This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft
File: KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft (raw, json)
Hash identifier: MCLOqnooGRqZcyMsRlwj21bxmFVKRJBXBmJ+9/TnX64=
Subject key identifier: 43:C3:1F:C0:2F:33:95:DC:2E:1F:70:4C:C1:97:85:09:64:EB:D5:09
Authority key identifier: 29:3B:C3:A5:74:97:33:10:4F:7B:9C:C0:51:2D:AD:E1:36:D7:0A:D0
Certificate issuer: /CN=293bc3a5749733104f7b9cc0512dade136d70ad0
Certificate serial: 019C421007D06E6A071A0D8C5679DFCCE329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTvDpXSXMxBPe5zAUS2t4TbXCtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft
Manifest number: 180E
Signing time: Mon 09 Feb 2026 11:01:12 +0000
Manifest this update: Mon 09 Feb 2026 11:01:12 +0000
Manifest next update: Tue 10 Feb 2026 11:01:12 +0000
Files and hashes: 1: KTvDpXSXMxBPe5zAUS2t4TbXCtA.crl (hash: Yk2LgIY6PM1LW69U4OPs+8I5PVCuG3tRC+Q16W4rDs8=)
2: wkII8mT_euYThV1XwcC1p09SIq8.roa (hash: KTBmbNMYpZwuYjtqFt1PYs9OEJ/5++AGe1s/9JAMhzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTvDpXSXMxBPe5zAUS2t4TbXCtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:10:07:d0:6e:6a:07:1a:0d:8c:56:79:df:cc:e3:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293bc3a5749733104f7b9cc0512dade136d70ad0
Validity
Not Before: Feb 9 11:01:12 2026 GMT
Not After : Feb 10 11:01:12 2026 GMT
Subject: CN=43c31fc02f3395dc2e1f704cc197850964ebd509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:3e:2f:df:ee:ee:06:c6:0e:49:33:08:45:
b8:ad:8a:ab:0f:f1:67:8e:86:c1:a3:d8:66:44:d1:
8c:7f:8e:70:85:82:2b:9c:63:ca:56:47:33:ea:72:
cc:ad:70:9e:74:2e:da:70:6d:8a:96:3a:f0:03:bf:
27:bf:09:30:c3:2b:46:d2:36:0b:6c:72:28:89:3e:
06:c0:05:1a:f7:9c:c9:07:22:df:a6:57:54:f1:db:
ea:a4:a8:90:e7:0e:c9:5e:d6:05:7f:e8:b0:9a:f1:
9c:f8:5b:24:9e:51:53:ae:ad:39:3d:f4:56:40:32:
02:77:54:5d:47:bd:72:67:cd:ef:cd:63:55:c8:a6:
5c:87:a0:f4:e9:43:36:b0:fe:6f:d0:ec:9f:ac:a1:
b2:0d:96:9f:93:bc:57:07:3a:31:5c:26:9e:45:f7:
21:86:92:d6:e8:a6:49:0b:a5:2c:24:6f:66:33:f8:
55:af:92:4f:43:0b:0d:70:3a:19:de:63:ee:bb:7e:
2d:fa:97:af:93:98:66:5b:14:db:b1:c2:29:56:f2:
b4:57:19:67:4a:8f:4b:93:c1:40:df:54:44:9d:00:
b1:58:18:c5:f5:4b:1c:66:3a:e0:e4:35:72:de:4a:
33:b6:2f:4d:3b:8f:0e:51:5b:6b:26:e6:9a:24:93:
dd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C3:1F:C0:2F:33:95:DC:2E:1F:70:4C:C1:97:85:09:64:EB:D5:09
X509v3 Authority Key Identifier:
keyid:29:3B:C3:A5:74:97:33:10:4F:7B:9C:C0:51:2D:AD:E1:36:D7:0A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTvDpXSXMxBPe5zAUS2t4TbXCtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d5:96:ad:b9:e1:c7:75:62:2f:a1:0e:a2:41:bc:4a:88:84:
8d:55:0e:09:9f:75:b4:84:a5:ff:1f:16:ee:f0:97:6a:02:22:
16:3a:00:1e:bd:60:b6:e6:78:4b:25:8a:24:af:ea:52:ec:45:
2e:70:cc:b4:43:5b:92:89:fa:03:19:2a:3b:1a:86:c8:a7:13:
9f:3c:9b:38:c7:bb:72:61:3b:3c:7e:54:a2:b5:01:61:16:66:
c0:28:8d:4c:46:dc:7c:8e:b4:a7:62:74:cd:5f:21:db:9d:e4:
db:20:c0:30:26:c6:2e:3c:9f:8d:9b:4d:f2:42:36:2d:aa:7e:
48:09:a2:3d:d2:c2:d2:33:69:f3:2a:1a:1f:99:cf:50:fb:31:
36:76:37:5f:f5:ba:06:9a:cd:ae:c4:84:62:7c:75:38:5f:a9:
32:84:1a:12:10:88:cf:51:50:ba:7d:84:42:3f:d6:50:1b:8e:
fe:bf:48:d9:d1:39:cb:97:bb:da:46:b0:a6:59:22:64:14:79:
8f:59:a7:3c:da:22:c4:12:dc:32:d2:ab:05:2b:88:20:24:da:
8e:59:07:6f:8a:2f:b0:18:fe:6c:43:bc:d3:b2:9c:20:0e:63:
0d:91:a9:6b:2e:b4:a7:82:18:ce:2e:16:a0:c7:14:ee:8a:78:
e1:b1:57:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:51 2026 by rpki-client