This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: 2WVXj88RhrGRWJtRJw+Yux57bjycAX8n+t3/BX0XAyQ=
Subject key identifier: 7F:52:0A:F9:11:C0:F4:C1:64:B9:82:AD:5D:6E:A8:F6:92:D7:D9:03
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 019C3FE9D76D0019BC5B7775C8458677E902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 01:00:15 +0000
Manifest this update: Mon 09 Feb 2026 01:00:15 +0000
Manifest next update: Tue 10 Feb 2026 01:00:15 +0000
Files and hashes: 1: 4pTe3zVq_LBaEng6PDXChOvOrYM.asa (hash: ajIeKP46hnwug0OLXYz0+5iBNt1utjAL/IG5/ovLQUU=)
2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: Vi9dT8+xWmyyuoG19cTVarv78hljUT8XDwNvS/DE7fA=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 01:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:3f:e9:d7:6d:00:19:bc:5b:77:75:c8:45:86:77:e9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Feb 9 01:00:15 2026 GMT
Not After : Feb 10 01:00:15 2026 GMT
Subject: CN=7f520af911c0f4c164b982ad5d6ea8f692d7d903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:ce:ea:14:9b:81:84:b7:a9:dc:18:f0:4a:
14:c0:72:ac:a9:7b:38:ed:37:d7:70:1a:07:dd:73:
be:2d:08:49:93:c0:b7:eb:12:28:ac:fb:66:32:dd:
32:a8:41:68:5a:db:83:55:5a:c8:58:02:71:2a:6f:
fc:77:50:6b:3c:de:75:ba:5b:b2:26:93:58:2b:27:
20:6e:80:d7:af:50:8b:c1:57:43:5f:c7:00:d4:22:
67:1b:f8:d3:af:f3:14:58:36:ee:af:63:8f:27:77:
78:1a:83:c8:b3:fe:2b:90:3c:f8:7b:a5:40:15:f7:
c1:7c:8e:0a:a5:30:2f:ec:8f:6e:57:59:11:8f:9f:
7a:82:c6:6c:ca:b9:50:20:e1:0e:74:3e:55:d5:e8:
60:31:98:8c:22:b1:91:4b:58:3d:ea:9f:45:f3:30:
66:b6:ae:a0:0d:64:eb:72:2d:9f:5d:8e:02:31:a0:
1b:d1:99:0d:69:ad:75:fc:ee:55:7e:c3:8e:f6:a9:
49:73:0c:69:58:cb:1c:59:e6:22:34:88:f6:09:16:
dc:6b:0a:62:33:01:8e:ab:ed:55:da:88:4f:8b:95:
a1:10:00:a6:96:05:c2:47:06:4e:a5:43:39:e4:73:
5d:9e:30:38:fa:e7:f1:18:a4:a2:be:c7:e9:e3:73:
9c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:52:0A:F9:11:C0:F4:C1:64:B9:82:AD:5D:6E:A8:F6:92:D7:D9:03
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:00:b6:d3:57:d7:9b:7a:c3:54:43:4c:fc:bf:9e:f3:1c:15:
c0:6c:d0:dc:7d:4e:75:7f:b7:0a:40:a4:91:38:19:48:e1:ba:
64:1c:46:6f:ef:76:2f:7b:b7:69:b9:bd:cc:71:b5:5c:12:ee:
ee:b7:29:96:08:2a:e9:ab:10:6f:8a:9a:00:a6:84:4a:63:72:
86:10:4e:35:3e:25:4e:c3:f6:06:4f:4a:ff:37:44:4a:91:c3:
e8:fe:d1:8c:02:25:1d:8e:3a:90:ac:e8:43:06:6c:21:f3:e8:
b7:f2:45:db:3f:69:9c:25:fd:ab:18:31:19:af:91:50:ff:3d:
ec:f0:f8:c5:74:75:33:50:da:8a:48:bf:be:e4:d9:b1:29:93:
f0:0d:96:92:5f:14:72:01:e1:92:5e:03:be:6c:ce:2c:50:2a:
ef:31:00:3b:7c:2b:5f:d4:51:f7:8a:16:b0:7e:a7:de:eb:b1:
75:5c:c6:9b:54:61:f6:92:cc:ba:e6:d7:3c:fc:00:a2:b0:cc:
23:55:be:5f:2c:7d:63:8b:4b:c6:bf:ca:04:0d:c4:f5:67:d6:
9a:61:63:e1:30:e4:e2:26:c9:60:2d:8a:90:04:69:8c:06:bf:
54:e6:5e:ea:d8:70:28:26:f9:38:05:4b:35:38:f8:84:ea:f5:
20:eb:80:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 08:58:13 2026 by rpki-client