This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
File: KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft (raw, json)
Hash identifier: ARqC5ubhMJBr5vMHy5Eg0v2+GFtWEessfdIa5yLOVNc=
Subject key identifier: B1:12:4B:09:C0:72:E8:55:4A:C0:9E:8B:D8:77:0D:26:4B:BE:E1:BA
Authority key identifier: 29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
Certificate issuer: /CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
Certificate serial: 019C4359509C63402FC1CD317D528CFB9BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 17:00:52 +0000
Manifest this update: Mon 09 Feb 2026 17:00:52 +0000
Manifest next update: Tue 10 Feb 2026 17:00:52 +0000
Files and hashes: 1: KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl (hash: PM58IWuePXHbR9z52cIO9oCzpq0auiUGvsK49ISox4A=)
2: Yuog9y8JF_gUyOtwmx2LA41kaSA.roa (hash: bgBtmLlCdZ3iz8t6uBn4uo/dQZySgZ2naQr/qUoBKkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:50:9c:63:40:2f:c1:cd:31:7d:52:8c:fb:9b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
Validity
Not Before: Feb 9 17:00:52 2026 GMT
Not After : Feb 10 17:00:52 2026 GMT
Subject: CN=b1124b09c072e8554ac09e8bd8770d264bbee1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9b:6e:c5:51:fa:9c:45:3f:fb:19:05:1b:e4:
52:c9:a8:84:2a:c9:8b:ec:69:cd:52:a0:51:55:47:
1f:2c:f5:d8:8b:18:7b:81:0b:ba:36:13:a7:6b:97:
82:16:2b:db:78:ca:bb:f6:43:8a:c4:14:b6:2c:d1:
ff:b6:0f:83:73:ca:72:d2:9d:eb:f2:59:ed:54:58:
1a:96:54:53:54:1a:6a:7a:07:36:80:66:8b:68:a8:
59:70:55:f0:7c:02:a5:f4:2c:62:3d:c9:45:2a:e8:
0c:26:17:b5:57:a6:91:66:d5:1b:d4:5b:83:40:71:
21:fe:da:7f:0c:6e:ce:ef:80:bd:56:15:5f:ac:ee:
85:95:fc:05:f5:78:0b:66:d8:69:32:53:4d:92:7f:
f7:64:5b:50:a6:55:c9:3e:71:72:90:8f:3b:56:08:
4e:1e:84:22:6e:05:44:3a:a1:8c:4b:fa:7d:f7:4b:
80:0c:d2:fe:fe:b5:c4:db:aa:8c:a9:9a:e9:47:a9:
70:af:ab:1c:d7:b9:0a:a6:57:0d:7f:e3:f3:34:40:
cb:c1:b4:4b:9d:ac:c2:f6:4a:37:8c:09:b0:f3:e8:
1f:16:77:4f:56:4c:c1:63:eb:6a:64:63:6a:de:23:
bf:dc:c0:12:b7:54:e5:8e:ae:35:fe:5a:8e:8a:04:
50:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:12:4B:09:C0:72:E8:55:4A:C0:9E:8B:D8:77:0D:26:4B:BE:E1:BA
X509v3 Authority Key Identifier:
keyid:29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:06:13:a7:52:9e:12:4b:96:e0:c3:d2:25:31:4d:5f:e2:8a:
59:04:04:16:6e:f6:67:72:5d:85:a3:09:c2:a7:3e:6f:a7:eb:
