This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
File: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft (raw, json)
Hash identifier: I0NtTahDgc5UgDrcmdfdRXC1MDxpso3j47HbpNfINSc=
Subject key identifier: 95:96:BE:0B:30:1F:4B:C2:CE:BD:A9:EB:1E:16:78:8B:65:6D:FB:FC
Authority key identifier: 2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
Certificate issuer: /CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Certificate serial: 019BF6F5AE381B55CFAF0EAAD84D9F8E3CF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
Manifest number: 17ED
Signing time: Sun 25 Jan 2026 21:00:54 +0000
Manifest this update: Sun 25 Jan 2026 21:00:54 +0000
Manifest next update: Mon 26 Jan 2026 21:00:54 +0000
Files and hashes: 1: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl (hash: 0p2v8F71lsCSEuPtUoQ2dAuMn8BSuq+jJWI7HXLssmw=)
2: cbu2nsq0_E-KnigNEJpP4D0mZdA.roa (hash: atZeFfSMWx6yJCaBl0p4VHQ5do/K238XneHi5TYWvrI=)
3: kAVnp8aXF-jNnIEpkFtrGOjA71Q.roa (hash: ZozqlRSOeS+zKJOBns48YstVdkSISYcGeUrQVUA0HJM=)
4: nUrWqoPlEcK0XKJOG-oMfsZtnp8.roa (hash: ybZD4RQkjzxlQtQy6MswWNgOU2zvBWHPKmFz1vKMzKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:f5:ae:38:1b:55:cf:af:0e:aa:d8:4d:9f:8e:3c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Validity
Not Before: Jan 25 21:00:54 2026 GMT
Not After : Jan 26 21:00:54 2026 GMT
Subject: CN=9596be0b301f4bc2cebda9eb1e16788b656dfbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ce:9e:73:20:20:97:6f:3d:67:5d:79:9a:4c:
0f:89:63:24:88:50:40:a2:0d:90:34:b8:58:22:2a:
26:71:04:7d:14:2f:f0:fd:36:f4:cf:b7:5e:7b:b8:
65:0c:09:df:76:8f:b2:8f:e4:92:18:41:04:5a:d2:
cb:75:1a:06:ec:c5:9e:6f:19:23:87:78:7b:c7:cc:
16:71:2a:90:f5:77:45:d0:4c:c9:9f:fa:f4:f0:b2:
d6:cf:b2:80:c5:3e:d3:53:d8:13:23:78:48:c5:f8:
ad:70:7e:d3:4f:e9:31:42:06:2d:1e:81:e9:b9:25:
e9:69:14:2e:4f:44:61:8f:17:d6:09:f1:12:63:2f:
5f:29:cc:70:08:5a:7d:5c:10:63:bd:b3:5b:59:67:
7f:b2:4b:aa:36:80:2a:ea:54:0f:7a:c7:39:86:b1:
a0:a2:a6:a7:e4:94:b9:64:1f:11:bb:7b:4f:ff:77:
8e:e7:54:4a:61:d8:bf:7c:44:cf:ac:e0:cd:7c:f7:
e7:7c:57:ea:33:06:20:ba:d2:be:c6:7a:75:69:19:
1d:52:71:4a:55:f0:81:c2:96:cf:36:22:22:9f:8d:
6c:db:5a:09:55:72:fd:0a:96:e7:b3:6b:95:94:3a:
2d:ef:5b:b4:0e:40:65:83:9b:17:34:72:ee:e9:86:
fb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:96:BE:0B:30:1F:4B:C2:CE:BD:A9:EB:1E:16:78:8B:65:6D:FB:FC
X509v3 Authority Key Identifier:
keyid:2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:90:bc:08:16:b3:47:27:eb:ef:70:5f:7f:cc:87:d7:08:db:
