This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
File: kS8Wn8dEy-iVqfhe2reW1KxwACk.mft (raw, json)
Hash identifier: 8zr+6qMngAadYtPmpse72STus8ovMd1sPcAO9DX2K+g=
Subject key identifier: 2C:A9:4F:99:B3:73:70:DD:13:E9:47:F5:32:0E:7A:71:23:B5:15:CA
Authority key identifier: 91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
Certificate issuer: /CN=912f169fc744cbe895a9f85edab796d4ac700029
Certificate serial: 019C40FD305F9F8F193DA5087A1A225431F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
Manifest number: 101E
Signing time: Mon 09 Feb 2026 06:01:00 +0000
Manifest this update: Mon 09 Feb 2026 06:01:00 +0000
Manifest next update: Tue 10 Feb 2026 06:01:00 +0000
Files and hashes: 1: Am9Fuzo8eGiZZ7qmRGeVzeJ7O8k.roa (hash: Da6u9ERoM1g/y/tKKfNZmlBoBL9DF5Ukejxp9AtmT+E=)
2: kS8Wn8dEy-iVqfhe2reW1KxwACk.crl (hash: krG44DE+zKW+FOEHZQx4u+Z4pSYpYT5BJE7SaVUZK+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:40:fd:30:5f:9f:8f:19:3d:a5:08:7a:1a:22:54:31:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=912f169fc744cbe895a9f85edab796d4ac700029
Validity
Not Before: Feb 9 06:01:00 2026 GMT
Not After : Feb 10 06:01:00 2026 GMT
Subject: CN=2ca94f99b37370dd13e947f5320e7a7123b515ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bb:77:6b:b8:3e:6f:85:e3:c4:15:ef:aa:f3:
a5:82:25:a2:b8:bf:6a:d0:8b:a3:93:3c:f4:96:94:
bf:9e:a3:e6:ea:47:3f:3c:61:ee:46:b2:9d:9f:09:
b5:fb:7d:a6:75:11:d3:e1:59:21:99:b9:a5:ce:f0:
e0:9b:ec:36:48:23:e7:d1:47:e8:e0:27:dc:ea:98:
50:3d:80:80:57:0c:5c:30:11:da:52:d9:57:08:d8:
e3:7e:13:53:7f:26:38:e3:e4:f2:6b:6d:71:39:7a:
0a:da:a2:cc:a7:cf:2e:32:bf:70:ae:62:e9:a1:2c:
51:8e:e6:8f:95:db:cc:86:f6:c5:e3:dd:cb:b3:5a:
e6:08:3b:0c:ae:d2:2b:3e:5d:4d:bd:df:92:85:77:
76:73:25:be:9e:8b:9f:b4:ec:5c:72:1c:ef:a8:76:
97:0d:1c:14:bf:2b:87:7a:58:4d:db:b2:b4:8b:99:
16:c8:be:f3:f5:16:66:36:3a:75:c4:4b:63:82:92:
f1:23:64:78:a6:45:22:c8:a7:19:ac:f8:f2:55:23:
7a:2d:44:81:c9:a2:f1:55:7d:48:bd:25:f6:16:c0:
55:40:e0:9d:5b:e2:24:f3:17:2a:3d:42:10:be:78:
57:9c:4b:ca:cf:e8:da:94:32:d4:d4:50:1a:15:ac:
64:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A9:4F:99:B3:73:70:DD:13:E9:47:F5:32:0E:7A:71:23:B5:15:CA
X509v3 Authority Key Identifier:
keyid:91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:5a:50:19:ae:ac:e3:d1:2f:24:2c:57:c9:3d:f3:5d:a1:b4:
c0:b9:dc:3f:d9:15:7f:26:b3:33:ef:25:25:df:9b:3e:8a:7d:
04:a4:fc:90:57:76:18:42:95:33:ba:30:86:bc:a7:be:97:f4:
70:53:36:12:09:a2:66:37:f5:ab:4c:4b:14:d1:c4:6a:cb:4b:
fb:d8:ff:be:af:39:9f:85:2a:b9:8f:62:e0:44:e0:7f:d5:3a:
4f:50:e0:49:2f:3e:4e:9c:04:a9:f2:ca:80:f9:63:0c:56:4a:
86:79:2d:a6:d8:ec:84:6a:dc:06:1b:af:83:1b:94:e2:14:73:
f6:72:a8:24:b0:00:1b:04:55:cf:a9:b2:1e:61:05:bb:3b:b9:
06:32:79:79:a5:ad:80:05:13:7e:2c:66:96:52:4d:0a:35:bf:
33:f8:8e:fb:b6:23:d1:68:75:6e:68:9c:04:06:5f:1f:a7:12:
0f:fe:ff:4d:52:67:b0:29:26:15:c6:79:eb:da:8e:79:fa:95:
c2:81:48:0f:71:4c:79:4e:1b:6a:91:d0:ea:1e:1a:f4:df:21:
2a:3c:b7:c3:6f:0d:26:8f:bb:69:73:19:65:cf:19:b3:e7:e6:
22:5a:be:0f:6b:5b:ea:4c:a2:5f:2e:7e:4f:58:d3:d8:75:2c:
92:64:31:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:47 2026 by rpki-client