e8:e1:e0:c8:5d:a4:79:d9:74:26:1b:e0:fe:15:3e:ab:b4:de:
b4:be:4a:4d:85:cb:b7:66:bd:40:27:dc:a1:10:67:c7:b6:88:
c9:1c:2e:1b:c0:0c:9f:74:ab:51:c5:9e:9e:13:08:27:2b:f7:
4e:91:c5:f5:3c:68:e3:78:fb:da:a3:73:d7:d7:03:bf:ed:e8:
f9:ff:3f:1a:db:f2:c3:87:a9:68:19:1b:e7:34:2f:5e:80:da:
f4:7f:a5:ee:60:01:8e:4e:ad:a9:b7:aa:df:0b:bb:25:c9:bb:
e6:5d:9e:51:c1:f0:80:ba:be:37:75:b1:fb:72:3b:a7:e1:05:
ae:83:a9:cc:3f:a0:ed:41:7e:5e:fd:7f:0b:9f:83:1c:5b:8b:
1d:04:5a:38:8f:ad:b3:b6:a1:ad:94:50:a8:2f:98:d5:e3:e6:
05:d6:8d:9c:21:d8:99:a7:67:ab:99:82:e0:e8:6a:f5:d4:d1:
0e:ad:b6:06:e5:4e:ed:eb:d7:7f:f1:4e:8d:7c:4b:6c:0c:95:
1d:6d:eb:9e:8e:64:e8:e5:37:58:8b:ad:40:b3:a5:a8:6b:61:
cf:ea:76:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWVCcY0Avwc0xfVKM+5uzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YTM5ZWJiNGU1N2ZmMzQ4NTNjNzZiMGY1ODc3YWU4YWIz
YzdjZjYwHhcNMjYwMjA5MTcwMDUyWhcNMjYwMjEwMTcwMDUyWjAzMTEwLwYDVQQD
EyhiMTEyNGIwOWMwNzJlODU1NGFjMDllOGJkODc3MGQyNjRiYmVlMWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJtuxVH6nEU/+xkFG+RSyaiEKsmL
7GnNUqBRVUcfLPXYixh7gQu6NhOna5eCFivbeMq79kOKxBS2LNH/tg+Dc8py0p3r
8lntVFgallRTVBpqegc2gGaLaKhZcFXwfAKl9CxiPclFKugMJhe1V6aRZtUb1FuD
QHEh/tp/DG7O74C9VhVfrO6FlfwF9XgLZthpMlNNkn/3ZFtQplXJPnFykI87VghO
HoQibgVEOqGMS/p990uADNL+/rXE26qMqZrpR6lwr6sc17kKplcNf+PzNEDLwbRL
nazC9ko3jAmw8+gfFndPVkzBY+tqZGNq3iO/3MASt1Tljq41/lqOigRQZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLESSwnAcuhVSsCei9h3DSZLvuG6MB8GA1UdIwQY
MBaAFCmjnrtOV/80hTx2sPWHeuirPHz2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2FPZXUwNVhfelNGUEhhdzlZZDY2S3M4ZlBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yZjk3ZmMtNWZhMy00MDgzLTk1MTUt
Y2Q5ZGEyZDkyZThkLzEvS2FPZXUwNVhfelNGUEhhdzlZZDY2S3M4ZlBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8yZjk3ZmMtNWZhMy00MDgzLTk1MTUtY2Q5ZGEyZDkyZThk
LzEvS2FPZXUwNVhfelNGUEhhdzlZZDY2S3M4ZlBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlQYTp1Ke
EkuW4MPSJTFNX+KKWQQEFm72Z3JdhaMJwqc+b6fr6OHgyF2kedl0Jhvg/hU+q7Te
tL5KTYXLt2a9QCfcoRBnx7aIyRwuG8AMn3SrUcWenhMIJyv3TpHF9Txo43j72qNz
19cDv+3o+f8/Gtvyw4epaBkb5zQvXoDa9H+l7mABjk6tqbeq3wu7Jcm75l2eUcHw
gLq+N3Wx+3I7p+EFroOpzD+g7UF+Xv1/C5+DHFuLHQRaOI+ts7ahrZRQqC+Y1ePm
BdaNnCHYmadnq5mC4Ohq9dTRDq22BuVO7evXf/FOjXxLbAyVHW3rno5k6OU3WIut
QLOlqGthz+p2fg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:50 2026 by rpki-client