This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/KMtfP7lXJRqtS6CdC6tzUrdLsH0.mft
File: KMtfP7lXJRqtS6CdC6tzUrdLsH0.mft (raw, json)
Hash identifier: +7BsL/RE5ZxbHwCEmyfGw6VbjJOXR04Y2+0MpQgiunM=
Subject key identifier: 80:9D:01:C3:F8:59:68:9B:EE:75:43:A9:3C:CE:9A:01:EA:75:63:64
Authority key identifier: 28:CB:5F:3F:B9:57:25:1A:AD:4B:A0:9D:0B:AB:73:52:B7:4B:B0:7D
Certificate issuer: /CN=28cb5f3fb957251aad4ba09d0bab7352b74bb07d
Certificate serial: 019C42101963350F499CF89A845C1F68D476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMtfP7lXJRqtS6CdC6tzUrdLsH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/KMtfP7lXJRqtS6CdC6tzUrdLsH0.mft
Manifest number: 0CF6
Signing time: Mon 09 Feb 2026 11:01:17 +0000
Manifest this update: Mon 09 Feb 2026 11:01:17 +0000
Manifest next update: Tue 10 Feb 2026 11:01:17 +0000
Files and hashes: 1: 0d0jGfKX-gxJysHLosjRpYlTW5Q.roa (hash: CvfYQwzjI8vLt2H1NJc+s052pBAhojbFkOv6NxHUB/E=)
2: KMtfP7lXJRqtS6CdC6tzUrdLsH0.crl (hash: mAEitZSKfbvHHUvlYcUnlUdQiIZ/j7JyMM5CyqExBWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/KMtfP7lXJRqtS6CdC6tzUrdLsH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/KMtfP7lXJRqtS6CdC6tzUrdLsH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMtfP7lXJRqtS6CdC6tzUrdLsH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:10:19:63:35:0f:49:9c:f8:9a:84:5c:1f:68:d4:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28cb5f3fb957251aad4ba09d0bab7352b74bb07d
Validity
Not Before: Feb 9 11:01:17 2026 GMT
Not After : Feb 10 11:01:17 2026 GMT
Subject: CN=809d01c3f859689bee7543a93cce9a01ea756364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6d:6a:05:25:0d:b8:9e:47:ae:25:e8:5e:46:
ea:6e:8e:e9:36:15:15:00:73:fb:c4:6e:74:1a:76:
27:77:a4:96:f6:82:bc:22:5c:38:8e:38:5d:77:b2:
66:e8:c8:70:5b:ef:42:2f:2d:a7:f8:b9:0c:80:f0:
2b:e9:e6:17:c5:9d:e8:ac:6e:1b:0d:c4:c7:ec:5b:
e4:8a:07:e0:09:80:3e:27:43:00:0b:95:58:8f:9b:
b7:d1:ba:02:d6:3d:07:c8:f9:86:b1:fc:97:e8:e7:
db:c1:e6:55:df:13:fc:91:a6:28:33:39:fd:23:2a:
64:85:f6:e8:33:38:04:80:b7:16:ad:e0:66:f1:9f:
f7:da:75:c4:0b:28:f7:4e:d9:c9:ae:84:1c:52:3e:
06:87:af:7a:1a:75:10:75:4d:5f:89:5e:fe:d8:c3:
b6:67:eb:64:be:37:8b:b3:51:85:97:01:cb:a7:19:
49:ca:6f:b3:75:4c:0e:79:91:af:23:32:01:a5:fe:
b1:63:1f:b5:1d:d2:45:a0:ae:ba:7b:2d:db:a4:cf:
4a:0f:40:7d:76:f1:de:16:76:79:5d:c3:8b:32:43:
97:f6:da:0e:46:a6:58:ae:87:18:41:80:94:af:73:
ca:e7:76:dc:82:79:fe:51:cb:fb:f5:5d:19:1f:47:
64:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9D:01:C3:F8:59:68:9B:EE:75:43:A9:3C:CE:9A:01:EA:75:63:64
X509v3 Authority Key Identifier:
