This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
File: kkQvHPx17REAE4d5MKKdhvieu7Y.mft (raw, json)
Hash identifier: B5v+wDyezC85ZZ7MJuYuwPhc8WTu5G278CZeUpwhHtQ=
Subject key identifier: 0E:44:05:6A:07:53:A2:A0:38:6B:29:24:F7:B9:F1:94:EB:46:5F:23
Authority key identifier: 92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
Certificate issuer: /CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Certificate serial: 019C438FFB5D0A3B05E3CA3F4E92F9E106B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
Manifest number: 0EDD
Signing time: Mon 09 Feb 2026 18:00:35 +0000
Manifest this update: Mon 09 Feb 2026 18:00:35 +0000
Manifest next update: Tue 10 Feb 2026 18:00:35 +0000
Files and hashes: 1: 5b9__Q8NOyZsGtNfArWmdCajUsQ.roa (hash: JRUc1JqtkkmBfJnMJX95f2kq0cGDruqAawQMnKbLcRM=)
2: kkQvHPx17REAE4d5MKKdhvieu7Y.crl (hash: 4PQn4Ri653gEzRIg7xqNVuTikgIpVMMtFyqNuIWRCqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:fb:5d:0a:3b:05:e3:ca:3f:4e:92:f9:e1:06:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Validity
Not Before: Feb 9 18:00:35 2026 GMT
Not After : Feb 10 18:00:35 2026 GMT
Subject: CN=0e44056a0753a2a0386b2924f7b9f194eb465f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:87:40:8f:f4:85:77:32:9a:d5:93:76:24:23:
0c:7c:ef:19:6d:5c:17:6d:13:b0:03:3b:96:d7:93:
95:40:82:0d:ca:22:13:8a:ea:a9:82:c8:e5:c3:77:
24:cc:72:d6:0b:38:2d:9d:a6:30:51:cb:cc:96:77:
f3:8d:72:69:c1:71:50:e0:cd:f2:2f:20:76:34:2e:
bf:e3:1d:0d:b1:85:9c:98:94:f1:6e:53:4d:b1:7c:
72:22:7d:6b:1d:65:d9:60:0b:8e:67:df:85:6a:02:
d2:12:87:c2:3a:80:79:67:7e:c4:ca:f5:e1:81:5d:
8e:7f:98:b1:9e:d5:2d:ba:9a:06:9d:94:57:cd:aa:
6e:64:c6:09:79:fe:22:65:b2:4f:8a:2b:7c:ee:20:
86:8b:27:1e:77:f7:58:22:0a:29:f1:64:0f:06:ad:
b9:3c:e8:58:19:d6:6e:8c:bf:42:53:71:5f:79:13:
ea:b0:4d:0b:fd:0e:ca:35:f3:41:f6:db:9a:12:7d:
c7:ba:48:af:64:9c:b1:cb:03:77:85:e1:96:0e:2a:
3c:7c:39:f3:25:f8:8f:29:11:44:f8:f0:90:d0:18:
04:0c:5f:84:a2:24:15:22:e9:8d:67:be:ab:c1:82:
97:09:81:51:ce:8b:f1:0c:ab:3c:42:de:28:6c:0c:
a1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:44:05:6A:07:53:A2:A0:38:6B:29:24:F7:B9:F1:94:EB:46:5F:23
X509v3 Authority Key Identifier:
keyid:92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:cf:a7:81:a0:9f:c7:14:57:3d:63:3b:e4:6f:fe:67:c9:98:
2d:a4:ad:3c:0b:20:06:ff:17:cc:64:d7:ff:ab:e9:8e:25:9a:
86:02:c6:8c:b2:f0:da:65:7e:77:bf:43:d2:b6:05:65:85:5c:
8f:be:fa:de:7c:fe:0f:4f:7f:ba:9f:1b:b1:0b:fc:36:36:e3:
65:0b:f9:fb:9a:0c:70:6c:e4:da:90:2c:00:c7:6f:1d:bf:49:
59:2d:98:87:4a:ea:04:35:e8:5a:2a:92:fa:16:82:95:eb:6c:
85:5b:6c:de:7e:d5:33:5b:f2:73:23:a8:70:9c:c4:43:40:4b:
39:7a:a6:5f:75:6c:54:de:f5:c7:a3:19:8f:9a:e9:e8:b4:1a:
df:ab:23:1d:33:40:58:52:21:00:90:c5:b8:2f:97:c3:45:e8:
6c:a0:65:59:50:67:f8:36:cc:e2:8c:47:6d:f6:70:30:42:22:
68:56:1d:75:da:4a:6c:b6:bb:b0:ad:8b:e2:e9:be:78:41:aa:
bf:b6:09:fd:d5:28:6c:67:24:1d:1e:f1:7a:78:82:b8:21:65:
98:0b:79:3e:66:89:cc:0d:d9:f0:20:89:eb:f0:98:42:03:ad:
3c:23:41:1f:3a:de:21:d7:96:07:10:f8:f2:5c:69:04:e5:7f:
9f:f0:0f:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDj/tdCjsF48o/TpL54Qa5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNDQyZjFjZmM3NWVkMTEwMDEzODc3OTMwYTI5ZDg2Zjg5
ZWJiYjYwHhcNMjYwMjA5MTgwMDM1WhcNMjYwMjEwMTgwMDM1WjAzMTEwLwYDVQQD
EygwZTQ0MDU2YTA3NTNhMmEwMzg2YjI5MjRmN2I5ZjE5NGViNDY1ZjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4dAj/SFdzKa1ZN2JCMMfO8ZbVwX
bROwAzuW15OVQIINyiITiuqpgsjlw3ckzHLWCzgtnaYwUcvMlnfzjXJpwXFQ4M3y
LyB2NC6/4x0NsYWcmJTxblNNsXxyIn1rHWXZYAuOZ9+FagLSEofCOoB5Z37EyvXh
gV2Of5ixntUtupoGnZRXzapuZMYJef4iZbJPiit87iCGiyced/dYIgop8WQPBq25
POhYGdZujL9CU3FfeRPqsE0L/Q7KNfNB9tuaEn3HukivZJyxywN3heGWDio8fDnz
JfiPKRFE+PCQ0BgEDF+EoiQVIumNZ76rwYKXCYFRzovxDKs8Qt4obAyhuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5EBWoHU6KgOGspJPe58ZTrRl8jMB8GA1UdIwQY
MBaAFJJELxz8de0RABOHeTCinYb4nru2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2tRdkhQeDE3UkVBRTRkNU1LS2RodmlldTdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85YWY4ODEtYmEwZC00NTFkLWE2OWIt
MDBmOTZmZmNmNzM0LzEva2tRdkhQeDE3UkVBRTRkNU1LS2RodmlldTdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85YWY4ODEtYmEwZC00NTFkLWE2OWItMDBmOTZmZmNmNzM0
LzEva2tRdkhQeDE3UkVBRTRkNU1LS2RodmlldTdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVc+ngaCf
xxRXPWM75G/+Z8mYLaStPAsgBv8XzGTX/6vpjiWahgLGjLLw2mV+d79D0rYFZYVc
j7763nz+D09/up8bsQv8NjbjZQv5+5oMcGzk2pAsAMdvHb9JWS2Yh0rqBDXoWiqS
+haCletshVts3n7VM1vycyOocJzEQ0BLOXqmX3VsVN71x6MZj5rp6LQa36sjHTNA
WFIhAJDFuC+Xw0XobKBlWVBn+DbM4oxHbfZwMEIiaFYdddpKbLa7sK2L4um+eEGq
v7YJ/dUobGckHR7xeniCuCFlmAt5PmaJzA3Z8CCJ6/CYQgOtPCNBHzreIdeWBxD4
8lxpBOV/n/APIA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:47 2026 by rpki-client