This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
File: KlMwgTe0VbZabCiesDxNTg-2_P4.mft (raw, json)
Hash identifier: EwHfOwjDetDz7uwyI9HODtJj4Zek2VlF2qkIzlgFjls=
Subject key identifier: 52:98:27:C5:7B:D7:6F:AD:90:21:A0:B0:69:53:A3:41:EF:4C:02:DE
Authority key identifier: 2A:53:30:81:37:B4:55:B6:5A:6C:28:9E:B0:3C:4D:4E:0F:B6:FC:FE
Certificate issuer: /CN=2a53308137b455b65a6c289eb03c4d4e0fb6fcfe
Certificate serial: 019C1C4C2302D3BF964E9FF7083842273903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
Manifest number: 07
Signing time: Mon 02 Feb 2026 03:01:17 +0000
Manifest this update: Mon 02 Feb 2026 03:01:17 +0000
Manifest next update: Tue 03 Feb 2026 03:01:17 +0000
Files and hashes: 1: 0yV_DKUM90E6Draf6I0oRvAGk5k.asa (hash: boBdEash/+gMRRolhUIvtQKVyOAE9aAji0xpmGHbJLM=)
2: 1F3gSPk9CehJkH52NcE3lwEYTNQ.roa (hash: I/Gn2SsvQsJ4q7Do0ZCiSfy8dqZTMoRdU3nRnkWYAHM=)
3: 6XE4eDrC06d690GkRlprAnwbaW8.roa (hash: Z/suCundDH9/bsBWs3cumJthJ+NNEyWRNKToq4XePhk=)
4: KlMwgTe0VbZabCiesDxNTg-2_P4.crl (hash: 7UqMmMlYeYfDOaMFB1Sn8lJyJQL5qOlykge0lgUefG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1c:4c:23:02:d3:bf:96:4e:9f:f7:08:38:42:27:39:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a53308137b455b65a6c289eb03c4d4e0fb6fcfe
Validity
Not Before: Feb 2 03:01:17 2026 GMT
Not After : Feb 3 03:01:17 2026 GMT
Subject: CN=529827c57bd76fad9021a0b06953a341ef4c02de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:95:39:79:26:66:92:cf:e1:e1:e7:ed:1d:22:
52:6a:f7:f4:cc:76:1a:6a:67:37:35:32:05:e6:72:
1f:a8:8a:71:35:df:c0:b7:b1:98:fa:c4:84:2b:91:
d2:02:59:7d:45:06:99:aa:08:48:ca:96:5c:88:54:
12:5b:70:8b:a6:1c:c0:2f:06:7e:5b:68:50:51:66:
8d:d9:2a:5b:12:be:8d:bb:19:32:36:bd:3a:a1:72:
b8:b0:f7:4a:f4:68:c7:8d:75:a2:34:0d:61:98:24:
ed:f5:62:45:6d:65:09:7c:41:57:ff:2e:c4:2b:29:
6d:79:8d:26:18:5c:5e:0c:75:81:fc:07:3d:ce:2a:
a5:48:68:99:a5:03:b2:ec:4f:b8:00:80:cd:d8:7c:
ae:15:6c:81:b9:3e:9d:04:11:cf:74:c4:ae:d2:70:
a7:c6:29:91:31:4a:bc:16:b2:5e:a1:7a:52:0f:2c:
ce:8b:70:5d:31:9a:7c:08:87:63:5d:44:d7:55:47:
aa:c1:d3:f8:d6:53:0d:a3:a8:a9:88:53:be:aa:ed:
70:4e:e2:cc:d1:b9:1c:37:1c:a0:07:d5:f2:24:5c:
f4:57:1c:2b:c6:23:87:b2:30:22:41:c9:28:48:9e:
e3:0a:98:54:aa:85:0e:20:90:d6:5f:78:07:e4:b0:
33:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:98:27:C5:7B:D7:6F:AD:90:21:A0:B0:69:53:A3:41:EF:4C:02:DE
X509v3 Authority Key Identifier:
keyid:2A:53:30:81:37:B4:55:B6:5A:6C:28:9E:B0:3C:4D:4E:0F:B6:FC:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:91:76:91:cb:fd:2e:f6:bc:3e:22:9d:79:f0:85:7f:11:60:
9c:ff:2c:5d:49:ea:fa:0d:48:59:b2:ce:f1:3e:f8:da:d2:4b:
d2:68:3b:24:12:26:a6:be:f0:fe:47:6b:1a:4f:b7:10:f0:96:
14:32:89:a2:2d:24:e0:a2:80:18:34:08:de:0e:b1:54:ef:b8:
d5:df:5b:76:88:da:48:bf:ed:eb:d4:ec:51:e8:4c:41:68:fc:
4b:bd:42:db:00:58:09:ae:e4:ca:1a:91:54:5e:c3:22:0f:26:
78:02:a6:11:59:be:3b:ff:50:a1:ac:c4:9d:2f:9e:1a:2d:ad:
cf:0f:a4:85:85:c7:1a:5b:8e:28:ed:a4:98:8b:cc:e4:51:35:
44:9e:dc:02:16:14:fe:91:ab:44:07:d6:3e:85:01:5b:a7:76:
04:21:79:2c:de:85:92:12:ef:75:90:d7:90:78:af:88:c3:ba:
64:18:32:58:f1:52:48:3e:44:88:69:22:e3:90:78:ce:dd:9a:
9f:7b:ff:0f:d6:a9:01:ac:d0:a4:0b:ca:4c:52:8c:db:2e:12:
af:18:42:a5:41:60:b4:a8:36:f4:3f:8e:76:85:b5:20:ef:3d:
29:92:1f:80:74:95:cb:a9:14:79:e0:ef:a4:37:9b:57:c0:9c:
55:7b:75:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:41:29 2026 by rpki-client