This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft
File: KXxQjSOzgxW79FtybSIFCkYSe4w.mft (raw, json)
Hash identifier: mET03WYTIsAM1aoOdLPPo/rPsKTJQiztYSxN2Oph/WY=
Subject key identifier: 2E:26:08:E4:AD:0C:E1:13:7C:84:0A:2D:8D:55:58:88:79:23:79:EE
Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c
Certificate serial: 019C4434AE9F612CCDA8BC33AA9F40FBD0AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft
Manifest number: 1829
Signing time: Mon 09 Feb 2026 21:00:28 +0000
Manifest this update: Mon 09 Feb 2026 21:00:28 +0000
Manifest next update: Tue 10 Feb 2026 21:00:28 +0000
Files and hashes: 1: 56tuRDz3a2YTFgeWS1NrR18OXkg.roa (hash: 1nNgHHZdgSddhmbVFpAOLV/4EiXUghshKvJclDsKVmQ=)
2: 93F83tT2Wunj2ibLPRWbOwsrgjw.roa (hash: JbaoQPD70k3GYUMe5PmYVrd4g7l0SgbWLphprt9qBGY=)
3: GTSmnG0PAVTq_ZIe3OqYIPLnDko.roa (hash: qe+WDGTjMvxnPuiz5zKe63b6ayHJKcpH5bKiSm9lucU=)
4: JFWICVCDQ0-5n6Qon8fcHbGHC1c.roa (hash: zytsTfDYZZwrcpQaDSmmhp6xyQ2RMRRVWWyPiD2yWTY=)
5: KXxQjSOzgxW79FtybSIFCkYSe4w.crl (hash: BboW81VkHt57xw+63asmmDGoHXwO4jvGLDWYA8xSEC8=)
6: YbqOfaiEzhYbZf1v7kxnJ5oWDdI.roa (hash: K1/J1u+fYdGovmZqt2ux5U8mWlfYB0TiDE6Xjf+a840=)
7: _5mSAKagSlrWqcFH7TXH0W26og4.roa (hash: 32J2xduAEK4/SsGh6SuDbhyqyhh7XlyF7binO4R80Wc=)
8: _CYFplyxe0M8AGr1RbZtWaBJCec.roa (hash: ySL4S7eZ51S8plbBqZUtXVpCREgkLAcEZfRUYmcl9sw=)
9: e_Y8m6hQnaU1_F275I-kuLokN-4.roa (hash: IKlSVsHkmxTdflTQC2UglUrzLaalL2q7STsM2XkFnP4=)
10: hB5dwzE-8jl9eMnVeqctFOx2T7M.roa (hash: aOmUGLttRikI04KddCkVaiXTdQZBZHrIgCYCo3rRy5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:34:ae:9f:61:2c:cd:a8:bc:33:aa:9f:40:fb:d0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c
Validity
Not Before: Feb 9 21:00:28 2026 GMT
Not After : Feb 10 21:00:28 2026 GMT
Subject: CN=2e2608e4ad0ce1137c840a2d8d555888792379ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:94:fb:ff:bb:70:9a:d0:f3:bf:af:5f:72:e9:
b8:17:85:d9:94:c2:7b:99:9f:0e:44:fe:5f:3c:ed:
7c:c1:05:83:41:e9:5a:e7:d2:98:57:6b:4f:f5:90:
b2:fe:ac:dc:f3:e3:cf:62:85:12:f3:cb:43:6f:5b:
08:13:4f:01:34:51:f8:18:a0:e6:5e:e4:f9:86:86:
67:6f:e9:21:12:60:26:4d:98:55:2f:f7:4f:3a:e4:
06:ee:bd:b1:a9:f5:48:58:39:1a:56:b2:64:ff:8e:
b8:bb:30:d4:d5:2f:ea:82:ce:5e:ad:e1:20:4e:6b:
b7:6a:f2:b8:18:79:ed:c1:5a:4a:21:c1:91:71:c5:
94:5b:c2:d0:70:9b:26:59:fc:53:99:99:e3:3b:e3:
