This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
File: k6Ip4mayVYiZ81R-5j2E7WWUdos.mft (raw, json)
Hash identifier: AQnRpfZrVVlTyuuNYzprhmTKdeS2srjr11IfHL1/l40=
Subject key identifier: 18:62:45:C8:86:67:5B:82:77:AF:30:DC:2B:DF:08:B9:CE:04:4B:E3
Authority key identifier: 93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
Certificate issuer: /CN=93a229e266b2558899f3547ee63d84ed6594768b
Certificate serial: 019C420FD2557256D6DB7EA31A4A39E05AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
Manifest number: 1821
Signing time: Mon 09 Feb 2026 11:00:58 +0000
Manifest this update: Mon 09 Feb 2026 11:00:58 +0000
Manifest next update: Tue 10 Feb 2026 11:00:58 +0000
Files and hashes: 1: k6Ip4mayVYiZ81R-5j2E7WWUdos.crl (hash: kiR2mebRkujV6bwAw9r+/RmA+rInYU688SSXtjunA4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:d2:55:72:56:d6:db:7e:a3:1a:4a:39:e0:5a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a229e266b2558899f3547ee63d84ed6594768b
Validity
Not Before: Feb 9 11:00:58 2026 GMT
Not After : Feb 10 11:00:58 2026 GMT
Subject: CN=186245c886675b8277af30dc2bdf08b9ce044be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:83:8c:9c:43:e8:5e:f7:35:37:00:ac:8c:fd:
65:17:6b:db:f3:99:ab:5a:49:c6:7c:3c:74:6e:47:
a7:cb:42:c1:e0:4a:85:1e:1f:88:3d:d1:1c:f4:3e:
68:16:81:5a:1a:09:fa:3a:c6:79:5a:41:74:f9:0b:
8e:50:e2:dd:2c:76:5a:7f:04:81:cb:2f:4c:2e:2a:
6b:c4:0b:d2:37:2d:a8:8b:99:f7:60:5f:e6:6b:98:
ff:06:cd:57:ea:ba:24:b1:99:c6:b4:a3:bb:5d:78:
3c:8b:8e:ed:a0:55:f3:bb:5c:84:2f:93:54:05:06:
b0:b3:c5:45:61:80:fb:d5:d2:56:2c:be:b3:77:7c:
59:03:53:51:7a:6d:cc:54:f4:e9:98:1a:fe:a9:df:
6d:5e:3c:28:30:53:31:47:a3:9b:54:6c:18:81:41:
3e:27:4c:34:eb:85:df:f2:72:2d:2e:36:d5:f3:89:
b9:80:b4:29:b8:7c:93:a3:6d:68:2a:2b:1f:31:91:
dc:fd:06:29:bb:98:d8:e0:4d:75:f6:28:18:37:a2:
18:b6:75:3c:fd:df:2d:49:20:a3:f4:a0:a3:a5:09:
32:85:88:0c:7d:12:ae:e1:31:b2:fa:57:2e:58:97:
01:e0:0e:34:44:37:94:2d:ab:25:e2:1e:7a:49:a2:
e0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:62:45:C8:86:67:5B:82:77:AF:30:DC:2B:DF:08:B9:CE:04:4B:E3
X509v3 Authority Key Identifier:
keyid:93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c3:db:b1:f8:43:b1:a7:6a:9e:62:c6:bc:bc:78:8a:2a:a5:
f0:5d:77:3b:10:e8:0e:78:48:e5:ab:cd:f6:5b:67:0f:39:b0:
1d:7b:11:99:4a:b2:7d:c2:e1:89:85:e1:34:22:69:5c:74:d6:
