This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e06dcf-b520-4b65-9cac-bc61cb1f8610/1/KpKTnjuv_mq42aeWIFHYXOKjaLo.mft
File: KpKTnjuv_mq42aeWIFHYXOKjaLo.mft (raw, json)
Hash identifier: aCtUPuFcridRDucpUL1UzzQTQqVM4jh3bU01b2roF00=
Subject key identifier: 76:58:4D:96:8F:64:10:FE:59:3D:88:C3:00:43:BF:B4:D0:2A:56:59
Authority key identifier: 2A:92:93:9E:3B:AF:FE:6A:B8:D9:A7:96:20:51:D8:5C:E2:A3:68:BA
Certificate issuer: /CN=2a92939e3baffe6ab8d9a7962051d85ce2a368ba
Certificate serial: 019C42460FE513D547D6A891DD70EB9A6D5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpKTnjuv_mq42aeWIFHYXOKjaLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e06dcf-b520-4b65-9cac-bc61cb1f8610/1/KpKTnjuv_mq42aeWIFHYXOKjaLo.mft
Manifest number: 22
Signing time: Mon 09 Feb 2026 12:00:13 +0000
Manifest this update: Mon 09 Feb 2026 12:00:13 +0000
Manifest next update: Tue 10 Feb 2026 12:00:13 +0000
Files and hashes: 1: FpyLjfGskJqTECSY4yNSBWazcF8.roa (hash: VKZIWRGA4vG8x5TlzX1hh8RiuUOykSQ87donezq9FJw=)
2: KpKTnjuv_mq42aeWIFHYXOKjaLo.crl (hash: 6iyyDAEGCIvrzQTm+tVQjbrA0ASQ4kO8PVs1g9b4DK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e06dcf-b520-4b65-9cac-bc61cb1f8610/1/KpKTnjuv_mq42aeWIFHYXOKjaLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e06dcf-b520-4b65-9cac-bc61cb1f8610/1/KpKTnjuv_mq42aeWIFHYXOKjaLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KpKTnjuv_mq42aeWIFHYXOKjaLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:0f:e5:13:d5:47:d6:a8:91:dd:70:eb:9a:6d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a92939e3baffe6ab8d9a7962051d85ce2a368ba
Validity
Not Before: Feb 9 12:00:13 2026 GMT
Not After : Feb 10 12:00:13 2026 GMT
Subject: CN=76584d968f6410fe593d88c30043bfb4d02a5659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:34:85:c8:0a:89:04:b1:63:6a:bc:dc:e0:1a:
b8:dc:97:2f:bd:5c:17:ad:66:9b:b0:be:11:71:36:
11:de:09:42:c2:34:31:a4:fa:62:51:90:05:37:b1:
4d:0c:88:40:74:bf:2a:b2:fe:69:20:59:ed:36:8a:
3e:0b:f9:aa:ac:d9:71:d7:f7:64:cf:70:ab:81:d7:
10:8a:e6:1f:18:89:38:7e:91:37:58:22:5c:91:79:
59:59:5d:0a:ae:bf:c7:07:00:a4:f9:76:8d:63:11:
b2:bc:20:de:c0:b8:05:1e:90:e8:a0:e8:16:a0:21:
c1:02:5d:4b:65:4f:13:7d:6e:8d:73:6a:ff:41:9c:
7c:93:88:86:8b:ad:e9:d9:c9:7b:04:c1:c9:56:19:
d0:83:94:7a:05:3a:01:55:e9:66:50:73:d7:d0:e2:
89:c0:ae:49:c7:9a:3e:37:96:2e:88:8c:83:b3:c0:
95:c7:92:25:9d:ff:73:d9:11:51:74:72:ea:d7:30:
b7:3c:99:2a:2b:87:49:3c:3c:9c:f1:22:30:64:4f:
0e:9c:f3:1f:8d:98:c3:ae:53:cb:b4:d5:44:ee:72:
13:84:3a:e8:b7:51:ee:1e:11:46:5a:36:6e:b7:f3:
95:7a:7d:0c:0e:86:6a:68:a2:5c:8e:b0:e3:35:95:
02:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:58:4D:96:8F:64:10:FE:59:3D:88:C3:00:43:BF:B4:D0:2A:56:59
X509v3 Authority Key Identifier:
