This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
File: U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft (raw, json)
Hash identifier: 9NR71oIyzIWToDflU/0PM+DlvU6RtoeWOdyc2QzcIj0=
Subject key identifier: D8:C8:DD:22:32:4B:6B:C2:CF:42:40:85:B1:B5:BE:83:F5:A9:5B:34
Authority key identifier: 53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
Certificate issuer: /CN=53529924b233ac563c08e0c313e29213fd969669
Certificate serial: 019C44D9FFCBF8D5A9FAC3EDC564A7178290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
Manifest number: 1810
Signing time: Tue 10 Feb 2026 00:01:02 +0000
Manifest this update: Tue 10 Feb 2026 00:01:02 +0000
Manifest next update: Wed 11 Feb 2026 00:01:02 +0000
Files and hashes: 1: U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl (hash: K5EgNtUhAZ0wasY7sO9KtOEH6BotQh2QlMeRrV0VGlQ=)
2: rAEklKYGXqC0SI7BJUCNbv2v5n8.roa (hash: gLAk6gE4hIpnSsFcX87BRcU/zchBSxQcnSCr86hSo9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:d9:ff:cb:f8:d5:a9:fa:c3:ed:c5:64:a7:17:82:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53529924b233ac563c08e0c313e29213fd969669
Validity
Not Before: Feb 10 00:01:02 2026 GMT
Not After : Feb 11 00:01:02 2026 GMT
Subject: CN=d8c8dd22324b6bc2cf424085b1b5be83f5a95b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:51:75:f4:03:b0:06:a8:c3:0c:78:85:6f:b9:
65:1b:03:ff:55:3c:e3:70:22:84:53:23:7a:ce:be:
1f:8e:51:95:cc:75:fe:e8:74:41:5a:71:7e:ec:06:
76:79:70:d7:3b:7a:8d:15:6c:45:77:41:8a:cc:52:
66:75:52:d8:60:91:08:66:80:25:8c:7c:97:3d:e4:
5b:ab:30:6c:5b:cc:3b:43:40:59:5f:eb:e7:7b:88:
28:d2:34:35:f8:ae:4c:a6:03:be:02:cb:4b:2c:3f:
b4:10:95:c9:d7:f9:73:b5:a8:fe:60:ec:f6:1e:3c:
6e:8a:fc:3b:dd:d1:c5:27:79:95:09:60:ce:bb:0a:
00:81:76:bf:8d:19:02:df:13:a6:7a:92:af:01:3a:
26:71:f6:ac:43:b4:b9:87:47:40:0b:45:eb:70:e1:
5f:12:75:3d:b2:89:83:63:e0:28:13:32:92:aa:9d:
82:4c:41:d2:e7:82:e2:50:0f:9e:a3:11:b8:4c:73:
df:99:69:6f:2b:62:f0:d9:7c:7b:64:0f:45:1e:25:
3c:5c:93:70:6a:79:0d:7a:b9:21:41:88:1d:3b:d8:
af:93:27:ed:14:cf:87:9e:3b:37:c2:29:1f:67:e5:
a4:cd:f9:fb:fe:e3:e0:50:13:7a:37:f3:ee:3d:bd:
22:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C8:DD:22:32:4B:6B:C2:CF:42:40:85:B1:B5:BE:83:F5:A9:5B:34
X509v3 Authority Key Identifier:
keyid:53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:69:6e:b9:a4:89:0b:87:2c:50:02:6d:77:1a:9d:6b:67:72:
11:a4:47:b0:9d:34:9e:32:a2:aa:b0:df:b8:84:38:5c:21:b7:
a4:62:15:18:f5:57:fd:e1:11:11:09:a6:71:48:a8:1b:45:a8:
af:80:ea:27:29:48:fc:12:f0:70:d5:b4:91:1c:e3:1c:63:3d:
e3:eb:af:16:c7:41:33:81:94:9a:be:a0:61:f8:c6:5a:f9:0e:
bd:9e:7e:87:bb:04:5f:c5:3e:92:e4:3a:23:af:0c:76:53:da:
e1:55:c0:be:96:59:c1:15:6f:29:0b:b0:8e:d5:b0:76:3d:eb:
e3:17:1f:ac:06:90:44:7c:8a:3b:ca:01:e0:aa:6b:79:e7:df:
ca:f6:2f:f9:61:19:07:ce:56:bf:c5:e8:5e:72:1f:77:0c:e8:
42:f2:97:1f:59:4b:d2:b9:74:7b:09:60:9f:7f:50:75:5c:69:
40:a2:86:c0:c4:f5:88:e6:95:83:65:06:ad:d6:53:f1:2a:d6:
34:f5:d1:af:c4:3b:6d:44:e6:19:f5:ab:d1:4f:9d:ec:2c:d1:
01:9c:b1:65:9a:1f:9a:c1:e5:8e:7a:47:b1:67:f8:e9:f1:f7:
7d:27:75:c7:63:00:74:e2:30:26:ea:87:16:fd:fd:33:ba:1e:
fe:ec:ce:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:37:47 2026 by rpki-client