d:88:
7f:bc:ed:03:a9:6b:81:7b:0f:cf:93:7b:4d:24:24:
31:72:61:d3:16:1d:b2:2d:d3:ab:b2:fc:0b:6a:b6:
59:a8:42:a1:a1:ad:f5:c6:29:f9:87:52:f1:80:79:
9d:da:5b:83:b9:a5:1b:ff:c2:dd:88:7e:8b:ec:16:
6b:06:8b:1e:a2:a0:83:0c:ae:bd:4f:c9:bc:53:b8:
c5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DB:25:F3:09:4D:5D:E7:09:49:44:91:06:06:84:55:6A:E0:1C:FF
X509v3 Authority Key Identifier:
keyid:2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:17:be:2a:a5:37:bb:2c:ca:f2:b0:34:05:42:4f:91:dc:de:
b7:e9:4a:cd:4b:98:c4:d7:47:c4:ba:d9:2a:7c:4b:f8:8b:3c:
87:18:81:c6:9e:18:3c:85:24:83:1e:93:cd:fa:59:87:3c:17:
53:bf:b3:df:92:ff:e7:6e:fd:f1:ba:90:62:c1:9e:01:00:5a:
5f:b1:61:7d:64:74:dd:de:1d:cb:a3:8f:3b:6d:f4:7f:fe:97:
22:99:26:50:bf:9a:1d:b9:9f:ec:0f:13:9d:51:53:b8:cc:3d:
21:5e:19:11:1d:6b:5a:60:a0:09:b6:9a:a1:10:cb:f8:b4:ef:
43:97:d0:8c:dd:ea:58:46:37:89:37:dd:1a:c8:94:d6:d7:5d:
2c:a7:ea:ba:fa:56:ef:39:50:5e:32:26:99:4c:6b:c4:7f:b4:
4a:82:5c:db:73:e5:c9:66:3c:f8:7b:ca:47:3f:a6:be:c0:91:
c1:5e:6d:7b:b1:19:1a:1c:b2:e6:42:15:5e:be:ff:3f:16:48:
66:3f:41:10:f5:a9:2a:6a:53:14:c2:53:05:39:1c:91:5a:de:
9a:e4:9b:7f:09:4d:4d:73:cf:b5:9e:2e:b7:a7:c7:d6:0c:97:
dd:6a:55:e4:e7:e6:26:82:8d:da:92:b4:ee:9c:de:3c:ce:cc:
ae:1f:50:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 07:16:57 2026 by rpki-client