This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
File: kYMWq06hPrtUVgwaZwQtR-lm2CM.mft (raw, json)
Hash identifier: FyGNYqe7rS2GKrvmOvYB7ZW0ey5cuH3ZMgqZ99sm3jk=
Subject key identifier: 91:97:6B:EE:3D:9D:48:B9:08:01:5E:0A:24:EA:6D:28:5B:90:B3:81
Authority key identifier: 91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
Certificate issuer: /CN=918316ab4ea13ebb54560c1a67042d47e966d823
Certificate serial: 019C41A1BED319A253E45E37A9356AD1193F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
Manifest number: 1813
Signing time: Mon 09 Feb 2026 09:00:45 +0000
Manifest this update: Mon 09 Feb 2026 09:00:45 +0000
Manifest next update: Tue 10 Feb 2026 09:00:45 +0000
Files and hashes: 1: SggDrxFFsWWs12xC5aQkzP-tlSU.roa (hash: 9cLRIhlE0/G5tYsZFx8+yzpMIrF34vwAUkKOhMbaUZc=)
2: kYMWq06hPrtUVgwaZwQtR-lm2CM.crl (hash: O7TkN0afg6yDH0Gh5sZ0w41x0g3jdIuBxtcUNl5xW48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:be:d3:19:a2:53:e4:5e:37:a9:35:6a:d1:19:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918316ab4ea13ebb54560c1a67042d47e966d823
Validity
Not Before: Feb 9 09:00:45 2026 GMT
Not After : Feb 10 09:00:45 2026 GMT
Subject: CN=91976bee3d9d48b908015e0a24ea6d285b90b381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ec:af:65:31:cd:a9:ce:7d:9d:0d:aa:57:60:
22:88:7c:db:08:97:78:64:d0:aa:5b:19:56:b7:07:
37:29:95:bf:22:e8:88:10:7b:e4:d8:04:f9:37:21:
67:0e:fa:03:58:98:03:f4:0c:68:5b:e2:7c:b6:09:
04:53:c6:8a:a9:6c:c8:d1:63:60:95:c9:1f:a8:a0:
79:9d:9f:c0:69:86:6c:85:ca:d4:81:87:45:04:04:
8e:46:7b:98:4d:c7:c1:08:b7:b0:a8:fc:90:9e:5c:
1a:05:ea:7d:38:cb:c5:3f:75:b2:bf:54:52:4d:af:
fd:94:bf:fc:42:bc:7b:70:f2:e6:c2:7f:91:9b:bd:
d5:55:63:9c:74:f8:14:d9:cf:0d:c2:71:11:98:40:
2d:75:f2:86:fe:dc:80:ab:91:70:d0:7e:1b:07:16:
db:94:46:91:22:ef:a4:b7:4d:73:7e:40:6a:16:4f:
0f:f5:01:86:7f:65:b4:3c:e8:bb:ef:e6:8b:3d:89:
25:9e:b6:0d:dc:da:6f:d0:9a:27:ca:77:5d:af:ae:
87:10:a8:60:7e:86:8b:8e:aa:12:00:44:2f:de:4d:
b7:cc:50:1c:ef:72:e2:f8:d8:c1:da:fd:48:1c:fc:
0c:98:61:07:e6:65:a3:38:de:e9:09:49:c4:09:6f:
01:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:97:6B:EE:3D:9D:48:B9:08:01:5E:0A:24:EA:6D:28:5B:90:B3:81
X509v3 Authority Key Identifier:
keyid:91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:4e:dd:ae:f6:64:3c:81:6d:0f:65:36:8b:c1:e6:68:e8:68:
cb:27:9c:bf:a3:e0:ce:d9:8b:7e:1b:fe:30:fd:6b:b6:3a:a4:
