This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
File: KPVnVJmD9DrdmYw26PeL0V9Fosw.mft (raw, json)
Hash identifier: 2sso932Qs37EFBMgJaRJuAu7+S8H8UsFsgqCTrpOPnE=
Subject key identifier: 5E:EC:10:C5:DC:14:56:E6:8A:F8:72:AC:E6:B9:93:32:38:D2:BC:C6
Authority key identifier: 28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
Certificate issuer: /CN=28f567549983f43add998c36e8f78bd15f45a2cc
Certificate serial: 019C427DB0D51D2161957DA6FAE3C3104AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
Manifest number: 0E15
Signing time: Mon 09 Feb 2026 13:00:59 +0000
Manifest this update: Mon 09 Feb 2026 13:00:59 +0000
Manifest next update: Tue 10 Feb 2026 13:00:59 +0000
Files and hashes: 1: 31-g2O4jA-IdMKhrhpCzByPryFw.roa (hash: GKsHl7IDsZtj7GZMS2THAskx0P5sRUkyuOPplPo3N4A=)
2: KPVnVJmD9DrdmYw26PeL0V9Fosw.crl (hash: bjqA6wkEWt4zxXv/myF1B/y49wJhLmgmf1cvKwwyHmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:b0:d5:1d:21:61:95:7d:a6:fa:e3:c3:10:4a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f567549983f43add998c36e8f78bd15f45a2cc
Validity
Not Before: Feb 9 13:00:59 2026 GMT
Not After : Feb 10 13:00:59 2026 GMT
Subject: CN=5eec10c5dc1456e68af872ace6b9933238d2bcc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:95:9b:3b:6e:58:48:ae:2f:8e:02:fa:e1:ff:
d2:7a:f9:da:38:90:19:e1:7d:31:20:b6:55:07:aa:
79:34:0b:fa:f1:a7:43:56:83:5a:7d:d2:2f:fb:b3:
e4:64:45:37:ae:e0:39:02:5c:95:29:6f:50:10:f5:
6e:c3:90:5a:e0:46:28:50:3b:2d:6b:6c:58:5d:e9:
5c:21:fa:cc:dc:d8:73:66:5f:8c:1f:fc:17:e4:62:
4c:70:66:48:d8:79:7b:53:f7:df:60:a4:85:15:68:
9b:78:f7:cd:ef:62:23:41:ff:ee:11:98:bc:d1:26:
94:60:61:34:c7:59:bc:d1:9a:30:2e:ff:cc:88:85:
88:61:68:d7:6f:dc:18:3f:ee:e6:5c:53:b6:a5:ab:
8b:42:80:28:3b:8b:92:4c:4c:f6:b0:cf:80:cf:37:
06:03:d6:ae:55:39:94:d5:b1:38:ca:7a:a8:4b:a6:
4b:06:1f:de:31:a5:ec:c2:3d:59:a8:52:de:7b:91:
9d:01:d2:54:3f:c7:84:82:9d:c2:de:96:4f:c4:97:
2a:97:98:91:ba:f0:75:a8:5e:69:90:8c:88:88:73:
dd:a1:b5:16:ed:be:52:82:75:5a:49:d7:1b:10:2c:
80:4c:67:7d:c7:0d:18:62:ac:ec:65:fd:3f:a6:ec:
bb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:EC:10:C5:DC:14:56:E6:8A:F8:72:AC:E6:B9:93:32:38:D2:BC:C6
X509v3 Authority Key Identifier:
keyid:28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:4e:00:fa:b1:6d:2a:d1:8a:66:0d:7b:0f:7c:59:51:9e:dd:
7a:89:d0:e6:62:c5:79:a6:e7:5b:6b:e7:c7:b0:51:91:36:35:
d3:55:cd:93:b4:71:95:f8:ac:7e:10:0a:85:81:d5:15:ee:a2:
25:65:e1:22:cb:78:ba:37:14:3e:46:f9:bb:23:bb:b7:cc:96:
e0:40:98:d6:2c:99:89:bf:da:6b:3f:00:4f:ea:97:b1:2d:fb:
1e:c7:80:83:dc:ee:45:95:49:bd:1f:01:d7:17:87:ba:6c:e0:
26:1c:5a:8b:e9:40:c5:cf:95:04:95:ed:20:7c:3a:90:8f:d6:
ba:7f:2f:d3:b9:f0:7c:03:08:ee:8b:41:d2:5b:cd:29:92:58:
99:d5:40:80:b8:2e:0c:78:d2:c7:d3:7d:e1:c6:f5:2e:9a:b3:
df:b0:1e:ed:0a:3f:a4:74:5d:13:09:85:d5:13:4a:91:21:23:
4f:0c:59:2a:b1:a3:f9:6a:06:8f:49:83:a8:75:fa:81:1b:3f:
7a:cd:f4:f4:36:78:dd:54:2d:1d:52:42:c5:f2:4b:ca:fc:ad:
7c:f9:87:10:3c:e6:cd:3c:90:13:77:cd:1e:4f:fb:9e:77:51:
40:86:df:da:bc:29:ba:65:57:09:48:8c:30:86:fa:9c:a7:16:
c5:36:65:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:41 2026 by rpki-client