This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
File: KSjbJBVB1ramSQAEBgqnGtbsGJw.mft (raw, json)
Hash identifier: umdZZFUAFw1xSKtpmv2RhhMSVAv82dNuNer/jniUgws=
Subject key identifier: 04:21:29:2D:44:3A:0A:09:94:42:74:41:4D:EA:C6:3E:72:D9:9A:76
Authority key identifier: 29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C
Certificate issuer: /CN=2928db241541d6b6a6490004060aa71ad6ec189c
Certificate serial: 019C439002E34293ECE8A3A941F86E1987C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
Manifest number: 161B
Signing time: Mon 09 Feb 2026 18:00:37 +0000
Manifest this update: Mon 09 Feb 2026 18:00:37 +0000
Manifest next update: Tue 10 Feb 2026 18:00:37 +0000
Files and hashes: 1: KSjbJBVB1ramSQAEBgqnGtbsGJw.crl (hash: RILGPkKXblIlaJuNhXUvNAKZ5htQNIObvmVgczOLVjg=)
2: Va7ccuyr1gwIPxh57e6tKLedSCw.roa (hash: Href7Vt90sb2zBKLkX06zqhinA47HJQXH9/GsT7Lagw=)
3: lyFAZNxDoVB_4-IZx9taISL-h1Y.roa (hash: kzhZQdnTTMEyyH8y5o2LcLLVtV/D0+7gimOZT6GoW+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:02:e3:42:93:ec:e8:a3:a9:41:f8:6e:19:87:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2928db241541d6b6a6490004060aa71ad6ec189c
Validity
Not Before: Feb 9 18:00:37 2026 GMT
Not After : Feb 10 18:00:37 2026 GMT
Subject: CN=0421292d443a0a09944274414deac63e72d99a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:95:47:5a:59:89:7a:f0:3b:11:48:f4:91:44:
22:1b:5d:17:11:24:b8:7a:3b:6f:df:a9:6d:2c:b0:
a9:0a:b7:82:a2:71:23:46:54:1d:f3:06:d3:ad:87:
e4:90:1a:fc:40:d1:f0:3f:b5:88:f5:57:fb:2e:0c:
e3:f7:3d:c9:81:00:76:72:80:ee:24:8d:1c:f3:56:
92:fa:b4:a3:ec:e1:f2:5b:16:ce:48:1c:38:55:a7:
a6:6b:6a:18:c4:54:d3:fe:30:5c:07:3d:f3:86:8e:
d4:22:1e:b6:ed:b5:aa:7b:9b:08:2e:be:25:22:ee:
7d:03:4b:5b:28:7e:56:0d:c1:76:49:2c:02:82:c0:
e6:36:14:77:a9:0b:7b:f9:c5:8f:5e:99:6b:b6:00:
45:b0:28:95:54:67:19:fc:46:cf:7b:2d:a5:4b:62:
41:46:86:0b:b3:67:8a:e0:f5:f5:67:dc:e3:b1:ff:
dc:5c:e2:61:3f:ee:b0:ae:47:17:25:73:df:0f:64:
59:a5:f3:c7:46:83:3e:a9:94:98:b8:99:50:a5:65:
8d:f6:14:fb:f4:7b:76:d3:1e:5b:35:02:48:24:f1:
09:61:4c:da:9e:76:47:97:1f:8b:2f:56:65:eb:77:
cd:8e:f8:24:8f:88:e9:f6:b2:57:0d:f2:ce:22:74:
3c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:21:29:2D:44:3A:0A:09:94:42:74:41:4D:EA:C6:3E:72:D9:9A:76
X509v3 Authority Key Identifier:
keyid:29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:24:14:74:71:f6:f0:dd:1e:c0:bf:51:cb:14:7f:04:38:a1:
