This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
File: KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft (raw, json)
Hash identifier: Akm0MTR0+q/fZyS6CMb8/M1b6AntYWnqS9Bnr4Bq2C8=
Subject key identifier: 73:EA:D5:1B:4E:E0:C5:21:A1:4C:57:DF:6B:78:C7:C2:6F:F7:BB:07
Authority key identifier: 29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5
Certificate issuer: /CN=2936f64328c1e66911409ea7c69722f8d26266b5
Certificate serial: 019C41A19AE31FF6610407BB082461316B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
Manifest number: 0C08
Signing time: Mon 09 Feb 2026 09:00:35 +0000
Manifest this update: Mon 09 Feb 2026 09:00:35 +0000
Manifest next update: Tue 10 Feb 2026 09:00:35 +0000
Files and hashes: 1: KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl (hash: +3Zk+mmGDj5Cb+fno5+9R4A8Q+TPHMlqdX+KpjZguiw=)
2: oXHERV6aA92q4XM2FtjLJ6RybNw.roa (hash: biGeyIKzfwGkq1HyLc7g1XF4DU08F8Q47/MaS1GoJuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:9a:e3:1f:f6:61:04:07:bb:08:24:61:31:6b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2936f64328c1e66911409ea7c69722f8d26266b5
Validity
Not Before: Feb 9 09:00:35 2026 GMT
Not After : Feb 10 09:00:35 2026 GMT
Subject: CN=73ead51b4ee0c521a14c57df6b78c7c26ff7bb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:28:b7:9d:e4:59:19:79:72:53:49:e8:47:fd:
a4:75:df:51:e0:43:5a:08:cb:70:6c:72:bc:8d:b9:
60:5e:13:99:74:f3:d5:dd:ea:e6:3c:61:02:3e:88:
78:d6:14:4d:60:9a:fd:ea:51:4a:41:9e:63:0f:2f:
42:92:58:da:21:e8:1e:ad:a8:d8:c8:11:a1:9c:8a:
ea:9d:8a:9e:01:37:65:ba:45:77:17:12:c2:f5:d6:
75:38:0b:49:3e:d7:7d:f5:42:e7:6e:7e:7d:b5:0f:
64:2b:80:8a:67:00:31:fb:00:40:4a:96:c4:41:30:
2b:1f:b1:40:c5:e6:69:2b:bc:b8:db:33:ee:f0:d3:
4a:c1:1d:23:6f:06:63:fa:5b:13:ac:f0:33:0d:ea:
5e:8d:30:3f:a2:ca:f7:76:ea:84:67:fc:d3:50:bc:
fa:da:70:55:eb:b9:fb:5b:d0:ef:c4:8e:74:87:85:
23:a0:01:b2:f1:0e:a3:f1:17:de:a7:da:4d:49:c3:
24:b5:6b:8a:f8:59:c6:86:3d:a0:c3:c2:68:33:6e:
5f:20:58:7e:ff:4e:bc:37:5b:11:35:95:92:ae:73:
6e:44:97:6f:f3:af:80:55:07:bf:94:06:34:14:2e:
77:ca:89:97:6e:dd:0e:4a:80:68:85:ee:35:59:f8:
bd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EA:D5:1B:4E:E0:C5:21:A1:4C:57:DF:6B:78:C7:C2:6F:F7:BB:07
X509v3 Authority Key Identifier:
keyid:29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1f:9f:80:b5:d5:c9:b3:82:1b:ea:8d:55:90:36:8b:70:6b:
