This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
File: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft (raw, json)
Hash identifier: LDHN9QeP1GVyakoPP/gLFmcH7GNV6+wMx69ky/yK4N0=
Subject key identifier: 90:BB:B7:5F:89:34:E0:60:99:B9:22:0D:40:3C:79:BC:8A:8F:3A:65
Authority key identifier: F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
Certificate issuer: /CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Certificate serial: 019C420FA99383F947016588D694CE102507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
Manifest number: 0926
Signing time: Mon 09 Feb 2026 11:00:48 +0000
Manifest this update: Mon 09 Feb 2026 11:00:48 +0000
Manifest next update: Tue 10 Feb 2026 11:00:48 +0000
Files and hashes: 1: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl (hash: tPKKsGHVNIyDimkdyxlm0AQJFDWt0Q+kAvGBfgnxbos=)
2: emnbEvWJygEiWm9VUZK5oCubv9o.roa (hash: ii00HW3z+EIyVSsqQmHcN0u5PlKx7x+pk+qTbfPvDb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:a9:93:83:f9:47:01:65:88:d6:94:ce:10:25:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Validity
Not Before: Feb 9 11:00:48 2026 GMT
Not After : Feb 10 11:00:48 2026 GMT
Subject: CN=90bbb75f8934e06099b9220d403c79bc8a8f3a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:62:67:f1:f6:7f:2f:2b:fa:70:5f:e6:c7:3b:
a7:de:bc:b7:9d:6f:b7:00:0f:c6:61:20:ec:b7:38:
bb:91:23:be:34:be:72:0a:08:8f:f6:5c:c3:08:94:
df:d9:a0:00:ef:2c:e7:67:ca:33:64:dd:87:b0:9c:
7e:53:b3:52:2b:38:70:8b:13:bb:f5:0c:a8:0e:e1:
69:01:53:61:cc:cf:81:df:73:ef:1a:b9:20:c0:38:
64:7b:49:b1:5d:3f:f4:57:6b:75:42:3b:4d:c7:27:
0d:5a:0d:bb:98:95:90:4c:7b:c7:5b:a9:60:67:36:
9f:78:88:27:fd:c4:31:da:b7:49:79:14:63:7c:82:
b0:7e:49:05:a3:f9:15:ff:41:ab:e0:18:3d:76:75:
4a:48:36:1d:32:f6:32:40:c9:6b:99:cd:7a:94:d3:
0c:72:ec:94:b4:72:45:93:15:ed:c0:08:2b:ac:36:
a7:6b:8e:e1:05:6b:b4:16:47:54:71:2d:e1:6a:63:
50:3c:55:65:1e:77:48:4e:e2:2e:e5:ee:6e:7e:21:
68:4a:ab:3d:53:76:0c:64:ff:d9:38:81:f1:71:23:
c1:ea:87:3b:e5:8f:c2:ee:64:ed:48:0a:55:27:e0:
37:2e:a0:27:3d:f8:15:fc:6e:2e:5d:38:ec:ce:5e:
6d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BB:B7:5F:89:34:E0:60:99:B9:22:0D:40:3C:79:BC:8A:8F:3A:65
X509v3 Authority Key Identifier:
keyid:F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:de:37:ca:f9:a5:8e:34:02:9b:b9:e3:18:6a:ab:10:d1:14:
d5:3d:83:53:9b:bb:08:31:38:9f:f5:25:ed:08:02:0e:ab:bf:
69:04:a7:6e:17:64:f1:d3:65:b8:0c:45:45:c8:7c:08:4d:a2:
30:7f:55:db:17:1a:b8:f5:59:73:21:6d:74:7d:17:e6:d4:ce:
38:2e:8d:e1:c0:76:cf:aa:3a:23:27:5b:dd:1f:c2:fa:14:56:
98:49:18:b1:57:31:ee:b6:a4:c1:c6:d8:c7:fd:ab:1c:5a:c7:
fb:ab:dc:4e:7c:2c:9d:4c:30:24:d5:1e:5c:cc:0a:47:5b:17:
43:83:93:1b:55:ac:69:3b:04:c3:a5:0e:68:a8:3d:63:dc:4b:
9c:a7:13:75:8a:9b:8d:60:34:02:09:bc:49:50:19:51:c3:77:
a2:a9:ce:9d:e2:62:49:a9:02:43:85:62:9c:de:26:3f:8b:c3:
96:51:1f:76:80:53:7e:25:06:15:8c:ce:49:dd:ea:e6:67:ee:
d6:55:2e:5a:7e:16:c0:88:16:65:f5:6e:0c:f3:64:89:a2:7a:
e8:72:f6:7f:9d:0e:2c:5b:3c:ab:6e:47:f3:2b:f4:98:5b:8a:
04:07:f1:f9:dd:2c:49:78:55:e0:39:a1:31:7e:3f:be:58:3e:
4e:c7:b4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:15 2026 by rpki-client