This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
File: ksVw_KpohEpfp53iyi57wb7JEZE.mft (raw, json)
Hash identifier: vtSyJc8BxCizhGKjY90p8mYoIOkdwyOeZ4r1ggV9OjM=
Subject key identifier: 41:DD:60:0D:8C:A7:86:B7:71:74:C7:BB:B5:19:7D:E4:6F:B0:0F:9C
Authority key identifier: 92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
Certificate issuer: /CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Certificate serial: 019C427DE0E8FB83EB4C2E5C00F1C8CE0B02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
Manifest number: 07CD
Signing time: Mon 09 Feb 2026 13:01:11 +0000
Manifest this update: Mon 09 Feb 2026 13:01:11 +0000
Manifest next update: Tue 10 Feb 2026 13:01:11 +0000
Files and hashes: 1: MiqLqspFTwuXVJnNQ-xN1MIq6CA.roa (hash: istn7N2mEs3jOD7elIicwlt/+tBN05Ns7e3r/o7hswk=)
2: ksVw_KpohEpfp53iyi57wb7JEZE.crl (hash: DIBZUPTpGxMc4AfCZ4cgYOAx3+Dq5Us4Dl2yxVvPlCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:e0:e8:fb:83:eb:4c:2e:5c:00:f1:c8:ce:0b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Validity
Not Before: Feb 9 13:01:11 2026 GMT
Not After : Feb 10 13:01:11 2026 GMT
Subject: CN=41dd600d8ca786b77174c7bbb5197de46fb00f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0c:4f:f9:ca:c8:30:63:0c:11:89:78:5e:2b:
b8:e3:f1:05:25:08:2a:15:f7:b6:a8:55:ab:4e:35:
2b:3c:28:1c:4c:97:d9:0f:ac:c4:7d:b0:a6:9e:bd:
fe:64:fb:26:18:40:76:5c:c4:c2:5d:6d:cd:97:47:
64:56:62:ec:9b:b7:94:fd:b9:ad:8f:97:cd:f9:16:
2d:a0:f2:a8:62:fe:ee:64:ed:f1:f0:f6:93:95:4e:
0a:a1:23:54:89:72:ff:a0:4e:2f:04:11:bd:96:c3:
4f:44:35:e4:c0:92:a1:5a:19:26:ee:6c:d9:0d:5d:
bb:05:bc:3c:91:5a:47:d6:fa:aa:e4:1d:36:24:d6:
81:2a:4c:17:65:86:a1:7f:12:9a:58:01:20:2a:ae:
10:a5:15:45:9d:81:40:26:75:ef:d6:b7:33:ed:bf:
a9:36:9f:b9:20:54:25:00:3a:7d:75:68:ba:6d:5d:
61:72:fa:fa:f6:b4:9e:b2:ef:5b:a0:73:4a:f2:d4:
55:8b:93:3a:6a:45:ae:bd:d3:bb:3f:e6:ff:9d:b7:
fc:08:8d:35:fb:60:d8:65:7c:8a:fb:65:8c:35:17:
f5:ed:7e:16:3f:e8:1b:21:54:31:1e:ab:bb:8a:91:
d9:a6:61:ee:cf:b9:22:c9:cc:91:17:1c:c5:a3:e3:
84:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DD:60:0D:8C:A7:86:B7:71:74:C7:BB:B5:19:7D:E4:6F:B0:0F:9C
X509v3 Authority Key Identifier:
keyid:92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ba:9a:67:0b:9a:de:9d:4f:a4:89:39:2e:be:8f:5a:8d:59:
aa:98:c8:08:ab:e5:bb:da:67:d6:8b:36:2a:ad:30:9f:7e:aa:
c5:1b:c8:00:52:8d:a9:9d:f8:d4:24:55:e5:f4:fb:15:4d:c6:
f2:a5:b2:33:ad:56:04:ff:fd:e8:7d:7b:62:5b:83:3b:b8:7e:
5b:48:a0:a4:26:57:44:fc:db:22:ba:97:80:3f:bc:5b:cd:fd:
65:45:c5:bd:91:50:af:39:bb:6c:5a:b1:21:7d:cc:83:48:8c:
e6:6f:15:32:fa:2d:0e:31:ff:38:fc:ff:cc:0c:7f:0d:a4:a1:
27:d3:90:f5:7a:e2:93:dc:ec:82:62:e1:31:bb:4f:ab:6f:4f:
90:29:43:a6:c6:5c:5f:d8:38:20:e8:58:a3:2e:9c:85:87:7f:
ec:25:6d:42:bc:36:ec:2c:c6:c1:34:1c:2f:e7:ab:67:e5:22:
49:25:fa:f1:97:3d:b2:80:b4:04:3d:86:6b:9e:9e:fe:ad:77:
c6:45:fd:84:f5:5c:02:aa:1a:a3:f1:16:19:95:0a:de:d2:90:
90:56:70:05:22:37:94:83:9b:b0:c3:e4:79:5f:71:57:a6:e0:
9a:13:6e:68:cf:d9:38:71:44:39:d0:fa:0c:0b:ec:64:dd:8d:
38:1b:6d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:13:24 2026 by rpki-client