This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
File: lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft (raw, json)
Hash identifier: slJToIMP7UrkdbkEXI4wf0eznh/cge6E6DJ8a2VYOqg=
Subject key identifier: 2D:88:05:9D:71:5E:A1:3E:73:33:B4:6C:38:EA:61:4B:5E:7D:5B:23
Authority key identifier: 94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
Certificate issuer: /CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Certificate serial: 019C4322DC39E8DACD7573FF66A3B2750189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 16:01:23 +0000
Manifest this update: Mon 09 Feb 2026 16:01:23 +0000
Manifest next update: Tue 10 Feb 2026 16:01:23 +0000
Files and hashes: 1: LSPYdHWOrzjzMpezGhhKeAopRDI.roa (hash: 6BFI+idpDJu59Bp+c/vo26t3qsjR1ad7pcSlb8AZ7Qs=)
2: lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl (hash: MxAe03mGBzuo6WudaCRZovdKMyMDjiwBw7Wq7Aa6iIQ=)
3: qxNtM6lXc-IHu0RFMi09jBOcq44.roa (hash: lGaxRvwWm1pfHeT9l+8KNnzK2furIDbOHauCtS0rIJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:dc:39:e8:da:cd:75:73:ff:66:a3:b2:75:01:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Validity
Not Before: Feb 9 16:01:23 2026 GMT
Not After : Feb 10 16:01:23 2026 GMT
Subject: CN=2d88059d715ea13e7333b46c38ea614b5e7d5b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:90:f6:f9:59:a8:0e:f2:38:ef:e3:be:c9:00:
89:ab:bb:78:e2:1f:48:94:9f:bf:58:25:6f:27:81:
07:ed:a4:67:50:07:10:53:38:4e:d7:70:70:50:a7:
80:b0:4a:52:e9:9a:57:d7:ff:d8:31:3a:ef:ed:15:
d7:60:96:88:27:c2:6d:75:97:7d:48:e6:93:67:9d:
ea:ef:e5:e8:21:56:02:51:fe:de:12:bc:6b:1d:09:
91:0b:45:5c:1e:8d:49:93:7d:74:fe:2e:95:c0:07:
01:7d:e6:03:55:09:4f:c6:e4:bd:f3:dc:76:08:14:
3f:cd:a3:b6:2b:1f:a7:32:60:be:4b:32:ba:07:91:
bf:fc:2f:ea:46:cc:fb:d8:f0:f4:c9:40:fe:74:bc:
8f:1b:21:04:25:1d:be:90:0f:28:48:c8:6c:24:b5:
63:e4:5c:15:50:d9:52:60:55:3d:38:26:00:5a:f0:
fe:df:fa:6a:ae:8e:f9:40:d1:b8:c6:d6:85:c2:d1:
da:a6:4a:62:ee:24:29:10:28:90:03:20:d9:b9:d5:
1c:6b:ff:d4:b7:15:c8:c2:68:14:1a:a4:fb:3a:f9:
0d:13:ef:ba:8f:b6:b3:be:bc:0a:f1:0a:94:86:09:
47:5d:a3:51:ca:84:d1:be:29:76:38:73:94:08:0a:
10:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:88:05:9D:71:5E:A1:3E:73:33:B4:6C:38:EA:61:4B:5E:7D:5B:23
X509v3 Authority Key Identifier:
keyid:94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:7f:c2:e4:9c:d6:5c:a0:03:9b:35:5d:16:ea:1d:9f:ae:97:
67:ec:3c:34:fb:ac:17:76:f5:59:df:a2:f8:4b:02:63:ea:46:
b5:59:2b:93:bf:bf:1d:97:36:3d:56:3f:26:3c:9f:53:e6:2f:
f7:01:52:d5:96:a7:c8:e6:15:34:f2:59:3c:8c:46:b6:75:26:
d9:57:ba:d5:6c:c8:b0:d6:1c:c8:fc:61:24:9d:ce:41:3c:07:
8d:20:61:b5:f0:c6:6f:25:7e:d2:cd:2b:0e:20:12:75:6c:dd:
7c:bd:74:4a:c4:6f:4b:1f:48:25:0e:6c:8d:26:02:ab:c3:ee:
7a:96:b4:68:44:dc:68:35:d3:43:ba:a1:dd:3b:c1:6a:4c:ce:
55:2b:fb:7a:3b:f0:31:09:f1:f3:6e:ac:0c:dd:49:79:17:ef:
ba:8a:79:6b:57:e9:14:06:1a:c5:b6:bf:81:2e:2c:1a:ae:fe:
f7:85:08:28:c5:57:b2:b7:9a:dd:89:eb:be:35:46:42:68:f2:
94:72:77:4d:37:e9:42:b1:86:ff:8a:db:f4:3e:66:c6:ed:b6:
3e:30:b4:17:88:33:24:85:a5:1c:0b:a6:fd:98:26:88:a0:d3:
72:26:09:fd:93:11:6d:3d:ae:5c:d8:14:99:63:8a:20:d7:2e:
09:62:a9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:46 2026 by rpki-client