This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
File: kAhyNvFhxccF73Pf6eXjmG5xJsg.mft (raw, json)
Hash identifier: CwLt+lYUR2XugJbB8tSu1xnRnSwjfTr7VD1r0Pb3gzI=
Subject key identifier: 6E:7A:15:9F:45:2E:9B:32:45:02:AB:12:10:39:7A:AF:71:FE:B7:8F
Authority key identifier: 90:08:72:36:F1:61:C5:C7:05:EF:73:DF:E9:E5:E3:98:6E:71:26:C8
Certificate issuer: /CN=90087236f161c5c705ef73dfe9e5e3986e7126c8
Certificate serial: 019C42B3F3D287509F56CBC96248D2A3EBB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
Manifest number: 07CB
Signing time: Mon 09 Feb 2026 14:00:15 +0000
Manifest this update: Mon 09 Feb 2026 14:00:15 +0000
Manifest next update: Tue 10 Feb 2026 14:00:15 +0000
Files and hashes: 1: kAhyNvFhxccF73Pf6eXjmG5xJsg.crl (hash: EFRc83za6tj9A9Gn7TrGaaaFaSoPx61B0GyRn20lbJs=)
2: tKebX1FWuux3IXuG2sUXIXIBJsw.roa (hash: +oj9FAD3Ulh0IuD5nAYshWSIbL3rR2EIAg3bpYOtpOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b3:f3:d2:87:50:9f:56:cb:c9:62:48:d2:a3:eb:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90087236f161c5c705ef73dfe9e5e3986e7126c8
Validity
Not Before: Feb 9 14:00:15 2026 GMT
Not After : Feb 10 14:00:15 2026 GMT
Subject: CN=6e7a159f452e9b324502ab1210397aaf71feb78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ef:e2:01:6c:3f:5c:1a:3f:e0:02:a1:ba:89:
fa:13:ba:27:ad:fa:25:56:5f:6f:76:6a:2b:05:6b:
db:2b:61:c6:b8:8a:5e:ef:8b:cb:90:eb:fe:c7:cd:
12:8f:06:40:ae:7b:fb:34:38:c9:09:9d:6c:d3:28:
58:af:8a:87:c9:7c:fc:54:43:7d:d1:98:e9:8e:66:
51:d1:96:8e:63:19:72:bd:68:94:78:e2:f6:b9:1e:
8c:f8:67:7f:02:1b:da:55:bd:af:db:45:6e:27:9d:
83:6c:c6:57:6b:2a:43:2c:40:be:14:d7:9e:d6:6b:
a2:ae:ec:81:59:49:68:76:65:3d:92:83:19:d2:70:
6b:f9:f1:7e:85:3a:b8:c4:46:26:c3:1d:cd:31:a5:
3d:c5:1e:cb:7d:e2:0b:d1:7c:9c:7b:98:83:29:b4:
bc:3e:4e:d4:48:25:5b:08:3a:21:ed:3c:db:63:a1:
cd:23:7e:18:47:7f:69:de:e9:d0:bf:c0:46:1e:8e:
32:b8:4f:8d:fa:62:3e:12:bb:53:de:63:b5:0e:95:
9d:42:1d:65:43:7a:d1:12:79:c2:8f:3f:08:59:6a:
9e:96:9b:4a:5c:fd:c3:b8:36:80:a3:e9:ed:42:bd:
86:91:30:44:20:57:4b:4b:cd:c7:59:2b:96:48:c6:
3d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:7A:15:9F:45:2E:9B:32:45:02:AB:12:10:39:7A:AF:71:FE:B7:8F
X509v3 Authority Key Identifier:
keyid:90:08:72:36:F1:61:C5:C7:05:EF:73:DF:E9:E5:E3:98:6E:71:26:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:4a:a5:1d:bd:07:d5:44:fd:7c:99:c8:7c:3a:5d:18:62:34:
1b:16:8b:7f:de:f8:36:17:a2:84:b0:77:97:65:a6:92:fe:c8:
18:68:a0:fc:55:67:c4:4d:31:38:5c:b8:1b:64:ef:b0:0b:fa:
cd:05:06:51:01:2e:d3:4e:78:6b:e5:50:3b:ac:f3:f4:59:19:
cd:d1:70:61:73:d7:7c:38:9f:a6:9a:1e:99:c3:ea:b7:e1:e5:
ce:06:c2:65:4e:94:a4:ed:f7:41:6c:10:55:72:75:bc:5a:78:
a7:9b:fd:86:00:02:bc:c9:e6:9a:3f:6e:3c:db:2e:21:b9:b0:
7b:97:a1:ca:d5:2e:6c:e1:a8:6d:72:4c:cc:a5:8f:df:c3:c2:
83:79:62:c9:34:09:4a:3c:9f:6a:50:e5:e8:cb:4b:41:62:08:
4b:89:d5:5a:67:d3:01:7d:54:47:99:fb:fa:58:25:4e:ad:3b:
bc:8d:9e:e3:3f:43:3e:03:4b:eb:67:20:da:f6:be:13:e8:f0:
51:f7:51:12:13:75:c1:13:ba:83:ad:81:ed:f6:c1:0e:38:d0:
58:3b:09:59:b7:99:8c:94:93:5a:b3:bc:40:9d:e9:c5:43:0b:
df:56:23:eb:8d:d9:77:25:b8:bb:41:6a:18:d0:f8:1e:cc:f8:
4f:53:c7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:02 2026 by rpki-client