This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
File: K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft (raw, json)
Hash identifier: Ny8FebkAgHyngeU2V93R6mL9qCGVJZKye9+/gmDe3h4=
Subject key identifier: B1:63:62:84:D2:4D:30:AC:79:4E:78:DE:E9:BA:A2:F5:0B:71:5E:71
Authority key identifier: 2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
Certificate issuer: /CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Certificate serial: 019C42B47248FB2031D35E91A05CFC05E9D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
Manifest number: 0FEF
Signing time: Mon 09 Feb 2026 14:00:47 +0000
Manifest this update: Mon 09 Feb 2026 14:00:47 +0000
Manifest next update: Tue 10 Feb 2026 14:00:47 +0000
Files and hashes: 1: K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl (hash: /pY8SKzuTVf1tU3Y9TdxnRNaeA6BqSJGkEKkF7DlKcU=)
2: dbilkSZsjUibJ1NutZ76qJvy820.roa (hash: /oJpuqHaWi4ouiqRZTNCC/b0oRgbkGtlYtRLMPSUMXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:72:48:fb:20:31:d3:5e:91:a0:5c:fc:05:e9:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Validity
Not Before: Feb 9 14:00:47 2026 GMT
Not After : Feb 10 14:00:47 2026 GMT
Subject: CN=b1636284d24d30ac794e78dee9baa2f50b715e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:9d:f0:be:db:bd:35:0f:bd:89:53:1b:80:
34:7f:74:a9:fa:65:4f:d8:72:f0:28:0a:a1:c5:92:
57:72:73:91:7c:5a:c3:2f:87:fa:51:9e:fa:b8:fb:
32:eb:2e:ca:01:55:ec:c9:0f:63:bc:b0:3a:af:e7:
f6:7d:7d:25:65:58:53:e3:50:e4:5e:39:11:57:9f:
86:94:53:d9:74:dc:f1:08:17:ee:6f:cd:6f:dd:da:
aa:5b:e4:31:23:9e:e3:11:64:9b:ed:78:6a:60:70:
33:20:dd:a8:3e:a2:0b:b8:c1:71:7a:0e:ac:5d:84:
a4:97:da:0c:e4:3b:15:0a:56:34:18:db:75:2e:dd:
e0:76:05:5a:4a:fb:d5:95:0b:18:ee:27:35:2e:0e:
df:e5:d1:52:2c:28:69:89:c7:46:e8:3f:c7:e6:cd:
dd:22:80:20:67:c5:1d:4b:5f:06:a2:23:81:aa:b3:
6d:43:24:1f:b3:96:04:a1:e2:b8:4f:aa:fb:3d:4b:
f9:59:92:d2:aa:b6:26:c2:3e:aa:ee:34:c5:6f:86:
10:b0:73:47:f8:f2:15:c8:ac:d8:d2:eb:38:ba:f2:
1d:fe:5d:d2:06:7a:2e:97:70:bc:01:2f:e8:31:75:
ac:0e:81:b1:0d:c9:03:63:63:c8:ec:e1:e3:ff:4e:
08:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:63:62:84:D2:4D:30:AC:79:4E:78:DE:E9:BA:A2:F5:0B:71:5E:71
X509v3 Authority Key Identifier:
keyid:2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c6:97:1a:6d:09:38:c9:b6:a2:c2:bf:29:96:cf:5f:fc:6a:
12:38:84:49:63:b5:35:03:4d:4c:f5:5e:ec:72:b5:36:32:20:
ff:a4:91:e2:3a:ce:3e:01:db:9d:1d:19:2e:6c:f2:40:9a:d9:
4c:18:3b:59:52:e3:08:c9:ac:e7:e1:a5:c4:43:05:79:9f:5c:
e6:cd:4c:7d:9c:68:66:d7:12:0a:d6:72:35:3b:13:d5:d0:9d:
68:b4:41:50:1c:ba:24:cc:62:77:48:46:77:b5:ae:a2:56:65:
34:1f:e6:ed:ec:aa:d9:73:70:05:a8:91:e8:f9:50:5e:d5:a0:
bd:2e:e9:ab:56:47:5b:de:65:10:ad:be:57:06:04:f5:c9:ab:
9a:e9:83:be:6b:bb:08:de:67:64:dd:39:f3:df:38:f6:ab:93:
a3:6d:9e:66:a4:9e:0e:8f:a2:c7:b4:52:7c:6b:9b:79:3b:86:
f7:5f:1f:a2:c3:10:5e:9d:8f:ca:f2:38:dc:40:df:3a:cf:71:
e1:fc:19:ea:04:06:60:05:ab:44:6c:68:e7:ba:cf:04:48:3f:
32:5b:0d:22:31:2e:c2:dc:d0:06:61:d0:bb:96:95:a6:0b:78:
a4:b4:cf:f9:92:52:97:27:31:c5:65:19:45:23:e2:1d:93:89:
b9:b9:92:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:21 2026 by rpki-client