This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
File: K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft (raw, json)
Hash identifier: wZ1JyugDbmy4Qs6u2QDOLmnFuFZTxKr8y+gH+whKzW8=
Subject key identifier: AE:A7:DA:86:12:87:72:19:0A:87:09:7C:BA:B0:F5:91:90:EA:09:89
Authority key identifier: 2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3
Certificate issuer: /CN=2bf7ef33dd19690d94941c92fb31479550a917b3
Certificate serial: 019C1C4C1D3060B78ED9548CDB84DDC2B35C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
Manifest number: 05AA
Signing time: Mon 02 Feb 2026 03:01:15 +0000
Manifest this update: Mon 02 Feb 2026 03:01:15 +0000
Manifest next update: Tue 03 Feb 2026 03:01:15 +0000
Files and hashes: 1: Fz37EzbKmOLuj47DZyVy-jxm8-Q.roa (hash: A6w0ljzejsJu2FbOvEwlydaqHScmNkC+q2dwLDsAXsw=)
2: K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl (hash: 7jDNtWqNL5rYX/+ltAPmxGPPYyNO7xhiQiyiWXLe0GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1c:4c:1d:30:60:b7:8e:d9:54:8c:db:84:dd:c2:b3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf7ef33dd19690d94941c92fb31479550a917b3
Validity
Not Before: Feb 2 03:01:15 2026 GMT
Not After : Feb 3 03:01:15 2026 GMT
Subject: CN=aea7da86128772190a87097cbab0f59190ea0989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6a:d0:4a:4f:cc:eb:22:a6:ea:8c:8c:4b:a8:
18:8b:e4:3b:bf:57:99:7f:9a:40:2f:27:87:07:76:
e3:77:e2:8d:da:51:db:db:00:ee:0c:13:1b:62:45:
ee:d0:62:6f:40:d3:21:ce:a6:a3:6d:f6:78:87:43:
4d:47:d8:6f:dd:2f:69:0e:cd:64:5b:a7:28:75:ac:
44:bb:ef:44:e8:5e:a0:f2:53:c3:35:86:5d:a8:4b:
4d:da:04:b5:a1:8c:6d:bf:e7:f1:80:54:c7:9b:06:
d0:9a:ec:ca:04:0f:3c:3e:1b:32:ac:53:18:7c:3d:
cf:50:4e:a4:6f:cd:ef:18:d3:a9:22:d0:3a:8b:37:
6d:47:31:74:cd:cb:bf:37:ae:af:88:45:c3:a7:4a:
18:8a:0a:75:69:51:80:ce:9d:92:04:2d:32:32:d7:
0c:9f:7a:79:78:60:06:38:43:96:2c:dd:7b:97:5f:
bb:a0:c4:31:a6:81:57:98:20:9e:76:06:5b:26:06:
73:fb:39:4c:6d:9e:ce:97:71:08:7e:ef:1f:9b:2b:
d7:3c:15:d9:58:1b:2e:51:32:74:66:78:da:a5:8a:
bc:1c:6f:b1:b9:98:68:55:bc:09:b1:5d:27:53:dd:
1c:51:0d:56:0e:05:9c:fa:55:de:c7:fd:cc:fa:fa:
4e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A7:DA:86:12:87:72:19:0A:87:09:7C:BA:B0:F5:91:90:EA:09:89
X509v3 Authority Key Identifier:
keyid:2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a9:9e:24:06:77:55:06:c3:6f:5e:7d:e7:f9:9f:4d:ed:64:
00:c5:c9:40:a7:7b:f2:05:1b:f2:ff:a8:da:12:ba:63:dd:b5:
a2:6c:5b:46:b6:6f:43:1d:21:b2:30:80:5f:08:85:cc:35:d7:
39:ac:21:3f:09:07:9c:ae:de:ba:a8:10:8f:c7:1b:63:e1:ae:
bb:7e:24:7e:11:c3:0b:29:bd:2a:8e:fa:24:41:62:73:45:cb:
ef:73:5f:72:1d:f9:ff:0e:63:d1:54:8f:69:48:68:b4:20:b1:
77:76:14:48:72:9a:aa:85:d9:d0:ae:ce:86:97:73:19:ce:e8:
b0:89:50:d1:bd:88:0e:21:2a:4d:8b:a4:79:b4:77:6c:8e:5f:
8f:5b:16:9f:ab:04:1a:8a:5a:5d:82:7c:73:49:ac:1b:9e:d4:
61:4b:0a:16:77:fd:62:f8:de:75:e5:f2:0a:b3:e1:10:8c:30:
b6:f1:ca:67:37:90:89:53:fa:46:bd:01:11:84:d2:07:f8:3f:
42:48:35:9c:c3:c8:f6:51:85:e5:0e:3c:16:55:cb:8c:6d:2f:
74:82:e5:a7:de:6a:ba:8a:5c:23:ad:bb:cf:fb:52:51:e2:91:
24:bd:cc:2f:8b:11:7c:91:83:eb:5a:61:61:06:3f:1b:fc:5d:
40:bc:ae:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:31 2026 by rpki-client