This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
File: kWg1p4YCMde8FkjUX46Vf1FQWyg.mft (raw, json)
Hash identifier: Nxjflq+y2ZN6vpfjUaA+aeSTm3JhBs2C+RJtZ5+V+Vs=
Subject key identifier: 92:F0:00:0C:A2:DE:17:04:F3:E7:99:89:2D:61:45:90:20:85:E2:45
Authority key identifier: 91:68:35:A7:86:02:31:D7:BC:16:48:D4:5F:8E:95:7F:51:50:5B:28
Certificate issuer: /CN=916835a7860231d7bc1648d45f8e957f51505b28
Certificate serial: 019C454746BB5B024A99C458D68C0E932719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
Manifest number: 05F0
Signing time: Tue 10 Feb 2026 02:00:24 +0000
Manifest this update: Tue 10 Feb 2026 02:00:24 +0000
Manifest next update: Wed 11 Feb 2026 02:00:24 +0000
Files and hashes: 1: kWg1p4YCMde8FkjUX46Vf1FQWyg.crl (hash: ukAAZaf/ZB6E7Yvzbipfm5Hu1958ZN7/RaLKFkLQZBk=)
2: v8xN2-d0fpKAaThoNW-wrq46cas.roa (hash: w0wQ9b7+xzxFuqPdPpkrYcYWx9TLPMta+onXlpVwk44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Feb 2026 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:45:47:46:bb:5b:02:4a:99:c4:58:d6:8c:0e:93:27:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916835a7860231d7bc1648d45f8e957f51505b28
Validity
Not Before: Feb 10 02:00:24 2026 GMT
Not After : Feb 11 02:00:24 2026 GMT
Subject: CN=92f0000ca2de1704f3e799892d6145902085e245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:a9:7d:f3:d6:ed:ed:74:74:be:ac:ad:3e:
e5:18:20:cf:e0:f9:5e:52:47:86:04:af:2d:1d:a3:
50:94:52:ed:c7:24:3e:76:98:f7:90:38:ec:22:43:
b9:67:16:82:e8:f1:8a:3d:9f:4c:25:f5:f5:4b:62:
2b:77:7b:0a:b5:fc:f7:63:84:fc:15:d8:4e:8f:5a:
c0:23:64:51:e6:68:d9:60:ea:0a:b3:08:f9:6e:15:
88:8c:b5:49:b3:52:0b:3d:71:92:8f:de:59:78:96:
c0:51:e5:72:0e:db:e5:54:6a:b7:db:63:b8:87:d3:
d9:f1:a7:6d:45:00:ee:c9:63:a2:ff:11:fb:c0:6e:
04:11:8f:b8:4e:16:88:29:95:99:a3:ae:4a:32:18:
ec:8d:99:e3:22:95:7c:5c:bb:48:07:a6:19:36:a8:
5a:b1:2e:69:ce:be:a8:15:ad:ae:84:a1:e6:91:70:
ab:98:9f:6b:c0:0d:57:90:64:70:f1:45:51:08:5e:
de:74:9d:76:fe:e3:90:70:8b:e3:90:99:b6:c5:15:
ce:23:0c:f7:f2:4f:ee:da:0f:3f:f5:e4:e2:00:60:
2c:ee:c8:6e:3b:ad:17:cf:d0:74:de:7b:42:fd:67:
be:26:cf:a5:37:01:cd:e3:6e:2d:25:f8:d7:cf:ff:
18:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F0:00:0C:A2:DE:17:04:F3:E7:99:89:2D:61:45:90:20:85:E2:45
X509v3 Authority Key Identifier:
keyid:91:68:35:A7:86:02:31:D7:BC:16:48:D4:5F:8E:95:7F:51:50:5B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f8:4f:61:94:10:64:13:f6:ee:c0:ef:90:2b:f8:70:01:39:
5b:ef:ee:ee:19:5b:82:cf:76:96:b2:ee:9f:11:c0:43:7e:65:
dd:37:0b:ac:45:93:cb:69:6f:53:0d:d7:b3:3e:9f:0a:73:11:
7e:c8:88:0b:74:35:95:de:93:ce:e1:10:16:ae:94:f0:c0:9f:
74:b6:f8:35:5c:a7:8c:7d:cf:d1:9d:2c:11:b7:1b:b0:25:7a:
73:1f:bd:50:ce:32:06:e7:33:4e:94:9a:90:e5:40:25:29:d7:
1d:e7:20:70:98:eb:91:bc:d7:05:1d:ce:23:1d:22:dd:30:f5:
1f:96:0f:d0:60:8a:dd:b7:fa:2a:42:a8:60:e6:35:bd:39:99:
fd:98:17:36:f9:4f:85:61:e3:7d:9f:71:0c:a0:47:94:7e:29:
f8:40:b2:d0:e6:a6:b3:41:2f:e3:cc:b1:50:bb:e5:d9:8c:2e:
89:5b:15:5d:5c:88:5d:b9:ad:1b:61:b9:ef:a8:35:86:16:f6:
99:4c:75:33:04:4f:03:a9:03:1a:d4:92:56:3c:80:11:7f:01:
0e:55:22:f2:b3:ec:5b:c5:c9:06:0f:ab:84:f7:00:f3:1a:53:
1b:f7:18:7a:8d:ba:a1:4e:dc:9a:77:8a:a2:38:2f:68:38:32:
d9:aa:68:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 09:27:34 2026 by rpki-client