keyid:28:CB:5F:3F:B9:57:25:1A:AD:4B:A0:9D:0B:AB:73:52:B7:4B:B0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMtfP7lXJRqtS6CdC6tzUrdLsH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/KMtfP7lXJRqtS6CdC6tzUrdLsH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/KMtfP7lXJRqtS6CdC6tzUrdLsH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:02:f0:7a:6f:0d:3d:d6:9e:82:83:0e:a1:7c:e9:3e:36:97:
53:82:70:64:09:ab:4d:3b:84:80:da:c9:b9:c4:96:a3:4c:90:
26:4d:42:05:07:7e:27:4d:bd:b3:56:e6:5a:eb:d4:fb:de:ea:
b4:28:82:bc:b1:3f:fe:12:36:fc:3e:5f:7b:e2:14:0c:ea:7c:
93:83:1f:5e:1f:de:5b:ba:7d:78:1e:6c:c6:dd:7e:8a:3f:56:
14:1e:37:48:15:09:3e:18:ff:fb:2d:ff:97:73:1e:2f:62:05:
bf:c8:74:d1:1a:81:96:6a:46:aa:4b:22:15:19:ec:d7:79:02:
6d:b5:a5:fc:a7:07:45:d2:90:7f:87:b2:a5:db:b2:6e:83:52:
77:57:67:df:11:a6:ed:06:c1:3b:b8:5d:aa:85:57:9a:f1:38:
41:a8:4c:91:9d:c7:f9:ac:45:db:5d:08:d9:b8:e5:d1:b6:bd:
42:da:2f:4c:9e:8d:ba:ae:85:51:ad:c1:e0:36:80:a9:79:7a:
e2:0d:ad:15:af:88:9a:d2:63:c8:62:5e:1a:84:c8:d3:53:72:
56:e2:4d:6b:3a:15:89:1b:31:b3:af:03:c5:eb:46:b4:a0:8f:
8e:c2:c8:9e:da:2d:a8:8e:ce:b5:36:76:61:62:2a:1c:65:80:
65:e8:18:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCEBljNQ9JnPiahFwfaNR2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4Y2I1ZjNmYjk1NzI1MWFhZDRiYTA5ZDBiYWI3MzUyYjc0
YmIwN2QwHhcNMjYwMjA5MTEwMTE3WhcNMjYwMjEwMTEwMTE3WjAzMTEwLwYDVQQD
Eyg4MDlkMDFjM2Y4NTk2ODliZWU3NTQzYTkzY2NlOWEwMWVhNzU2MzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm1qBSUNuJ5HriXoXkbqbo7pNhUV
AHP7xG50GnYnd6SW9oK8Ilw4jjhdd7Jm6MhwW+9CLy2n+LkMgPAr6eYXxZ3orG4b
DcTH7FvkigfgCYA+J0MAC5VYj5u30boC1j0HyPmGsfyX6OfbweZV3xP8kaYoMzn9
IypkhfboMzgEgLcWreBm8Z/32nXECyj3TtnJroQcUj4Gh696GnUQdU1fiV7+2MO2
Z+tkvjeLs1GFlwHLpxlJym+zdUwOeZGvIzIBpf6xYx+1HdJFoK66ey3bpM9KD0B9
dvHeFnZ5XcOLMkOX9toORqZYrocYQYCUr3PK53bcgnn+Ucv79V0ZH0dkoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICdAcP4WWib7nVDqTzOmgHqdWNkMB8GA1UdIwQY
MBaAFCjLXz+5VyUarUugnQurc1K3S7B9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS010ZlA3bFhKUnF0UzZDZEM2dHpVcmRMc0gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9lNjYzMmItMWZiZi00OTZmLWIzNTUt
MTUzNmZjNzgzODVkLzEvS010ZlA3bFhKUnF0UzZDZEM2dHpVcmRMc0gwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9lNjYzMmItMWZiZi00OTZmLWIzNTUtMTUzNmZjNzgzODVk
LzEvS010ZlA3bFhKUnF0UzZDZEM2dHpVcmRMc0gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbgLwem8N
PdaegoMOoXzpPjaXU4JwZAmrTTuEgNrJucSWo0yQJk1CBQd+J029s1bmWuvU+97q
tCiCvLE//hI2/D5fe+IUDOp8k4MfXh/eW7p9eB5sxt1+ij9WFB43SBUJPhj/+y3/
l3MeL2IFv8h00RqBlmpGqksiFRns13kCbbWl/KcHRdKQf4eypduyboNSd1dn3xGm
7QbBO7hdqoVXmvE4QahMkZ3H+axF210I2bjl0ba9QtovTJ6Nuq6FUa3B4DaAqXl6
4g2tFa+ImtJjyGJeGoTI01NyVuJNazoViRsxs68DxetGtKCPjsLIntotqI7OtTZ2
YWIqHGWAZegYBA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:36 2026 by rpki-client