This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
File: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft (raw, json)
Hash identifier: 7IXGK6f7Idyq1iRz+R27GxWxD7CaMsUdM+M4Gn9iPKc=
Subject key identifier: 96:8C:33:73:9C:05:F2:FD:DB:D2:11:46:C3:E3:27:0A:62:42:96:D0
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial: 019C45115665723BE7D66E077F6AACAD3CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
Manifest number: 1811
Signing time: Tue 10 Feb 2026 01:01:29 +0000
Manifest this update: Tue 10 Feb 2026 01:01:29 +0000
Manifest next update: Wed 11 Feb 2026 01:01:29 +0000
Files and hashes: 1: 2zalanC3hLAiWZsaueYly5WPDys.roa (hash: 3Cvvx3fMpG05zoy3dWgCjRA7P5/lfhhLiU2Ruh29QyA=)
2: 8WiTHhRR5UDbte2ps20s8LuHuFI.roa (hash: hI0ka3m/nqIpOykYSI0iEPcTgskawSt+HKYOhbD4JNw=)
3: 9rAcMb_T-U4PpNzw9_lgrfVKOSg.roa (hash: eOLmOGsXdxwjrVkNUc39nNMoOTMIs4RJ3w9pYcYKSIo=)
4: CDqm3nL-mWUyOy7FztAgewiin3g.roa (hash: Dkjb68aiN/QU/1LeHSAGRrsXMObCtO5LMWVbJ6e1quk=)
5: JKSn3ivcD7ulcEDYFnAk6kK8JVE.roa (hash: Y5qnFyuoFbYoSj1p2Mc4Ujlrd4TbP66nKsTT70JVghI=)
6: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl (hash: PrbbLc//qA+VLQfw4BUrbpaNOMWCAldVw3p00nQXkws=)
7: NqHlYSS8cxjiTpKHn6trhssa2iQ.roa (hash: l5a4ldpkJRCpHFzDTjg2f++LcCqwV78yBnjEaKlm1Aw=)
8: bHv6pUCU7PrfMbCa5aK1UeDi_8g.roa (hash: UFUxr/kieGhgzteQIeGPVBH69D8iREI4DsJ6Yi6z7RE=)
9: v6jE1I_1KnawMolAIIFEXyMcQs0.roa (hash: YNPiyPMqq2HOdLiYv7ctfE3scpFNBTASL6D3TCF7mJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:45:11:56:65:72:3b:e7:d6:6e:07:7f:6a:ac:ad:3c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Validity
Not Before: Feb 10 01:01:29 2026 GMT
Not After : Feb 11 01:01:29 2026 GMT
Subject: CN=968c33739c05f2fddbd21146c3e3270a624296d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:2d:ea:80:2c:7f:25:a9:c3:4d:dc:88:33:
f7:fc:4c:f1:2b:6e:d4:62:ba:4f:c5:c0:34:76:1a:
a1:bb:86:74:a4:69:87:a9:9a:19:4b:74:89:78:3c:
34:08:ad:1b:ef:4d:f3:33:5d:e3:d1:4c:1b:59:9e:
72:d3:34:47:81:e4:6f:b7:cd:ff:1f:61:44:51:f9:
ae:a6:98:5c:05:d3:d7:ac:a2:94:6b:fa:f5:7d:88:
b8:cb:5f:35:77:8c:65:98:59:f6:4d:42:f5:a2:b3:
90:f3:35:f8:28:f6:1d:f3:f0:89:b8:6d:1b:58:6a:
8b:c4:45:8a:7f:dc:33:5f:0c:12:36:39:6e:05:2a:
af:48:c6:e3:a5:06:ce:28:d7:22:5e:a9:28:22:2d:
24:c9:66:c9:22:d5:df:30:a2:14:03:22:75:a6:00:
0b:41:4f:98:2d:28:be:50:d7:a7:c8:2a:04:a6:a2:
ef:77:b5:ce:13:c2:6d:b8:db:f0:36:bf:68:2a:d1:
fb:c9:94:1e:b0:71:cf:7c:7e:e8:04:63:9c:d5:3c:
0e:2d:af:b8:4a:3a:b2:b1:8a:15:ec:67:19:a5:09:
d6:86:a9:be:6e:f9:2b:4b:71:7a:1c:6b:c6:83:91:
3d:ad:a4:31:3f:56:d4:0e:2d:f2:6f:a0:86:de:85:
d3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8C:33:73:9C:05:F2:FD:DB:D2:11:46:C3:E3:27:0A:62:42:96:D0
X509v3 Authority Key Identifier:
keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:5d:2a:70:d3:ee:77:c1:ea:0d:a2:7f:4e:48:f0:10:f1:af:
fe:05:e2:6c:26:d8:c0:de:9b:ba:28:44:57:14:52:b6:73:e1:
22:6b:7e:c4:08:32:aa:8c:08:24:57:f1:77:bd:f2:71:9e:8f:
85:89:7e:ba:63:73:a6:fb:59:ec:97:82:3f:05:80:14:80:c4:
f7:c4:45:58:48:82:46:9f:7f:1e:7a:ad:5b:fe:84:fc:1d:4e:
0f:b4:9d:b0:bc:49:c0:a3:83:51:04:f4:f7:21:ed:50:35:59:
3b:6b:4c:f8:a8:aa:7c:72:80:39:47:8d:ea:88:4a:a8:0c:7b:
9c:1f:ea:05:b2:5d:23:91:9d:df:34:01:25:f6:6c:a2:df:3b:
04:04:d9:40:e4:3c:ce:5f:f7:33:c0:ce:cf:b7:cb:ee:f3:17:
79:43:f1:fd:d2:9b:16:67:5c:88:91:e2:da:4c:14:37:6d:a4:
94:04:88:a9:51:b1:e4:01:4e:95:60:b2:ba:71:81:cf:85:a8:
64:a0:f5:68:ea:76:9c:13:b3:d7:4d:2e:44:67:7f:19:d1:e6:
70:31:fc:a8:40:99:7e:02:25:76:de:be:51:a2:b1:a7:82:e6:
a5:1a:df:cc:b1:aa:a2:72:c5:61:a0:14:3d:38:d1:20:bb:9e:
a1:5c:2c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:52:12 2026 by rpki-client