This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
File: KWMrEVG5T_zt9AqK02quGvshYlc.mft (raw, json)
Hash identifier: 84LgSfx4HwyJdZo4VM2NVx+mwbtYm6YZw1Us7KP5IRo=
Subject key identifier: 60:68:BE:48:41:25:51:2E:10:F1:54:96:E3:84:83:6B:70:57:35:A3
Authority key identifier: 29:63:2B:11:51:B9:4F:FC:ED:F4:0A:8A:D3:6A:AE:1A:FB:21:62:57
Certificate issuer: /CN=29632b1151b94ffcedf40a8ad36aae1afb216257
Certificate serial: 019C41A286964026AEA5E9FB850480BD2B6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
Manifest number: 27
Signing time: Mon 09 Feb 2026 09:01:36 +0000
Manifest this update: Mon 09 Feb 2026 09:01:36 +0000
Manifest next update: Tue 10 Feb 2026 09:01:36 +0000
Files and hashes: 1: KWMrEVG5T_zt9AqK02quGvshYlc.crl (hash: dIu4agjoqb+oOYQEkB8xYSaasHjmt/JmZHH5c08Bv3I=)
2: R04uk59tL-FqUHxfWd8Y5B17azg.roa (hash: 5f566Fl0rgtpysFtLbApUeRuQVHAZSsSCcfDuYmn3cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a2:86:96:40:26:ae:a5:e9:fb:85:04:80:bd:2b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29632b1151b94ffcedf40a8ad36aae1afb216257
Validity
Not Before: Feb 9 09:01:36 2026 GMT
Not After : Feb 10 09:01:36 2026 GMT
Subject: CN=6068be484125512e10f15496e384836b705735a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:84:99:4c:a0:9b:fe:80:52:23:3a:1b:10:c1:
3b:06:2a:23:07:64:d0:8d:42:88:85:14:ae:8f:91:
1c:f4:66:15:90:b7:d1:b1:e5:e9:81:4e:a6:b0:9a:
27:a1:d3:ff:94:78:59:fe:b3:7c:2d:7f:cb:2b:90:
de:37:26:ec:7a:87:4b:db:c1:0c:16:a6:7e:5f:6f:
1d:ab:88:a1:90:dc:11:76:49:27:15:fa:27:22:31:
46:78:08:7a:bb:87:98:e1:15:23:34:5e:08:ed:a4:
fb:11:99:f5:10:ae:57:2d:44:57:b5:0b:6c:c4:bb:
ab:fd:03:bd:de:a3:54:5f:68:3c:95:14:96:a9:5e:
22:31:67:4d:78:5e:45:55:21:26:ef:ba:17:1b:50:
f7:e6:d6:52:a4:76:3e:dd:04:63:08:4e:e8:98:43:
13:eb:6a:49:78:63:da:73:47:77:7d:80:ef:4c:5e:
0e:8d:a6:9a:f2:5b:13:d2:4e:a6:f4:aa:95:08:8e:
3b:16:7d:cc:f2:5f:64:d6:a5:b6:07:40:9e:35:73:
13:95:88:bb:3b:68:72:68:21:76:eb:5e:81:16:69:
83:eb:47:6f:08:29:7b:d8:31:f3:72:20:10:8f:80:
73:99:cd:2d:95:e1:e5:20:fd:e8:df:c5:d1:e8:b0:
5f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:68:BE:48:41:25:51:2E:10:F1:54:96:E3:84:83:6B:70:57:35:A3
X509v3 Authority Key Identifier:
keyid:29:63:2B:11:51:B9:4F:FC:ED:F4:0A:8A:D3:6A:AE:1A:FB:21:62:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f3:9b:af:d9:2a:80:bf:7f:b6:51:8f:62:05:2b:5f:b1:d6:
fe:33:13:8a:92:13:a0:2d:1c:48:45:78:f4:51:a6:51:5b:99:
85:b7:75:ba:62:a4:21:ea:20:af:75:7c:46:8f:47:d9:e0:ef:
73:a8:22:7d:03:1d:4e:1c:6a:02:e9:15:76:9a:23:bf:df:71:
39:1c:41:a4:1c:a9:1d:5b:96:6e:29:44:c7:15:68:06:90:2c:
8d:a7:80:8a:14:76:b6:9d:91:a3:d5:c7:b1:59:8a:81:9a:ea:
e9:46:18:57:1a:77:5f:78:c5:0f:51:8e:53:be:92:9d:58:4b:
3d:3f:1c:78:f6:89:98:ea:8d:dd:35:67:0e:7f:ed:27:07:bc:
13:6b:ff:a7:b9:f4:52:06:96:56:cb:00:3d:39:18:f1:b2:4a:
78:90:e7:69:84:be:ce:9c:c3:54:36:15:f2:2a:d2:a8:71:7c:
c7:9b:54:5b:e6:bb:10:9b:a3:22:1b:a5:fa:ab:62:eb:21:14:
61:9d:84:51:5b:84:53:f7:99:d2:4c:fd:2a:09:f1:a9:89:93:
e7:80:c5:2b:98:7e:2d:88:9c:a5:9f:f8:cd:35:bc:30:81:da:
d3:8c:fd:83:b2:9f:f9:84:31:a4:df:eb:fd:75:d5:50:38:46:
16:31:be:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:47:58 2026 by rpki-client