This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
File: KJVkfZ_RahaU-AJuvod2DLUx6w4.mft (raw, json)
Hash identifier: u1YHNSOGdMnspZ9qtGiNikrGo/kBsfJeLfBOO2wSNJ4=
Subject key identifier: FF:A1:56:1D:5B:C2:E2:B2:42:31:69:FF:21:E0:F7:4A:14:DE:A0:85
Authority key identifier: 28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E
Certificate issuer: /CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
Certificate serial: 019BF6BEFB79FB7EE0A28002DAB8F7D20E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
Manifest number: 17E8
Signing time: Sun 25 Jan 2026 20:01:09 +0000
Manifest this update: Sun 25 Jan 2026 20:01:09 +0000
Manifest next update: Mon 26 Jan 2026 20:01:09 +0000
Files and hashes: 1: KJVkfZ_RahaU-AJuvod2DLUx6w4.crl (hash: QVxOSZseNToMQum+8IgrSg2mB6+bZzjVtn6dnrBsUjk=)
2: SO-Fb5_RWNG-vJxWilHy0Ub7D3c.roa (hash: VzvW0l4p4/QU6FVquXlxf/LHE0LvlRpqoxeKSXp+Yqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 20:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:be:fb:79:fb:7e:e0:a2:80:02:da:b8:f7:d2:0e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
Validity
Not Before: Jan 25 20:01:09 2026 GMT
Not After : Jan 26 20:01:09 2026 GMT
Subject: CN=ffa1561d5bc2e2b2423169ff21e0f74a14dea085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a2:d6:72:32:7e:87:78:1d:15:9f:b5:08:1d:
63:b0:55:8f:e6:2a:49:63:f1:b4:ff:39:64:58:66:
24:1b:cd:92:b3:7a:79:4b:9f:3c:35:7c:f8:0f:d9:
64:15:d0:ce:90:09:2c:ae:8f:c6:12:69:0d:69:71:
09:c2:f4:06:2d:56:02:01:5f:4e:5e:64:04:5c:5d:
52:94:05:b3:a9:32:d9:fe:c2:12:a1:55:16:a5:43:
46:e9:9f:04:91:5a:91:c8:0e:d3:c1:ec:a7:b1:df:
31:fb:ee:42:b0:d2:7f:7d:67:4c:f6:0c:a5:7a:fd:
93:74:df:4d:21:94:3f:d7:7e:ee:fe:fb:06:85:6b:
75:6a:36:d6:a8:75:b1:2b:2f:13:f3:f8:a5:80:91:
02:3c:5c:95:31:ec:87:71:4b:d5:6d:2b:ca:b0:67:
f8:c0:0b:ba:54:dc:57:be:09:4b:0b:53:10:88:da:
58:fd:40:0f:01:15:6e:52:38:7b:d7:8a:3b:25:2c:
8c:90:06:58:31:87:3f:fe:36:69:64:18:8e:70:89:
25:93:5c:ca:5d:0c:43:0f:97:b8:cf:8d:6c:65:d9:
36:6a:4b:06:25:3f:1c:20:54:d2:0a:f4:74:e1:2e:
08:2c:d4:d3:0d:ae:11:34:46:71:82:09:bc:c1:1a:
bd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A1:56:1D:5B:C2:E2:B2:42:31:69:FF:21:E0:F7:4A:14:DE:A0:85
X509v3 Authority Key Identifier:
keyid:28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:d7:f6:b4:4a:64:6c:7c:89:22:9b:38:54:18:07:d2:96:74:
ce:83:d5:6f:99:7d:96:d3:45:a3:89:62:77:6c:2d:47:7c:13:
aa:fc:eb:3a:b2:03:69:bb:f0:8a:50:41:21:16:09:f7:34:83:
12:db:c4:3c:2a:af:cf:06:d4:00:9f:7a:46:6c:76:6f:98:59:
73:46:93:c1:20:25:df:57:47:61:6d:de:ce:c2:5c:be:88:ab:
a1:32:25:d7:89:f6:96:e9:46:80:83:13:66:d7:de:82:25:75:
5c:2b:82:9e:32:05:c4:73:68:78:d9:53:b1:1a:26:0d:e8:e3:
fe:82:3d:1a:7a:45:17:9d:54:30:0e:89:23:b6:4e:75:90:cc:
b2:e2:e5:0a:c4:3a:ba:2c:99:68:fb:32:14:b1:84:e6:66:45:
c0:94:65:a2:69:6d:c2:bb:01:1d:72:f6:13:e6:94:a7:2b:38:
55:93:e8:ba:cc:f9:fb:b2:95:14:4f:07:66:c3:4e:64:49:35:
b5:17:f2:9b:36:c2:87:86:4c:79:07:00:2e:61:47:3a:b2:d0:
a1:dc:21:9b:87:c1:83:1c:6d:18:5b:af:b6:76:46:24:94:66:
71:2d:ae:5d:55:77:e5:b2:d5:ce:7e:67:39:59:37:62:a2:ca:
cb:23:1c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:54:08 2026 by rpki-client