This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
File: lCKVhDGvU0e_2A41UD3bSOcc9NY.mft (raw, json)
Hash identifier: p/VP82vBltyRelp12+BICppkGtUQX9x8zP3xh/CTGLs=
Subject key identifier: 85:D2:4C:C8:FE:A0:40:1E:A4:6C:F0:8F:10:94:F5:88:3A:0B:CA:46
Authority key identifier: 94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
Certificate issuer: /CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Certificate serial: 019C420FFD4C49FABF77C076523AC2D51C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
Manifest number: 0744
Signing time: Mon 09 Feb 2026 11:01:09 +0000
Manifest this update: Mon 09 Feb 2026 11:01:09 +0000
Manifest next update: Tue 10 Feb 2026 11:01:09 +0000
Files and hashes: 1: SvlUHPEW1JYqvcx4Sig5w6ZvEs4.roa (hash: 3dzxteST3Sn7w/rnwxT18SvADMJCfIyrcHE037Z9lyU=)
2: lCKVhDGvU0e_2A41UD3bSOcc9NY.crl (hash: tQZjlrRAZrpxSlgeVNgj0LP6oPfT/NNvXwHTA6M/wPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:fd:4c:49:fa:bf:77:c0:76:52:3a:c2:d5:1c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Validity
Not Before: Feb 9 11:01:09 2026 GMT
Not After : Feb 10 11:01:09 2026 GMT
Subject: CN=85d24cc8fea0401ea46cf08f1094f5883a0bca46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:70:42:e0:80:82:3d:e9:33:f3:5d:53:9e:
46:51:5b:f6:a1:c7:cc:5f:65:3e:ea:0c:1a:d2:f5:
cd:0e:49:33:41:ad:14:d8:2c:0c:08:3a:ef:4f:5a:
cd:89:51:ac:16:98:94:8a:06:a7:b7:16:07:c5:32:
c4:13:dc:2d:d5:f4:a3:b7:2a:11:fb:c0:d1:8f:1e:
58:20:43:f8:5b:ff:d1:79:51:f6:2d:9b:2c:5a:84:
bc:de:c1:b6:55:06:b4:03:5a:fe:4d:6d:d3:9c:df:
91:52:2a:05:33:c5:ec:11:0b:46:ba:07:98:8f:1c:
12:bc:b7:c8:a7:2c:81:52:df:ab:cb:b6:ef:58:a4:
98:04:c2:dd:bd:24:9a:00:97:59:35:59:48:99:57:
2f:bd:21:fe:c3:16:26:12:1d:d7:d7:87:a4:a5:8c:
e4:72:2c:18:c4:94:58:c3:bc:eb:d2:c6:b6:1d:09:
bf:82:30:b5:30:8a:98:23:4c:4f:05:21:38:ff:d1:
f0:a7:53:99:c6:1a:b3:5c:27:5a:55:d6:3b:8f:52:
7b:3b:15:7b:12:f1:06:4e:9d:97:de:29:0d:39:1c:
f2:29:04:3a:6c:a2:77:05:d3:e9:9d:8d:8e:3f:00:
65:fd:07:68:0e:fd:93:52:5a:c6:3f:91:9c:08:4d:
ef:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D2:4C:C8:FE:A0:40:1E:A4:6C:F0:8F:10:94:F5:88:3A:0B:CA:46
X509v3 Authority Key Identifier:
keyid:94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:bf:54:28:0e:92:1d:d6:15:d5:4b:62:95:83:48:07:0f:cd:
4a:c9:49:03:75:85:d8:ab:cc:68:17:a7:1c:e2:4f:10:c8:9d:
1c:e2:9e:5f:91:b5:76:4e:64:15:b2:0a:e3:1e:4e:31:2a:de:
fd:8c:3d:8d:53:5e:57:7c:c1:02:a7:f1:89:e1:90:4a:fc:47:
f3:87:97:c7:58:cf:6e:6a:33:81:de:5e:6f:91:eb:69:a8:ae:
c1:23:be:ea:01:ce:e4:f6:65:8e:66:df:a1:66:c8:01:62:c4:
1f:bc:57:8a:c5:14:71:57:9a:37:e0:fc:d8:77:cf:88:65:57:
15:5d:d8:9b:4d:bd:88:f9:f5:c8:9a:ea:26:2d:58:4d:87:40:
81:8d:7a:9e:1a:1b:7b:cb:55:1c:94:bf:d6:f4:8a:ba:fd:dc:
ff:13:67:3a:7c:f5:e9:62:a4:a4:8b:e0:01:4e:39:0f:91:d7:
f6:44:45:2b:bc:48:9e:1e:5f:5d:d9:02:cb:56:b0:6b:84:5e:
8e:58:18:cc:0c:57:34:ce:a6:66:6e:31:27:ec:be:bd:f9:fc:
75:a6:5a:e2:c1:6a:7f:7f:a3:9d:0d:b9:44:e4:5b:a5:55:9e:
88:7d:ec:4e:99:5d:cc:14:99:0e:5e:28:e4:a9:84:b3:43:d2:
39:41:69:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:53:26 2026 by rpki-client