This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
File: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft (raw, json)
Hash identifier: X0d4NCs4H8/B1iDl1MI6X5Rs9HR/EoNoluSo9VbVrOs=
Subject key identifier: 58:15:32:1A:A6:12:FC:CC:75:B0:A5:F6:94:27:CC:90:1A:79:5C:4B
Authority key identifier: 96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
Certificate issuer: /CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Certificate serial: 019C427D3CC8EFAF399AF70B04DC7B365553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
Manifest number: 0B79
Signing time: Mon 09 Feb 2026 13:00:29 +0000
Manifest this update: Mon 09 Feb 2026 13:00:29 +0000
Manifest next update: Tue 10 Feb 2026 13:00:29 +0000
Files and hashes: 1: MMY-RTsxhEKbZHNhhj0KSwNZMxE.roa (hash: Ef0KimqUfcjmjAh99qPeo3PT6AwZiNEjh0UvdcbEniQ=)
2: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl (hash: 3zXelyKW0UckisW0P7hQQ9rAHLkZe1VDkW9HrXBMoTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:3c:c8:ef:af:39:9a:f7:0b:04:dc:7b:36:55:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Validity
Not Before: Feb 9 13:00:29 2026 GMT
Not After : Feb 10 13:00:29 2026 GMT
Subject: CN=5815321aa612fccc75b0a5f69427cc901a795c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:4c:9b:cb:ca:a6:6f:ed:d5:a4:b3:91:f2:ca:
b8:42:65:31:2c:98:04:83:47:21:db:4b:60:30:32:
e3:7c:e3:a2:7f:0b:62:2e:0a:e9:45:18:3c:e7:24:
eb:1a:40:90:27:12:b8:d7:96:3c:5a:17:3a:b4:f1:
a5:08:08:06:35:1f:f6:ee:1c:ad:6a:4e:89:f1:ae:
e0:d1:29:17:66:ff:65:8f:48:5e:70:ba:c3:f9:6c:
e7:15:c9:e7:22:45:5b:15:88:7b:dd:bf:ed:fb:d8:
30:52:86:40:dd:81:d5:58:a9:98:d8:1d:fe:5b:51:
77:e3:01:7e:32:17:7b:d9:e1:39:13:a6:ca:ff:9d:
6e:5d:17:f4:bd:bc:18:13:2e:96:1a:6f:4e:7d:69:
17:37:f1:80:7d:ba:86:b2:0f:be:f1:4d:aa:63:6e:
b9:87:da:30:52:b3:fb:31:6b:c9:ee:c2:0d:2b:3e:
22:62:2e:58:09:f5:38:ee:71:cc:e6:e3:c7:4c:65:
3a:dd:63:fb:8e:f6:a0:80:2d:1b:de:99:b1:25:8a:
f6:dc:b3:c5:9f:44:7f:fa:7d:44:06:70:d0:ce:6b:
b5:e7:1f:27:69:01:87:ce:a6:00:bd:e4:b2:fe:01:
11:d0:04:7e:d4:8c:5a:a0:fd:25:9a:34:a5:4a:64:
e8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:15:32:1A:A6:12:FC:CC:75:B0:A5:F6:94:27:CC:90:1A:79:5C:4B
X509v3 Authority Key Identifier:
keyid:96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:8a:d1:8b:2a:eb:dc:fd:fd:c7:c6:2e:42:94:bd:5b:d8:63:
ef:d9:b7:61:27:26:8f:5b:45:47:c4:5b:c4:e1:b5:36:9f:60:
9d:ca:c2:12:37:23:26:bb:55:50:27:1d:02:32:10:e9:f6:76:
f2:d5:e6:81:f7:5e:3a:65:5a:9b:f2:57:e2:99:7d:1f:c5:3a:
1e:51:cd:14:a2:c2:a9:9c:13:54:9a:1d:e7:9c:60:ce:5a:4c:
3e:ef:5b:79:f7:33:0a:36:3d:46:d0:26:fd:4e:f0:b0:13:8d:
18:73:5b:70:1d:59:44:e9:c9:39:cf:c5:75:53:26:fb:d5:02:
8a:96:05:4f:88:b5:d2:62:77:2e:3d:e4:d8:93:91:a7:7e:1d:
cd:25:cb:7f:b1:1d:ab:fa:47:47:0a:9b:0f:57:9c:6d:b8:61:
92:ce:db:92:2b:dd:e8:76:ed:8c:e5:bf:54:6a:e8:94:0a:c1:
9f:0f:4a:33:50:f6:b1:d3:80:bd:7f:a5:f3:90:2e:8c:c3:5a:
46:40:39:b3:11:dd:6f:49:6e:9c:28:30:0b:19:4a:78:e1:52:
58:7b:2f:b9:b9:5e:75:1d:a2:d5:89:12:b1:28:c6:7d:88:51:
92:b2:c5:ca:d9:fb:9e:77:2a:8e:4b:06:2d:26:95:a6:70:ae:
25:2a:17:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:59 2026 by rpki-client