This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
File: L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft (raw, json)
Hash identifier: Us/oJX+dRn1iofuxLD5z9Lh97FeGHABzCl7OgG9uOB0=
Subject key identifier: 5F:6E:E7:D9:C3:A5:A5:44:25:76:14:AF:ED:A9:EB:94:35:68:3A:BB
Authority key identifier: 2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83
Certificate issuer: /CN=2fe5b7ccb403d30a44857d47c58cf1346546d283
Certificate serial: 019BF83FBA065F5C6399B6710F3D6E4545D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
Manifest number: 17EA
Signing time: Mon 26 Jan 2026 03:01:24 +0000
Manifest this update: Mon 26 Jan 2026 03:01:24 +0000
Manifest next update: Tue 27 Jan 2026 03:01:24 +0000
Files and hashes: 1: 3RBCVkBsQ6_V7wN6k9fIFJdSpp8.roa (hash: nfpey2pShwBixsacoxSoNyyC/Cgr+HILJV9+oDPT+a0=)
2: L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl (hash: u3TAspnTAlwzknYhwmyN7LSSak8R31eMn3JT0GkkFDg=)
3: Wx0tuGvy7Ik_CwijVq0hyyYCJNE.roa (hash: F7OSj77dk7wzXt/at0+fTmTHxHYJ8OWNXq9VDQhTOcs=)
4: xfyMUvyO8DDhcxSBKaxnnxjvYhc.roa (hash: W6rHIx7iAQO/hl2oAqLrj2UwizqFE2L+eavtuywb88I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:3f:ba:06:5f:5c:63:99:b6:71:0f:3d:6e:45:45:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe5b7ccb403d30a44857d47c58cf1346546d283
Validity
Not Before: Jan 26 03:01:24 2026 GMT
Not After : Jan 27 03:01:24 2026 GMT
Subject: CN=5f6ee7d9c3a5a544257614afeda9eb9435683abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:65:a6:96:78:90:4f:9b:ae:c3:c5:4e:2d:98:
7d:b3:14:41:32:ff:5d:4a:bd:28:f5:a5:85:21:ab:
fb:58:9f:10:d4:ed:d7:88:ac:0d:96:57:e1:58:fc:
d7:fa:4e:5a:d7:4c:7a:94:ed:f4:6b:72:39:51:03:
d7:e2:18:26:9a:85:94:10:45:f6:53:e2:8c:37:1b:
8c:ba:d3:eb:b9:29:6f:45:7e:7b:d4:a9:b9:4d:5e:
5e:1f:9a:61:d4:63:75:53:ad:1d:c8:3c:65:c2:50:
09:ec:46:76:32:ca:9f:65:04:e2:d1:49:4b:8f:3b:
70:29:b7:04:4e:fb:fb:50:bd:97:5c:bd:d9:9a:65:
65:70:c0:ae:51:7d:9d:d9:cd:65:7e:24:4e:61:63:
5f:d7:ee:7a:fb:20:10:e6:41:f1:1e:12:3a:8e:82:
a7:be:9b:4d:0e:9a:8b:f8:fb:dd:aa:f9:ed:c4:2e:
fc:32:80:d4:5e:2a:8c:77:cc:03:0d:79:37:54:16:
8c:e6:28:1e:ed:85:b5:f4:49:50:6f:a2:82:fd:26:
0a:65:2a:88:b3:94:41:56:26:bc:d3:c2:47:55:dd:
b1:2a:a0:63:95:1f:fe:e8:f0:ad:9d:82:41:fb:ec:
fb:a5:a8:65:e4:c6:da:54:3f:ac:d9:ae:3f:83:43:
3f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6E:E7:D9:C3:A5:A5:44:25:76:14:AF:ED:A9:EB:94:35:68:3A:BB
X509v3 Authority Key Identifier:
keyid:2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:23:6f:3b:61:9d:43:9a:90:32:7d:5c:db:5a:b6:db:f1:3c:
79:3c:c9:df:53:ff:86:0c:21:15:ae:6f:25:65:03:fe:49:53:
3d:c4:64:48:1b:fc:fe:37:75:38:2f:bf:ba:23:1e:ea:01:65:
f0:72:47:ff:21:54:9c:10:f1:e8:29:ef:f5:de:5e:b0:62:75:
8d:a2:98:8a:73:e8:49:a6:30:74:21:13:d1:c1:e8:d6:94:63:
30:52:93:66:f5:ae:6c:90:10:bf:7a:c6:25:85:96:d5:8a:04:
56:5b:13:f0:0e:bb:8e:fd:20:b3:7c:08:86:a8:82:5e:6d:f1:
df:05:29:71:40:2e:63:e4:e5:97:17:91:dd:27:a5:25:50:2a:
3f:dc:1e:24:af:f7:7f:6b:b3:e2:61:2a:40:68:20:44:ed:fc:
a5:23:94:e2:47:4b:a9:e3:57:b8:fe:5e:fa:76:29:6b:02:fd:
7b:66:40:fc:8d:de:dc:13:af:b0:45:0c:c2:13:08:a1:4f:4d:
22:de:eb:a3:c0:9b:f9:07:7b:5b:6a:a8:4c:a0:36:05:0b:1f:
4b:1d:b5:db:4e:db:a3:af:0a:9f:bc:f0:f7:4d:13:fe:06:6d:
4f:0a:e2:5d:6b:9d:af:35:29:c9:12:a9:c5:4f:6e:57:7e:e8:
11:79:ec:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:46:59 2026 by rpki-client