This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
File: krWsiPLNsUk0gwwawJal73MJjxI.mft (raw, json)
Hash identifier: JDKYKLMaHjC45dxYrPdlfK6y7rPmyfVbutMva6DQxf4=
Subject key identifier: BE:C0:6C:7B:A0:C1:77:60:18:D0:06:21:8D:7F:E1:2F:C6:87:60:BE
Authority key identifier: 92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
Certificate issuer: /CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Certificate serial: 019C42EB33F3A6DF9B946736B84F48543B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
Manifest number: 1736
Signing time: Mon 09 Feb 2026 15:00:36 +0000
Manifest this update: Mon 09 Feb 2026 15:00:36 +0000
Manifest next update: Tue 10 Feb 2026 15:00:36 +0000
Files and hashes: 1: krWsiPLNsUk0gwwawJal73MJjxI.crl (hash: 1/BSLm0GC5FYIyiq8kl2nPyHN9P1hJhdSDS3d9kKl+s=)
2: zOvOdvEFDu9Mo4Hd8BTTn_Gseog.roa (hash: i7r8dEO0PV70SWBxos0ykVviEGzZou2X66tLzrHIOKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:33:f3:a6:df:9b:94:67:36:b8:4f:48:54:3b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Validity
Not Before: Feb 9 15:00:36 2026 GMT
Not After : Feb 10 15:00:36 2026 GMT
Subject: CN=bec06c7ba0c1776018d006218d7fe12fc68760be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8c:01:01:91:0f:7c:91:0c:62:5d:09:bc:83:
95:1c:3e:06:23:29:d8:e1:8b:0b:24:8e:f1:2c:26:
5e:40:11:01:13:52:4c:e6:ec:f3:9b:d0:94:cb:8f:
95:0b:65:4f:1b:60:e4:9c:c3:f7:cf:cf:03:2f:32:
8b:e3:f1:14:4a:52:66:59:a8:5b:05:86:ef:d1:6c:
3b:94:0e:13:ab:11:f3:4c:31:63:7c:0b:34:4d:de:
e3:ef:c5:86:4a:db:59:86:69:d6:88:ba:1e:cc:57:
34:a4:9b:d1:d9:9d:d8:ce:11:e0:45:fa:38:6e:dc:
0f:58:7c:ec:b2:73:25:45:d1:8c:dc:06:be:ba:e8:
c5:e2:53:43:46:0a:5e:98:fc:51:94:c9:98:7b:ce:
88:e8:2a:60:d3:7d:b9:d2:d9:bc:5a:a8:72:ec:a3:
93:76:8e:fe:9d:56:b6:fe:60:2e:aa:ae:1a:1a:65:
39:aa:4a:2c:c4:35:71:ae:f8:a6:d5:b9:c0:0d:e1:
8c:53:5d:bf:23:b5:5a:d0:c1:26:03:f1:01:ce:10:
e1:b3:71:23:53:18:3e:fe:18:99:a9:3e:96:3b:74:
0d:30:01:30:21:29:c7:0b:af:5c:9e:5c:2e:0b:98:
34:7a:97:3e:9d:b6:42:c9:23:8c:7b:50:db:28:4a:
b4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C0:6C:7B:A0:C1:77:60:18:D0:06:21:8D:7F:E1:2F:C6:87:60:BE
X509v3 Authority Key Identifier:
keyid:92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:1b:5e:79:43:a6:e2:5c:56:85:c7:57:42:4e:ac:75:e1:44:
b6:3a:9a:8b:56:65:a8:39:ed:25:d1:8c:db:67:38:5a:5e:c8:
