This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
File: lSC_jHciaj-ojr4RzI8RacxWCnk.mft (raw, json)
Hash identifier: F0DPGoBW4ZiRwFL7Z30MPjcXX3yMrmnJ4ei3GlE67+E=
Subject key identifier: A9:D6:FA:5F:96:76:FC:BE:BA:A2:CE:1D:53:E4:58:D6:5D:88:16:C8
Authority key identifier: 95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79
Certificate issuer: /CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79
Certificate serial: 019C42B3EB2045E82910D127E7AF4C2EB24F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
Manifest number: 0F2A
Signing time: Mon 09 Feb 2026 14:00:13 +0000
Manifest this update: Mon 09 Feb 2026 14:00:13 +0000
Manifest next update: Tue 10 Feb 2026 14:00:13 +0000
Files and hashes: 1: 1-4k_j5tlYDY-0PvjETD04LazkDs.roa (hash: dUn8gRxx7kqyKB4xZnZt/reCOUYtE+UapqvIfJ65GYw=)
2: lSC_jHciaj-ojr4RzI8RacxWCnk.crl (hash: +KdUb5CVPdFqSJqciuDc/IwmqKA+j0DKRORq7qoHHuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b3:eb:20:45:e8:29:10:d1:27:e7:af:4c:2e:b2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79
Validity
Not Before: Feb 9 14:00:13 2026 GMT
Not After : Feb 10 14:00:13 2026 GMT
Subject: CN=a9d6fa5f9676fcbebaa2ce1d53e458d65d8816c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:eb:a6:7c:21:d2:26:19:10:62:8d:2c:27:98:
87:49:a5:ff:c0:c8:e6:36:ab:21:45:5a:cf:d9:e5:
0c:2a:52:1b:94:8f:fe:0d:6d:1b:cc:cc:97:1c:dc:
4f:c9:fe:05:e4:68:80:10:56:51:9c:90:37:d9:0f:
f3:22:0f:34:30:1a:60:c8:d1:9a:b7:ad:af:21:fd:
03:4d:a4:5d:83:3c:d2:e5:50:f7:80:87:7c:c4:b7:
be:ac:3b:91:15:d7:c5:79:fd:33:c3:61:f1:6e:38:
9e:e4:f0:df:34:a4:07:cb:80:01:3a:7d:f7:80:49:
2d:37:87:14:4e:22:26:17:26:c2:29:0e:e5:fd:1b:
ee:ca:c5:14:de:6d:e5:7c:8f:ac:3a:4d:e1:bf:a1:
08:b6:fe:bb:cf:ea:58:b1:fd:fc:d7:1e:d5:4b:dc:
4f:d5:54:5a:46:1e:19:9d:a6:cb:8b:e4:82:4e:8d:
90:9e:55:f2:a1:a1:c2:f3:e7:f1:23:44:39:4e:94:
49:bc:2b:2c:e9:93:0c:c4:8b:75:9a:95:ca:9d:f7:
31:a4:be:18:36:a6:82:51:54:87:fe:8b:13:51:fc:
c4:ca:c1:ae:d9:f9:cd:17:fc:8f:20:51:23:53:fa:
84:5f:00:5b:b1:fa:e6:44:82:c7:0c:b7:7d:5b:38:
32:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D6:FA:5F:96:76:FC:BE:BA:A2:CE:1D:53:E4:58:D6:5D:88:16:C8
X509v3 Authority Key Identifier:
keyid:95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:6e:af:e7:6e:dc:0c:15:04:17:4b:32:13:6c:85:d3:88:5e:
8f:af:c2:7d:cd:49:04:a3:d7:24:6b:30:25:55:a9:98:18:ff:
35:da:6b:a0:7f:46:d3:33:39:fe:b7:6f:ee:93:df:f8:d0:2d:
01:a0:7f:46:ed:d3:90:3b:a5:21:c6:ed:c2:7b:1b:37:93:57:
36:79:71:26:3c:13:33:b8:38:ac:f8:57:68:29:2f:c9:37:b6:
2c:f5:97:bf:1b:b0:51:1d:f0:05:7f:93:bd:87:27:f4:ba:3b:
d4:2b:2b:45:cf:ca:50:46:84:6d:d9:51:76:f6:6e:a0:a4:2e:
d6:f9:73:68:0a:64:97:27:bc:7b:d3:ca:fc:69:44:9b:e1:06:
b5:bd:3c:04:1d:20:b1:5f:0a:58:d0:86:97:82:24:df:83:d8:
30:68:6a:43:b6:ea:31:29:52:97:e6:22:c8:f1:e1:1c:68:17:
c9:07:d2:37:ff:5d:7e:e1:92:11:db:ef:a3:65:9a:84:30:1a:
c0:5a:5b:a4:09:35:34:8b:f5:3e:f4:34:3f:1b:8e:19:85:d8:
9d:e6:a4:f2:98:8b:f3:16:c6:b6:10:6f:f2:5f:dd:03:ec:99:
e8:13:70:18:ac:82:d2:cc:7a:0b:c7:5f:64:28:12:ff:28:b3:
3e:c7:9f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:20 2026 by rpki-client