3a:3d:2a:f8:09:7a:65:4c:6b:2d:61:2e:5f:22:1b:ec:f4:5f:
9b:c4:31:f6:79:86:ec:2c:1b:df:3d:95:4b:8a:ef:70:ea:de:
f1:ca:dc:35:f7:ce:39:87:c9:dc:ba:5b:38:4a:a5:97:ee:29:
93:3c:1f:72:7b:88:9c:84:14:86:f4:46:3e:c5:60:61:5d:94:
05:82:86:46:31:5e:3b:a0:81:18:97:05:9e:52:ce:92:64:65:
f5:60:4f:84:b9:46:6f:71:4c:43:ab:62:1a:d2:58:f7:fb:22:
c2:d9:f0:c1:8c:e0:74:91:e4:0a:af:4c:0d:9a:cc:b5:51:d8:
e9:98:cd:d2:99:af:d1:a5:f2:cb:bf:5e:4c:e2:0c:b6:92:64:
95:15:f5:fa:9d:d0:a1:05:fd:24:4d:b9:5b:dc:fd:9c:f3:e7:
10:31:a0:00:0a:18:f1:19:3d:08:9e:1d:e3:e9:ba:18:2d:28:
7a:51:cb:37:0c:55:a4:2b:7e:a4:65:ea:e0:97:76:81:fb:c4:
5c:38:04:f0:6b:0a:72:ff:1c:e9:11:af:51:b7:03:79:0e:d6:
7d:7e:b5:06:9e:8b:4a:7d:56:3f:f9:f6:cc:c8:06:e3:b1:55:
98:82:28:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv29a44G1XPrw6q2E2fjjz4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkOWUzMWM5MDI5ZWU0NGJkNjgxYjUxNTMzMDMzNWM2YTFj
ZmRlZWUwHhcNMjYwMTI1MjEwMDU0WhcNMjYwMTI2MjEwMDU0WjAzMTEwLwYDVQQD
Eyg5NTk2YmUwYjMwMWY0YmMyY2ViZGE5ZWIxZTE2Nzg4YjY1NmRmYmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2M6ecyAgl289Z115mkwPiWMkiFBA
og2QNLhYIiomcQR9FC/w/Tb0z7dee7hlDAnfdo+yj+SSGEEEWtLLdRoG7MWebxkj
h3h7x8wWcSqQ9XdF0EzJn/r08LLWz7KAxT7TU9gTI3hIxfitcH7TT+kxQgYtHoHp
uSXpaRQuT0RhjxfWCfESYy9fKcxwCFp9XBBjvbNbWWd/skuqNoAq6lQPesc5hrGg
oqan5JS5ZB8Ru3tP/3eO51RKYdi/fETPrODNfPfnfFfqMwYgutK+xnp1aRkdUnFK
VfCBwpbPNiIin41s21oJVXL9Cpbns2uVlDot71u0DkBlg5sXNHLu6Yb7fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWWvgswH0vCzr2p6x4WeItlbfv8MB8GA1UdIwQY
MBaAFC2eMckCnuRL1oG1FTMDNcahz97uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFo0eHlRS2U1RXZXZ2JVVk13TTF4cUhQM3U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNWQ4OTYtMmY2OS00Njk3LWE2ZmMt
MDhkYTY2NTJhODY3LzEvTFo0eHlRS2U1RXZXZ2JVVk13TTF4cUhQM3U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8xNWQ4OTYtMmY2OS00Njk3LWE2ZmMtMDhkYTY2NTJhODY3
LzEvTFo0eHlRS2U1RXZXZ2JVVk13TTF4cUhQM3U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5C8CBaz
Ryfr73Bff8yH1wjbOj0q+Al6ZUxrLWEuXyIb7PRfm8Qx9nmG7Cwb3z2VS4rvcOre
8crcNffOOYfJ3LpbOEqll+4pkzwfcnuInIQUhvRGPsVgYV2UBYKGRjFeO6CBGJcF
nlLOkmRl9WBPhLlGb3FMQ6tiGtJY9/siwtnwwYzgdJHkCq9MDZrMtVHY6ZjN0pmv
0aXyy79eTOIMtpJklRX1+p3QoQX9JE25W9z9nPPnEDGgAAoY8Rk9CJ4d4+m6GC0o
elHLNwxVpCt+pGXq4Jd2gfvEXDgE8GsKcv8c6RGvUbcDeQ7WfX61Bp6LSn1WP/n2
zMgG47FVmIIoKA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:38:32 2026 by rpki-client