This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
File: ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft (raw, json)
Hash identifier: SgpargkKjglfm8R7Qd/jOynzyQ1evjZ/nI1/tLXWJCg=
Subject key identifier: FD:6D:74:45:27:F1:61:C3:FE:9B:4A:87:29:A1:FF:4A:A6:05:05:DE
Authority key identifier: 92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
Certificate issuer: /CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Certificate serial: 019C416ABAB7CB600A53F00027EDD1A34D5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
Manifest number: 04A6
Signing time: Mon 09 Feb 2026 08:00:39 +0000
Manifest this update: Mon 09 Feb 2026 08:00:39 +0000
Manifest next update: Tue 10 Feb 2026 08:00:39 +0000
Files and hashes: 1: 6XhRNflwuCiYF9gQ2g_easWtUa4.roa (hash: yHoCFnKYnwnTFsYyGnaFZYpzrID8T0Yi654/H4Ihcpg=)
2: ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl (hash: dn3mAlUNYWdugaBseuCpjssLTVtfwQaS+WY7nwTzbio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:6a:ba:b7:cb:60:0a:53:f0:00:27:ed:d1:a3:4d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Validity
Not Before: Feb 9 08:00:39 2026 GMT
Not After : Feb 10 08:00:39 2026 GMT
Subject: CN=fd6d744527f161c3fe9b4a8729a1ff4aa60505de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4c:d2:b5:2a:d1:d6:67:55:04:b3:b1:90:a3:
b8:00:24:54:91:0d:5c:5a:c0:7c:65:31:06:ec:f4:
21:37:9b:86:2a:9e:a7:98:eb:df:cd:38:84:5b:c5:
3e:58:df:29:8f:8d:83:81:16:58:1c:71:86:18:cd:
b1:eb:19:d2:d8:12:a1:53:7a:ce:10:b6:2c:ad:0b:
52:61:bf:2c:3f:96:6e:24:b4:e5:44:7c:45:86:2f:
3b:32:55:7f:b9:82:27:dc:db:95:a7:5a:ef:f7:5f:
28:15:11:83:07:ae:43:df:da:81:0a:13:86:e3:4a:
ca:e0:f3:a1:2c:2e:8a:f2:2c:13:73:c3:ab:e4:94:
d6:7c:32:c0:3f:e1:80:36:60:d0:37:cb:d4:25:1a:
64:27:04:8f:b3:28:c1:51:2c:33:02:3d:0e:bb:ce:
3f:77:6c:fe:23:50:af:21:14:22:1f:2f:86:af:f1:
35:90:bd:6d:1a:48:fd:f9:b6:3c:e1:e5:c1:e2:e4:
c3:32:d1:f1:6b:d1:39:01:50:29:cd:7e:bc:3c:9a:
5f:66:7a:e9:26:37:d3:87:12:94:40:b7:a7:87:af:
85:f0:6b:12:d9:e1:72:f6:41:86:a5:70:c2:8d:50:
f7:64:1e:87:f5:2b:cd:ec:9d:16:c7:a2:8e:77:34:
44:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6D:74:45:27:F1:61:C3:FE:9B:4A:87:29:A1:FF:4A:A6:05:05:DE
X509v3 Authority Key Identifier:
keyid:92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:40:80:d1:1d:f1:36:04:54:58:af:ba:40:45:a1:fa:a8:9d:
3f:0d:c4:85:2b:e6:de:9b:4c:72:ea:12:91:ac:54:27:b7:35:
09:3b:e0:9b:f2:68:2f:21:35:9a:16:81:68:b2:3e:6f:96:f6:
a8:c9:6b:17:f0:01:a1:2f:08:17:db:dc:b7:ce:e7:bf:41:6b:
5c:38:04:ce:5e:6c:cf:f2:e5:78:01:f8:ae:a4:a3:60:07:98:
fa:be:75:6f:b7:de:dc:ed:55:21:51:cc:43:c1:d8:49:dc:9e:
a9:99:a7:29:c1:32:85:c9:2c:1c:72:89:c5:d8:4b:f6:8a:72:
f1:d9:a8:07:3a:50:e1:f1:7e:36:85:f5:a7:50:81:6d:c2:97:
00:c5:53:d5:98:72:86:f7:35:0a:85:0c:23:af:7e:75:87:bb:
22:51:99:c7:45:ba:67:62:04:9c:b2:07:49:26:ec:1b:71:8e:
73:1a:a1:1f:5a:a9:22:7e:3a:63:ec:cb:cb:5f:06:f6:f6:c8:
b4:bb:b5:08:6d:50:10:c7:3c:53:fc:03:0b:91:7e:4a:f9:76:
d6:54:d6:92:e3:9b:8e:37:b8:78:65:4a:14:0a:49:7c:d5:0d:
76:4d:98:32:4a:e8:f6:2a:9f:a4:f9:2a:b0:e2:a1:73:f6:1a:
db:c9:d8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:28 2026 by rpki-client