This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
File: Kf49-nfrAgHIVtHh6_AyvMixJNg.mft (raw, json)
Hash identifier: bselNAQhqgkhQFM7aJc2Stpvb+Bdw2j/QzUOk0wXl3s=
Subject key identifier: 5F:CA:8B:55:8D:DE:8D:2C:F9:A9:AB:64:97:C1:11:C9:F9:0E:E0:8D
Authority key identifier: 29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
Certificate issuer: /CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Certificate serial: 019C446C8627ABA4201B7117C14BCE351FBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
Manifest number: 17A3
Signing time: Mon 09 Feb 2026 22:01:28 +0000
Manifest this update: Mon 09 Feb 2026 22:01:28 +0000
Manifest next update: Tue 10 Feb 2026 22:01:28 +0000
Files and hashes: 1: Kf49-nfrAgHIVtHh6_AyvMixJNg.crl (hash: 5nUzUETvx5uoA06gEo8a7NUwX+hqq6j1HMRX4TsW8Gc=)
2: Y2m0fP5Z0mEZ1gZ9VvmpaGsDUNo.roa (hash: //uS9crBPxY81P375GDY9/pHivqDAms3WY1PpQ+GqaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:6c:86:27:ab:a4:20:1b:71:17:c1:4b:ce:35:1f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Validity
Not Before: Feb 9 22:01:28 2026 GMT
Not After : Feb 10 22:01:28 2026 GMT
Subject: CN=5fca8b558dde8d2cf9a9ab6497c111c9f90ee08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dd:39:ab:a5:af:46:b2:38:bb:17:88:bc:19:
ce:a9:19:85:50:47:e4:19:7b:0e:27:4e:33:95:44:
9a:28:bb:5e:32:cb:b2:19:11:52:52:5d:9c:a3:75:
e0:d3:f4:7f:bd:8c:1e:bc:94:70:8e:8f:42:60:76:
e4:18:6a:ad:1e:34:57:72:30:d7:b1:bd:22:72:48:
98:d2:c3:2b:09:d8:c7:d1:cf:f8:71:d6:fe:4b:e4:
eb:64:f9:0d:c8:2a:fb:69:cb:86:ec:7d:b0:41:38:
b3:56:78:bd:f8:9a:11:f5:f8:4c:3b:27:46:a9:6f:
6e:63:ab:3c:92:56:60:ee:cd:61:05:d8:91:32:58:
f8:15:2d:97:08:1f:62:34:18:c3:4c:d3:11:65:47:
f6:4f:8d:79:19:bc:42:72:d7:ff:e3:f9:fb:d8:a9:
88:4f:e9:db:7d:86:b9:e4:77:70:32:6d:9a:4b:96:
29:dd:a1:bc:48:2f:10:8c:27:63:52:33:43:3f:48:
3d:37:98:8a:94:ea:de:bc:5b:f0:4d:90:46:03:73:
66:f4:d9:3f:ea:36:ff:0f:83:11:9a:d7:ff:52:13:
7c:55:74:f6:6a:96:ff:c9:8a:70:c7:7f:4f:39:1f:
0d:6d:cc:55:a2:cd:55:44:7b:58:d9:22:d5:70:38:
fd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CA:8B:55:8D:DE:8D:2C:F9:A9:AB:64:97:C1:11:C9:F9:0E:E0:8D
X509v3 Authority Key Identifier:
keyid:29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:16:b8:a0:08:af:28:43:90:f9:06:ee:4a:3f:eb:d2:3b:41:
13:3c:84:b4:56:84:30:9c:35:83:25:b2:f6:8a:3f:8c:8f:06:
e5:8b:35:bb:b3:b3:7e:bc:d1:e7:f4:b0:1e:92:a3:0b:75:6e:
c0:c0:75:29:88:b8:e2:2f:19:e1:04:ae:4c:97:78:69:68:10:
b7:bf:2a:ed:ad:c1:f7:43:11:a0:a4:0c:8b:3d:5d:dd:18:db:
12:c9:b6:08:d8:17:01:27:e9:86:6d:b5:8d:3c:7b:b5:f1:17:
8c:cd:09:fd:09:4a:51:fe:b9:67:44:11:e2:1f:e4:d1:97:8d:
b7:2f:2e:42:42:9b:86:d2:3e:87:ef:2a:0e:45:b3:12:43:64:
11:a8:98:12:aa:11:f3:67:3b:8a:e2:4d:2e:5a:49:9e:6a:6c:
62:f7:87:c1:a0:66:95:79:09:96:57:99:db:9e:74:d3:17:6a:
bd:8e:ae:f7:df:6e:f5:a5:d8:48:cb:36:3b:d5:a9:2e:4b:62:
43:54:df:f6:09:50:48:e2:3c:6a:e9:b9:37:6d:31:cb:fc:07:
d0:5b:f2:d5:f8:e2:0e:19:34:09:80:5c:1a:ac:84:4f:4a:7b:
b6:60:1b:a9:a3:2c:74:be:40:e9:eb:6b:2f:0c:7f:89:97:d9:
21:d4:4e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:01 2026 by rpki-client