This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft
File: LS19l0PeLvovYzN4omj1jyqhYFA.mft (raw, json)
Hash identifier: 3y7+wmJJt0Fhn/ROCuUo5ES44nzJMnJWqc3iQZxad7g=
Subject key identifier: 53:70:A0:E4:15:B5:B8:45:9C:11:C6:F6:5F:3D:83:E1:96:2D:3B:06
Authority key identifier: 2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50
Certificate issuer: /CN=2d2d7d9743de2efa2f633378a268f58f2aa16050
Certificate serial: 019BF8762243AFF427E8EC690CBEEDF41B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft
Manifest number: 1699
Signing time: Mon 26 Jan 2026 04:00:50 +0000
Manifest this update: Mon 26 Jan 2026 04:00:50 +0000
Manifest next update: Tue 27 Jan 2026 04:00:50 +0000
Files and hashes: 1: ET_38wfdzhJ7U1tL6nGbfTENNIQ.roa (hash: SCP22drV5yjMaMO6Qyzik8RwzK7qK47hYUDCwnDNJ2I=)
2: LS19l0PeLvovYzN4omj1jyqhYFA.crl (hash: sSyzQJJH7EU7ze/oqlIOORyVGBggYEnVPbE7OMW49jw=)
3: XHs1m3SRKcYSslJybhJTMzxM9-c.roa (hash: A0erFAS1Db0vVamA672kEgwbEmWDzDENo+wHPI/ufmU=)
4: g2QaSslIEgo7FZj53UBiSTtFk-4.roa (hash: 6A+YhHwe2IJ834GJkC/1/7bS6gTkAl2WRDOeCCEHr98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:76:22:43:af:f4:27:e8:ec:69:0c:be:ed:f4:1b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2d7d9743de2efa2f633378a268f58f2aa16050
Validity
Not Before: Jan 26 04:00:50 2026 GMT
Not After : Jan 27 04:00:50 2026 GMT
Subject: CN=5370a0e415b5b8459c11c6f65f3d83e1962d3b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:b1:1b:f0:d0:01:68:e8:2d:02:c8:bf:0f:
c0:92:1a:06:83:3d:e4:8a:5a:38:96:54:44:c6:2a:
9a:c2:ce:c8:bf:05:8b:4e:22:84:62:75:20:99:2f:
f9:cd:98:c2:34:e0:6a:86:69:5d:89:a3:c0:d0:de:
91:99:7f:a6:86:59:66:4c:d7:93:38:4f:d0:0e:3b:
db:e1:8d:d7:c8:9d:d6:d6:a0:16:bd:d9:d9:d7:06:
5f:21:27:ff:6a:d1:8f:16:c1:a5:3c:a2:b6:76:62:
84:7a:d5:6c:01:37:01:12:55:c0:87:70:7f:2a:c9:
cf:4c:bf:97:49:40:59:20:b1:9d:c2:12:92:42:29:
27:dd:ed:e3:95:fb:c0:d4:2a:c1:7a:77:a1:24:9b:
7f:40:22:75:1f:6d:75:40:32:6c:1a:5f:b6:8a:65:
73:1f:2e:97:0a:02:90:29:29:14:34:af:06:ed:3d:
0a:6f:1b:02:c2:2c:11:d7:8d:66:5c:63:52:4f:b6:
96:6a:5b:c8:fd:5a:e2:b1:26:fe:03:b5:b3:b2:b5:
0a:bf:73:b3:78:ae:60:78:e5:5e:94:4c:4e:e7:ec:
0c:1f:1c:e0:c2:d0:ea:46:b6:95:69:5e:02:11:2d:
e3:b2:6d:75:53:2a:6d:52:fb:e2:44:fe:77:e3:c4:
73:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:70:A0:E4:15:B5:B8:45:9C:11:C6:F6:5F:3D:83:E1:96:2D:3B:06
X509v3 Authority Key Identifier:
keyid:2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a7:3e:04:61:d5:96:98:99:72:4f:62:40:f2:e0:73:b1:ca:
17:42:c4:60:21:4c:0d:62:f0:75:d9:a0:f6:c4:8d:50:3b:b6:
e4:1a:a6:bd:0d:4b:aa:9e:03:74:c3:b3:75:f4:e4:7d:fb:94:
d9:e3:ec:8a:72:d0:3e:07:d9:54:85:7b:b5:f2:a7:a5:09:18:
8c:b6:04:d0:cf:86:d1:26:a5:b7:e2:44:76:2c:0d:92:13:3c:
0a:da:36:b0:ed:50:7a:7e:01:27:f7:e6:75:88:90:fe:80:11:
88:58:33:ef:be:29:17:88:a5:5d:fe:f1:0a:97:9a:52:49:e2:
9d:60:b9:73:e4:ad:c1:64:3e:0f:7f:fa:3c:4e:dd:aa:01:f4:
53:ca:45:d5:3c:90:47:8a:0a:11:56:cb:bc:a9:9d:a1:38:38:
f8:95:7f:d2:59:d1:75:7e:80:27:f7:97:c0:b7:0e:e0:dd:8f:
2d:46:b8:ed:a5:92:85:cf:ad:a7:65:93:a0:32:12:e8:26:f7:
8a:ce:1b:88:11:78:31:80:f8:7c:9f:50:88:82:55:c2:e7:b9:
93:e4:8a:ca:98:eb:d6:0c:e7:90:a8:f3:2d:ee:02:1e:20:be:
bb:c5:27:78:b2:b3:a0:02:9b:c0:0f:33:0f:d6:5f:7e:c5:d9:
29:7d:53:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 13:05:32 2026 by rpki-client