This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
File: LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft (raw, json)
Hash identifier: O3HuiP66w1SFO9qmOyk08Fr2Br4seuC5fwFUBuxMjA4=
Subject key identifier: 61:22:84:0F:BA:C9:7E:80:D0:31:E1:91:E9:A8:4D:EE:34:55:53:97
Authority key identifier: 2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
Certificate issuer: /CN=2cb035707202d4013a4479be5112d7fa227b7275
Certificate serial: 019C420F31394EBB6F88861B3A30C1D9A474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
Manifest number: 1776
Signing time: Mon 09 Feb 2026 11:00:17 +0000
Manifest this update: Mon 09 Feb 2026 11:00:17 +0000
Manifest next update: Tue 10 Feb 2026 11:00:17 +0000
Files and hashes: 1: LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl (hash: pG7O7yZwXxE3zYsW7mMKCq56f4LIciLtjtqnH3uWKTM=)
2: V9Cc-uR-zIYJvjXve4ZyJUnQjsU.roa (hash: 2/BgI0CeVbMyKlBMczQ9BiDbSbqULeWjVwVtFX1ruVc=)
3: kL9jbHUoIoWWPmJDOjYutDKq9S4.roa (hash: vJG3x4EHXbeIpONFrJoAJLtr1KSHjKyEb3xfexUn52o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:31:39:4e:bb:6f:88:86:1b:3a:30:c1:d9:a4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb035707202d4013a4479be5112d7fa227b7275
Validity
Not Before: Feb 9 11:00:17 2026 GMT
Not After : Feb 10 11:00:17 2026 GMT
Subject: CN=6122840fbac97e80d031e191e9a84dee34555397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:05:19:bc:e7:aa:88:30:c6:b9:a1:66:11:77:
90:5e:67:a4:ef:5a:09:6f:1d:cf:89:b4:01:b5:b0:
82:d3:f2:c5:ea:19:3d:f3:7f:89:78:31:6e:61:32:
11:56:02:78:d9:88:02:aa:a3:a9:50:9f:4d:bf:c3:
62:48:90:b7:c4:40:86:bb:d2:07:cc:08:e4:ed:aa:
51:f5:fa:e2:9c:aa:c1:ff:55:ab:fc:24:8b:18:91:
72:a8:e1:54:f6:b1:37:30:01:78:2b:10:43:f1:9f:
18:31:90:3f:d5:08:8f:83:45:5a:68:02:7a:00:45:
44:ca:54:8c:81:ac:af:a3:47:b5:f2:f5:59:37:39:
88:7a:76:88:27:5f:91:33:e5:78:b0:0a:38:23:ba:
3b:7b:9b:15:5e:1f:42:22:d7:eb:ca:de:ed:88:f2:
14:01:29:5e:ef:0c:01:23:37:60:93:d6:27:a1:30:
f6:11:ff:c1:b5:ab:cf:23:1a:bd:e1:b9:73:6b:e4:
4d:43:7b:c6:a7:e4:ed:3b:94:f8:e4:1a:9e:26:43:
35:fb:3c:8d:7f:d7:90:62:cf:57:0a:fa:59:1b:09:
bd:a1:4f:95:09:d6:56:78:65:b3:f3:c9:16:d3:60:
34:cf:d1:7e:c2:ab:4a:65:ba:6f:72:2b:31:88:9e:
08:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:22:84:0F:BA:C9:7E:80:D0:31:E1:91:E9:A8:4D:EE:34:55:53:97
X509v3 Authority Key Identifier:
keyid:2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ef:f4:02:ca:4e:f2:dd:fb:a1:13:1a:3c:76:3a:10:15:83:
95:10:d8:d4:6f:0a:f3:41:89:95:11:43:bb:76:46:40:e8:9e:
56:73:fc:d3:06:a6:07:74:c8:24:0c:72:8c:fd:2e:be:ff:6b:
1a:97:a0:31:16:e6:30:93:74:0b:67:35:cf:5e:28:57:50:01:
4c:8c:0c:d7:cf:ab:9b:d7:44:2a:43:df:ab:e6:c4:d3:b5:8a:
bc:4c:6f:dd:53:05:b2:c9:dd:a5:d1:26:5c:0b:71:84:a9:51:
57:5e:75:e4:bb:ee:54:9c:01:78:e7:0f:c5:0a:2e:f3:95:5e:
03:5f:d6:ff:93:8a:a1:6c:e5:47:6a:ff:5d:d2:13:5a:c3:a3:
c1:d2:64:d0:14:27:fd:ed:69:1f:72:85:01:69:e3:2a:59:43:
31:8f:07:64:9f:2b:b7:91:2f:f0:5d:24:2d:82:14:23:78:53:
14:a0:ac:3b:87:7e:3e:0c:d3:ee:ed:ce:12:6f:2a:98:22:1f:
5c:16:7d:ce:5a:dc:91:8d:9c:92:12:f0:68:61:c0:37:57:3e:
6a:9d:a8:0b:b9:5b:12:83:1c:bc:66:2c:86:2c:c6:4f:69:c1:
a1:13:5b:c8:a9:e6:5c:39:6e:08:33:d7:d9:8b:f8:1a:29:5d:
56:4b:33:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:13 2026 by rpki-client