c6:7e:2b:10:0e:12:77:b8:f8:91:2f:cb:2b:4f:dd:24:96:75:
2e:61:5b:56:0a:14:0c:20:ff:05:9d:c6:66:06:52:0f:00:92:
1c:b5:ee:6b:e3:2a:ab:0f:1b:cd:a0:81:58:05:c8:53:8c:2d:
14:0c:bb:41:bb:dc:d1:1c:50:87:9b:fb:29:ae:75:df:cb:ac:
ad:5d:5d:0e:15:2e:20:10:1b:d8:6f:f2:f7:3a:90:2c:b9:4c:
8b:a7:57:7f:16:63:ab:bd:a3:d8:d6:a0:de:40:3e:71:2a:df:
68:7f:86:32:d8:d7:c1:cc:42:03:76:34:9e:58:39:c4:82:c4:
d6:16:75:ce:5e:d5:b5:47:b0:18:0e:7d:f6:6e:7e:7c:cf:7c:
08:b4:dc:43:73:c2:57:09:38:ef:bd:f9:00:a7:97:64:3a:84:
8d:7e:2f:46:ba:58:d2:99:68:28:d8:d2:4a:98:21:d4:0e:67:
04:e5:71:64:f1:40:17:35:cc:f7:6d:34:a0:6e:eb:50:4c:43:
27:c0:76:a8:c5:69:4d:a0:be:d0:1c:fb:b0:9d:49:f5:be:7e:
45:ba:eb:f3:d7:f4:09:0a:c8:67:6d:47:c1:8e:4e:e7:ab:b3:
f5:3c:05:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDkALjQpPs6KOpQfhuGYfFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MjhkYjI0MTU0MWQ2YjZhNjQ5MDAwNDA2MGFhNzFhZDZl
YzE4OWMwHhcNMjYwMjA5MTgwMDM3WhcNMjYwMjEwMTgwMDM3WjAzMTEwLwYDVQQD
EygwNDIxMjkyZDQ0M2EwYTA5OTQ0Mjc0NDE0ZGVhYzYzZTcyZDk5YTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pVHWlmJevA7EUj0kUQiG10XESS4
ejtv36ltLLCpCreConEjRlQd8wbTrYfkkBr8QNHwP7WI9Vf7Lgzj9z3JgQB2coDu
JI0c81aS+rSj7OHyWxbOSBw4Vaema2oYxFTT/jBcBz3zho7UIh627bWqe5sILr4l
Iu59A0tbKH5WDcF2SSwCgsDmNhR3qQt7+cWPXplrtgBFsCiVVGcZ/EbPey2lS2JB
RoYLs2eK4PX1Z9zjsf/cXOJhP+6wrkcXJXPfD2RZpfPHRoM+qZSYuJlQpWWN9hT7
9Ht20x5bNQJIJPEJYUzannZHlx+LL1Zl63fNjvgkj4jp9rJXDfLOInQ8hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQhKS1EOgoJlEJ0QU3qxj5y2Zp2MB8GA1UdIwQY
MBaAFCko2yQVQda2pkkABAYKpxrW7BicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1NqYkpCVkIxcmFtU1FBRUJncW5HdGJzR0p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hNDc0NzUtMTc5Yi00NzdmLWI1NTQt
MjkzNTYzNDFjNWZkLzEvS1NqYkpCVkIxcmFtU1FBRUJncW5HdGJzR0p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9hNDc0NzUtMTc5Yi00NzdmLWI1NTQtMjkzNTYzNDFjNWZk
LzEvS1NqYkpCVkIxcmFtU1FBRUJncW5HdGJzR0p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACiQUdHH2
8N0ewL9RyxR/BDihxn4rEA4Sd7j4kS/LK0/dJJZ1LmFbVgoUDCD/BZ3GZgZSDwCS
HLXua+Mqqw8bzaCBWAXIU4wtFAy7Qbvc0RxQh5v7Ka5138usrV1dDhUuIBAb2G/y
9zqQLLlMi6dXfxZjq72j2Nag3kA+cSrfaH+GMtjXwcxCA3Y0nlg5xILE1hZ1zl7V
tUewGA599m5+fM98CLTcQ3PCVwk47735AKeXZDqEjX4vRrpY0ploKNjSSpgh1A5n
BOVxZPFAFzXM9200oG7rUExDJ8B2qMVpTaC+0Bz7sJ1J9b5+Rbrr89f0CQrIZ21H
wY5O56uz9TwFQw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:44:59 2026 by rpki-client