75:d9:1b:7f:14:59:fb:74:41:f0:92:41:d6:01:36:2d:2f:74:
42:03:95:d6:81:b1:59:29:0f:42:5e:52:44:8b:df:2d:83:c2:
6e:2b:80:b6:dc:51:69:18:76:1a:52:bb:0d:59:f1:38:6c:a0:
6f:d6:5f:4e:91:6f:2a:d2:40:c8:85:65:ff:00:ac:24:d2:69:
b0:1f:cf:1f:13:ea:a6:82:4c:70:00:c1:cf:aa:9d:a9:d3:6c:
d6:8e:bd:f8:78:47:73:6e:31:c6:88:43:d3:47:24:f0:7e:62:
4c:67:f2:e7:7c:f9:53:26:1d:dc:57:44:e5:18:a5:fa:e0:db:
95:85:d7:2f:b3:91:56:a2:f1:3a:b8:cf:3e:0d:b0:8c:fd:98:
d2:97:f6:7f:14:49:60:9c:9d:03:10:ae:b3:f4:5a:bf:f0:38:
1f:bc:ad:93:29:c1:67:73:ee:b8:12:2d:f6:35:83:b6:53:7f:
be:ad:3c:ce:2e:0a:33:40:7c:f6:34:e5:f0:99:1c:99:71:52:
66:d3:f6:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD9JVclbW236jGko54Fr7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYTIyOWUyNjZiMjU1ODg5OWYzNTQ3ZWU2M2Q4NGVkNjU5
NDc2OGIwHhcNMjYwMjA5MTEwMDU4WhcNMjYwMjEwMTEwMDU4WjAzMTEwLwYDVQQD
EygxODYyNDVjODg2Njc1YjgyNzdhZjMwZGMyYmRmMDhiOWNlMDQ0YmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoOMnEPoXvc1NwCsjP1lF2vb85mr
WknGfDx0bkeny0LB4EqFHh+IPdEc9D5oFoFaGgn6OsZ5WkF0+QuOUOLdLHZafwSB
yy9MLiprxAvSNy2oi5n3YF/ma5j/Bs1X6roksZnGtKO7XXg8i47toFXzu1yEL5NU
BQaws8VFYYD71dJWLL6zd3xZA1NRem3MVPTpmBr+qd9tXjwoMFMxR6ObVGwYgUE+
J0w064Xf8nItLjbV84m5gLQpuHyTo21oKisfMZHc/QYpu5jY4E119igYN6IYtnU8
/d8tSSCj9KCjpQkyhYgMfRKu4TGy+lcuWJcB4A40RDeULasl4h56SaLgHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhiRciGZ1uCd68w3CvfCLnOBEvjMB8GA1UdIwQY
MBaAFJOiKeJmslWImfNUfuY9hO1llHaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazZJcDRtYXlWWWlaODFSLTVqMkU3V1dVZG9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jNDA3M2EtOTIzYi00ZWNmLTk1NjYt
NGQ3NzdjYWNkOWE0LzEvazZJcDRtYXlWWWlaODFSLTVqMkU3V1dVZG9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9jNDA3M2EtOTIzYi00ZWNmLTk1NjYtNGQ3NzdjYWNkOWE0
LzEvazZJcDRtYXlWWWlaODFSLTVqMkU3V1dVZG9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAasPbsfhD
sadqnmLGvLx4iiql8F13OxDoDnhI5avN9ltnDzmwHXsRmUqyfcLhiYXhNCJpXHTW
ddkbfxRZ+3RB8JJB1gE2LS90QgOV1oGxWSkPQl5SRIvfLYPCbiuAttxRaRh2GlK7
DVnxOGygb9ZfTpFvKtJAyIVl/wCsJNJpsB/PHxPqpoJMcADBz6qdqdNs1o69+HhH
c24xxohD00ck8H5iTGfy53z5UyYd3FdE5Ril+uDblYXXL7ORVqLxOrjPPg2wjP2Y
0pf2fxRJYJydAxCus/Rav/A4H7ytkynBZ3PuuBIt9jWDtlN/vq08zi4KM0B89jTl
8JkcmXFSZtP2UA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:16 2026 by rpki-client