This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
File: k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft (raw, json)
Hash identifier: aCT2a6hgkwU3a7huooAtffrJcxLMpNIR591JOWGzKJs=
Subject key identifier: 7D:D5:5F:22:52:C7:02:21:7B:37:E8:03:EB:79:46:83:91:11:F6:1E
Authority key identifier: 93:E0:79:D7:34:98:91:D2:B4:02:48:95:FA:67:E4:1C:18:F5:6F:D4
Certificate issuer: /CN=93e079d7349891d2b4024895fa67e41c18f56fd4
Certificate serial: 019C44DA48B3D8AF3D64E150CA3063C731CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
Manifest number: 1811
Signing time: Tue 10 Feb 2026 00:01:21 +0000
Manifest this update: Tue 10 Feb 2026 00:01:21 +0000
Manifest next update: Wed 11 Feb 2026 00:01:21 +0000
Files and hashes: 1: k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl (hash: eR/z/lSBPK3RPyYCYB/vYh1XW4BKWmth2fZju8MbZI4=)
2: wdmEAU2UHexPl9Fd8jFjApSrnME.roa (hash: ytdBjY97O2O0azkD9/5YnzB54mNzzsWykxPR/Of2YIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:da:48:b3:d8:af:3d:64:e1:50:ca:30:63:c7:31:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e079d7349891d2b4024895fa67e41c18f56fd4
Validity
Not Before: Feb 10 00:01:21 2026 GMT
Not After : Feb 11 00:01:21 2026 GMT
Subject: CN=7dd55f2252c702217b37e803eb7946839111f61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c5:a0:fe:d2:53:af:1e:6c:1e:b8:81:4e:df:
9c:c0:3f:b8:7f:1d:83:bc:83:2a:7d:f1:69:98:81:
c1:3f:8a:92:1e:c0:8a:5d:e1:81:2a:17:ba:6a:a7:
ce:a4:43:21:16:28:22:2b:61:10:a2:9b:8b:5c:6d:
c1:66:18:23:fa:2f:b7:0e:95:dc:eb:ce:13:08:10:
37:e8:85:fe:da:bb:0b:bb:a3:ac:c5:1c:d1:fb:1b:
59:95:9d:a6:79:73:a8:63:3d:54:4e:1d:1b:67:93:
c5:43:a3:95:65:05:1a:17:eb:b5:4d:aa:2e:10:5e:
4a:03:f8:aa:22:f8:7a:d0:fe:83:96:f9:7f:02:23:
1c:b3:0f:27:09:77:42:08:20:87:ce:ce:b5:7e:7e:
00:99:c0:a8:06:a4:b8:a6:9d:9d:94:03:d6:f8:a7:
99:51:50:39:1d:7b:74:d0:36:a4:ba:f9:6e:17:b3:
4a:11:a2:b2:57:c6:e3:6d:1c:29:ac:66:36:5d:da:
7c:d2:b9:a1:88:3f:9e:b2:b8:ac:6d:e2:f9:7a:21:
51:76:ac:5c:0b:60:5e:7d:da:5e:98:f2:c0:7e:98:
f6:11:67:20:ef:a7:57:33:08:72:d8:17:5b:1e:2c:
13:a4:f9:ef:f2:36:5e:55:fa:5c:dc:49:ca:73:ca:
96:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D5:5F:22:52:C7:02:21:7B:37:E8:03:EB:79:46:83:91:11:F6:1E
X509v3 Authority Key Identifier:
keyid:93:E0:79:D7:34:98:91:D2:B4:02:48:95:FA:67:E4:1C:18:F5:6F:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:10:4b:13:06:75:af:52:ce:31:55:51:72:f3:03:e5:ed:26:
29:ad:55:8c:e6:38:ca:43:5c:cf:a7:3c:f0:a6:3c:32:5d:11:
a7:ad:51:62:72:5d:8e:ee:c4:ef:d2:f2:4f:8a:97:b8:82:2e:
9e:86:07:94:07:fc:8c:2d:e9:ca:fc:4b:b6:f6:c6:41:0d:53:
62:be:3b:fb:d8:b7:ae:2c:93:38:58:47:77:fd:b2:09:d9:b8:
23:5f:5c:e9:18:be:58:46:2d:1a:ef:c2:43:2d:5b:14:24:39:
8b:7e:ec:2e:ad:64:6a:c3:9a:93:ac:2e:49:73:87:02:23:77:
8d:aa:22:c6:56:c6:6d:39:74:e3:53:a5:03:0b:1d:d8:4b:94:
75:ab:2d:90:f7:9c:38:50:8e:6f:a2:b3:32:fc:95:5a:64:58:
bc:6d:03:bd:38:e6:5a:28:91:90:86:5e:fe:c7:d2:83:74:a4:
98:c0:5d:b4:e4:31:9b:fb:10:f3:ba:8a:7c:27:71:60:f7:a3:
df:57:35:07:f1:cd:be:ae:82:14:7b:4a:76:5d:60:03:c5:66:
de:34:5d:ef:e8:2a:f9:1a:0a:7a:ff:49:21:e3:ce:55:5f:3c:
5d:a4:6b:9a:68:16:3d:7c:32:b8:e8:2d:b2:bc:c6:d0:b8:a7:
29:ba:95:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:55:26 2026 by rpki-client