b7:85:7d:00:5e:9e:b0:5d:8a:f1:cc:ed:3a:9e:38:61:01:5a:
ad:70:8e:78:df:2a:52:d7:8a:c0:5e:9a:de:4e:7c:eb:41:26:
07:88:b6:b2:f1:f1:6c:79:23:66:0d:8d:5e:f0:52:ad:ef:57:
87:54:06:0d:33:2e:8e:8a:3b:3a:04:26:f2:3a:34:e1:5e:05:
df:9b:5e:08:ae:bc:14:7b:d3:f4:da:2f:54:b9:75:ca:2e:81:
08:ed:08:fd:56:81:dd:7c:24:ca:82:f4:c5:ff:b7:23:eb:0e:
b6:4b:7a:08:56:83:d7:f0:0b:4c:ab:d0:55:3e:28:b3:d5:56:
34:0c:4c:8f:6a:e0:37:d5:2a:f2:b9:dd:6a:52:39:3a:be:aa:
14:51:cb:59:81:73:ad:8c:1f:ed:75:bf:c9:cf:f9:a7:c2:98:
48:b4:45:59:67:24:cf:f0:e4:07:49:37:ff:ba:1e:37:61:54:
d7:65:ff:a3:45:45:f6:9b:a2:04:30:bd:6e:e7:74:05:24:26:
63:9d:c6:3f:b1:1e:38:fc:93:34:52:c1:39:4e:62:20:22:a2:
a6:ef:6b:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC6zPzpt+blGc2uE9IVDtfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYjVhYzg4ZjJjZGIxNDkzNDgzMGMxYWMwOTZhNWVmNzMw
OThmMTIwHhcNMjYwMjA5MTUwMDM2WhcNMjYwMjEwMTUwMDM2WjAzMTEwLwYDVQQD
EyhiZWMwNmM3YmEwYzE3NzYwMThkMDA2MjE4ZDdmZTEyZmM2ODc2MGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIwBAZEPfJEMYl0JvIOVHD4GIynY
4YsLJI7xLCZeQBEBE1JM5uzzm9CUy4+VC2VPG2DknMP3z88DLzKL4/EUSlJmWahb
BYbv0Ww7lA4TqxHzTDFjfAs0Td7j78WGSttZhmnWiLoezFc0pJvR2Z3YzhHgRfo4
btwPWHzssnMlRdGM3Aa+uujF4lNDRgpemPxRlMmYe86I6Cpg03250tm8Wqhy7KOT
do7+nVa2/mAuqq4aGmU5qkosxDVxrvim1bnADeGMU12/I7Va0MEmA/EBzhDhs3Ej
Uxg+/hiZqT6WO3QNMAEwISnHC69cnlwuC5g0epc+nbZCySOMe1DbKEq0BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7AbHugwXdgGNAGIY1/4S/Gh2C+MB8GA1UdIwQY
MBaAFJK1rIjyzbFJNIMMGsCWpe9zCY8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3JXc2lQTE5zVWswZ3d3YXdKYWw3M01KanhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lNDE3YmQtMTRlYi00Y2E1LTgwZjct
MzZjNDZmOTBkOWE1LzEva3JXc2lQTE5zVWswZ3d3YXdKYWw3M01KanhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9lNDE3YmQtMTRlYi00Y2E1LTgwZjctMzZjNDZmOTBkOWE1
LzEva3JXc2lQTE5zVWswZ3d3YXdKYWw3M01KanhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARxteeUOm
4lxWhcdXQk6sdeFEtjqai1ZlqDntJdGM22c4Wl7It4V9AF6esF2K8cztOp44YQFa
rXCOeN8qUteKwF6a3k5860EmB4i2svHxbHkjZg2NXvBSre9Xh1QGDTMujoo7OgQm
8jo04V4F35teCK68FHvT9NovVLl1yi6BCO0I/VaB3XwkyoL0xf+3I+sOtkt6CFaD
1/ALTKvQVT4os9VWNAxMj2rgN9Uq8rndalI5Or6qFFHLWYFzrYwf7XW/yc/5p8KY
SLRFWWckz/DkB0k3/7oeN2FU12X/o0VF9puiBDC9bud0BSQmY53GP7EeOPyTNFLB
OU5iICKipu9rgA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:46 2026 by rpki-client