This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
File: ktkImo4yjTLW3hbX2iV7gRsFI50.mft (raw, json)
Hash identifier: w0g4oLm8pTsDcFBOKit1BMe54/s2ddf1nSc3C7VWWo4=
Subject key identifier: 5F:C2:1D:0F:27:40:ED:46:50:E4:25:A4:3F:83:F8:54:33:C9:56:AD
Authority key identifier: 92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
Certificate issuer: /CN=92d9089a8e328d32d6de16d7da257b811b05239d
Certificate serial: 019BF3BDB81DC395BF094AF510C1CD265917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
Manifest number: 0742
Signing time: Sun 25 Jan 2026 06:00:55 +0000
Manifest this update: Sun 25 Jan 2026 06:00:55 +0000
Manifest next update: Mon 26 Jan 2026 06:00:55 +0000
Files and hashes: 1: fu5IU6WPn0sEdH25PEGyzdNdz6I.roa (hash: rpHbI6eXYfZK0TKPt9cYIkKp4IE4pJ5rN76FJYrTRkc=)
2: ktkImo4yjTLW3hbX2iV7gRsFI50.crl (hash: PxAMdoqUm099QacL17tYrfFrErhteM6WpdG5vEiubsE=)
3: nTyqnJTXB1VFE3v_ujRIEYl5PYQ.roa (hash: uD3UBbB/9frHLtpYcWN79dWwtH4FQubxDI1VloEZ5ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:bd:b8:1d:c3:95:bf:09:4a:f5:10:c1:cd:26:59:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d9089a8e328d32d6de16d7da257b811b05239d
Validity
Not Before: Jan 25 06:00:55 2026 GMT
Not After : Jan 26 06:00:55 2026 GMT
Subject: CN=5fc21d0f2740ed4650e425a43f83f85433c956ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:23:d9:2f:b9:d3:35:5b:d0:6b:bf:e5:cd:
0d:fb:ab:e4:d7:9d:d6:9b:56:27:c5:30:c7:61:bc:
f1:db:62:9b:1f:ee:fe:82:6d:41:79:24:0d:b3:f9:
bd:f2:f9:ad:48:2b:22:1b:7d:0f:30:06:e4:45:cb:
af:22:9d:17:e8:ff:69:56:7f:72:ff:a8:c9:cd:92:
5b:9c:cc:2a:94:24:e6:a3:fa:71:6e:da:94:de:d8:
60:54:e5:c9:df:5f:22:a5:38:6e:90:01:10:dd:55:
e3:d3:f6:c1:fd:20:83:5a:a1:18:db:44:f3:f8:e2:
82:07:ce:e9:82:19:7a:2b:8d:dd:51:6e:e9:5b:2a:
a0:8e:1c:6d:a5:06:31:71:b7:f2:59:b9:6e:0b:3b:
17:b8:06:92:84:51:c5:bb:9a:81:09:83:df:8e:1d:
fb:51:a8:ac:74:61:09:06:ae:ed:5d:4d:67:a0:26:
95:58:b9:40:e5:0c:89:92:27:a7:40:86:d7:ee:45:
0f:19:ef:07:dd:00:c1:f6:59:0d:7c:01:29:de:30:
b9:63:3b:ae:26:17:38:b8:53:28:7c:f5:a7:c6:2b:
04:a0:da:1f:e0:74:c0:e8:48:53:eb:a3:f5:8d:32:
fd:35:ad:3d:85:57:ac:73:93:b9:71:9b:b4:01:17:
70:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C2:1D:0F:27:40:ED:46:50:E4:25:A4:3F:83:F8:54:33:C9:56:AD
X509v3 Authority Key Identifier:
keyid:92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f0:7a:ec:52:4f:af:af:c4:e0:d0:14:1e:dd:a2:68:eb:d7:
a0:e4:dd:75:31:bc:b9:31:10:f7:70:df:1d:88:a2:ca:c5:68:
49:99:bc:12:1b:88:74:a7:a8:76:d5:f3:e7:d0:c7:1e:fc:1f:
08:12:04:08:9a:6e:ec:dd:68:4a:ed:b6:2c:53:77:1c:6b:58:
68:bf:09:8b:4f:76:6e:53:95:a8:c5:7a:5c:ea:ff:ec:9e:de:
aa:2c:92:95:52:40:72:20:4d:39:7c:4f:02:37:b2:83:74:15:
06:f2:04:5d:19:66:b7:2c:2a:07:d5:bc:0d:ea:fe:a0:eb:be:
31:75:b0:58:e6:db:c8:83:62:7c:f0:0b:8e:f8:6c:a8:50:ee:
3d:70:0b:21:1c:6a:8a:db:67:e5:76:59:1f:bc:e8:87:1a:60:
e6:91:3d:7f:05:45:6b:80:f3:38:54:84:52:0e:da:3e:71:f0:
c7:c6:4c:e5:03:59:69:87:89:c1:ed:e1:1a:b2:a5:44:1f:a9:
eb:de:09:1a:d4:2d:60:b8:9b:a6:2f:c9:a8:7e:0b:49:14:f2:
14:0a:b9:ea:d0:55:95:8f:72:b7:74:9d:1c:2f:b3:fe:0b:f2:
9a:eb:6e:41:fd:d8:6a:00:cb:5b:99:6a:52:a7:ca:ee:0b:26:
46:a9:73:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:58:27 2026 by rpki-client