This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
File: kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft (raw, json)
Hash identifier: EdH0Px2l46B/m0xwYBc7t1sUEXpnHZakGamFqiljcS8=
Subject key identifier: F5:C6:8A:28:76:57:CA:BF:6D:99:F3:87:DE:B4:09:11:0D:57:3C:90
Authority key identifier: 91:C1:C8:5B:F5:C5:34:71:A9:97:EF:9F:A9:99:D0:C1:6B:E8:54:44
Certificate issuer: /CN=91c1c85bf5c53471a997ef9fa999d0c16be85444
Certificate serial: 019C43594EA4C0ACF77490BA166AA61E6838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
Manifest number: 181C
Signing time: Mon 09 Feb 2026 17:00:52 +0000
Manifest this update: Mon 09 Feb 2026 17:00:52 +0000
Manifest next update: Tue 10 Feb 2026 17:00:52 +0000
Files and hashes: 1: iGCKYLy5OifXCBp6y__hXqwBY-E.roa (hash: qEhWJEE9s0Q/c+XhoUDfPYQIsNqLlNPUuYN8qig5CL8=)
2: kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl (hash: FQGWCt3AMOjphilhNZNngXEEh517oX8fDwu7Ur6XLSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:4e:a4:c0:ac:f7:74:90:ba:16:6a:a6:1e:68:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c1c85bf5c53471a997ef9fa999d0c16be85444
Validity
Not Before: Feb 9 17:00:52 2026 GMT
Not After : Feb 10 17:00:52 2026 GMT
Subject: CN=f5c68a287657cabf6d99f387deb409110d573c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:f0:41:80:f5:85:88:53:9d:0e:d7:60:7e:
5d:aa:f8:09:3f:67:bd:ba:69:bd:ee:79:79:ea:25:
77:b9:f1:5b:ca:fb:8a:86:07:f4:62:82:c2:af:6e:
58:15:b1:ee:f9:8b:c1:17:10:88:13:2a:ee:4c:29:
0e:16:f9:71:66:4d:db:6d:78:ab:51:c5:72:a8:3d:
89:58:66:7d:f1:70:7e:55:4b:d3:a2:af:a9:79:97:
51:6e:39:f8:4f:55:55:05:05:26:aa:b3:79:33:20:
79:04:a7:bb:b7:f5:ee:13:eb:5b:48:08:b7:3a:03:
d2:cf:5c:11:c2:7c:9c:64:6e:c9:59:a9:fe:00:9f:
b2:da:8b:63:da:ec:85:45:ad:f3:15:35:3d:dd:98:
cc:17:e8:f9:cb:a8:08:13:b6:09:b8:11:b8:a0:ed:
e2:fa:22:95:11:3e:ac:fc:ec:29:16:38:40:32:9c:
cc:34:da:47:af:ff:79:73:bf:9c:50:14:e3:7d:90:
98:98:dd:55:02:d7:45:28:40:12:0f:77:03:b9:d5:
75:d4:78:de:13:65:42:a7:35:1c:cf:fd:d5:74:eb:
e8:c0:ec:16:ff:85:6e:60:0c:43:ef:be:66:7d:e0:
f0:5e:4d:f9:6b:a7:ce:1a:32:af:a2:5e:2c:08:49:
1d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C6:8A:28:76:57:CA:BF:6D:99:F3:87:DE:B4:09:11:0D:57:3C:90
X509v3 Authority Key Identifier:
keyid:91:C1:C8:5B:F5:C5:34:71:A9:97:EF:9F:A9:99:D0:C1:6B:E8:54:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:cf:4a:f4:33:c3:9d:f5:eb:d6:98:56:c8:40:89:fe:4e:c6:
