This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
File: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft (raw, json)
Hash identifier: /aM9+N0am2/53Sh5sEu6EPzrT/VTYL8A9jD6jreNz6Q=
Subject key identifier: A1:5D:CE:29:8A:93:37:BB:E2:DB:91:CE:34:28:B2:C3:CE:50:64:0E
Authority key identifier: 29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
Certificate issuer: /CN=29851f7ae610b1d0061500b343a4868f3256066e
Certificate serial: 019C42B478CAF8954F0465C641BA86730DBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
Manifest number: 08AB
Signing time: Mon 09 Feb 2026 14:00:49 +0000
Manifest this update: Mon 09 Feb 2026 14:00:49 +0000
Manifest next update: Tue 10 Feb 2026 14:00:49 +0000
Files and hashes: 1: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl (hash: FmfsRARx6UbTfmvHP38aSgVB4lKi2o6uMMb1vVlkkVM=)
2: ZgpRmr9n4R_HW3fgl3MaLI7Js-k.roa (hash: q4viv2fxAfHFR/GFrBCoNhBLbbosPZIEVECgSP1MwQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:78:ca:f8:95:4f:04:65:c6:41:ba:86:73:0d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29851f7ae610b1d0061500b343a4868f3256066e
Validity
Not Before: Feb 9 14:00:49 2026 GMT
Not After : Feb 10 14:00:49 2026 GMT
Subject: CN=a15dce298a9337bbe2db91ce3428b2c3ce50640e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b7:82:60:dc:a0:41:83:c9:dd:e8:bb:b1:52:
bb:3e:3b:96:10:f4:62:54:50:fb:29:15:65:49:03:
00:97:08:64:4e:d4:35:36:75:ec:41:80:2a:83:95:
6a:fb:f1:95:bb:c5:a8:7e:f3:e8:6b:b1:a4:c8:e0:
b1:95:1d:20:05:b8:52:81:70:08:dd:b5:85:0d:83:
07:5d:69:a8:55:5b:f1:97:59:35:79:0a:85:d8:e1:
28:f1:fb:7f:4b:66:44:7f:1e:a1:4a:ce:30:0b:f8:
23:4f:e0:7a:44:e6:81:27:83:78:02:9d:46:66:28:
4f:74:87:98:3c:b2:72:88:31:f1:48:ec:7a:c3:8b:
fd:f7:c5:69:9f:b9:9b:08:38:d3:69:8c:55:07:6c:
cd:ce:4e:72:73:a0:95:83:2b:d6:25:de:65:9e:f8:
52:32:98:a3:fe:12:27:25:02:1f:73:fc:60:2c:14:
57:98:45:d0:7b:c5:ef:9d:cd:97:1f:50:17:e1:0b:
48:36:02:2a:9f:56:12:2f:c1:39:93:eb:ca:75:60:
50:50:af:4c:0c:39:02:8c:b3:b2:1b:62:93:c9:64:
79:9f:6e:37:62:c6:9c:8b:dd:c8:a0:fd:b7:cc:ca:
83:15:64:11:fc:ef:f7:63:b7:b4:25:b3:07:45:28:
41:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5D:CE:29:8A:93:37:BB:E2:DB:91:CE:34:28:B2:C3:CE:50:64:0E
X509v3 Authority Key Identifier:
keyid:29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:50:06:8d:f8:81:c5:8f:ab:ed:a8:30:e7:d1:cd:ca:3e:2b:
f4:1d:18:24:90:09:cd:da:17:43:aa:16:f4:55:d4:79:8a:ad:
1c:59:ec:ee:3b:53:a1:8d:42:d2:0a:a6:75:d1:03:43:73:d1:
39:b1:29:95:04:14:66:6c:c3:c8:d0:26:3d:bf:c6:37:be:e5:
c9:9b:4e:fe:4d:84:e7:38:d3:bc:69:11:9e:16:f6:40:b7:f4:
cf:d2:6d:b1:e7:c0:42:07:c9:f4:4f:9a:08:00:ab:0a:ba:e3:
5c:eb:80:e3:4e:59:b1:6e:4d:52:1a:4d:df:93:d6:87:aa:01:
1f:72:94:59:3c:93:37:49:d6:1d:60:85:81:f3:36:61:18:86:
4c:02:eb:e7:ed:f9:5c:ac:06:d4:eb:11:1f:02:1d:f2:9f:b5:
e6:84:57:9b:9d:ff:75:a3:53:be:10:99:a0:53:ff:96:4b:86:
b5:f4:ee:78:18:5c:ce:ee:2e:5a:74:40:fd:db:33:9c:a7:1d:
5d:6f:98:a7:fc:bc:ef:ea:c4:b1:9c:00:9b:de:e6:b4:df:6f:
3d:ae:c1:a7:70:e9:9d:92:87:15:da:46:e4:b3:3f:70:bf:92:
12:25:58:98:a7:05:09:8e:4c:c0:2a:80:7b:04:06:1a:bf:24:
27:f9:d6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:58 2026 by rpki-client