This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
File: kYkBZiqOxf9NP0jSkJkjCgV17Io.mft (raw, json)
Hash identifier: LSCDe/rcCMohm2nycJRhl1PCSCS16+LLu/qtLWdmexg=
Subject key identifier: 02:1A:1C:68:55:BE:83:54:68:9A:00:61:8B:6A:91:BF:6D:B7:12:93
Authority key identifier: 91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
Certificate issuer: /CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Certificate serial: 019BFEAF38BAD8BA11301C217C084C9D3050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
Manifest number: 10FD
Signing time: Tue 27 Jan 2026 09:00:54 +0000
Manifest this update: Tue 27 Jan 2026 09:00:54 +0000
Manifest next update: Wed 28 Jan 2026 09:00:54 +0000
Files and hashes: 1: Sl30k11z1TwtyMHAj_NqDrPSCvg.roa (hash: 9wZBkgJcqw68v5ewI2FJS2vHd+COBYLKeeovUBuZl+s=)
2: VEYZ2_c7HIaQOoPRXdEjuoXNq4M.roa (hash: cBePxMn2gu4hOVG4L1uDVTVupTtrFtWliRD+lUUfRvc=)
3: XvpIxax5LoOTMUOJKo6zJ6-LPpQ.roa (hash: xd4ZIb6AXuHRZkUUIhsSqoc8RpLfQOFfY2snegwSNbM=)
4: kYkBZiqOxf9NP0jSkJkjCgV17Io.crl (hash: 3H45alUYLmpLCIrsvk6Rf9dl77l/w6/QAPxTfc76Wiw=)
5: yFKQw9R6v282y6knKQwG8g4G0J8.roa (hash: KPurzw4Q3PxPA9KAGD7n/ojlC+lby4hnngPbr1GaPCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fe:af:38:ba:d8:ba:11:30:1c:21:7c:08:4c:9d:30:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Validity
Not Before: Jan 27 09:00:54 2026 GMT
Not After : Jan 28 09:00:54 2026 GMT
Subject: CN=021a1c6855be8354689a00618b6a91bf6db71293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:3e:8d:61:88:e1:88:cf:c2:06:aa:98:dc:c1:
66:e0:8e:bc:6e:01:ee:d0:41:df:9d:23:5d:37:77:
e6:63:43:2a:95:1b:24:78:51:29:fb:b9:ff:23:29:
2b:45:9a:0d:1a:bc:8f:75:9b:38:2b:49:f5:b5:22:
70:5e:77:02:1f:bd:ed:f0:43:38:20:4d:01:e9:0b:
ae:93:9f:68:42:cc:ef:1f:28:b1:87:cd:d8:2f:b3:
fd:d0:2f:cb:3c:62:e1:e6:a8:49:27:71:4b:c3:7d:
f1:0f:7c:1e:26:11:7e:d3:8d:6c:96:f9:b3:d6:20:
a0:89:84:e6:32:5a:bb:f8:e6:7a:45:62:47:5a:d7:
49:03:bb:9d:76:23:c7:0a:a6:b8:d6:a1:ec:34:29:
31:91:cc:df:c6:53:95:54:4d:2b:db:9b:c0:fe:b8:
a7:9a:f0:d2:35:f0:aa:45:56:d8:71:a4:e5:59:0c:
e0:9e:6f:cd:1d:e8:ce:76:62:be:ed:dd:0d:27:b3:
25:94:bb:50:a8:4f:a5:32:64:de:34:a5:9f:cb:9e:
72:c9:4b:3c:d2:3f:81:e4:a1:5c:e3:e2:67:db:74:
52:48:cd:f2:1a:40:cc:60:5e:98:98:08:cb:0b:56:
36:90:f2:c3:53:a9:0d:7d:6e:45:fe:44:64:58:d5:
f8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1A:1C:68:55:BE:83:54:68:9A:00:61:8B:6A:91:BF:6D:B7:12:93
X509v3 Authority Key Identifier:
keyid:91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:33:e2:57:e7:44:38:5b:08:65:97:45:f6:6f:3e:0c:e1:17:
d9:c9:7f:8f:81:d6:7a:b4:6a:d3:c7:86:65:a0:81:f3:55:e8:
38:fd:90:9c:14:17:69:fa:e1:28:8b:76:5e:9a:0c:3a:e9:14:
45:8c:6d:bf:86:db:e8:11:06:5c:44:7e:9c:ee:3c:bf:1d:9c:
2d:a4:4e:8d:b5:60:b8:11:5d:a4:8c:45:09:c2:33:ca:02:a9:
88:c8:c6:6a:b5:8f:83:92:8b:a4:68:ca:18:56:ae:45:8b:f2:
dc:a8:53:e8:1e:a5:f6:b2:05:76:90:2c:d3:ae:b0:46:49:74:
48:5e:12:3d:d1:74:42:e9:87:15:81:3f:08:b8:3e:c8:36:d6:
c1:5d:9d:45:aa:41:89:7d:e3:28:f2:4d:63:c7:8e:2e:a5:48:
00:7e:a9:fb:e0:c2:55:97:3e:f9:75:ab:84:20:f5:1c:db:1c:
82:22:0a:4b:0f:f7:7b:41:54:b0:e4:ad:fe:be:1a:b6:7d:d1:
19:c9:f9:cd:b8:0b:9b:cd:b3:72:ef:aa:c1:a5:07:e4:a8:f7:
75:ae:fe:70:3a:96:d4:f2:6a:94:2c:92:c8:74:77:22:49:57:
ac:85:fc:e1:3d:28:81:63:92:eb:b8:bd:84:47:88:3b:a2:d1:
c0:77:75:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 13:04:36 2026 by rpki-client