1c:cd:20:46:25:3e:80:51:d2:72:94:51:ff:5e:7f:19:d9:e7:
a7:3e:a1:93:3c:95:3a:04:fd:31:ec:16:1b:96:29:28:f3:ff:
73:13:36:d4:73:21:5c:e6:27:5a:79:5d:1d:c7:61:52:46:96:
fd:07:54:60:f7:90:97:7e:e1:69:cf:0a:50:1f:4b:11:22:89:
3e:f3:34:37:c0:e7:c1:75:d4:0e:5f:3a:29:94:44:04:6a:69:
e9:08:6b:30:40:d2:70:af:e8:68:61:a4:cf:82:6a:f4:68:2c:
bb:65:15:53:ab:e9:ad:2d:a8:f0:36:37:d2:71:49:7f:fe:68:
b3:80:b1:0d:80:e6:4a:20:aa:a5:b0:06:7a:af:fa:6e:8c:53:
4b:27:c6:0e:7c:1b:67:29:a5:3d:5a:d8:4e:a1:f1:9a:01:22:
e3:73:1a:87:b3:23:d9:9f:c5:08:28:d2:df:6e:37:b1:19:5b:
f4:ec:cb:09:cb:41:4f:0f:16:7d:91:02:d2:70:d2:e5:39:3e:
9a:ef:e6:75:db:05:cd:43:a3:f6:53:3c:a3:83:1b:e7:90:6a:
39:58:01:d9:de:17:fa:a9:97:3d:fb:11:70:c0:a1:df:bf:a9:
2d:4e:ee:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWU6kwKz3dJC6FmqmHmg4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYzFjODViZjVjNTM0NzFhOTk3ZWY5ZmE5OTlkMGMxNmJl
ODU0NDQwHhcNMjYwMjA5MTcwMDUyWhcNMjYwMjEwMTcwMDUyWjAzMTEwLwYDVQQD
EyhmNWM2OGEyODc2NTdjYWJmNmQ5OWYzODdkZWI0MDkxMTBkNTczYzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/jwQYD1hYhTnQ7XYH5dqvgJP2e9
umm97nl56iV3ufFbyvuKhgf0YoLCr25YFbHu+YvBFxCIEyruTCkOFvlxZk3bbXir
UcVyqD2JWGZ98XB+VUvToq+peZdRbjn4T1VVBQUmqrN5MyB5BKe7t/XuE+tbSAi3
OgPSz1wRwnycZG7JWan+AJ+y2otj2uyFRa3zFTU93ZjMF+j5y6gIE7YJuBG4oO3i
+iKVET6s/OwpFjhAMpzMNNpHr/95c7+cUBTjfZCYmN1VAtdFKEASD3cDudV11Hje
E2VCpzUcz/3VdOvowOwW/4VuYAxD775mfeDwXk35a6fOGjKvol4sCEkdCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXGiih2V8q/bZnzh960CRENVzyQMB8GA1UdIwQY
MBaAFJHByFv1xTRxqZfvn6mZ0MFr6FREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2NISVdfWEZOSEdwbC0tZnFablF3V3ZvVkVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wMzQ3ZDMtZTU0Yy00NGMwLThmN2Et
NDUxNDM3NGU2ZmZhLzEva2NISVdfWEZOSEdwbC0tZnFablF3V3ZvVkVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wMzQ3ZDMtZTU0Yy00NGMwLThmN2EtNDUxNDM3NGU2ZmZh
LzEva2NISVdfWEZOSEdwbC0tZnFablF3V3ZvVkVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAls9K9DPD
nfXr1phWyECJ/k7GHM0gRiU+gFHScpRR/15/Gdnnpz6hkzyVOgT9MewWG5YpKPP/
cxM21HMhXOYnWnldHcdhUkaW/QdUYPeQl37hac8KUB9LESKJPvM0N8DnwXXUDl86
KZREBGpp6QhrMEDScK/oaGGkz4Jq9Ggsu2UVU6vprS2o8DY30nFJf/5os4CxDYDm
SiCqpbAGeq/6boxTSyfGDnwbZymlPVrYTqHxmgEi43Mah7Mj2Z/FCCjS3243sRlb
9OzLCctBTw8WfZEC0nDS5Tk+mu/mddsFzUOj9lM8o4Mb55BqOVgB2d4X+qmXPfsR
cMCh37+pLU7ukg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:58 2026 by rpki-client