This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
File: kVVkGgex5FW3iSuS2A1gkSORsg0.mft (raw, json)
Hash identifier: jWBFBO7HZg6VeyhvhVn9+RhnT889sUJ8lVDqeE+bVB0=
Subject key identifier: 9A:CB:0A:29:60:CE:49:8D:03:46:90:00:FC:38:0F:D8:89:CC:26:30
Authority key identifier: 91:55:64:1A:07:B1:E4:55:B7:89:2B:92:D8:0D:60:91:23:91:B2:0D
Certificate issuer: /CN=9155641a07b1e455b7892b92d80d60912391b20d
Certificate serial: 019C43FE4F84EBF207285A5F1AD7EA6661DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
Manifest number: 081E
Signing time: Mon 09 Feb 2026 20:01:05 +0000
Manifest this update: Mon 09 Feb 2026 20:01:05 +0000
Manifest next update: Tue 10 Feb 2026 20:01:05 +0000
Files and hashes: 1: PymsuRY-XU_JjC-s7g8jov_R8Hc.roa (hash: eIduQ26VHE0PdG7zgjOYFtz0rV5pDOwOAUDByNGlGR4=)
2: kVVkGgex5FW3iSuS2A1gkSORsg0.crl (hash: Oexa3ERCnszUl1xFeifDuIFCDhGCpnafpzBwZRg69mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fe:4f:84:eb:f2:07:28:5a:5f:1a:d7:ea:66:61:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9155641a07b1e455b7892b92d80d60912391b20d
Validity
Not Before: Feb 9 20:01:05 2026 GMT
Not After : Feb 10 20:01:05 2026 GMT
Subject: CN=9acb0a2960ce498d03469000fc380fd889cc2630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4e:53:f9:94:84:42:52:36:94:bf:cf:22:9c:
30:c8:c0:e2:f5:b5:dc:8f:57:16:31:bb:42:d7:f5:
2e:90:ad:c8:08:b1:c5:3e:fb:65:cc:e8:0d:01:46:
69:ce:ec:a7:f1:7f:92:fe:50:08:c2:ef:72:91:6d:
4a:30:25:6c:c9:5e:79:3d:31:73:b4:43:a8:53:d2:
c3:d2:cd:b7:ba:a6:05:53:52:44:7a:26:91:62:78:
c1:e7:21:a3:71:2f:7e:fd:15:33:c3:3d:99:3d:66:
14:6a:6a:3a:d1:9f:98:25:8a:cf:f4:4d:53:41:e0:
1c:88:93:3f:3d:29:85:80:7a:cc:60:25:71:39:f6:
e3:89:f1:20:c3:17:f7:62:90:a3:04:7c:7c:fc:66:
00:7e:15:8f:85:0a:23:c8:0e:f7:62:a0:53:9c:f5:
e9:4c:be:f8:8c:d4:ab:ae:59:26:73:ac:69:be:69:
d6:24:a9:f0:e4:0c:35:6e:8f:90:99:34:59:00:8f:
98:95:29:e6:70:02:0b:ee:a6:fc:62:95:eb:89:b7:
ec:0a:3d:1c:f1:25:15:9b:fc:67:ef:4a:94:cd:93:
5b:16:e8:f3:67:9f:a6:72:8f:7f:49:26:89:1a:d6:
8b:3f:5a:b4:55:75:99:b2:e4:d3:af:76:42:04:83:
6b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CB:0A:29:60:CE:49:8D:03:46:90:00:FC:38:0F:D8:89:CC:26:30
X509v3 Authority Key Identifier:
keyid:91:55:64:1A:07:B1:E4:55:B7:89:2B:92:D8:0D:60:91:23:91:B2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e6:7d:84:4f:6b:f8:4b:f3:ce:6c:41:47:af:9b:3c:5f:b1:
6a:e9:77:ab:c1:81:80:08:69:e2:5f:57:0d:a1:a2:e8:d4:85:
e2:74:90:21:55:8a:e7:ea:8a:31:bb:39:31:55:26:f7:37:a0:
e8:80:08:3a:2b:3d:d9:12:c6:cd:c4:4a:f6:ab:77:a0:08:9e:
42:cd:d8:01:aa:0e:f3:2a:b9:2d:71:df:2d:49:77:4c:7e:59:
84:1a:ec:92:da:0f:ff:9e:f7:a4:b5:b8:38:01:fe:87:f0:2f:
fa:09:c6:23:c2:1d:95:e7:30:b6:26:f6:d9:aa:72:5f:61:a5:
0d:bd:ff:68:c2:c9:e8:40:37:02:54:4f:f0:32:05:4a:d8:30:
ff:b0:00:65:52:d4:55:51:a7:20:80:32:65:fe:8d:ff:32:6a:
b9:ec:a2:44:9e:9f:63:25:6f:f5:25:3d:c5:1d:a8:15:0f:ca:
84:ac:8e:60:7c:24:6f:91:a7:cf:ac:0e:4f:7d:fb:11:dd:be:
7f:7a:25:43:38:a3:33:a9:44:a6:ca:02:15:a3:2a:34:45:44:
7b:a7:72:43:c8:c1:94:d6:47:11:54:0f:08:c2:d5:17:dd:b8:
2d:44:23:64:9f:31:b6:65:20:09:df:6d:f5:c0:f1:70:00:42:
3c:8c:c1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:50:00 2026 by rpki-client