This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
File: KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft (raw, json)
Hash identifier: IH4bsjCQc5oI6gg7648wKEnPvYM16g1GwEQ9UTaTxUY=
Subject key identifier: 7E:A0:E5:C8:9E:F4:D8:C3:1D:39:B8:56:AB:D6:18:AF:10:BC:6F:92
Authority key identifier: 2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
Certificate issuer: /CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Certificate serial: 019C439088F09FB4583802AA7CC8DABD5695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 18:01:11 +0000
Manifest this update: Mon 09 Feb 2026 18:01:11 +0000
Manifest next update: Tue 10 Feb 2026 18:01:11 +0000
Files and hashes: 1: 6jw8eXhX-bpT7z-_T10iSbxdXsE.roa (hash: tAjJfiShc1+r/eVwy4cL3b/IWm8LUEabbh041/MZu1A=)
2: KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl (hash: nNk5Nkm9LuthKMdOLQCt7oym+aLn8oCNmVb/1FhDbkw=)
3: yP76kKTB1GrEa0atsho4_hZD6JM.roa (hash: QOnJF7HEQaem8RY4H4f4VR5i624un0rOsP4HybvqacM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:88:f0:9f:b4:58:38:02:aa:7c:c8:da:bd:56:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Validity
Not Before: Feb 9 18:01:11 2026 GMT
Not After : Feb 10 18:01:11 2026 GMT
Subject: CN=7ea0e5c89ef4d8c31d39b856abd618af10bc6f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7e:d0:a8:f0:1a:33:8b:c1:e9:6e:43:7e:02:
5a:4d:cf:a1:1f:5a:31:c8:19:d0:e2:e2:cc:5e:bd:
e3:cc:b0:6c:ba:13:a0:68:8d:9d:20:7d:7e:06:e8:
2c:15:95:b7:00:20:c5:52:5a:3e:fb:df:f2:cc:c6:
94:b6:cd:95:87:97:7a:1d:3c:26:8b:87:0d:a4:8a:
fe:32:53:ab:2f:a4:4e:39:10:f3:77:41:e3:05:d3:
b3:fd:bd:a4:8d:e9:8c:81:9e:17:0f:b4:c1:af:55:
2d:9a:bc:b0:42:e9:6a:c9:3b:f2:80:bb:03:b9:7f:
48:73:48:8b:90:6c:26:a5:55:8c:9b:b8:3a:84:88:
64:07:ba:ef:4b:55:83:f2:19:09:8f:52:15:f7:4e:
0d:0c:ca:05:91:75:bc:4a:c1:83:ea:2d:2b:11:33:
e9:11:7b:06:3c:4f:b0:df:9a:d2:48:70:e6:2a:bd:
77:e2:77:ad:26:50:50:a0:b6:c3:7f:d2:a3:fa:bc:
68:44:46:e7:44:b9:89:89:75:77:e6:80:c2:91:a1:
15:db:87:5e:9c:85:5e:24:50:3a:78:57:f8:36:ef:
6d:98:9a:1e:44:bf:e8:47:71:00:c3:07:c0:db:8c:
41:97:05:96:7c:40:65:8c:67:bb:90:76:a9:19:9d:
29:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A0:E5:C8:9E:F4:D8:C3:1D:39:B8:56:AB:D6:18:AF:10:BC:6F:92
X509v3 Authority Key Identifier:
keyid:2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d1:1e:b9:27:26:ac:78:fc:37:8c:88:e2:fa:d9:3b:d3:12:
8c:e4:85:8a:1a:ee:79:66:3f:c5:77:e1:fd:cd:e0:5c:2c:b9:
5d:98:8a:05:89:38:93:11:db:64:6e:7f:ee:23:0f:5c:05:28:
ae:a0:d2:10:85:b0:cd:16:e6:c6:df:74:09:fc:a1:de:01:e2:
de:40:69:62:52:54:49:5a:23:5d:e9:f2:a9:99:1a:e3:d2:fb:
ff:0d:f2:c0:5c:ad:73:a8:cb:61:03:4e:c1:a1:33:37:35:54:
e5:85:a2:43:43:8c:1e:d8:22:73:ae:17:51:4c:08:15:97:cd:
b8:a4:a1:83:33:c3:7c:ab:97:b3:31:99:73:e3:d9:e2:7b:8d:
47:8e:67:5e:82:7a:3d:f5:52:30:81:c6:40:f0:9f:9e:98:ae:
05:28:81:36:4e:32:72:4e:e8:45:93:14:88:fb:3e:c4:57:12:
28:20:9b:27:cc:50:d1:8d:16:ea:27:93:ee:50:c6:5f:58:37:
99:23:b8:34:00:88:01:2b:71:7f:84:fd:da:9f:79:6e:0d:23:
8e:cc:26:be:d3:0d:e5:91:9e:1b:35:1e:2f:ec:b1:4b:e4:bd:
e3:4d:9f:c9:9b:b8:f2:37:09:da:ca:9e:81:e7:1a:85:cd:83:
75:d2:be:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDkIjwn7RYOAKqfMjavVaVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNzM0ZWFiY2ZiNWI2YzJhNGU0ODM4OGVkYjNhZjhmNTA2
YjFmYWIwHhcNMjYwMjA5MTgwMTExWhcNMjYwMjEwMTgwMTExWjAzMTEwLwYDVQQD
Eyg3ZWEwZTVjODllZjRkOGMzMWQzOWI4NTZhYmQ2MThhZjEwYmM2ZjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4H7QqPAaM4vB6W5DfgJaTc+hH1ox
yBnQ4uLMXr3jzLBsuhOgaI2dIH1+BugsFZW3ACDFUlo++9/yzMaUts2Vh5d6HTwm
i4cNpIr+MlOrL6ROORDzd0HjBdOz/b2kjemMgZ4XD7TBr1UtmrywQulqyTvygLsD
uX9Ic0iLkGwmpVWMm7g6hIhkB7rvS1WD8hkJj1IV904NDMoFkXW8SsGD6i0rETPp
EXsGPE+w35rSSHDmKr134netJlBQoLbDf9Kj+rxoREbnRLmJiXV35oDCkaEV24de
nIVeJFA6eFf4Nu9tmJoeRL/oR3EAwwfA24xBlwWWfEBljGe7kHapGZ0phQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6g5cie9NjDHTm4VqvWGK8QvG+SMB8GA1UdIwQY
MBaAFCpzTqvPtbbCpOSDiO2zr49Qax+rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82Zjk1MmEtYWQ1OS00YjlmLWI3Yzct
MDlhYWMwNzg5YjkzLzEvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS82Zjk1MmEtYWQ1OS00YjlmLWI3YzctMDlhYWMwNzg5Yjkz
LzEvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNEeuScm
rHj8N4yI4vrZO9MSjOSFihrueWY/xXfh/c3gXCy5XZiKBYk4kxHbZG5/7iMPXAUo
rqDSEIWwzRbmxt90Cfyh3gHi3kBpYlJUSVojXenyqZka49L7/w3ywFytc6jLYQNO
waEzNzVU5YWiQ0OMHtgic64XUUwIFZfNuKShgzPDfKuXszGZc+PZ4nuNR45nXoJ6
PfVSMIHGQPCfnpiuBSiBNk4yck7oRZMUiPs+xFcSKCCbJ8xQ0Y0W6ieT7lDGX1g3
mSO4NACIAStxf4T92p95bg0jjswmvtMN5ZGeGzUeL+yxS+S9402fyZu48jcJ2sqe
gecahc2DddK+EA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:56 2026 by rpki-client