This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
File: kRbcv3jGLVHakHag0Gra027jt1U.mft (raw, json)
Hash identifier: gaCmK2HgPXJMe/p3a6MEYPaKcEJcoarMav4qzUvBOyA=
Subject key identifier: 89:DD:C7:1B:60:BE:D6:C2:95:92:D5:02:29:E8:86:3B:BA:7F:46:51
Authority key identifier: 91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
Certificate issuer: /CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Certificate serial: 019C45475A85AB583D2456B4B65D907AC862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
Manifest number: 1812
Signing time: Tue 10 Feb 2026 02:00:29 +0000
Manifest this update: Tue 10 Feb 2026 02:00:29 +0000
Manifest next update: Wed 11 Feb 2026 02:00:29 +0000
Files and hashes: 1: 4nwTdSMvC3B2lG2I0a3z0eITR_U.roa (hash: 4Uf7fHPsn5qiTNzR/kEHf1yHK5kxq37/oLZT2/BjakQ=)
2: kRbcv3jGLVHakHag0Gra027jt1U.crl (hash: pw1JI7ka0B2JrtlV8QtCzBa998kpb3/usnlEGvJYiEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:45:47:5a:85:ab:58:3d:24:56:b4:b6:5d:90:7a:c8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Validity
Not Before: Feb 10 02:00:29 2026 GMT
Not After : Feb 11 02:00:29 2026 GMT
Subject: CN=89ddc71b60bed6c29592d50229e8863bba7f4651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:39:c4:c7:94:e1:d7:17:96:4c:fe:b3:ab:c3:
11:6b:e4:7b:7e:17:76:b4:a5:d3:4e:2e:7d:16:04:
45:12:25:37:78:09:1f:9a:98:1c:72:ee:e8:18:da:
fe:10:d2:4e:ac:e1:1d:a9:22:c9:39:49:d4:5f:eb:
8d:5e:45:34:4e:9b:34:95:f0:9e:8a:74:4b:05:e9:
45:31:80:05:96:cc:11:86:76:02:5e:62:64:57:18:
51:54:a7:49:56:97:56:fb:72:71:f0:eb:dc:1e:fb:
71:7f:1a:7b:6b:79:2d:1d:a3:37:de:2b:02:e2:11:
60:28:de:f3:19:ba:51:39:56:91:e2:6f:26:8b:7c:
11:90:48:ff:ac:7c:c0:f5:c3:2d:b7:41:f5:87:2f:
d8:32:fc:64:f7:8e:95:fd:f8:ab:f6:07:2e:2f:95:
a9:ab:67:8b:76:05:c5:11:06:46:eb:c6:3a:bb:6a:
69:a0:89:4e:04:73:97:64:c2:ba:24:2e:c6:e4:27:
2f:cb:b4:9b:29:0e:6e:ba:bb:7b:e7:4d:66:6f:24:
8d:41:9f:6e:70:57:40:20:59:c1:cc:db:c4:62:0e:
83:7e:86:25:c5:b6:d7:46:90:b4:63:cf:04:35:cf:
3a:c5:42:d5:0e:f1:80:24:3b:ff:c6:14:61:ee:57:
79:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DD:C7:1B:60:BE:D6:C2:95:92:D5:02:29:E8:86:3B:BA:7F:46:51
X509v3 Authority Key Identifier:
keyid:91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:79:a6:97:e6:8d:61:f5:d5:f8:76:92:fb:5b:16:90:c3:07:
27:07:f4:ea:91:81:1c:9f:5a:c8:73:1c:57:03:f9:4d:73:59:
b0:30:0a:67:45:37:24:b0:d4:4c:8f:60:ce:8d:20:2d:2f:ff:
39:00:ae:e2:5a:ab:ef:48:28:2d:cd:d1:93:a4:3e:ef:92:68:
37:b4:59:1c:97:12:2e:06:18:95:0a:e8:27:c6:a6:c3:e3:bd:
26:5b:2c:4b:e2:44:d4:98:d5:fa:cc:49:67:ab:84:39:0a:79:
bc:05:a0:55:ad:d6:41:bc:f7:0a:09:37:d5:39:6f:ee:88:6f:
23:34:72:ad:e2:a2:af:55:2a:f0:a8:77:39:45:df:f4:11:7b:
7e:40:a9:df:4c:4f:39:b6:cc:89:3b:d5:18:20:26:eb:c3:54:
46:bf:9d:1b:cc:b5:40:09:32:c1:0c:a4:3f:d6:56:39:d9:8b:
77:80:93:42:20:c4:87:fb:45:fe:d1:6c:82:b6:32:64:40:85:
fd:64:98:40:fd:ec:ec:eb:0b:ba:f4:43:c3:d7:bd:74:3a:5a:
1d:86:3a:9b:f7:5f:98:57:7a:ca:3b:84:1d:e9:b3:98:44:f2:
f8:04:cf:fa:69:6a:a8:23:de:35:42:d7:51:9f:a6:28:60:6e:
1b:aa:5e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 06:04:03 2026 by rpki-client