This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
File: l79b5z8YIydEmN9So3U10T2lvmI.mft (raw, json)
Hash identifier: Dn45SE71lkw9O6N8Nq2QhuFltJ5pdUERU+9/yOCW1hg=
Subject key identifier: F0:A7:58:48:A2:FF:32:2D:F5:5C:B4:5A:D2:58:C9:64:1D:7D:98:E5
Authority key identifier: 97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
Certificate issuer: /CN=97bf5be73f1823274498df52a37535d13da5be62
Certificate serial: 019C427DB7B6FDC77E747467F23E776B1C6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 13:01:01 +0000
Manifest this update: Mon 09 Feb 2026 13:01:01 +0000
Manifest next update: Tue 10 Feb 2026 13:01:01 +0000
Files and hashes: 1: DE6qzK8ZbTdn2sj6nzXv59atG6c.roa (hash: 9YeaePMUl74JdFaiRSC0VTGbzx1hAN55igQj80uecEQ=)
2: l79b5z8YIydEmN9So3U10T2lvmI.crl (hash: fttmeFbl4w3OLRnAzvqhl6SFvff2eqQwkmweeiMsv5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:b7:b6:fd:c7:7e:74:74:67:f2:3e:77:6b:1c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bf5be73f1823274498df52a37535d13da5be62
Validity
Not Before: Feb 9 13:01:01 2026 GMT
Not After : Feb 10 13:01:01 2026 GMT
Subject: CN=f0a75848a2ff322df55cb45ad258c9641d7d98e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:73:34:2c:17:93:d3:69:cb:d9:25:cd:72:94:
c7:c3:60:70:aa:60:f2:19:59:0e:33:49:e6:53:3e:
39:79:59:83:7b:4c:fe:37:fb:19:c2:78:cd:fb:0a:
fa:3e:d1:ad:d1:24:17:e1:1a:d7:d9:66:24:fc:a6:
53:91:1f:fe:48:f8:3f:6a:7b:64:14:32:d8:3d:18:
d8:14:08:87:74:90:35:2a:66:3b:22:29:2e:75:3a:
bc:66:c0:e5:c8:1a:f9:6c:e4:eb:49:72:d2:2a:31:
e0:c7:86:cd:de:68:11:29:fa:19:5d:60:42:81:85:
2c:e8:0a:0f:31:05:79:7e:8d:7c:87:bb:e6:25:6c:
bf:6c:74:58:30:71:15:97:cd:64:16:cd:51:1c:15:
2d:85:bb:fb:3f:f8:1f:3a:ae:43:47:17:c2:09:8c:
08:65:60:db:ee:3e:35:e6:f4:10:52:1a:1e:1f:2e:
a5:db:67:fc:05:f3:cb:49:30:e6:ff:0b:26:51:ae:
ca:b0:56:e8:81:00:2a:d1:86:b6:9a:08:1d:12:16:
f9:c4:b5:21:56:30:7e:54:76:24:8a:e8:6c:52:3a:
95:a2:de:64:de:51:c3:5d:9b:44:f4:52:58:31:b1:
48:35:25:92:a6:27:77:28:03:d9:aa:ac:10:ed:1d:
7d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A7:58:48:A2:FF:32:2D:F5:5C:B4:5A:D2:58:C9:64:1D:7D:98:E5
X509v3 Authority Key Identifier:
keyid:97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:5e:38:90:23:91:70:7e:28:fc:81:e7:7a:c6:6f:74:1f:2f:
c0:0f:5d:55:29:14:47:40:31:5e:04:fc:f5:ab:b8:99:f1:0d:
31:d3:40:68:21:2d:db:1b:ae:0a:c3:f5:30:0d:02:30:0d:61:
25:35:90:ce:1a:d0:c2:1c:10:3e:0a:d5:b4:0f:a4:88:7e:99:
ed:c6:ed:54:85:54:e6:0c:e5:45:1c:37:0f:8e:09:37:86:07:
16:c4:11:3e:7b:83:26:be:14:c3:aa:ca:0d:24:6b:2f:7c:bf:
bc:cf:76:cf:bd:34:31:42:fc:87:e4:a7:d8:7e:f0:50:43:04:
b6:a1:08:f6:fe:f6:eb:86:e6:3f:a5:cb:8b:81:50:0a:61:6c:
e8:68:c2:7a:c5:3e:5d:fb:4c:06:38:cd:95:b3:b0:be:4b:1d:
b5:60:f3:15:6e:7b:fb:b4:f2:50:d7:99:b4:f6:f2:ea:bd:6e:
d8:5b:69:30:42:ca:8f:6e:94:8e:ee:85:8f:5d:17:f5:32:f5:
41:e3:5b:5a:09:b3:e6:2a:fe:71:31:37:54:ab:0a:3e:58:8e:
54:c6:52:d4:5c:23:1b:b6:0d:2c:82:50:be:82:5f:57:ec:5f:
5e:44:2f:59:e1:8b:0c:a5:28:b9:5e:00:ff:49:d1:f8:a7:00:
99:26:36:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:13 2026 by rpki-client