2a:55:c2:7b:89:1e:23:aa:cb:dc:e3:ae:ab:7b:df:2b:24:29:
f7:c1:12:47:d6:c5:6e:21:ef:7b:95:96:b0:52:d7:92:a4:f6:
02:57:18:1e:63:4c:99:52:a1:e7:e4:60:1b:da:ff:b0:f3:a2:
65:b7:2e:97:2e:d1:16:11:c7:e7:11:2d:6f:de:5f:d3:8b:09:
a6:c3:6b:00:d9:09:b9:a2:36:27:15:7f:4d:6b:61:7d:51:ba:
8a:f2:68:8e:fc:a9:00:63:c5:fa:92:a0:91:c3:ab:0d:f5:a9:
8f:f8:e3:85:4e:d5:03:5f:04:28:2c:3b:f5:85:65:fe:7c:a2:
32:3c:e2:78:65:54:71:89:eb:a4:5f:c7:df:eb:b6:d1:ee:6c:
bf:06:17:d0:a5:94:50:03:27:b0:17:f1:54:a0:a2:4c:00:dc:
ea:4e:48:27:ba:2b:1d:a3:82:c8:68:f6:6e:3e:f5:5e:a9:55:
b0:ca:1e:c2:a4:99:31:0c:02:2c:07:3f:fd:67:06:54:d1:8c:
e1:76:51:18:cd:98:38:b4:fd:e1:99:9e:f2:63:87:5a:0f:e8:
70:92:a9:51:e4:5b:9c:92:8d:b8:70:87:c3:8f:8d:39:34:22:
05:79:8e:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBoZrjH/ZhBAe7CCRhMWsOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MzZmNjQzMjhjMWU2NjkxMTQwOWVhN2M2OTcyMmY4ZDI2
MjY2YjUwHhcNMjYwMjA5MDkwMDM1WhcNMjYwMjEwMDkwMDM1WjAzMTEwLwYDVQQD
Eyg3M2VhZDUxYjRlZTBjNTIxYTE0YzU3ZGY2Yjc4YzdjMjZmZjdiYjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCi3neRZGXlyU0noR/2kdd9R4ENa
CMtwbHK8jblgXhOZdPPV3ermPGECPoh41hRNYJr96lFKQZ5jDy9CkljaIegerajY
yBGhnIrqnYqeATdlukV3FxLC9dZ1OAtJPtd99ULnbn59tQ9kK4CKZwAx+wBASpbE
QTArH7FAxeZpK7y42zPu8NNKwR0jbwZj+lsTrPAzDepejTA/osr3duqEZ/zTULz6
2nBV67n7W9DvxI50h4UjoAGy8Q6j8Rfep9pNScMktWuK+FnGhj2gw8JoM25fIFh+
/068N1sRNZWSrnNuRJdv86+AVQe/lAY0FC53yomXbt0OSoBohe41Wfi9bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPq1RtO4MUhoUxX32t4x8Jv97sHMB8GA1UdIwQY
MBaAFCk29kMoweZpEUCep8aXIvjSYma1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1RiMlF5akI1bWtSUUo2bnhwY2ktTkppWnJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS83ZGM3MTItZmY1ZC00ZmYyLWEyYWUt
MzlkYzUzZTM3ODJmLzEvS1RiMlF5akI1bWtSUUo2bnhwY2ktTkppWnJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS83ZGM3MTItZmY1ZC00ZmYyLWEyYWUtMzlkYzUzZTM3ODJm
LzEvS1RiMlF5akI1bWtSUUo2bnhwY2ktTkppWnJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFh+fgLXV
ybOCG+qNVZA2i3BrKlXCe4keI6rL3OOuq3vfKyQp98ESR9bFbiHve5WWsFLXkqT2
AlcYHmNMmVKh5+RgG9r/sPOiZbculy7RFhHH5xEtb95f04sJpsNrANkJuaI2JxV/
TWthfVG6ivJojvypAGPF+pKgkcOrDfWpj/jjhU7VA18EKCw79YVl/nyiMjzieGVU
cYnrpF/H3+u20e5svwYX0KWUUAMnsBfxVKCiTADc6k5IJ7orHaOCyGj2bj71XqlV
sMoewqSZMQwCLAc//WcGVNGM4XZRGM2YOLT94Zme8mOHWg/ocJKpUeRbnJKNuHCH
w4+NOTQiBXmOAg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:20 2026 by rpki-client