This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
File: lhud90XDLfJ98z68_VNvGeE0dP4.mft (raw, json)
Hash identifier: 08zZ3gYDHI4huwiCnDhe0qmlXlwLp3tjfMWk3uetYs0=
Subject key identifier: 04:C9:85:68:AF:BB:1B:3D:64:43:03:3C:F7:F1:49:F9:A1:DB:43:21
Authority key identifier: 96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
Certificate issuer: /CN=961b9df745c32df27df33ebcfd536f19e13474fe
Certificate serial: 019BA5A2A649C84CE36EFD0CF021BFFA0C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
Manifest number: 10D9
Signing time: Sat 10 Jan 2026 02:00:58 +0000
Manifest this update: Sat 10 Jan 2026 02:00:58 +0000
Manifest next update: Sun 11 Jan 2026 02:00:58 +0000
Files and hashes: 1: Rf4ua2gShCgNnsbPUQ6ubuJBV1k.roa (hash: tSFC9dWk5W60HWYLlM+PiN1UjypysKUpyAViK3s11Fw=)
2: Uxtr-atmnNBITnladLThcv7huIU.roa (hash: n7M6NPbamAy18kfeXWpn06XaPUvf5LbKfUxiapVP6+w=)
3: cd4PR_7Zwc-Jv_h3ekBVWiw0K-0.roa (hash: HpbyUUXySxZasQuBBURj008LhTbNYYQxJ+uuJec1F1s=)
4: lhud90XDLfJ98z68_VNvGeE0dP4.crl (hash: aByf+cUkIkIjq3J5OIq+hUU8G5B044tXBeAYozFNAh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Jan 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:a5:a2:a6:49:c8:4c:e3:6e:fd:0c:f0:21:bf:fa:0c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961b9df745c32df27df33ebcfd536f19e13474fe
Validity
Not Before: Jan 10 02:00:58 2026 GMT
Not After : Jan 11 02:00:58 2026 GMT
Subject: CN=04c98568afbb1b3d6443033cf7f149f9a1db4321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7e:9c:8d:08:67:01:03:32:30:2b:19:d3:ad:
87:4e:8b:68:a6:f4:57:ef:2b:a0:87:dd:de:cd:8c:
04:b4:5b:99:5a:bc:cb:04:50:30:4e:51:dd:a0:b5:
4f:eb:36:ce:73:1c:7c:4c:6e:a8:36:c7:9e:8f:55:
bd:42:63:56:b6:8c:22:37:c3:11:60:c6:00:e1:24:
8f:1f:6f:b4:8f:e6:51:de:6a:ff:8a:9a:fa:75:3a:
23:f8:5f:4c:5d:1c:11:67:1c:1a:42:18:6c:2a:63:
8a:12:38:10:ff:be:cb:fa:92:24:65:f1:40:d3:19:
7b:41:6a:8c:63:69:8f:4c:94:3f:27:c4:ce:85:81:
14:bb:ab:ee:cd:b7:dd:8c:c7:e8:dd:2b:37:aa:48:
18:41:5b:14:97:1f:5a:2f:a2:0a:30:d3:f2:5a:48:
76:99:8c:eb:69:dc:e3:60:ab:5b:9d:bc:5f:68:96:
99:16:f7:93:83:06:a8:86:8a:2b:e9:5a:55:eb:13:
c8:9f:82:a0:91:7b:a6:76:02:8e:11:48:bf:6c:04:
76:89:45:7c:00:66:a9:8a:b5:05:0f:5f:e2:26:8e:
00:35:ee:40:a9:66:57:b0:10:97:d3:ba:23:aa:c4:
01:50:88:5a:31:4d:c5:33:54:ee:9f:83:b7:71:63:
f0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C9:85:68:AF:BB:1B:3D:64:43:03:3C:F7:F1:49:F9:A1:DB:43:21
X509v3 Authority Key Identifier:
keyid:96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:6d:fb:18:0e:8a:34:04:25:6b:9d:3e:19:00:55:fb:93:69:
99:0d:ec:5f:d2:63:94:c6:8f:d8:6d:47:c3:b1:88:3a:29:df:
10:d6:bd:da:b0:a1:ed:94:55:62:f5:3e:d0:c4:12:e1:13:78:
12:d7:99:3f:de:63:de:e5:3d:c3:ca:ca:ac:22:fe:9a:8b:de:
5e:5e:14:57:ea:2b:33:9d:93:15:f5:5d:a8:16:d2:ab:55:1c:
59:9d:99:eb:b0:e7:63:9d:29:2e:66:0d:d4:13:1b:a0:af:29:
35:d8:c4:90:eb:b4:26:7a:03:34:10:69:67:e5:e3:7f:15:50:
0d:69:8c:3e:84:6b:37:ac:e9:10:87:6d:4b:89:c5:9b:6d:29:
80:39:04:3f:df:5a:c0:7f:e6:1f:e5:fa:1c:7a:6c:85:38:14:
64:a9:0e:f8:14:9c:cb:07:5e:d5:aa:2a:33:fb:98:8a:da:bf:
b3:34:eb:a1:94:3e:ca:4b:16:15:a7:fd:53:ca:e4:40:cd:08:
c7:f3:9e:5f:3e:9b:c1:af:64:28:8f:80:ff:a4:92:f1:ef:27:
da:1d:c8:b6:07:3b:ea:da:81:6c:6b:0c:49:41:f8:51:eb:d6:
56:34:a1:c7:d5:23:d3:94:20:da:74:22:0c:54:c8:26:be:92:
40:39:a3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 06:56:17 2026 by rpki-client