This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
File: u-LMINabMN3hjsDQAs4vkUm_sG0.mft (raw, json)
Hash identifier: KBQBTXNDbsz5jxUL/t+AeGI5Qvw7CaIF7n5iTDpUsSE=
Subject key identifier: BD:6B:BD:AE:57:92:D5:DB:7D:F3:B8:A0:97:D8:1E:99:DF:26:72:F9
Authority key identifier: BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D
Certificate issuer: /CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
Certificate serial: 019BF7D237E831CDADBB6AA00CA88B668E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
Manifest number: 028B
Signing time: Mon 26 Jan 2026 01:01:47 +0000
Manifest this update: Mon 26 Jan 2026 01:01:47 +0000
Manifest next update: Tue 27 Jan 2026 01:01:47 +0000
Files and hashes: 1: DXWKP3MB1lGDghFM-NJLvzILH4w.roa (hash: xZDooqBAiwnUkw67O91/SNOlEYAoGsWqbl+tv4wSxjk=)
2: IvYaWiyU4-mF6Hfr6yvUs-TfOx8.roa (hash: vzEeCN8mv8JAbDyh2EAs7UGT1vMJ7VBIlnfY4XE6ETA=)
3: iYgL9YAcXTZTdezPKH7kUPhkmN0.roa (hash: +UrmUxN9VwigyNaXGlHJ5mAa5ZCnHwM1WUcwK+R8j8E=)
4: u-LMINabMN3hjsDQAs4vkUm_sG0.crl (hash: i4sLnjz0UK1B9IPXL9YsUhiHCvVvDFhMC39W4nwj4Ks=)
5: yFDUf6JsuvyfXz0jEUOsaieGxCw.roa (hash: zP6gz/6pp44KQYvi0+M6T/CexJqf4xQ7LrlyWEsXUQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:d2:37:e8:31:cd:ad:bb:6a:a0:0c:a8:8b:66:8e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
Validity
Not Before: Jan 26 01:01:47 2026 GMT
Not After : Jan 27 01:01:47 2026 GMT
Subject: CN=bd6bbdae5792d5db7df3b8a097d81e99df2672f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5b:fb:13:e5:fa:9d:16:13:25:7c:be:4c:08:
6f:17:01:54:84:3f:b0:14:ca:d7:e9:d9:cf:c4:cd:
cf:3a:f2:35:00:4b:1a:50:26:c2:5b:9b:8c:9e:f7:
13:7a:29:ad:3d:20:1e:f6:77:59:1d:9d:f7:e2:42:
f4:cb:e1:34:a5:85:48:ce:c0:0f:40:f6:7f:93:3a:
77:da:f1:92:b7:f5:ab:86:d3:88:e6:02:c6:88:d5:
9f:e7:17:0c:35:71:4a:9b:06:24:81:25:ff:c2:35:
97:19:3a:e4:46:4a:47:32:62:4e:ef:7e:14:fc:61:
20:f3:d5:3e:6f:11:fd:98:a2:3d:c0:59:66:53:28:
16:d6:8e:7b:64:08:c8:ea:fb:27:b3:10:ac:89:2c:
d9:c3:8b:cb:dd:3f:f6:84:d8:37:6f:3b:a7:cc:93:
76:af:c9:f1:dd:d7:68:97:b8:3a:f9:a8:c8:ab:0a:
77:54:27:39:2a:48:cf:ca:dc:76:03:c8:00:a3:60:
7f:29:6e:89:2b:ca:ef:ff:11:e1:ad:f3:a6:ef:0e:
7a:53:8d:ca:ba:5b:fc:fe:35:33:82:87:b6:b9:2c:
b1:52:1c:1a:4a:40:21:b7:9b:6b:2e:fc:26:5d:62:
cd:02:38:c8:c5:8e:45:04:6c:16:f1:27:7b:da:ef:
04:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6B:BD:AE:57:92:D5:DB:7D:F3:B8:A0:97:D8:1E:99:DF:26:72:F9
X509v3 Authority Key Identifier:
keyid:BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:6e:88:b7:1e:21:20:fa:49:03:71:fc:73:5d:42:e0:db:80:
6a:a6:e3:ef:90:50:83:e4:bd:07:6a:0a:93:2b:a4:df:36:5d:
53:83:eb:00:67:3f:b3:a8:ab:27:87:6d:b2:0b:df:1a:12:02:
57:02:11:bc:05:a3:40:1b:ce:92:e6:b3:10:a5:97:78:b2:e2:
30:72:52:87:07:65:90:bf:af:d7:65:06:92:08:87:10:a1:84:
7d:cc:1e:03:c4:79:df:07:65:91:ab:76:8e:54:c9:ea:b9:8a:
02:e8:67:85:2e:b5:bb:ac:52:46:ce:b7:93:7e:55:c0:c2:59:
b3:97:06:b1:d9:f0:38:1d:74:05:00:39:ec:93:75:6f:a4:33:
44:83:ad:57:5d:33:8a:60:e9:56:9a:f2:b3:63:f9:66:c5:a7:
9f:4d:84:4e:eb:23:8d:6d:03:31:44:dd:35:a9:29:8f:38:63:
b2:a3:18:16:b9:cf:27:91:36:51:c5:e6:40:f5:81:fa:00:7c:
2a:f5:99:99:f3:9a:82:a2:a8:56:0a:79:e2:d3:62:38:18:be:
0f:6c:f4:5a:bc:81:fa:ed:d9:47:e3:12:50:87:6c:88:d5:b0:
f9:01:45:e3:80:05:cd:5c:a4:fb:da:28:2b:aa:ef:b8:df:1b:
98:72:a8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:52:29 2026 by rpki-client