f1:a0:ab:40:40:1f:55:59:ab:07:fc:60:5b:70:65:2e:9f:21:
f8:a5:5c:72:ad:09:09:58:a6:8c:ba:8e:6a:8a:cd:59:13:13:
e9:f7:f7:3c:6f:2b:03:4b:c5:f6:7b:99:a8:2f:b5:7b:f6:56:
2f:ce:13:28:9d:ec:ef:d6:50:dd:0c:4f:69:e4:a7:8f:30:9a:
d0:7c:91:92:91:19:23:9a:70:19:ba:75:b3:08:fd:7b:37:3e:
cc:88:e6:37:6f:79:84:52:68:e9:e1:48:5d:13:9d:e0:67:54:
38:8f:32:6b:5e:d7:d2:7b:03:38:3a:6c:e8:41:6c:ed:4b:ac:
0f:02:68:e6:f0:b8:a4:cf:ee:ef:6a:a8:62:d2:ec:dd:6f:71:
95:be:0d:19:14:c6:be:ea:04:05:84:84:4d:dc:6c:66:19:4e:
23:f1:44:dd:ee:40:d9:7f:fb:d5:ba:73:20:7f:b0:cf:ac:75:
b5:d6:32:bd:ad:d2:e2:17:1c:b2:2b:0d:fa:96:a7:2b:cf:47:
f2:1a:1f:ac:13:e2:60:d3:af:70:ae:1d:d2:fc:b4:61:d2:05:
b9:c2:ec:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBob7TGaJT5F43qTVq0Rk/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxODMxNmFiNGVhMTNlYmI1NDU2MGMxYTY3MDQyZDQ3ZTk2
NmQ4MjMwHhcNMjYwMjA5MDkwMDQ1WhcNMjYwMjEwMDkwMDQ1WjAzMTEwLwYDVQQD
Eyg5MTk3NmJlZTNkOWQ0OGI5MDgwMTVlMGEyNGVhNmQyODViOTBiMzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOyvZTHNqc59nQ2qV2AiiHzbCJd4
ZNCqWxlWtwc3KZW/IuiIEHvk2AT5NyFnDvoDWJgD9AxoW+J8tgkEU8aKqWzI0WNg
lckfqKB5nZ/AaYZshcrUgYdFBASORnuYTcfBCLewqPyQnlwaBep9OMvFP3Wyv1RS
Ta/9lL/8Qrx7cPLmwn+Rm73VVWOcdPgU2c8NwnERmEAtdfKG/tyAq5Fw0H4bBxbb
lEaRIu+kt01zfkBqFk8P9QGGf2W0POi77+aLPYklnrYN3Npv0Jonynddr66HEKhg
foaLjqoSAEQv3k23zFAc73Li+NjB2v1IHPwMmGEH5mWjON7pCUnECW8B9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGXa+49nUi5CAFeCiTqbShbkLOBMB8GA1UdIwQY
MBaAFJGDFqtOoT67VFYMGmcELUfpZtgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1lNV3EwNmhQcnRVVmd3YVp3UXRSLWxtMkNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84OWZiOTktOTA0OS00ODJmLTk1ZGMt
OWUzY2QwZDlkNzdhLzEva1lNV3EwNmhQcnRVVmd3YVp3UXRSLWxtMkNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi84OWZiOTktOTA0OS00ODJmLTk1ZGMtOWUzY2QwZDlkNzdh
LzEva1lNV3EwNmhQcnRVVmd3YVp3UXRSLWxtMkNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2U7drvZk
PIFtD2U2i8HmaOhoyyecv6PgztmLfhv+MP1rtjqk8aCrQEAfVVmrB/xgW3BlLp8h
+KVccq0JCVimjLqOaorNWRMT6ff3PG8rA0vF9nuZqC+1e/ZWL84TKJ3s79ZQ3QxP
aeSnjzCa0HyRkpEZI5pwGbp1swj9ezc+zIjmN295hFJo6eFIXROd4GdUOI8ya17X
0nsDODps6EFs7UusDwJo5vC4pM/u72qoYtLs3W9xlb4NGRTGvuoEBYSETdxsZhlO
I/FE3e5A2X/71bpzIH+wz6x1tdYyva3S4hccsisN+panK89H8hofrBPiYNOvcK4d
0vy0YdIFucLsfg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:34 2026 by rpki-client