This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
File: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft (raw, json)
Hash identifier: zp9g/UKm4QiUV5H/t/J+CH+7Ph/FBQAqOQ5Yr06YiD4=
Subject key identifier: 5B:40:06:F5:FA:AE:BC:2A:C4:74:AF:44:0B:DC:5B:D9:24:CC:95:43
Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0
Certificate serial: 019C1CF0C449D680C13ADC0D77638FD05C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
Manifest number: 1808
Signing time: Mon 02 Feb 2026 06:01:06 +0000
Manifest this update: Mon 02 Feb 2026 06:01:06 +0000
Manifest next update: Tue 03 Feb 2026 06:01:06 +0000
Files and hashes: 1: 0d5BfvygLk34C_gchAEDYvaKyoI.roa (hash: ygjywojERDWbCJmFLV0kw9pKS4Kd8NZi84D8KTjckEg=)
2: 95mfR-kPi6F-VSV1WGBH1SxOzBs.roa (hash: ljihoTtKsYT2OJrjhM4mdxIcg0inNE/KPMT8FAxX4/Q=)
3: E7BW_8fVLRmphh5TsZba9Rvd3kU.roa (hash: aLR4qOWHBBoXqv3Yx8BoWKYJaEGNBYKmGm00kiTbgcM=)
4: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl (hash: GpDs4XQPGfQ+70bWqDLLkMwl6nrY/+vBEB7vASJCiko=)
5: N3EXayc-3o5FUNZyM0wptzdcK9o.roa (hash: 54xklyduj+4FndB5iy5VSOkzcc7nc+vpbvnlB27yVx4=)
6: PhyesmBVcW6OXHhhntDd26_eDJc.roa (hash: WqkBKUFXh2zVC16Y0B/vbmMcgw+hs4Rin4XGqRQlr64=)
7: YYkvi7iY5yBqNjG-94WUWFCEEoU.roa (hash: HgvhtGLtWSEuAUdli7GqTihRO3hye/C71rDsERDYV8A=)
8: uhyFSL1UPDs4_nfLAbM-v4irdMY.roa (hash: ZO01BMp7TpnMAsZpqdmKDRBdOPJexIHg8AYIpzq+2b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1c:f0:c4:49:d6:80:c1:3a:dc:0d:77:63:8f:d0:5c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0
Validity
Not Before: Feb 2 06:01:06 2026 GMT
Not After : Feb 3 06:01:06 2026 GMT
Subject: CN=5b4006f5faaebc2ac474af440bdc5bd924cc9543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7b:2f:70:1b:26:6c:00:53:ed:ca:20:3d:e6:
d7:1d:c2:35:15:f5:e5:cb:33:2c:c5:76:37:0b:5c:
79:64:f7:cf:26:a5:98:8a:79:28:d7:e7:d3:43:c8:
e3:d4:06:e8:fa:6d:3f:e3:2d:34:60:08:35:a9:42:
1b:48:93:dd:be:73:fc:4c:96:b3:85:32:e8:5e:f3:
29:92:0d:bf:dd:e7:5e:4a:24:c8:15:5e:42:8a:c9:
62:4c:f1:24:2d:9b:b1:98:8f:39:43:09:dc:5d:50:
c4:b3:42:25:9e:66:88:c6:93:29:be:e5:ee:40:99:
a9:8e:f6:bb:c3:bb:6b:b9:bb:62:27:fb:9d:a2:37:
3a:74:ec:06:07:2f:a9:f3:ab:37:aa:6d:76:fa:36:
88:5d:33:13:56:c2:cd:1c:db:2b:f1:7f:51:de:a8:
4e:54:1c:e9:59:6c:08:5d:f9:df:28:91:e8:79:d4:
12:64:7d:72:93:c9:45:d7:7d:02:26:a6:8f:6a:ae:
03:2b:e0:d7:0e:99:15:07:36:b4:b6:b0:00:fe:fa:
67:a3:15:dd:f4:bd:3c:25:22:03:62:fc:28:db:f1:
a3:fb:27:51:f9:ec:88:fc:52:b0:7d:f4:25:fd:42:
0b:cc:af:48:07:70:57:a8:b6:3d:35:b9:ba:fe:b1:
32:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:40:06:F5:FA:AE:BC:2A:C4:74:AF:44:0B:DC:5B:D9:24:CC:95:43
X509v3 Authority Key Identifier:
keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:55:64:b9:54:5b:3a:5d:4d:d2:e8:87:2f:ed:fa:72:99:f2:
16:04:6f:21:8e:22:5d:07:bf:ea:69:e2:72:ab:20:63:59:9f:
f4:1e:9e:0e:04:0e:64:9d:95:dd:29:f9:25:b5:e5:77:f6:a5:
a7:3c:05:eb:37:02:f0:b9:c1:0e:84:6e:36:4e:29:6e:e2:3d:
68:3c:c7:92:b1:3b:51:f0:99:91:25:96:c6:49:38:5e:49:b9:
a1:fa:2e:d9:71:57:e1:e3:9e:d3:01:69:08:f5:46:f5:04:6a:
53:50:b2:9d:3c:d6:f7:6d:a9:bc:0b:ac:6d:3d:bf:ae:9b:02:
a5:12:89:62:49:e1:3d:80:63:eb:29:c7:af:a2:ca:f9:6a:38:
4a:87:0b:b9:95:0b:97:e8:0b:4e:48:b4:92:2e:a1:46:6a:e7:
84:db:b2:c2:70:ad:21:80:08:1c:02:8d:9e:f9:b8:15:fd:15:
76:7d:30:9b:80:4a:bc:a1:38:e9:e6:66:e1:a1:a0:75:ec:63:
68:7d:43:2f:5b:58:eb:cc:6b:59:91:ae:68:ff:ca:cc:e1:27:
c3:85:fd:0d:f6:2b:c8:52:f3:26:15:14:a9:a2:8d:e0:e9:07:
d0:b2:33:bc:de:19:70:f5:b9:cf:17:3c:c3:48:42:1c:34:09:
eb:da:be:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 17:16:27 2026 by rpki-client