This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.mft
File: kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.mft (raw, json)
Hash identifier: 9JMx/wwWGJqpV2inmu8TKe8kmgTi+tlWw8yId9jpOag=
Subject key identifier: BA:5B:E3:84:F2:B7:69:E0:A0:E2:5C:83:06:00:59:A0:5A:42:8F:9A
Authority key identifier: 91:52:1B:D6:2C:46:E9:94:3E:C8:0C:B7:74:12:6D:1D:A8:39:3F:3A
Certificate issuer: /CN=91521bd62c46e9943ec80cb774126d1da8393f3a
Certificate serial: 019C42EB8BFF6ADFD6C8F1A99B342435D6CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.mft
Manifest number: 8F
Signing time: Mon 09 Feb 2026 15:00:58 +0000
Manifest this update: Mon 09 Feb 2026 15:00:58 +0000
Manifest next update: Tue 10 Feb 2026 15:00:58 +0000
Files and hashes: 1: UOrL-fWfhp63hwmPTmyope9X71A.roa (hash: nFYQ4BgnX+b8v7k7hkFu7iArSobGMSHyFyRY+Uph3/4=)
2: kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.crl (hash: OezGHrt+jYzpPek3cmCbb6PqAgIbqZurJS81BCFl/vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:8b:ff:6a:df:d6:c8:f1:a9:9b:34:24:35:d6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91521bd62c46e9943ec80cb774126d1da8393f3a
Validity
Not Before: Feb 9 15:00:58 2026 GMT
Not After : Feb 10 15:00:58 2026 GMT
Subject: CN=ba5be384f2b769e0a0e25c83060059a05a428f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:eb:bc:18:a5:c8:dc:3d:7f:57:55:32:24:3f:
b3:4f:2e:70:b0:18:b7:26:5d:4c:f3:12:f1:15:68:
fd:18:9e:f3:99:98:f0:e2:f6:db:9a:50:05:61:a1:
6d:dd:b6:73:0f:06:93:98:91:f4:37:16:b2:97:4f:
a8:85:7e:43:8e:6e:be:b0:d9:b5:2a:b5:11:45:fc:
82:7e:69:af:25:b1:bb:20:14:ea:9f:10:71:e5:bb:
0e:8c:4f:f9:af:f8:38:fe:f5:63:0d:a4:41:78:cb:
44:32:22:1b:8d:83:27:5f:ad:2b:19:1a:dc:cc:ef:
59:d2:ab:5a:81:0a:1d:3d:3b:2e:d6:e5:75:63:a1:
8c:c3:6e:63:99:69:1e:cf:8c:97:4c:a6:b2:e3:b6:
3c:cd:2e:dc:ea:20:92:fa:55:db:c2:25:81:d3:9d:
c8:49:a1:c3:b2:c9:99:90:21:a9:cb:72:1d:d1:03:
81:3d:ca:3b:86:c1:24:cd:34:03:01:33:44:9d:85:
b6:51:da:e6:e9:ae:7d:8c:28:13:07:a8:51:93:3e:
9c:0c:c0:e8:e1:7a:f5:d7:b2:d3:aa:25:2e:94:52:
e3:c3:25:20:36:5d:d3:46:00:61:4a:84:9d:62:85:
f2:6c:3c:ef:54:23:75:0a:fe:d2:9b:6b:0f:ff:4f:
e6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5B:E3:84:F2:B7:69:E0:A0:E2:5C:83:06:00:59:A0:5A:42:8F:9A
X509v3 Authority Key Identifier:
keyid:91:52:1B:D6:2C:46:E9:94:3E:C8:0C:B7:74:12:6D:1D:A8:39:3F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:8d:3a:73:c2:63:7b:58:3b:ae:b5:01:75:ec:82:5c:f3:5e:
61:8e:69:30:68:3e:58:a5:33:5f:35:f3:97:e7:4e:55:cc:51:
4c:e7:1f:b7:f5:0c:de:be:f8:36:88:66:ff:ef:2f:40:f9:75:
13:77:af:9d:37:65:cd:7a:77:43:f1:f7:4a:af:e2:81:81:d6:
b6:24:0c:23:52:e2:c3:ef:8a:e8:a0:d0:5f:d7:40:ec:b0:31:
17:26:a5:49:db:bf:5b:9e:d3:1b:9d:3a:92:dd:0a:1f:dd:63:
1e:e6:21:52:21:bb:01:23:e3:78:05:06:93:91:66:17:90:32:
08:51:b0:aa:6f:75:2a:67:ac:f1:87:2d:b9:e4:ef:3f:cb:df:
25:7f:cd:e2:01:72:01:f2:59:61:b8:64:c8:98:b0:12:64:f2:
09:8f:8c:b5:d8:ef:dd:e0:05:80:4f:92:29:1a:26:a2:6d:76:
0f:72:ee:05:21:e1:ed:25:b8:61:6c:2b:46:01:b2:0f:71:bd:
7b:3c:a2:cf:02:36:16:dc:8c:86:75:b4:1f:b1:c8:87:3c:34:
a5:11:cb:40:43:e4:a8:67:8b:6d:1f:b5:09:05:b9:66:47:61:
88:b2:a7:9b:90:c8:49:b4:da:f9:23:b4:94:64:61:de:53:91:
3c:4f:28:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:58 2026 by rpki-client