This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
File: K-U9NAqL9Hwb800yVeEC77GBrRk.mft (raw, json)
Hash identifier: hFebN2OBkJ+vQVgdlMVuBdFLwD4dOiBuVYqEDjVil/A=
Subject key identifier: C8:A4:2F:2C:3A:89:32:25:B7:E8:17:40:51:2F:B1:3E:EE:9B:11:54
Authority key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
Certificate issuer: /CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Certificate serial: 019C2DACE866A2EA3B84ACBB6DFE27EEA27F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
Manifest number: 0C5B
Signing time: Thu 05 Feb 2026 12:00:32 +0000
Manifest this update: Thu 05 Feb 2026 12:00:32 +0000
Manifest next update: Fri 06 Feb 2026 12:00:32 +0000
Files and hashes: 1: 7kADj_Exqnkd_NooXivCTNgHMTw.roa (hash: xbxLEV7EBAsCMdM5vvQNxcgu+GmkqM8Q10yUTCA4kNA=)
2: FilFuxaHNlZodlAIrDOhTmh6ldo.roa (hash: uhGLiCFEBOn6o6kgW6SCO1d0PO9VmCMZayR7rM7fOKo=)
3: K-U9NAqL9Hwb800yVeEC77GBrRk.crl (hash: B0L6Brm7l+oTxiSC7Tcwu0KMOiCWdL6TDerwqK+lntQ=)
4: PE7W5uBW5xpFm8z_X4WySs2k6Yo.roa (hash: wV3X/7HZHZKG/4FgH10MAPrQyf6yj0My6U1gF8qH54U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Feb 2026 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2d:ac:e8:66:a2:ea:3b:84:ac:bb:6d:fe:27:ee:a2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Validity
Not Before: Feb 5 12:00:32 2026 GMT
Not After : Feb 6 12:00:32 2026 GMT
Subject: CN=c8a42f2c3a893225b7e81740512fb13eee9b1154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:aa:a5:07:77:0d:21:b4:db:55:f6:40:26:5a:
2e:f4:c5:99:d2:f0:75:8b:4d:3b:b1:09:05:e0:d5:
5c:4d:60:a1:5e:f8:03:b2:d3:c8:87:e2:4b:20:ec:
1b:64:5f:3d:1b:5a:09:ce:03:f2:c0:3b:73:a9:a1:
1e:31:d2:08:61:7e:06:07:24:69:18:0a:a7:39:db:
18:c9:38:b6:b2:1a:50:a3:2b:59:25:00:72:ca:55:
6d:d4:34:54:a3:1a:16:65:af:46:9c:54:00:c4:fe:
68:ad:92:64:7e:48:3a:cb:a8:6b:2f:23:33:eb:6f:
96:54:80:94:c4:13:c7:66:5e:aa:c9:05:f3:45:61:
85:8c:bb:49:ad:aa:2d:dd:f6:75:66:13:49:4a:2b:
67:61:cd:07:0d:9f:1b:80:5e:ff:c2:e0:75:08:fc:
4b:b0:15:70:95:b6:65:a0:54:4b:4b:58:38:45:c4:
bc:48:26:d7:fb:38:99:1a:6e:e1:90:3c:e7:5a:a4:
41:bf:5a:3c:c2:27:cc:ef:e5:50:76:b6:7d:d3:10:
ca:c2:e2:99:ef:8a:18:d8:84:a2:06:c9:fb:40:ea:
d0:8c:e0:e6:63:e3:b9:30:56:c2:39:50:7c:fa:50:
37:b4:80:78:71:76:b5:d6:af:fb:df:ee:73:53:f2:
65:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A4:2F:2C:3A:89:32:25:B7:E8:17:40:51:2F:B1:3E:EE:9B:11:54
X509v3 Authority Key Identifier:
keyid:2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c7:4b:0e:75:56:69:76:87:6a:e9:19:90:7d:5f:77:02:ca:
e1:4a:bf:79:a4:f1:ae:5c:09:36:98:31:7b:02:fc:79:b5:09:
4e:fe:4e:c3:1a:93:22:bb:51:c6:70:7f:61:eb:7f:76:37:9e:
fe:c1:54:be:8a:65:73:9c:08:e1:29:69:03:2a:c5:c2:85:44:
51:8b:8b:06:fc:eb:53:9c:82:6b:7f:39:3f:1a:61:f6:b4:b5:
1e:da:2b:0e:47:2f:fb:da:53:f9:1c:8e:aa:34:89:c7:a7:16:
a6:ca:b1:3f:c2:16:de:fc:29:21:a1:69:aa:45:af:98:29:8c:
75:a6:56:7d:44:b9:5b:23:f9:c1:29:5a:de:75:87:57:de:9c:
f3:d8:39:d7:48:cb:be:e5:73:20:ed:b4:70:57:1d:00:2e:19:
7f:94:27:25:91:ed:93:45:44:77:61:67:d9:fa:d1:c8:a7:89:
e4:57:6c:34:80:7c:c9:09:06:30:87:a4:a7:f8:06:1c:c0:5c:
53:25:36:a6:23:fe:e8:22:56:5e:68:cd:90:00:79:0d:8b:0b:
31:9f:b6:95:38:34:aa:0b:a2:74:15:c1:57:7a:0c:d2:24:c5:
99:b3:39:de:d7:82:80:d2:54:e5:3b:8a:03:15:a3:85:11:3b:
f6:9f:3e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 18:31:47 2026 by rpki-client