This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
File: kTgbyWneatw9HdwOuJve6s6YBc0.mft (raw, json)
Hash identifier: BZD93hhcl5FQvHXw6iX9HEA1L81YidZyK6rF7XlJQp0=
Subject key identifier: D1:55:50:6E:14:D9:8A:A7:95:10:78:C7:4F:4E:66:36:62:9B:BC:68
Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
Certificate issuer: /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Certificate serial: 019C43FDA4091A262D433190D38B53D36F57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
Manifest number: 0C05
Signing time: Mon 09 Feb 2026 20:00:21 +0000
Manifest this update: Mon 09 Feb 2026 20:00:21 +0000
Manifest next update: Tue 10 Feb 2026 20:00:21 +0000
Files and hashes: 1: AeZuHYO0mULsrI-c-YIMMNHmKvk.roa (hash: E13pkVsdNOEH/6Nn+/0O/foSnJKfkBMXITwoCcEEiuI=)
2: H180kdffd3luCWDv6OkwCGcrOfc.roa (hash: bZpdssv1zrr3XYWLcVwhDgI3iMTPHR0H5UYXdEHp1SQ=)
3: ZAsWuhaFhvmR__Q0aQXj1GfCRnk.roa (hash: DhqcuYQ4zHPXq9RixDGQKhV/M4lScQzHRE9Yz/ZYfyc=)
4: kTgbyWneatw9HdwOuJve6s6YBc0.crl (hash: I4V2vqaTFApT75GOrsEJSTK+4eXvB2Csw/PeRKdIHR4=)
5: o-BkPwL00PdU1t8ffwirkb7_R1g.roa (hash: suuI+jXuOojIG5lnf6toPBtgOXStJ8/ZoJx7xnWXW/s=)
6: tYmXAiohX3AcRjPUBEAHeBUsE58.roa (hash: FN7T5567tN5nhPmv6bO1Q8VmVLE2iMv0mhNHydh4B2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fd:a4:09:1a:26:2d:43:31:90:d3:8b:53:d3:6f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Validity
Not Before: Feb 9 20:00:21 2026 GMT
Not After : Feb 10 20:00:21 2026 GMT
Subject: CN=d155506e14d98aa7951078c74f4e6636629bbc68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:66:70:3b:24:f5:1e:df:4a:5b:3b:71:3e:fa:
77:bc:00:52:18:46:3a:97:2c:4d:1c:4a:22:3f:df:
e2:94:2b:81:a2:68:77:e1:87:db:06:55:f4:64:9c:
db:fa:5c:7d:e2:bc:3e:09:5d:78:9c:57:92:4e:c7:
d5:54:12:74:c3:b5:8c:73:3b:52:e8:6a:55:7b:7d:
52:dd:f6:1c:b4:84:63:ca:96:f0:7f:fe:05:d4:60:
6a:29:72:0e:cb:07:2a:d4:1c:78:18:f6:be:62:92:
b2:1d:74:9a:4d:01:af:2a:4f:81:21:b7:06:de:d7:
19:f5:f7:12:cf:ed:44:81:b8:2d:eb:8c:7d:aa:29:
89:5b:ba:c0:93:25:d3:29:79:d9:68:17:85:a5:b4:
82:fd:17:9f:73:13:2b:1e:c2:05:6c:14:1d:b5:b7:
9c:d1:36:ce:60:85:e9:f8:4a:e8:15:2d:e3:84:44:
2f:d4:01:91:31:83:19:6a:b1:3e:36:20:b4:56:54:
f7:bc:9a:17:01:99:31:0f:6f:b0:bf:77:fc:6e:c6:
19:cd:fd:39:bf:58:a8:c4:c2:33:c3:c7:c9:5f:cf:
9b:8e:ff:fa:fe:7c:68:24:79:ea:62:f5:f5:9d:45:
53:28:9d:7b:45:38:c1:aa:3c:1a:ff:4c:62:7b:ed:
a5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:55:50:6E:14:D9:8A:A7:95:10:78:C7:4F:4E:66:36:62:9B:BC:68
X509v3 Authority Key Identifier:
keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e3:98:7a:73:39:43:c9:59:91:af:ae:56:7e:e8:03:ac:8c:
fe:d1:05:a8:e2:0b:ce:0d:0c:4b:7e:71:3e:8f:9e:82:45:6a:
45:be:0f:ba:04:25:b1:ca:62:d0:61:d4:3f:df:60:88:86:ab:
cd:95:01:5a:d3:50:28:66:80:d2:61:3b:4b:01:69:21:c8:cd:
be:ad:41:32:6a:ec:b4:32:9a:7d:09:f5:05:14:7b:13:07:28:
a2:e2:27:c1:68:c2:48:ab:69:d8:6b:19:ca:c8:5e:f4:de:a6:
a5:a6:17:07:a0:c7:53:90:70:54:74:8a:0f:8b:46:6c:ce:0f:
5a:8b:62:81:24:80:36:ec:3d:58:77:74:79:30:90:8a:c7:34:
59:09:8f:d4:54:64:24:f2:9d:9b:21:c9:97:ff:82:bf:24:2b:
2b:f1:63:32:d3:12:58:8b:2a:10:c1:91:e6:7d:a6:57:72:5e:
34:9e:96:51:3a:d9:a6:05:75:3b:98:c7:bf:00:28:c3:47:bc:
6a:16:aa:f2:3b:87:b3:c6:f1:79:95:3b:4e:71:20:f0:b9:d8:
de:41:dc:89:17:d0:2d:14:f0:c3:9b:66:dd:ef:e1:54:7f:05:
57:cb:6b:dd:3b:02:f9:44:37:b5:3e:67:e5:8d:f9:3f:34:b5:
cc:f9:12:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/aQJGiYtQzGQ04tT029XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMzgxYmM5NjlkZTZhZGMzZDFkZGMwZWI4OWJkZWVhY2U5
ODA1Y2QwHhcNMjYwMjA5MjAwMDIxWhcNMjYwMjEwMjAwMDIxWjAzMTEwLwYDVQQD
EyhkMTU1NTA2ZTE0ZDk4YWE3OTUxMDc4Yzc0ZjRlNjYzNjYyOWJiYzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GZwOyT1Ht9KWztxPvp3vABSGEY6
lyxNHEoiP9/ilCuBomh34YfbBlX0ZJzb+lx94rw+CV14nFeSTsfVVBJ0w7WMcztS
6GpVe31S3fYctIRjypbwf/4F1GBqKXIOywcq1Bx4GPa+YpKyHXSaTQGvKk+BIbcG
3tcZ9fcSz+1Egbgt64x9qimJW7rAkyXTKXnZaBeFpbSC/RefcxMrHsIFbBQdtbec
0TbOYIXp+EroFS3jhEQv1AGRMYMZarE+NiC0VlT3vJoXAZkxD2+wv3f8bsYZzf05
v1ioxMIzw8fJX8+bjv/6/nxoJHnqYvX1nUVTKJ17RTjBqjwa/0xie+2luwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFVUG4U2YqnlRB4x09OZjZim7xoMB8GA1UdIwQY
MBaAFJE4G8lp3mrcPR3cDrib3urOmAXNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1RnYnlXbmVhdHc5SGR3T3VKdmU2czZZQmMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mMzU0MDYtZDhjNC00ZjVjLTkyYWMt
MjU2ZGE5NWQxMzQ1LzEva1RnYnlXbmVhdHc5SGR3T3VKdmU2czZZQmMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9mMzU0MDYtZDhjNC00ZjVjLTkyYWMtMjU2ZGE5NWQxMzQ1
LzEva1RnYnlXbmVhdHc5SGR3T3VKdmU2czZZQmMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgOOYenM5
Q8lZka+uVn7oA6yM/tEFqOILzg0MS35xPo+egkVqRb4PugQlscpi0GHUP99giIar
zZUBWtNQKGaA0mE7SwFpIcjNvq1BMmrstDKafQn1BRR7EwcoouInwWjCSKtp2GsZ
yshe9N6mpaYXB6DHU5BwVHSKD4tGbM4PWotigSSANuw9WHd0eTCQisc0WQmP1FRk
JPKdmyHJl/+CvyQrK/FjMtMSWIsqEMGR5n2mV3JeNJ6WUTrZpgV1O5jHvwAow0e8
ahaq8juHs8bxeZU7TnEg8LnY3kHciRfQLRTww5tm3e/hVH8FV8tr3TsC+UQ3tT5n
5Y35PzS1zPkSng==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:30:16 2026 by rpki-client