This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/75b400-9a27-45f7-8f02-afd7e94b6477/1/kHyUMW6AKYTeRp26it7T0LVBSzw.mft
File: kHyUMW6AKYTeRp26it7T0LVBSzw.mft (raw, json)
Hash identifier: Nj7n+Yur25XhQl8ojlwhRMseHWTZ98n3llErAjaTjuM=
Subject key identifier: 9F:2F:CA:BF:98:5C:39:69:99:67:0F:89:22:87:3E:E4:58:48:CB:8F
Authority key identifier: 90:7C:94:31:6E:80:29:84:DE:46:9D:BA:8A:DE:D3:D0:B5:41:4B:3C
Certificate issuer: /CN=907c94316e802984de469dba8aded3d0b5414b3c
Certificate serial: 019C439054CADA000FB2E11C460A5727300E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHyUMW6AKYTeRp26it7T0LVBSzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/75b400-9a27-45f7-8f02-afd7e94b6477/1/kHyUMW6AKYTeRp26it7T0LVBSzw.mft
Manifest number: 14
Signing time: Mon 09 Feb 2026 18:00:58 +0000
Manifest this update: Mon 09 Feb 2026 18:00:58 +0000
Manifest next update: Tue 10 Feb 2026 18:00:58 +0000
Files and hashes: 1: kHyUMW6AKYTeRp26it7T0LVBSzw.crl (hash: dV516JLA9cT/hTSZD+d+UfNaihlLc5Y0Ts17mOZoCfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/75b400-9a27-45f7-8f02-afd7e94b6477/1/kHyUMW6AKYTeRp26it7T0LVBSzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/75b400-9a27-45f7-8f02-afd7e94b6477/1/kHyUMW6AKYTeRp26it7T0LVBSzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kHyUMW6AKYTeRp26it7T0LVBSzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:54:ca:da:00:0f:b2:e1:1c:46:0a:57:27:30:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907c94316e802984de469dba8aded3d0b5414b3c
Validity
Not Before: Feb 9 18:00:58 2026 GMT
Not After : Feb 10 18:00:58 2026 GMT
Subject: CN=9f2fcabf985c396999670f8922873ee45848cb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:db:4f:92:88:3f:20:89:b8:fb:90:11:ef:12:
80:0e:8d:2c:ec:51:df:44:61:8f:f2:cd:a8:3c:93:
65:55:ee:34:41:e4:f2:85:76:2f:fc:3a:65:c4:4e:
0d:3c:e6:0d:71:8c:60:f7:1d:14:21:c4:b7:e9:33:
66:ec:3d:d0:ca:e6:b2:49:06:af:65:e7:7a:fb:bb:
b5:dc:a9:06:4e:1c:20:54:e4:7f:3e:1e:52:16:d2:
3a:e8:a9:25:89:d0:44:b1:13:0f:be:d1:18:6a:b3:
a5:c1:bd:3d:6a:96:3a:71:3a:39:0a:6d:4e:3c:6f:
a0:01:29:71:89:8f:b0:1f:60:f6:9b:55:e8:5f:d0:
28:a4:62:b8:87:79:5d:bc:5c:2a:8f:af:e8:4e:83:
99:ce:10:37:04:06:70:0a:31:8f:75:ff:60:bb:6c:
fe:6b:83:35:63:5e:2f:37:bf:5a:84:f7:22:c8:5f:
4f:74:94:79:4e:78:a0:1a:ab:05:1e:ed:df:e5:ea:
41:8c:f8:61:eb:03:8f:84:7d:7b:27:f2:d6:3d:9d:
f4:38:5b:7b:7f:8f:1f:d7:40:ec:60:df:f2:ac:7f:
64:ff:35:07:a4:df:48:fa:3e:35:55:77:45:35:23:
99:b8:69:03:3d:5b:a6:71:ea:a6:8b:66:53:3e:91:
bd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2F:CA:BF:98:5C:39:69:99:67:0F:89:22:87:3E:E4:58:48:CB:8F
X509v3 Authority Key Identifier:
keyid:90:7C:94:31:6E:80:29:84:DE:46:9D:BA:8A:DE:D3:D0:B5:41:4B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHyUMW6AKYTeRp26it7T0LVBSzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/75b400-9a27-45f7-8f02-afd7e94b6477/1/kHyUMW6AKYTeRp26it7T0LVBSzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/75b400-9a27-45f7-8f02-afd7e94b6477/1/kHyUMW6AKYTeRp26it7T0LVBSzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:84:fc:d0:7e:48:18:7b:db:85:33:ff:84:32:9a:52:db:45:
e2:aa:0e:1f:f3:95:12:4c:86:ba:7b:7a:4b:bf:d9:39:ea:af:
d6:6c:c4:65:fd:2d:7e:b0:07:ff:52:39:6f:fb:bd:54:c1:9d:
75:b8:df:15:21:1d:64:b4:4b:15:01:56:8b:3d:fb:a8:a3:d5:
90:93:f2:5c:de:a4:17:46:7a:c5:75:53:87:ed:ba:c9:41:2f:
f2:0b:95:76:ac:2a:aa:f5:40:aa:81:6f:70:55:c5:be:76:f1:
5d:c0:cc:60:70:9f:61:e3:56:e9:b0:e5:cf:32:e8:ac:4e:29:
21:87:9d:c2:81:37:32:c0:43:67:72:7c:b1:d4:21:fa:41:7c:
5e:94:68:f3:f7:0a:44:81:7b:8e:56:f6:5e:88:9e:78:cb:01:
86:a6:e3:7a:e8:e1:32:8f:59:6c:94:2e:ee:73:26:0b:8b:39:
5b:51:3b:b8:48:ea:f2:a4:9b:bd:3a:b7:4d:5b:fe:a1:a8:73:
1e:ba:e5:30:26:3e:64:3a:b3:9a:82:a5:47:ff:15:9a:4e:75:
5c:9b:3c:67:a5:97:4d:0d:c5:73:c3:fb:f1:6d:21:ad:80:53:
d3:bd:f3:d2:78:18:31:ff:da:8f:3f:39:11:bc:2e:08:a2:d6:
4b:ee:da:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:46:25 2026 by rpki-client