This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
File: MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft (raw, json)
Hash identifier: cc5ACiibDeJShDXRwllHQ76oPTAWrQ5ZLShCNAiZ0Bw=
Subject key identifier: CD:D1:91:19:3C:67:FB:24:D3:48:9D:E9:60:CA:18:29:15:97:1D:14
Authority key identifier: 30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
Certificate issuer: /CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Certificate serial: 019C27ABBA8F4F2D1B9A7774A8C43591F85B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
Manifest number: 1802
Signing time: Wed 04 Feb 2026 08:01:31 +0000
Manifest this update: Wed 04 Feb 2026 08:01:31 +0000
Manifest next update: Thu 05 Feb 2026 08:01:31 +0000
Files and hashes: 1: MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl (hash: 8zZDChmQ1vxyAKKvjfmgACl2p9pgtL3S4cjD/w6lGFA=)
2: cWWM9ZpSxCOLjBSdEIJNLYZmfIc.roa (hash: /VirzHss1ndnL0VauqeSmTCntzhbwvddkhihXgztiNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Feb 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:27:ab:ba:8f:4f:2d:1b:9a:77:74:a8:c4:35:91:f8:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Validity
Not Before: Feb 4 08:01:31 2026 GMT
Not After : Feb 5 08:01:31 2026 GMT
Subject: CN=cdd191193c67fb24d3489de960ca182915971d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:84:a2:d1:4d:98:49:6c:68:7f:05:c2:0f:80:
72:bd:c7:17:be:5b:d2:ee:4a:28:42:f8:40:f5:f7:
db:f3:75:38:c6:64:ec:ac:01:49:9f:54:06:bb:e9:
9c:38:bd:8c:51:37:58:5f:c7:0a:5e:41:90:78:f7:
21:da:47:d1:e0:b9:83:38:79:24:5b:cc:bf:6d:cb:
6d:d4:14:0e:2c:ba:7f:9c:f5:c7:e2:13:81:05:86:
c9:4e:76:e8:8d:e5:95:c3:b1:9d:b7:c0:67:60:b4:
60:4d:07:49:8d:41:e2:38:62:e3:98:68:d4:01:34:
9f:50:f6:7a:a2:ed:58:d9:11:c7:a2:f1:48:c5:5f:
28:fe:0d:92:c9:87:af:ca:04:9c:c5:b6:c8:5b:9a:
4c:df:76:f9:32:6d:b8:a4:e7:4c:26:f5:35:81:00:
ee:0d:cc:2c:72:16:b3:ed:e2:bd:a5:55:e7:d6:47:
f6:78:09:69:7f:dc:6d:c4:d5:45:5e:f2:d7:aa:c1:
83:0f:5c:66:12:17:5d:d6:17:22:bd:54:fc:8a:06:
3c:d9:49:ba:22:01:e2:c7:20:ad:73:f4:b0:1c:09:
81:32:c0:e9:58:12:32:f4:b4:5e:fd:9a:c5:83:0f:
e2:d6:3e:dc:7b:d5:df:91:f4:e9:0a:32:bb:11:80:
fc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D1:91:19:3C:67:FB:24:D3:48:9D:E9:60:CA:18:29:15:97:1D:14
X509v3 Authority Key Identifier:
keyid:30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:ce:ee:24:c1:28:c4:18:f4:d6:5d:71:f7:76:60:94:9a:a2:
9e:a1:ce:40:30:dc:25:33:0f:58:73:48:c2:e3:10:d9:c8:95:
01:46:05:38:41:4a:35:0a:2b:15:5a:48:7f:d7:fd:04:f2:82:
ba:15:6c:02:36:d1:25:96:2e:15:e1:66:65:33:88:bc:51:4e:
34:df:ea:91:cb:6a:85:48:cd:5d:82:cb:15:bb:49:99:a4:87:
a5:01:61:90:20:89:a2:fa:bb:84:e3:d8:a8:36:ae:7a:35:56:
92:3e:c0:2f:77:fd:db:a4:a1:49:d8:fc:6f:f2:68:96:3f:5e:
15:15:9f:6b:49:d4:ee:e7:01:87:3b:ba:0d:cb:6a:57:1c:40:
53:9c:10:20:4b:35:f6:68:10:25:23:8d:85:0a:3d:30:d3:3c:
8e:e7:7e:64:90:8d:25:27:6c:a9:aa:b2:bc:0a:ad:56:3b:8e:
f1:db:2d:31:d4:bd:95:7a:40:8e:04:e1:c7:eb:dd:8a:be:07:
0b:ce:78:93:3b:d3:f1:fe:b6:f4:41:e6:3e:07:68:0e:d5:2e:
3f:02:31:1a:14:94:8a:7e:02:59:3a:f1:f6:c2:35:f5:a4:da:
92:33:f9:8b:51:4a:3c:73:67:cf:47:b5:5b:3f:01:b2:e9:60:
b6:25:ba:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 09:53:22 2026 by rpki-client