This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
File: RK1W7mAdrD36Yd_lLL9bALe3opA.mft (raw, json)
Hash identifier: Xc26oxmGlj2M3F1cy/EP/vzlo/JETZV5poeCJw3n36c=
Subject key identifier: 4E:44:1C:F9:CD:CD:4C:89:68:E0:F2:CF:84:FC:07:80:44:11:2A:1A
Authority key identifier: 44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90
Certificate issuer: /CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
Certificate serial: 019C420FF5C402B8ECE16FFDFA462D3CA8B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
Manifest number: 0C00
Signing time: Mon 09 Feb 2026 11:01:08 +0000
Manifest this update: Mon 09 Feb 2026 11:01:08 +0000
Manifest next update: Tue 10 Feb 2026 11:01:08 +0000
Files and hashes: 1: KYrFJEDEjhc9HhmYSiPT-yYtVPQ.roa (hash: /AaiErA0b5IK+9x0vkOcwB+KnCvGEkMNKJApI/jbN6I=)
2: RK1W7mAdrD36Yd_lLL9bALe3opA.crl (hash: CVsf0iZRXWP2yyp1ZHQ+pE52xX65hBmgIsZEQOO1AYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:f5:c4:02:b8:ec:e1:6f:fd:fa:46:2d:3c:a8:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
Validity
Not Before: Feb 9 11:01:08 2026 GMT
Not After : Feb 10 11:01:08 2026 GMT
Subject: CN=4e441cf9cdcd4c8968e0f2cf84fc078044112a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:69:24:ce:a4:6e:7c:27:ce:2f:8d:ed:02:48:
c7:92:a9:da:d0:b8:55:6b:02:1c:54:fd:9f:b8:8a:
7c:aa:18:6a:61:41:e1:d5:1e:b0:de:8f:c0:c9:23:
6b:e3:c7:df:60:fa:c3:04:09:38:3c:2a:79:45:34:
0d:92:ae:54:cd:a8:08:c5:ba:fe:2f:c2:d8:7f:5a:
e4:9d:5a:d7:7b:58:78:a3:5e:71:70:58:39:da:7a:
77:86:7b:f7:50:a2:b7:c2:54:76:45:89:40:7c:d7:
2e:72:1f:13:d5:fc:6f:c6:b6:d6:84:6a:00:ad:ac:
32:c6:4c:1a:16:32:16:a8:bd:2d:4e:ef:9a:f8:da:
94:a5:61:14:a3:15:d8:b5:80:b8:5b:d1:40:af:55:
7c:2b:40:8e:b1:d1:dc:ef:1a:45:1d:3f:15:55:b5:
9b:f5:09:2c:3b:8e:9d:96:48:a7:5d:f5:59:19:b4:
26:f0:ab:99:59:e5:50:c5:7a:96:03:ec:dc:80:1c:
05:5e:a2:87:22:18:e9:fe:64:ca:de:49:20:55:01:
8e:e2:90:32:18:c9:cf:52:77:d2:b4:51:65:cb:44:
f1:c5:d1:ab:9e:ec:72:da:42:75:49:b1:08:3c:e7:
d7:f6:5d:a7:75:45:85:8e:fd:2d:00:99:a5:28:9c:
fa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:44:1C:F9:CD:CD:4C:89:68:E0:F2:CF:84:FC:07:80:44:11:2A:1A
X509v3 Authority Key Identifier:
keyid:44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:28:21:83:ab:78:38:06:0c:51:7a:66:f9:a8:0f:97:12:4c:
a0:7f:87:f9:1e:71:be:60:b2:7e:58:4d:fb:7e:77:8b:d7:09:
98:16:13:b6:a7:88:61:78:2e:5a:d6:98:a9:c6:ef:66:af:8c:
f2:42:02:d1:5f:8b:45:db:b8:32:c3:b9:66:1e:b8:7b:55:81:
46:4d:c9:a7:49:e8:50:85:03:db:f6:a1:0e:37:72:0a:68:d7:
3f:c3:e4:b4:5e:b6:8d:b9:11:e4:b0:23:01:93:82:45:08:24:
35:1d:25:5f:cd:7c:2e:0e:a3:9f:bf:bf:f5:59:c5:bc:5e:f2:
12:51:14:e4:a9:d5:cc:33:88:82:41:ae:c8:9b:c2:aa:4c:08:
8a:ee:f4:9e:b1:80:5d:95:d2:56:71:4f:a3:d0:1b:71:c7:4b:
9b:c9:07:ec:bd:7e:7a:fc:0f:77:dd:76:5e:63:11:51:8e:3a:
ce:14:3d:80:8b:63:bc:36:00:3b:35:c8:9c:a3:9e:48:25:98:
b7:5d:72:b8:dd:9f:9a:86:4d:4b:ed:96:20:00:03:7a:9f:c8:
9d:6c:62:21:e8:27:57:0c:fb:63:0c:f6:ca:2b:b6:98:b3:43:
6e:0e:46:37:3b:e3:84:1f:a9:d4:dd:97:55:09:e8:8c:e5:9b:
f8:6a:06:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:31 2026 by rpki-client