This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
File: KEQn3OurQOvBmDny0l7qLOClYv8.mft (raw, json)
Hash identifier: 50w+vo1e7l+FoOUPG1NbgQ21HIE5+NYjIgeyxOpDmTE=
Subject key identifier: 91:92:AB:B6:39:91:4F:66:ED:88:26:4D:63:91:00:3C:F2:3D:E5:9A
Authority key identifier: 28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
Certificate issuer: /CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Certificate serial: 019C44D9828B320DFA52F9B32F3D0A7540F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
Manifest number: 06DA
Signing time: Tue 10 Feb 2026 00:00:31 +0000
Manifest this update: Tue 10 Feb 2026 00:00:31 +0000
Manifest next update: Wed 11 Feb 2026 00:00:31 +0000
Files and hashes: 1: KEQn3OurQOvBmDny0l7qLOClYv8.crl (hash: up09q6wXa2N7QUaGh/dmVIsZd44C0GAI2llUPwEI/g4=)
2: cHwhEhAGxzfypZx4-M1NRLg_x6g.roa (hash: iI8gUBUQGaxZbo8P6CcEli8I0PR4IRfA40i94puh4EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:d9:82:8b:32:0d:fa:52:f9:b3:2f:3d:0a:75:40:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Validity
Not Before: Feb 10 00:00:31 2026 GMT
Not After : Feb 11 00:00:31 2026 GMT
Subject: CN=9192abb639914f66ed88264d6391003cf23de59a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:67:3c:ef:45:b9:7a:24:4b:b7:2c:19:2f:f6:
89:ad:93:88:40:c4:3a:70:dd:43:6b:34:89:d5:76:
39:a9:f9:06:ea:91:67:ba:91:ea:86:71:70:39:e5:
39:3e:e9:1f:52:59:8c:23:37:4a:2a:4d:fd:49:a8:
ad:f2:39:d1:2e:f3:fb:5c:23:30:db:4b:95:9e:1d:
9d:6e:26:f4:b6:a9:9b:3f:05:0b:20:da:7a:92:39:
e7:3b:c4:93:fc:7e:5e:27:18:1e:49:2f:1d:f5:71:
76:17:40:2c:1c:df:04:1e:b9:19:17:e3:23:ff:b6:
dd:8e:89:9e:3c:9f:89:c4:e2:2f:45:c9:64:37:4d:
7d:54:fe:46:19:99:7c:a4:1a:1a:0a:46:c0:99:5a:
4d:f2:cc:5d:67:dc:ac:c5:39:83:63:53:c9:d2:21:
5b:6b:2f:3d:7c:2a:88:ba:1e:0e:b4:27:14:31:5f:
0e:57:0a:a7:ea:4a:82:18:30:d0:47:a0:35:9a:f6:
ae:de:17:9b:8d:52:61:d5:30:d2:9d:86:37:d7:0a:
70:34:06:3f:ec:08:02:92:14:30:c9:e1:81:7d:e6:
cc:9d:70:85:b8:1d:2d:15:1a:11:eb:8f:4c:da:c1:
4d:42:9d:3e:02:cc:e1:06:f6:73:be:67:fc:bd:db:
52:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:92:AB:B6:39:91:4F:66:ED:88:26:4D:63:91:00:3C:F2:3D:E5:9A
X509v3 Authority Key Identifier:
keyid:28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ed:d3:c0:f5:b1:7c:e9:d1:7f:70:90:51:8a:57:2e:e9:53:
ca:b1:30:c2:60:01:13:16:46:9b:42:47:72:ce:1a:b8:11:f6:
d0:8d:51:72:31:c9:de:5f:ec:f2:a1:bf:34:b1:08:e0:41:7f:
b2:11:e0:d9:95:95:75:64:df:56:49:fb:e6:4c:c7:00:1c:ac:
62:6c:0d:a1:71:0e:4c:e7:78:0d:14:6a:d5:95:62:ca:ff:4d:
3d:4f:6a:12:53:7c:57:d0:a5:39:05:6b:60:81:fa:df:3f:d5:
7e:e7:3a:96:95:7d:4b:75:04:e3:56:bd:1b:e0:a4:85:ea:40:
69:18:86:af:b3:1e:bd:a6:47:43:6f:40:be:fc:12:47:2a:ba:
67:a3:ee:db:c7:37:df:ca:a5:89:b0:40:d7:f2:bb:de:cc:f5:
1b:5b:72:82:94:ed:2a:94:16:05:97:c6:65:4a:44:43:fa:fc:
f6:65:d3:52:82:b3:5f:1c:18:96:a9:ce:0a:ae:3f:71:b8:52:
36:e4:dd:4f:a0:58:92:8b:6a:87:a9:81:c1:5b:42:15:05:f6:
95:19:24:62:84:2e:11:34:24:54:09:53:7a:23:6b:96:7e:76:
d2:a3:91:a7:65:fd:f1:79:3b:20:b4:5f:3e:e0:ac:7a:0a:ad:
52:5a:39:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 07:16:36 2026 by rpki-client