This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
File: L2pDTEtdI5xObkG35YXI1Y-Jlas.mft (raw, json)
Hash identifier: SQ2ygAvlPGed2yo4NVLH+y79v5tgscqVJgLaeQ83tro=
Subject key identifier: 83:A7:91:99:54:05:46:CE:BF:B0:FE:88:5B:65:88:42:87:F3:CC:23
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 019BF7D190B3541ACDAAADB47218B47A902A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
Manifest number: 15B5
Signing time: Mon 26 Jan 2026 01:01:04 +0000
Manifest this update: Mon 26 Jan 2026 01:01:04 +0000
Manifest next update: Tue 27 Jan 2026 01:01:04 +0000
Files and hashes: 1: 1meLaYKO2Tl3bhYSsOjqpf-iDLo.roa (hash: aO+cgckrFpHbMOnuICmuB1xPZYgfmGDfrFdfNUo8hwg=)
2: 5GG9Ao4ScwCTaqCwAi8GnKy-uIk.roa (hash: BbSg6kfepD5G3rCNp1AAX9gRiwipTBnqXkjrl5sWhEU=)
3: BN0rBq-tNCIxQPqmFjFDV44qYpk.roa (hash: jKAg3bTdZuNi/EJCwdlUsNQtwlFvyoL5tw2t5y9MU1I=)
4: HO2U7d5NcmWKb9JFFOS4xst6Ap0.roa (hash: jIkU93mIxfPKkS6ZV5Em7YZjODmsWtP1r4eJlBEyOBI=)
5: L2pDTEtdI5xObkG35YXI1Y-Jlas.crl (hash: E4dQNzgupf6ovgM5NbCfzEJ93BKO7z0Ik2fPk9fNSCQ=)
6: MPhp410gGVKP5mkd7p544bUnjxA.roa (hash: QAd6nrSjBEFE5oh4hmKUtP3RiDgmKVq2ERPv15zMcC4=)
7: PWFCC016ViMQwsbajGFaPsVXWpU.roa (hash: XU7EaVjH4kPpzpd1I6Ws6W/k6BLYUdpZHPYkfznROSU=)
8: R5nQRJbnGIfuNPFQmSy5KyUN1Ng.roa (hash: S8J2YibhrFYHi+05w7dwd4Hy2ZPqL9ZfsTP/e0tcqoA=)
9: SR_Oqw4W1f3U3vok1BVIM_3prOQ.roa (hash: xZRfZAtOOEJIXE0XPSwwSTYi/tKeXWXICqEFbpdqCLE=)
10: gu8Xb0EdAj5QQiEbcZUHWSiqy4o.roa (hash: Qu77EoHxyeTpqNbgaiHUpPIuYcauYq9nmWOzOey7QMY=)
11: mpmrecQwVOYmvfVxaJLiukg9_x4.roa (hash: B1r+y3fZ4meytzh/wyEnCsVKQg/wjvPbZszMmoslI5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:d1:90:b3:54:1a:cd:aa:ad:b4:72:18:b4:7a:90:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Jan 26 01:01:04 2026 GMT
Not After : Jan 27 01:01:04 2026 GMT
Subject: CN=83a79199540546cebfb0fe885b65884287f3cc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5b:92:b2:c2:d9:d1:64:ad:e3:32:91:25:a1:
f4:43:03:12:4e:eb:49:8d:1f:71:8c:32:67:41:b5:
d4:49:7f:96:4c:fc:08:0f:a9:d9:d3:6c:26:f9:c8:
da:ee:22:78:f4:2f:70:9b:d2:f1:ad:d3:4c:40:1a:
3b:68:60:23:f3:6d:e4:4e:39:e9:31:18:0d:88:35:
7e:66:44:8a:4f:42:bb:ea:94:56:f6:9b:b8:af:df:
7c:e2:27:0f:9d:9d:e8:60:cd:ff:17:89:a1:ec:6d:
24:69:cd:8c:9e:a1:2e:68:1e:6f:20:92:3b:be:e0:
f9:28:68:89:89:bb:5d:82:b3:43:9d:30:98:b3:d9:
0e:23:be:a7:1d:22:b7:8c:c7:e7:2f:7c:a3:12:14:
26:a9:eb:eb:52:a2:7b:2a:c1:ee:d5:4d:7d:38:ef:
88:8d:c4:58:5d:a4:df:4a:ed:1d:6b:4e:09:b9:77:
cd:d0:45:c9:9a:e4:79:51:f7:39:ae:5d:87:95:1f:
13:00:bc:4f:f3:15:91:9f:5a:78:2a:37:4b:32:d7:
2d:95:04:06:dc:92:df:d7:66:5c:2f:80:29:bd:28:
08:aa:20:5a:a4:54:b6:46:bf:e0:c0:9b:06:f0:1f:
42:36:bb:63:bd:15:57:df:dd:9b:e7:cb:de:31:e4:
53:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A7:91:99:54:05:46:CE:BF:B0:FE:88:5B:65:88:42:87:F3:CC:23
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:8e:35:00:d8:ff:8f:47:f5:96:77:04:99:94:9b:ff:94:72:
37:3d:ad:27:0f:5f:35:84:be:c1:a3:65:00:60:f6:53:f0:44:
61:b4:db:66:8e:46:f0:d7:21:71:2e:58:6e:b6:06:ec:18:36:
0e:be:f7:a3:fc:e6:f7:56:07:9c:a3:78:e6:9a:36:22:4e:0c:
2c:e2:60:60:f9:96:35:2f:32:71:56:e7:83:aa:89:70:1d:46:
6b:cc:38:db:43:2e:23:d9:c6:ba:8a:59:8b:5d:61:8d:e2:e8:
99:28:7c:07:6e:23:58:09:69:97:f7:79:93:65:fc:2d:24:61:
bf:6b:98:f3:b0:6a:53:42:80:f8:07:b0:ed:37:b5:f6:ae:d7:
05:fd:78:dc:9a:25:62:d7:f0:36:a3:f7:4d:b3:24:63:2a:85:
bc:02:e0:16:5e:76:72:46:1d:a8:03:30:06:d4:2f:f2:2e:78:
e1:46:c6:a7:03:df:2b:84:c2:2d:5a:a7:d2:7b:e5:67:66:7e:
ae:48:76:96:9d:40:1c:a0:c2:cc:db:b7:91:2b:bc:e6:ce:88:
98:82:e0:89:3a:49:49:bf:34:90:41:e1:94:1b:35:df:68:15:
9f:f2:51:3a:8b:e7:56:24:ea:9f:d5:c9:62:90:14:ee:30:31:
d9:9d:8e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:11:59 2026 by rpki-client