This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
File: kUqlV8PT0ea38FJcNMwdSIpakpQ.mft (raw, json)
Hash identifier: 9Dz+ZCC/7RHgxP+eOlRROIMHBkKY3aw6u/zEQtkBPP0=
Subject key identifier: 29:7B:A8:C7:5E:AA:14:BF:C1:AB:0B:4C:E1:E2:27:89:05:ED:E2:42
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019C424699829BB7BE2EB76AD5E8CCC17EFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
Manifest number: 0408
Signing time: Mon 09 Feb 2026 12:00:48 +0000
Manifest this update: Mon 09 Feb 2026 12:00:48 +0000
Manifest next update: Tue 10 Feb 2026 12:00:48 +0000
Files and hashes: 1: A1p3BrbicGWcrqJ7iBGLEbx6TY4.roa (hash: Gai9jQoSPI3MpN27V7u93QMmPyJdle9aT1OKl5jQdDQ=)
2: GfWSqsa-wFE-GuXZlVrnJRLuIxQ.roa (hash: 5KRlaDr+PjUe8aUFBQfVPIsNCZaFpUY9S1IAEN3e5Dc=)
3: HWsU8GZmKm2RWt9RNfF5TgXHj7o.roa (hash: zKdYWSkzVmUErVX2Gy52NYcMMDEwJmENVIpagTqcS1o=)
4: HWudsOjdG8oDTKzDkSrmsmwxXhg.roa (hash: MsNQyO4x3GL1ZljNMgkCfOoEnGHTPJUa2PFQHyg4E6M=)
5: IPE-tbT7mZHC_mVOXCnZbBARVrE.roa (hash: 9Pvd8mTsmxDOqa26tsGPIpoLn8+h+Tn9v4mWnas6nBQ=)
6: JrDTVIncDSR3-NJysbELxGXyWqA.roa (hash: dASfO+9KayYVpMiWmi+rsW9RfJx8vDVDiPs2D+DigBU=)
7: OQVv5QkSzLFHCeZztVRUieZDZPc.roa (hash: vYdS9MR1CGk4IGJAzwFEYebnVkZn8CGWtEzbXiqEhI0=)
8: _95HL30eiz4xwUCuHfhLe4CpH6c.roa (hash: jDbOKSGIm9Ta9ENgDS4fJfY0Vwszjw6OGn07kk0+8G0=)
9: aRFGRkrVW4tSAzMOBGbwJhIU8vI.roa (hash: Lo8StkiOJatbskiLh2LCukF3ojNljMu1U3MvMXSb67w=)
10: dYoF3WCX5e8xkQ75qi9A1X9Mk5k.roa (hash: R7Y096NYWU1/rjB9QjTfqLZJf6JxhKvKWKFuhaRLmA0=)
11: kTVaLkeW77Vl9y-_uCNNaTnSWQs.roa (hash: S0n8x+aOqybKTOnxR3yhpH5Rz3mFCffzw166DxaUgXs=)
12: kUqlV8PT0ea38FJcNMwdSIpakpQ.crl (hash: MaxG1zDuqu8TIBA/BYgr+pj8CmO1Onx7Dai+IYkyXEE=)
13: zYvDyKy0vUjdTc1ddu1UGZtGizw.roa (hash: 6PiTtTtGNeW8G5O2SdL1arlpTJIFJYlune4Tv9Dz93E=)
14: zrABntG9K9mhIhdqztHDeRg--G4.roa (hash: gMDq/Kln5jA0QKMrkqoy1kLNKDrHuD7nJKA9uHp8ouU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:99:82:9b:b7:be:2e:b7:6a:d5:e8:cc:c1:7e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Feb 9 12:00:48 2026 GMT
Not After : Feb 10 12:00:48 2026 GMT
Subject: CN=297ba8c75eaa14bfc1ab0b4ce1e2278905ede242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:3c:08:18:17:39:af:77:05:65:8b:b2:9e:
e0:28:7c:a9:26:9c:3d:70:11:8c:0d:28:c7:19:fb:
ca:4c:fb:26:61:db:57:ab:60:81:db:82:f4:ad:e7:
a6:b8:09:3e:15:6d:6b:ac:0f:db:86:b6:0a:d0:07:
45:7f:5e:87:da:6a:1a:ed:02:15:d6:74:38:20:ce:
31:ba:4d:f2:af:57:a8:8f:8d:64:f7:7c:d5:48:ab:
b2:da:ab:55:3d:f6:d1:36:82:b2:6c:08:e1:67:59:
b6:80:42:8a:51:4b:7e:5a:85:1a:21:d4:86:6c:42:
99:af:a1:e2:f4:e9:eb:1b:b8:98:3b:bd:d6:76:e5:
29:30:cb:e4:c3:05:47:11:ea:a1:a6:69:0e:94:2f:
14:13:21:b2:e6:54:a1:c2:69:bc:28:79:f6:8d:00:
1b:4d:b6:37:23:2e:a3:88:1d:85:da:87:94:da:ce:
f8:63:c3:9f:b5:d7:d7:21:ce:a1:6e:ee:46:16:f7:
85:da:d7:bb:39:c5:5c:57:66:b7:24:f7:f0:c0:8a:
01:4d:74:e6:68:66:db:93:72:19:98:89:8b:2f:12:
bb:ee:96:8b:b7:94:c6:66:9b:30:74:2d:d9:10:66:
5b:af:97:a3:7a:f0:34:f4:03:e9:76:a2:e7:fa:52:
55:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7B:A8:C7:5E:AA:14:BF:C1:AB:0B:4C:E1:E2:27:89:05:ED:E2:42
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:65:e2:64:6e:60:b3:2a:53:16:e8:b8:e7:d4:03:81:ba:2e:
99:51:b6:b8:b1:37:87:bf:38:22:27:46:0c:51:80:0b:d5:05:
4a:3d:62:9b:82:51:7f:d0:19:5c:70:10:3c:1d:57:18:bf:c9:
a4:68:82:c8:52:53:d6:16:c9:25:1a:2c:72:14:14:7b:21:23:
d0:ee:66:a2:3a:55:82:78:0d:20:52:f7:44:5a:7b:17:0e:45:
52:10:9e:fd:80:33:a9:c6:3a:3f:60:0b:e4:22:be:58:95:b4:
b0:a9:af:6b:3b:46:e5:6f:90:49:9c:7b:80:4b:a1:3b:b1:c5:
7d:2d:f2:6b:2b:44:4f:ac:16:ae:d1:3e:ac:9e:ac:79:8b:21:
ed:38:f9:44:d7:41:df:92:d9:fd:81:15:be:5d:65:33:f5:83:
aa:0d:57:d4:4e:38:0d:a7:14:c6:82:e9:34:00:2a:a0:9b:ef:
b1:aa:3a:b6:01:29:34:0d:39:11:c2:fc:61:a9:c5:c4:79:84:
85:68:5f:a7:c8:ff:14:04:f7:8b:d2:26:c5:81:a1:6b:b8:3a:
da:f3:df:66:a8:13:e6:26:d2:b7:60:30:cd:4c:f7:58:06:95:
82:21:aa:ad:af:27:32:2c:16:b3:3c:4d:ba:dd:5e:97:fc:5f:
ee:13:d8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:21 2026 by rpki-client