This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
File: S-kZqE4aIp94nZOdGqpxKk08OZ0.mft (raw, json)
Hash identifier: lN90xHz9h5D+B60XUcV72H7qEdhFsL71VQfDr6xJfug=
Subject key identifier: 40:AB:D2:8C:1C:00:33:6A:DB:F8:51:C9:B6:A0:34:B6:F2:70:3D:48
Authority key identifier: 4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D
Certificate issuer: /CN=4be919a84e1a229f789d939d1aaa712a4d3c399d
Certificate serial: 019C41336FC8CB2EF89782B56629E8586A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
Manifest number: 066E
Signing time: Mon 09 Feb 2026 07:00:15 +0000
Manifest this update: Mon 09 Feb 2026 07:00:15 +0000
Manifest next update: Tue 10 Feb 2026 07:00:15 +0000
Files and hashes: 1: 0BJuBVxjSdXsph85MS86HogqU6Y.roa (hash: oglBxgTG0Cvmu+e7zp3i2v5YTMsrt5rMaLc4kAaFK7o=)
2: S-kZqE4aIp94nZOdGqpxKk08OZ0.crl (hash: nXbkcWK85eN6DSrbAVVrCIbRiE6CTKkigsMR8VbgPEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 07:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:33:6f:c8:cb:2e:f8:97:82:b5:66:29:e8:58:6a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be919a84e1a229f789d939d1aaa712a4d3c399d
Validity
Not Before: Feb 9 07:00:15 2026 GMT
Not After : Feb 10 07:00:15 2026 GMT
Subject: CN=40abd28c1c00336adbf851c9b6a034b6f2703d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:80:b6:c1:ea:d4:c8:d3:91:e2:1e:26:4d:2c:
1f:3e:94:96:ca:f1:2f:75:77:4b:b2:be:83:e4:b7:
bd:49:d7:06:07:23:cc:71:b7:07:cc:a5:9d:bd:d7:
2d:c4:86:1a:0c:e2:b7:a1:85:9a:39:7a:0d:a0:a8:
83:81:15:36:30:72:31:27:02:49:8c:b4:0d:07:bf:
20:ed:3e:f1:03:80:c6:c6:0f:e2:36:cb:ec:77:36:
20:21:b3:dc:01:0a:dd:de:73:3c:a2:d1:1b:ff:fe:
9d:6b:d4:23:d8:2f:3e:88:cf:89:e0:c1:96:b4:e9:
fc:c5:c7:e0:a5:62:53:8c:5d:10:2a:6f:a5:cb:38:
78:b5:ef:0d:11:2c:7e:f3:78:2d:a1:88:3b:12:8a:
c1:4b:ee:9a:bd:0c:ef:3a:7c:22:f2:72:97:be:9d:
55:c4:5a:4b:f8:e9:50:b0:0e:e7:a6:f9:bf:f2:d0:
b4:1a:eb:ef:29:7d:48:7e:40:b3:68:59:b5:6d:8c:
44:2b:9d:eb:6a:d3:5a:6e:44:8a:cb:3d:87:9e:36:
ff:b4:f9:8f:8a:0f:cb:ec:f2:75:27:73:a5:83:34:
d4:9b:ec:0f:ea:b7:7d:12:e7:05:22:f9:4a:e5:99:
32:33:8b:48:11:ee:32:a6:ef:f6:f6:21:53:fc:21:
96:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AB:D2:8C:1C:00:33:6A:DB:F8:51:C9:B6:A0:34:B6:F2:70:3D:48
X509v3 Authority Key Identifier:
keyid:4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:04:2a:83:5c:7a:d0:c7:b8:ef:d9:f7:49:80:ce:39:11:53:
67:ad:2c:cc:e1:1b:25:be:8c:1d:f6:d8:e8:04:bb:b9:ca:0e:
e8:a9:31:5b:df:18:99:47:9d:d5:e5:8b:2d:ff:06:43:ac:fa:
73:84:d6:9e:a4:8d:9e:55:85:9e:24:4c:17:97:f9:07:95:eb:
0f:97:ba:a2:34:1c:e4:50:36:8e:e2:85:a4:25:da:95:38:8d:
0f:65:62:27:ff:5b:f6:70:9c:6a:ec:90:3b:b3:72:14:de:5c:
f6:20:80:48:4d:a9:b3:6e:2c:61:7a:ef:b8:ca:06:26:77:92:
a2:9b:d2:f4:ae:0b:d2:3a:c4:40:94:88:88:28:c9:8d:7b:6c:
b3:ac:30:8c:29:e2:26:a9:b8:ce:31:4a:15:02:57:aa:0e:88:
ee:8a:fd:12:a6:ed:03:80:68:eb:a1:02:3f:57:c6:b5:b5:f5:
e3:8a:30:72:90:ed:6a:f9:3a:7a:9a:e9:0a:23:89:ae:42:8f:
e9:3e:f8:79:6a:59:d8:1f:b7:1e:89:8e:81:52:2b:fe:83:79:
d9:74:94:4a:63:33:22:a8:c6:ff:09:3f:b2:dc:b7:a9:88:b0:
b3:8a:8e:48:33:fd:45:cb:c5:bb:f5:ea:ef:1e:c1:08:2c:c6:
80:90:7c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:45 2026 by rpki-client