This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
File: KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft (raw, json)
Hash identifier: qqaAJcnJUItN69U8LiUbgE7/XjDf9how5croz9jAvv8=
Subject key identifier: EF:C9:C6:4A:3D:38:59:FE:B8:60:4D:AC:20:B3:F6:F7:35:68:0A:55
Authority key identifier: 29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04
Certificate issuer: /CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404
Certificate serial: 019C42EB49C7DF305656F7DABA682C50980E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
Manifest number: 021B
Signing time: Mon 09 Feb 2026 15:00:41 +0000
Manifest this update: Mon 09 Feb 2026 15:00:41 +0000
Manifest next update: Tue 10 Feb 2026 15:00:41 +0000
Files and hashes: 1: KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl (hash: YEH08KzReAgDffONpEJBq8zwmxuL7acqRSzUdoOQ0dg=)
2: hdtIncm8R6KfHurvC5li4aR-6S0.roa (hash: FRUMsOvUTZ3EPeiG9JMTCcXVM1bub5CGqnhEOTi3ITU=)
3: rp8RFd_7NSj5NkxaEW9D_SJM9Qc.roa (hash: tJew+9eXhgg/ITt6Y+hO2WqhJxjVaXWqK+7nSn1BD6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:49:c7:df:30:56:56:f7:da:ba:68:2c:50:98:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404
Validity
Not Before: Feb 9 15:00:41 2026 GMT
Not After : Feb 10 15:00:41 2026 GMT
Subject: CN=efc9c64a3d3859feb8604dac20b3f6f735680a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4d:84:e1:e3:fa:18:d1:3d:c6:4b:0a:13:6b:
a7:74:37:93:9e:1c:75:0e:5e:a2:ca:30:71:18:5e:
7f:d3:60:6d:00:8e:5c:5b:32:16:c7:90:2a:65:18:
2f:ab:29:ff:61:8c:b3:c1:98:4c:df:1a:04:b8:43:
a0:fe:6f:c8:f0:51:8b:25:94:dd:c4:0b:e1:42:73:
30:84:9f:ff:ec:e5:23:5b:6f:21:0a:c1:da:90:71:
91:76:cf:c3:81:7f:29:50:a3:07:0e:fb:81:76:8d:
50:d1:a5:a8:57:26:3e:29:25:64:01:4a:d7:aa:19:
fa:84:d5:da:52:0e:70:ec:79:83:52:b0:af:43:41:
db:db:fd:f8:ed:0d:eb:59:5f:12:51:f3:0d:46:f1:
2f:51:a6:e9:ad:7d:75:fc:90:1c:f4:db:dc:2b:14:
d8:61:7b:1d:3c:cb:c4:e4:38:88:c9:18:74:4a:c7:
3a:89:9b:54:56:d5:b7:d7:7c:98:41:c7:81:72:64:
01:f6:87:f8:e7:12:d3:28:3a:96:8f:aa:e6:1b:b0:
05:f4:d2:0f:9c:bb:14:64:73:7d:98:58:05:9a:93:
3d:22:ad:2c:ba:89:d6:87:9a:21:f7:58:69:0a:a2:
60:ff:7a:87:bd:f7:e4:c6:49:c5:ec:d5:d7:6e:d0:
58:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C9:C6:4A:3D:38:59:FE:B8:60:4D:AC:20:B3:F6:F7:35:68:0A:55
X509v3 Authority Key Identifier:
keyid:29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:04:03:08:94:38:ce:b4:56:ba:8f:e4:0c:6e:ec:f3:c4:e9:
6e:92:bd:9d:df:bb:40:c6:60:f3:61:91:cf:8d:11:8f:59:d6:
dd:db:3c:c1:9a:ba:56:ca:6c:0c:0f:9b:f6:65:8e:45:b9:63:
a0:37:d3:94:82:74:4e:b8:b8:b1:c1:c1:8e:9c:3d:bf:7f:e3:
3c:09:80:0a:82:99:d2:53:4e:9c:e9:cf:15:5d:1b:2d:9b:13:
ad:de:0e:64:16:6a:b7:3d:65:2c:cf:6e:7d:be:a0:83:86:27:
a5:cc:5f:7f:1c:33:c1:eb:43:6c:4e:96:5f:99:7b:c7:26:94:
d5:a6:6f:89:37:d5:60:af:be:3d:4a:cd:14:b2:6f:7e:fc:50:
28:80:fc:93:ad:21:6d:c7:10:d3:c6:4f:c5:5f:09:fb:ff:e3:
23:76:24:2e:e6:03:23:87:5b:a3:46:42:7d:9d:2b:d7:61:74:
ab:3b:b5:f6:27:9c:a2:88:12:74:c4:53:92:45:37:29:ff:52:
7b:4d:4c:b7:cf:9a:1f:87:49:31:1c:c7:c5:56:49:7b:f8:11:
e9:11:e4:f2:3d:c5:3f:03:24:18:b6:42:92:16:80:e3:09:d5:
8a:a8:f4:7b:85:3e:35:25:13:14:52:5f:bb:d0:88:ee:63:62:
5b:b3:de:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC60nH3zBWVvfaumgsUJgOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NzY2ZDFhZTZlYjIxODQ5YmMzYTNiMmQxOGU4NjNkMjcz
ZDI0MDQwHhcNMjYwMjA5MTUwMDQxWhcNMjYwMjEwMTUwMDQxWjAzMTEwLwYDVQQD
EyhlZmM5YzY0YTNkMzg1OWZlYjg2MDRkYWMyMGIzZjZmNzM1NjgwYTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU2E4eP6GNE9xksKE2undDeTnhx1
Dl6iyjBxGF5/02BtAI5cWzIWx5AqZRgvqyn/YYyzwZhM3xoEuEOg/m/I8FGLJZTd
xAvhQnMwhJ//7OUjW28hCsHakHGRds/DgX8pUKMHDvuBdo1Q0aWoVyY+KSVkAUrX
qhn6hNXaUg5w7HmDUrCvQ0Hb2/347Q3rWV8SUfMNRvEvUabprX11/JAc9NvcKxTY
YXsdPMvE5DiIyRh0Ssc6iZtUVtW313yYQceBcmQB9of45xLTKDqWj6rmG7AF9NIP
nLsUZHN9mFgFmpM9Iq0suonWh5oh91hpCqJg/3qHvffkxknF7NXXbtBYFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/Jxko9OFn+uGBNrCCz9vc1aApVMB8GA1UdIwQY
MBaAFCl2bRrm6yGEm8OjstGOhj0nPSQEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1hadEd1YnJJWVNidzZPeTBZNkdQU2M5SkFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iNzExZmItZTU4NC00ZjM1LWEwZWMt
MTE1ZDY4ZDliODFiLzEvS1hadEd1YnJJWVNidzZPeTBZNkdQU2M5SkFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iNzExZmItZTU4NC00ZjM1LWEwZWMtMTE1ZDY4ZDliODFi
LzEvS1hadEd1YnJJWVNidzZPeTBZNkdQU2M5SkFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgQDCJQ4
zrRWuo/kDG7s88TpbpK9nd+7QMZg82GRz40Rj1nW3ds8wZq6VspsDA+b9mWORblj
oDfTlIJ0Tri4scHBjpw9v3/jPAmACoKZ0lNOnOnPFV0bLZsTrd4OZBZqtz1lLM9u
fb6gg4YnpcxffxwzwetDbE6WX5l7xyaU1aZviTfVYK++PUrNFLJvfvxQKID8k60h
bccQ08ZPxV8J+//jI3YkLuYDI4dbo0ZCfZ0r12F0qzu19iecoogSdMRTkkU3Kf9S
e01Mt8+aH4dJMRzHxVZJe/gR6RHk8j3FPwMkGLZCkhaA4wnViqj0e4U+NSUTFFJf
u9CI7mNiW7Pefw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:56 2026 by rpki-client