This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.mft
File: MK7HNts6BEOzui_FtKQkWG-0zhU.mft (raw, json)
Hash identifier: MW56aXqAZO06BnDopej8MaTojQ1uAnN7Ip0U4MZZBEM=
Subject key identifier: CA:5E:1A:30:BC:1C:EA:B7:BE:0C:49:E1:AD:F4:67:AC:E1:70:77:05
Authority key identifier: 30:AE:C7:36:DB:3A:04:43:B3:BA:2F:C5:B4:A4:24:58:6F:B4:CE:15
Certificate issuer: /CN=30aec736db3a0443b3ba2fc5b4a424586fb4ce15
Certificate serial: 019C42EAEA70A5F60ABD5EF92C0A53E05D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK7HNts6BEOzui_FtKQkWG-0zhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.mft
Manifest number: 012B
Signing time: Mon 09 Feb 2026 15:00:17 +0000
Manifest this update: Mon 09 Feb 2026 15:00:17 +0000
Manifest next update: Tue 10 Feb 2026 15:00:17 +0000
Files and hashes: 1: 3tQLmVymoZqw7VQrq9obl-zIU9Y.roa (hash: UW5r9uI28BmP8sjp5a0mYV+U1btRYcKpVFrYo4A53mM=)
2: MK7HNts6BEOzui_FtKQkWG-0zhU.crl (hash: bGFFtq/gHpzJv8ALzFYEXGLcoZxfdm0xwuCIgn6ogec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK7HNts6BEOzui_FtKQkWG-0zhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:ea:ea:70:a5:f6:0a:bd:5e:f9:2c:0a:53:e0:5d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aec736db3a0443b3ba2fc5b4a424586fb4ce15
Validity
Not Before: Feb 9 15:00:17 2026 GMT
Not After : Feb 10 15:00:17 2026 GMT
Subject: CN=ca5e1a30bc1ceab7be0c49e1adf467ace1707705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5b:3e:c1:8f:35:e7:59:49:15:33:1c:4e:eb:
1a:35:32:26:8f:ca:c4:c4:e7:77:f1:1a:62:b3:43:
fa:79:01:6c:13:fe:19:14:77:6e:f4:29:cd:84:c7:
88:c5:38:55:3f:93:34:8e:71:4b:1e:b7:9e:f0:85:
59:5e:9f:27:ea:75:e2:d1:5e:69:80:84:6f:a0:75:
67:9f:66:47:07:da:22:73:99:c4:32:84:57:e7:45:
4e:8c:50:2f:7a:13:bc:cf:0b:08:eb:61:fc:02:4f:
91:42:2c:09:60:b3:04:53:ea:d9:7b:dc:5d:f8:8f:
7a:d8:d9:21:c3:41:36:47:7f:0e:f5:c0:2f:c4:5a:
03:03:7a:b0:93:7d:a8:f9:8f:13:d2:92:68:66:ae:
84:be:75:2e:13:0f:9d:77:bc:66:10:df:f7:d8:cc:
94:a0:c3:04:92:19:6e:be:78:aa:f1:85:b3:38:6a:
07:17:78:cf:84:ee:c9:52:71:3e:b9:51:9d:95:c6:
a3:8f:39:d4:d5:9d:b9:16:8e:dd:24:32:24:c9:0f:
6d:c7:5c:08:5c:5d:db:3e:f6:79:e9:80:de:cc:73:
56:3c:97:08:00:2b:9d:ac:1f:8e:38:4c:7e:19:87:
f6:9a:20:30:e5:8d:49:89:12:73:ae:d1:86:e6:90:
0d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5E:1A:30:BC:1C:EA:B7:BE:0C:49:E1:AD:F4:67:AC:E1:70:77:05
X509v3 Authority Key Identifier:
keyid:30:AE:C7:36:DB:3A:04:43:B3:BA:2F:C5:B4:A4:24:58:6F:B4:CE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7HNts6BEOzui_FtKQkWG-0zhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ae:9d:89:2e:54:08:4f:f8:b3:82:0e:b5:b9:ae:aa:6e:f7:
c0:28:1a:ae:a9:f6:08:9b:af:53:3b:cd:6d:c8:5e:dd:2c:d6:
46:66:0b:64:cb:b4:8a:1c:f6:fa:fe:3b:79:dc:c8:01:98:01:
60:01:08:73:ec:cd:90:cf:8a:1c:e1:3c:ab:40:5a:66:cb:c8:
69:26:7e:db:f0:af:69:0b:cc:96:1b:43:eb:39:18:b9:16:1c:
b2:0d:c7:58:a1:99:03:1d:9c:3b:4f:e7:5a:51:4d:66:14:b8:
c9:92:c2:65:c3:3a:4f:87:4d:3c:60:17:6a:9e:2c:77:9c:c8:
12:41:6d:71:b3:17:24:10:87:55:52:57:d0:82:9c:55:24:4d:
ee:10:2d:18:2c:1a:cc:73:40:88:33:3e:a8:0a:29:9c:1d:31:
e4:00:ca:8e:1f:17:bb:bd:ee:47:56:0d:1b:7c:99:89:f7:ae:
e6:40:3e:22:68:9a:91:31:1d:3a:a2:5b:8f:cb:44:ba:aa:ed:
2e:32:33:b6:21:0e:75:e6:c2:2c:0a:b2:16:a6:b0:46:f8:31:
32:5f:79:fb:66:5f:ee:22:de:49:88:db:d4:b8:3a:6b:de:73:
f7:f8:18:dc:68:0c:96:05:5b:be:e3:bb:0c:96:be:14:59:27:
d7:2e:73:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:55 2026 by rpki-client