keyid:2A:92:93:9E:3B:AF:FE:6A:B8:D9:A7:96:20:51:D8:5C:E2:A3:68:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpKTnjuv_mq42aeWIFHYXOKjaLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e06dcf-b520-4b65-9cac-bc61cb1f8610/1/KpKTnjuv_mq42aeWIFHYXOKjaLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e06dcf-b520-4b65-9cac-bc61cb1f8610/1/KpKTnjuv_mq42aeWIFHYXOKjaLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:2c:83:43:ab:3c:bc:bc:be:e5:8f:82:a1:b0:ef:5c:73:4c:
74:ec:ff:53:c7:c7:34:7b:1f:b2:2c:dc:1c:85:0d:17:a0:1c:
be:2a:16:64:59:cc:f9:17:48:32:51:a8:eb:4d:eb:d9:ed:40:
5f:3e:25:ed:56:be:24:07:f4:cd:88:92:71:c5:7b:90:e2:c3:
4b:bf:c9:16:f3:b1:6d:bf:34:0d:c3:ec:78:1a:25:36:7e:f9:
5e:de:2b:0d:e2:74:42:6e:69:67:54:78:71:9c:0b:06:0a:f3:
2c:a1:ff:cf:3d:bc:68:e8:35:06:05:5a:fc:1e:cb:9b:3b:71:
f3:41:47:99:f6:69:ed:c0:11:c8:00:3d:d6:57:5c:93:21:f2:
d8:c1:a1:30:f0:9e:66:e4:6f:74:17:d1:a1:bd:c3:47:e3:ff:
2f:c6:a7:f2:6f:0f:c0:6e:51:dc:92:a8:17:a6:18:c7:7d:e7:
c0:64:d1:10:cb:91:b5:2b:0a:72:ad:46:bc:68:82:3b:90:81:
60:8e:2d:4a:91:4b:8d:c2:73:96:4b:1a:97:32:34:ce:63:2a:
dd:e9:5b:8c:36:17:a9:95:76:33:dc:68:1a:60:25:87:11:92:
99:a4:ec:a6:ad:c5:d4:43:a5:0d:7b:c8:a2:4c:ce:2a:c8:fb:
e9:ce:59:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRg/lE9VH1qiR3XDrmm1dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTI5MzllM2JhZmZlNmFiOGQ5YTc5NjIwNTFkODVjZTJh
MzY4YmEwHhcNMjYwMjA5MTIwMDEzWhcNMjYwMjEwMTIwMDEzWjAzMTEwLwYDVQQD
Eyg3NjU4NGQ5NjhmNjQxMGZlNTkzZDg4YzMwMDQzYmZiNGQwMmE1NjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojSFyAqJBLFjarzc4Bq43JcvvVwX
rWabsL4RcTYR3glCwjQxpPpiUZAFN7FNDIhAdL8qsv5pIFntNoo+C/mqrNlx1/dk
z3CrgdcQiuYfGIk4fpE3WCJckXlZWV0Krr/HBwCk+XaNYxGyvCDewLgFHpDooOgW
oCHBAl1LZU8TfW6Nc2r/QZx8k4iGi63p2cl7BMHJVhnQg5R6BToBVelmUHPX0OKJ
wK5Jx5o+N5YuiIyDs8CVx5Ilnf9z2RFRdHLq1zC3PJkqK4dJPDyc8SIwZE8OnPMf
jZjDrlPLtNVE7nIThDrot1HuHhFGWjZut/OVen0MDoZqaKJcjrDjNZUCTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZYTZaPZBD+WT2IwwBDv7TQKlZZMB8GA1UdIwQY
MBaAFCqSk547r/5quNmnliBR2Fzio2i6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3BLVG5qdXZfbXE0MmFlV0lGSFlYT0tqYUxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9lMDZkY2YtYjUyMC00YjY1LTljYWMt
YmM2MWNiMWY4NjEwLzEvS3BLVG5qdXZfbXE0MmFlV0lGSFlYT0tqYUxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9lMDZkY2YtYjUyMC00YjY1LTljYWMtYmM2MWNiMWY4NjEw
LzEvS3BLVG5qdXZfbXE0MmFlV0lGSFlYT0tqYUxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoCyDQ6s8
vLy+5Y+CobDvXHNMdOz/U8fHNHsfsizcHIUNF6AcvioWZFnM+RdIMlGo603r2e1A
Xz4l7Va+JAf0zYiSccV7kOLDS7/JFvOxbb80DcPseBolNn75Xt4rDeJ0Qm5pZ1R4
cZwLBgrzLKH/zz28aOg1BgVa/B7Lmztx80FHmfZp7cARyAA91ldckyHy2MGhMPCe
ZuRvdBfRob3DR+P/L8an8m8PwG5R3JKoF6YYx33nwGTREMuRtSsKcq1GvGiCO5CB
YI4tSpFLjcJzlksalzI0zmMq3elbjDYXqZV2M9xoGmAlhxGSmaTspq3F1EOlDXvI
okzOKsj76c5Ziw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:22:27 2026 by rpki-client