This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
File: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft (raw, json)
Hash identifier: 11EGT21Bo/D8gca1Jyo6HQvSsPJiOH+NJ8HTChacXdU=
Subject key identifier: A2:09:74:16:8A:A5:E7:D5:01:F3:AC:9C:F1:A8:8B:09:B2:66:16:C8
Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Certificate serial: 019C44D99D1CB92E5BE11B040392674E7DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
Manifest number: 0FD1
Signing time: Tue 10 Feb 2026 00:00:38 +0000
Manifest this update: Tue 10 Feb 2026 00:00:38 +0000
Manifest next update: Wed 11 Feb 2026 00:00:38 +0000
Files and hashes: 1: 5pguPhI0rFbakLhW6SkFbalknGQ.roa (hash: Lus95KOZX81AaJ5QWx/HsOob7eg1M1IWrIuALpl2Ef0=)
2: JGYB1Rt7gSa81bDABH2MHCSHfp8.roa (hash: yt7CtQlz8mtjyIIaBn7vHZ5Km7TGlMzsdUa4EfI/y1M=)
3: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl (hash: BVs6E4da09KyVI1PB+uwCU70Pv054RaNRN3pkBLLDVE=)
4: nXA9V6KcuTrb8c4a13aM3c-s94A.roa (hash: 5zHlB5gOOOnEtUQHoN58ZN8OSmLBcHMa8Vj3/5+LjCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:d9:9d:1c:b9:2e:5b:e1:1b:04:03:92:67:4e:7d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Validity
Not Before: Feb 10 00:00:38 2026 GMT
Not After : Feb 11 00:00:38 2026 GMT
Subject: CN=a20974168aa5e7d501f3ac9cf1a88b09b26616c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:31:1e:bd:98:c2:35:cd:1b:5d:0f:e9:fe:dd:
b4:dc:52:8c:f4:f9:b9:0f:3c:ed:3e:4d:50:e8:ce:
6f:68:c0:a3:fc:87:61:5e:e1:2a:7f:69:af:6e:ac:
93:e0:ad:d3:6d:95:65:68:03:66:3d:9a:3e:fe:e2:
90:3f:c2:f7:74:00:7f:96:41:d5:77:fc:71:29:26:
a1:b1:cb:86:70:df:dc:50:ec:1a:fa:27:c6:d4:f7:
0f:0b:87:32:bb:82:d5:26:a5:80:7c:55:c0:42:83:
b7:63:9d:ca:ff:35:c8:01:c3:dd:6b:99:4b:a7:0f:
91:91:11:2d:0c:cd:c7:dd:56:0b:22:6b:80:ed:21:
4b:e4:52:70:02:dc:56:06:39:88:41:44:22:5f:68:
80:2b:bc:5e:50:9c:df:67:b7:db:c7:b2:08:e9:92:
4e:b9:6e:aa:f0:58:7f:b4:dc:20:61:59:b0:01:fb:
d6:a4:ff:b2:b3:b7:81:05:61:31:0d:5e:46:df:1b:
88:28:72:3c:b8:17:78:19:bf:f4:5b:4c:81:76:91:
e6:f7:06:d8:17:5c:14:07:43:bb:26:5e:0c:c4:78:
3c:56:fc:11:bb:ae:b9:c6:57:b6:a8:75:55:00:65:
78:c8:0a:3f:cb:5c:89:d2:dd:0f:63:9b:69:d9:c3:
e9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:09:74:16:8A:A5:E7:D5:01:F3:AC:9C:F1:A8:8B:09:B2:66:16:C8
X509v3 Authority Key Identifier:
keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:5a:bb:b5:07:24:b1:20:cc:11:9b:69:e0:c8:d8:56:c0:cf:
a2:f0:6c:0a:7a:da:83:a8:f8:5a:c1:96:04:d8:c0:c7:5a:d3:
a2:ea:a7:34:60:f9:8b:b0:5a:cd:f3:60:ea:2e:8f:30:ce:33:
08:6c:5f:28:e5:e7:83:4f:72:48:4e:32:92:be:c9:44:e2:a3:
09:90:84:51:56:98:52:bd:d2:96:6f:b8:c0:19:be:6a:79:0b:
0c:79:64:b4:7d:d6:2b:43:be:ec:9e:1f:b3:56:7a:13:c0:5e:
7e:50:fa:6d:04:d8:84:70:a8:97:58:90:fc:44:d5:6b:77:c4:
d0:7f:25:96:12:44:c2:3d:bf:6d:74:c4:11:06:39:2b:11:95:
bc:d3:09:b8:aa:e7:68:24:e1:de:68:be:f8:0d:5c:28:f2:b3:
76:13:f4:cc:94:de:2c:60:e4:9b:c6:6f:40:5b:22:ef:eb:fb:
64:f9:1b:15:2b:f0:da:8a:44:0c:b9:aa:de:19:0c:30:dd:fe:
80:04:11:81:ff:79:62:07:e8:ed:d6:0d:3d:e8:d7:2b:88:2b:
4c:96:14:78:26:a8:3e:38:fe:87:e9:ee:dd:45:30:3b:5a:f0:
f8:3c:8d:02:9d:b3:3a:45:4c:06:b4:ed:df:b0:34:42:12:33:
ae:41:cc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:48:49 2026 by rpki-client