This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
File: KJVkfZ_RahaU-AJuvod2DLUx6w4.mft (raw, json)
Hash identifier: 9n/0CFjJS5vXLiGT56tiwfRDPLtOAtkOkXMtr7HbGmk=
Subject key identifier: 5C:11:FE:8B:4E:30:2B:ED:D0:D7:70:B1:75:84:15:42:8D:C1:AF:6F
Authority key identifier: 28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E
Certificate issuer: /CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
Certificate serial: 019C420FE547901F95CEEF3AAE792B96BF4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
Manifest number: 180F
Signing time: Mon 09 Feb 2026 11:01:03 +0000
Manifest this update: Mon 09 Feb 2026 11:01:03 +0000
Manifest next update: Tue 10 Feb 2026 11:01:03 +0000
Files and hashes: 1: KJVkfZ_RahaU-AJuvod2DLUx6w4.crl (hash: KLTptOrsLFKXGN6PuQtZ1ao7UMfVI6V6XvXpSug5jcE=)
2: SO-Fb5_RWNG-vJxWilHy0Ub7D3c.roa (hash: VzvW0l4p4/QU6FVquXlxf/LHE0LvlRpqoxeKSXp+Yqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:e5:47:90:1f:95:ce:ef:3a:ae:79:2b:96:bf:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
Validity
Not Before: Feb 9 11:01:03 2026 GMT
Not After : Feb 10 11:01:03 2026 GMT
Subject: CN=5c11fe8b4e302bedd0d770b1758415428dc1af6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:5c:e8:1b:6c:55:f5:aa:57:11:41:33:25:
4d:05:60:6f:28:70:3c:7b:14:4c:89:9c:59:79:c5:
3e:38:92:a5:58:fd:8d:6a:bb:96:1e:90:50:72:4c:
3d:34:f6:62:08:c8:c1:71:c0:6d:3d:76:69:eb:4b:
81:ba:25:2c:a8:15:f6:75:e6:21:80:9e:c7:74:d6:
88:f7:91:61:c9:d3:0d:6f:b4:b0:60:5d:3b:70:70:
a9:f6:9e:6c:61:ab:d8:04:3e:a0:05:94:58:74:93:
c0:0a:30:53:2b:0b:46:05:b2:52:5c:3f:f4:b2:63:
74:81:f3:ef:c6:33:72:d9:dd:aa:05:98:14:23:00:
08:fa:04:a2:89:4b:0d:f7:26:b0:8d:47:90:fa:e3:
d4:8e:de:ff:69:c4:b1:22:01:90:f1:52:c7:0e:bd:
30:4c:e0:ed:cf:4b:a7:cd:24:ac:b3:d2:3f:a3:db:
4d:6b:73:31:27:e8:67:47:ee:e4:c2:7c:37:fa:98:
bf:a4:ea:7d:e6:17:5d:15:f1:cb:13:80:6c:22:b6:
20:32:76:27:91:90:e0:58:57:7d:b3:58:98:02:f4:
ea:f6:83:1d:77:6e:ca:4e:13:6d:d0:d5:1d:74:24:
16:1e:9b:de:8e:bb:30:ea:d9:bc:0d:75:21:96:12:
cc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:11:FE:8B:4E:30:2B:ED:D0:D7:70:B1:75:84:15:42:8D:C1:AF:6F
X509v3 Authority Key Identifier:
keyid:28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a7:43:00:2c:29:9b:18:65:50:0c:37:93:40:2b:bb:1b:af:
39:7c:4c:d6:cb:dc:e8:cb:60:6a:2f:e7:5c:62:83:76:bc:1e:
40:69:4c:7a:0f:6f:9a:d1:3c:0e:d1:04:6c:0c:53:2e:9a:dd:
92:fe:ff:68:12:97:f8:4a:f9:1b:f6:e1:d9:9b:73:d8:49:44:
ef:33:6c:1d:23:2c:86:6f:8d:be:07:b7:5d:6d:8d:d4:72:73:
af:bd:18:da:15:17:76:d7:f3:fc:41:e6:75:10:c1:a6:d2:76:
f6:ed:16:96:d9:8e:c0:8c:0c:56:a5:e7:93:08:d7:dc:75:4a:
57:be:2b:67:a3:d6:0d:69:7a:f0:4c:7d:5f:a5:5b:6c:35:bd:
bf:93:57:2e:89:c7:0a:4b:df:8f:03:5b:44:36:f7:4b:f3:7a:
a3:db:7f:58:49:24:5c:cd:c3:09:90:51:e7:56:9e:ca:76:62:
3b:14:20:8a:cd:e6:ed:a1:28:7d:ea:08:12:89:f0:ac:14:16:
8c:a9:b4:6a:83:90:29:25:d0:92:db:b4:6b:e6:8b:d2:e9:dc:
ff:11:69:6b:62:99:a8:7c:05:21:02:d6:b5:dc:15:dc:89:19:
19:a4:16:1d:fe:ed:4b:05:34:52:52:a6:f3:45:59:bf:11:84:
53:5e:de:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:34 2026 by rpki-client