This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
File: KC5DLtiL7BrRRURJYygU1DmWseA.mft (raw, json)
Hash identifier: S1KHSkUCqiwQvitS46k5jUL+ldsCsQSClW+NhTRutP8=
Subject key identifier: 91:EE:C7:60:C3:A1:5E:3C:22:EE:77:1B:C2:1E:DA:43:9E:2F:DA:CE
Authority key identifier: 28:2E:43:2E:D8:8B:EC:1A:D1:45:44:49:63:28:14:D4:39:96:B1:E0
Certificate issuer: /CN=282e432ed88bec1ad1454449632814d43996b1e0
Certificate serial: 019C416ACABCDB31E2F2261E4E2E8FA45CCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
Manifest number: 0E67
Signing time: Mon 09 Feb 2026 08:00:43 +0000
Manifest this update: Mon 09 Feb 2026 08:00:43 +0000
Manifest next update: Tue 10 Feb 2026 08:00:43 +0000
Files and hashes: 1: Ej1NGALUAyZGkeedSA07ESoqQtI.roa (hash: bVGUYeTkungmGZQJc78ekhzyESu4jsfHGMMaJDPhxpU=)
2: KC5DLtiL7BrRRURJYygU1DmWseA.crl (hash: doPzucJ0saueZSmMUPkbVRVBBceeAIw/uFJJiFyIgO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:6a:ca:bc:db:31:e2:f2:26:1e:4e:2e:8f:a4:5c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282e432ed88bec1ad1454449632814d43996b1e0
Validity
Not Before: Feb 9 08:00:43 2026 GMT
Not After : Feb 10 08:00:43 2026 GMT
Subject: CN=91eec760c3a15e3c22ee771bc21eda439e2fdace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:46:42:ac:de:e4:28:7d:50:dc:5f:ce:c1:
45:d5:e1:9d:f8:8f:f8:c2:93:f4:5e:59:28:a6:99:
2a:51:50:6f:fa:f0:21:a7:f4:4f:c5:83:17:2b:af:
0f:de:21:28:f2:71:ee:e8:39:c3:ce:15:a9:1d:95:
37:f8:93:07:05:ee:46:9c:cf:86:68:89:b6:d7:9c:
9f:2c:92:8f:74:48:fd:80:43:20:80:3f:59:65:c2:
83:ab:19:58:67:52:20:fa:9a:c3:a3:bb:64:b2:f1:
2f:63:af:16:a6:8d:a5:ca:d4:65:1e:2e:a3:ed:63:
fc:f2:dc:de:66:04:36:62:34:3d:28:62:1a:0a:36:
2e:41:ae:af:3d:e8:25:50:b5:b2:f1:9b:7b:22:4f:
52:d7:77:9c:8e:42:a7:46:a0:ee:a1:72:80:c8:3e:
7a:61:f6:e4:0f:43:00:4e:5c:bc:24:1f:06:72:68:
a0:5a:f6:52:26:51:11:61:3c:9b:70:dc:fd:0d:d3:
ea:4e:7f:d2:6d:fa:da:80:dd:2f:23:d8:52:9e:e6:
d1:04:5a:cc:d3:c2:3b:87:bb:ed:6a:d4:2e:0d:72:
fe:a4:e8:12:0c:be:8b:65:78:e0:4a:51:5a:b5:ff:
05:80:26:99:f8:83:f9:a5:5a:62:9f:8b:7b:16:04:
9b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EE:C7:60:C3:A1:5E:3C:22:EE:77:1B:C2:1E:DA:43:9E:2F:DA:CE
X509v3 Authority Key Identifier:
keyid:28:2E:43:2E:D8:8B:EC:1A:D1:45:44:49:63:28:14:D4:39:96:B1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:de:df:b4:00:95:f1:9c:7b:b7:b7:7d:e2:b9:da:d3:34:4b:
63:e7:b2:86:75:6b:93:c9:4b:78:7d:f4:7c:af:63:8f:24:0a:
11:6b:e1:c5:d4:3f:38:75:e7:91:8b:31:52:05:44:32:5f:ec:
0e:53:8c:ec:49:cd:de:1f:32:bc:ba:9e:01:34:53:63:48:a4:
ef:1f:f1:3f:b6:b3:a1:46:ad:4b:01:b3:fd:54:3d:c7:af:0b:
0b:37:6d:8d:29:78:98:8b:7d:20:07:e1:62:f5:05:63:c9:1b:
5c:99:34:33:21:e7:83:39:bd:94:f5:9c:bb:78:c5:03:e4:10:
d4:02:63:da:d1:7b:39:3e:7d:bb:c5:fe:4e:2c:ec:d5:f8:df:
98:8b:5f:0b:5c:f4:32:ee:9f:81:42:af:ac:5a:da:c5:8a:45:
f4:c1:58:06:11:78:5e:c7:51:24:71:16:93:be:97:4d:49:69:
76:28:e4:cd:d2:80:70:81:86:f3:85:8f:0c:72:53:35:74:05:
d0:ca:0a:ef:91:ef:4e:89:c7:95:96:d1:17:70:77:d9:d2:2d:
41:ec:47:23:d3:1b:84:4f:d1:6c:c7:74:26:b5:72:31:9e:ed:
9f:70:5f:8e:44:32:de:33:0c:58:e0:b4:9b:56:23:ba:ad:4d:
c3:d5:70:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:57:16 2026 by rpki-client