This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
File: kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft (raw, json)
Hash identifier: xk6qJl5kd0Yd79SS5SGHCyOQ2lLGEB9N8NaQVX6sxUI=
Subject key identifier: 31:89:EC:C1:B6:36:39:FD:EA:A4:5B:57:21:F3:81:3C:ED:14:98:25
Authority key identifier: 90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD
Certificate issuer: /CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd
Certificate serial: 019C4434889BE159FC8C71B2A88DB354AA77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
Manifest number: 1813
Signing time: Mon 09 Feb 2026 21:00:19 +0000
Manifest this update: Mon 09 Feb 2026 21:00:19 +0000
Manifest next update: Tue 10 Feb 2026 21:00:19 +0000
Files and hashes: 1: Rh1jP8TT0D5DQyewHt3WNVRetYg.roa (hash: +Z1++BSabnl+/JfrPmXmRibZf7uuXCCwxkF76/QL4Zw=)
2: gkvcqRam_P5KtSFKYrt_Tqdq1Po.roa (hash: JnttzcUryU3xosibqHjelq7W7OqvhTZhKK40TmRyAXo=)
3: kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl (hash: 6wB8HW8zntMVLLUhY5QCANlQwTE6Jd6yDCrIpzm+vCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:34:88:9b:e1:59:fc:8c:71:b2:a8:8d:b3:54:aa:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd
Validity
Not Before: Feb 9 21:00:19 2026 GMT
Not After : Feb 10 21:00:19 2026 GMT
Subject: CN=3189ecc1b63639fdeaa45b5721f3813ced149825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fc:04:b2:62:31:ba:1b:bc:3b:58:22:c3:d1:
f3:de:65:36:46:f4:fa:16:7d:a1:ce:03:21:a0:59:
cf:61:93:db:34:ed:ed:19:00:90:b9:2c:a4:44:1c:
58:1a:80:50:4b:19:1e:db:08:2e:3b:bf:b4:63:b9:
12:15:6a:73:e0:f1:c9:ba:71:0b:86:60:74:40:1e:
48:e8:a1:ea:77:5d:cf:b5:28:16:87:be:0d:51:a5:
80:eb:1c:e2:3d:56:aa:60:6b:56:5a:62:0a:80:ef:
f7:70:80:59:7e:9d:95:1d:cc:30:92:58:85:fd:26:
79:e9:7a:46:f7:f5:fa:17:e1:f4:aa:36:f3:c8:47:
a3:4e:58:c3:1f:47:3f:1a:b3:d4:b6:f3:32:78:3c:
e9:a4:f2:ac:f5:da:5a:7e:90:32:a2:4e:ba:30:18:
4c:cc:3e:22:90:2e:dc:4b:ed:25:b1:76:02:33:94:
15:b0:f2:a1:a7:54:d5:c7:bd:26:2a:93:1b:63:8b:
2a:d0:2e:01:9a:47:92:2b:14:40:bb:d7:7c:0a:b5:
83:2f:7c:46:b6:c9:1f:c8:13:0d:de:ae:e4:53:d7:
85:c6:50:cd:41:c9:26:d3:ce:9b:3a:d5:47:52:48:
16:a6:c7:67:62:30:87:42:1f:16:2e:fc:09:e7:30:
c0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:89:EC:C1:B6:36:39:FD:EA:A4:5B:57:21:F3:81:3C:ED:14:98:25
X509v3 Authority Key Identifier:
keyid:90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:fd:f3:b6:c6:08:a6:81:c2:03:a2:5f:84:51:26:41:7a:1e:
da:be:ff:53:2e:98:66:e6:5a:ad:0e:3e:e0:63:33:06:ab:73:
8b:1c:d7:dc:22:ca:96:84:92:f4:2d:39:8a:94:ef:ad:0f:7b:
a8:eb:0c:c8:43:37:b6:3b:5b:df:69:bd:74:73:1e:dc:a4:36:
13:37:92:d0:e0:b7:40:3b:81:2c:2e:dc:58:ce:c8:1d:3c:b7:
ab:83:58:04:06:4b:4a:e4:47:5c:7e:dc:67:d1:7d:71:50:87:
61:ad:dc:57:29:9b:ca:f0:32:4b:7b:f6:46:a7:fa:0a:c4:1c:
a1:b0:21:82:ea:ec:b2:2d:a3:1a:24:02:3a:dc:37:4a:2c:4d:
78:55:75:90:40:1e:36:21:81:05:1d:6f:fa:29:6a:45:b6:dd:
c3:11:da:8a:02:31:93:ff:50:fd:c0:f0:9f:a9:94:ab:03:f6:
ef:0f:33:9b:f4:ae:26:ba:4e:d7:3e:54:33:08:4e:3e:89:74:
ae:66:62:99:a0:69:c8:d0:67:7c:50:9b:64:c6:0f:0c:50:c3:
d6:f1:f6:ab:9e:cf:1b:d6:b9:ab:f3:cf:8a:82:9f:71:35:2b:
8c:c0:dc:34:3c:33:42:d7:5c:78:fb:59:a3:81:a6:93:de:7a:
7c:5d:cf:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:19:55 2026 by rpki-client