This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
File: lhud90XDLfJ98z68_VNvGeE0dP4.mft (raw, json)
Hash identifier: 7dZgwmIt1Yhz1tvpS4/ZBxsL0PWN8JG5EHBgxqdCxoM=
Subject key identifier: EA:8B:AD:9F:BF:DE:1B:C7:0D:A8:7E:58:9F:26:A3:07:20:9B:F5:75
Authority key identifier: 96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
Certificate issuer: /CN=961b9df745c32df27df33ebcfd536f19e13474fe
Certificate serial: 019BAF4AB1F1B84AEABFE41300FC842C50E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
Manifest number: 10DE
Signing time: Sun 11 Jan 2026 23:01:06 +0000
Manifest this update: Sun 11 Jan 2026 23:01:06 +0000
Manifest next update: Mon 12 Jan 2026 23:01:06 +0000
Files and hashes: 1: Rf4ua2gShCgNnsbPUQ6ubuJBV1k.roa (hash: tSFC9dWk5W60HWYLlM+PiN1UjypysKUpyAViK3s11Fw=)
2: Uxtr-atmnNBITnladLThcv7huIU.roa (hash: n7M6NPbamAy18kfeXWpn06XaPUvf5LbKfUxiapVP6+w=)
3: cd4PR_7Zwc-Jv_h3ekBVWiw0K-0.roa (hash: HpbyUUXySxZasQuBBURj008LhTbNYYQxJ+uuJec1F1s=)
4: lhud90XDLfJ98z68_VNvGeE0dP4.crl (hash: dWSuhZTTPSO64Zin94x58PQtQzA4lDyDymjLj721MKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Jan 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:af:4a:b1:f1:b8:4a:ea:bf:e4:13:00:fc:84:2c:50:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961b9df745c32df27df33ebcfd536f19e13474fe
Validity
Not Before: Jan 11 23:01:06 2026 GMT
Not After : Jan 12 23:01:06 2026 GMT
Subject: CN=ea8bad9fbfde1bc70da87e589f26a307209bf575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:df:37:a6:f3:02:20:a6:c1:1b:42:d4:6a:6d:
2e:05:1c:e1:30:7f:44:70:c5:9a:c7:20:70:6e:c0:
73:5d:7d:57:67:7d:18:65:77:05:3e:d6:74:a3:fb:
a8:38:de:8a:32:75:2f:dd:6a:20:1a:0b:be:f1:96:
af:2a:b4:9f:dd:b2:fb:ed:f8:c9:6c:80:82:aa:38:
64:25:d1:a0:59:b4:5f:49:06:1e:81:d4:60:16:70:
4f:5f:da:2d:c2:64:12:06:97:0a:59:51:d9:56:23:
72:a4:41:83:d8:58:58:95:50:28:5a:1a:80:97:fc:
b6:73:01:99:90:f3:77:8f:c2:70:5e:b5:16:76:cd:
76:fa:e4:e7:cf:9e:07:2e:11:91:64:90:0a:3d:aa:
90:44:9d:76:5b:9f:0e:c4:89:e7:83:df:d6:f0:39:
70:8f:23:0e:83:0c:6c:b7:74:d7:8e:86:f7:73:7c:
91:f7:5e:b6:fd:07:9e:8c:de:46:66:fd:d8:87:84:
e3:91:0e:42:0a:3c:b5:85:78:f3:0c:24:97:e7:80:
f6:12:e8:e0:3b:f6:7e:d2:89:6f:db:10:3d:9f:91:
0e:30:42:c4:ef:da:cf:89:79:23:79:9e:69:77:90:
f1:cf:7e:00:2f:a5:7c:b8:9f:c5:08:d8:2b:e3:b8:
63:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8B:AD:9F:BF:DE:1B:C7:0D:A8:7E:58:9F:26:A3:07:20:9B:F5:75
X509v3 Authority Key Identifier:
keyid:96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:60:a1:32:11:e7:b9:a8:f5:81:2d:10:cf:02:5f:77:77:a6:
82:6f:30:31:5c:30:c8:12:7a:4b:a4:e3:c9:0f:3e:3d:89:11:
98:c2:fa:12:5f:ab:6a:60:71:39:87:6d:0d:e8:d0:3d:bd:d2:
76:5e:da:10:09:1e:8e:12:bb:89:87:e8:55:43:91:8c:b9:3e:
5f:ce:d7:3d:6c:35:69:4d:47:c4:36:9b:c1:06:a5:b7:cc:3b:
80:ab:fd:93:98:35:45:53:82:f8:bd:4e:bc:52:0c:35:cb:0c:
b2:ea:7f:a9:6e:18:7a:ff:90:67:87:ff:c9:1d:57:58:74:0d:
bd:97:55:b4:60:f7:b4:3c:32:1c:bf:48:c7:e1:c2:97:54:8f:
a8:3c:ff:f5:9c:4a:d8:17:f3:24:3e:28:83:a5:40:80:bc:26:
a6:b4:dd:61:59:f9:bb:92:03:18:44:d3:1f:47:93:ad:de:0c:
70:d2:8c:3c:ff:0b:5f:1d:c8:56:09:f1:57:a2:c9:e9:76:18:
6d:06:c4:5a:4d:a3:a2:5c:5b:0a:c3:f7:ac:25:d8:17:2c:0d:
60:e7:02:fb:02:2c:bb:52:10:ac:9a:26:67:e8:b7:94:4c:cc:
6d:50:45:e6:8d:52:98:33:91:b3:a0:52:39:d4:05:46:c0:ef:
94:15:f3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 00:52:39 2026 by rpki-client