ba:d5:b7:0d:6c:28:08:41:dc:d2:28:bf:a0:79:23:
33:76:9a:1a:25:04:05:2d:1d:08:df:65:c3:a7:90:
be:d5:80:da:df:bf:aa:a5:9d:7f:91:b7:ca:c2:5b:
a4:58:bb:3c:74:01:76:40:ff:36:e0:5e:2b:aa:b0:
4c:8b:27:c0:27:88:e8:ed:ee:f4:25:ce:1b:80:7b:
e2:30:85:d4:2c:33:d4:da:62:37:b7:53:7e:09:94:
2b:0f:67:26:82:f7:11:70:4c:a2:e8:33:b6:28:3b:
17:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:26:08:E4:AD:0C:E1:13:7C:84:0A:2D:8D:55:58:88:79:23:79:EE
X509v3 Authority Key Identifier:
keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9a:12:11:53:7a:93:a2:0e:01:85:49:8e:d1:d0:ae:69:0f:
90:b4:b2:fe:20:e4:d0:57:9d:8d:7d:94:2d:72:ce:17:14:6b:
a7:55:0d:b9:a1:76:97:df:01:dd:3b:80:b9:a7:9f:22:36:fc:
db:3e:04:6e:d3:0b:a9:2b:9e:f6:46:95:19:27:d8:d8:c0:af:
01:e1:e8:3d:97:f6:c8:37:25:be:6a:1b:25:49:50:18:02:f5:
4c:89:68:19:96:90:98:c1:25:6b:f9:30:d6:05:1b:30:b0:9e:
a3:7a:df:24:7e:00:d4:6c:d6:4b:82:e4:24:17:6b:b5:eb:61:
b7:7f:c2:77:19:d9:25:78:bb:b6:e4:60:b7:5e:c9:f4:ce:5c:
95:20:a9:39:e8:08:9b:5f:5b:f2:64:cd:f1:e2:d0:cb:28:b8:
3d:4f:5a:f3:c3:0d:df:60:bc:6e:5d:04:71:44:8a:2a:71:64:
59:ce:8f:24:2b:7e:57:5c:53:6c:98:d2:02:43:d0:c1:d6:9f:
fa:6e:87:3e:95:28:97:49:f5:fe:89:12:25:77:b0:03:d8:ee:
fe:16:f1:be:81:f6:6f:7f:e7:aa:1c:01:e3:68:28:ad:f1:74:
77:02:f6:84:8f:22:10:45:46:90:47:b7:cf:14:ed:a7:d5:fd:
6b:59:cc:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxENK6fYSzNqLwzqp9A+9CrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx
MjdiOGMwHhcNMjYwMjA5MjEwMDI4WhcNMjYwMjEwMjEwMDI4WjAzMTEwLwYDVQQD
EygyZTI2MDhlNGFkMGNlMTEzN2M4NDBhMmQ4ZDU1NTg4ODc5MjM3OWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5T7/7twmtDzv69fcum4F4XZlMJ7
mZ8ORP5fPO18wQWDQela59KYV2tP9ZCy/qzc8+PPYoUS88tDb1sIE08BNFH4GKDm
XuT5hoZnb+khEmAmTZhVL/dPOuQG7r2xqfVIWDkaVrJk/464uzDU1S/qgs5ereEg
Tmu3avK4GHntwVpKIcGRccWUW8LQcJsmWfxTmZnjO+O61bcNbCgIQdzSKL+geSMz
dpoaJQQFLR0I32XDp5C+1YDa37+qpZ1/kbfKwlukWLs8dAF2QP824F4rqrBMiyfA
J4jo7e70Jc4bgHviMIXULDPU2mI3t1N+CZQrD2cmgvcRcEyi6DO2KDsXRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4mCOStDOETfIQKLY1VWIh5I3nuMB8GA1UdIwQY
MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt
MzZlOWE3OWJkOTUwLzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw
LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5oSEVN6
k6IOAYVJjtHQrmkPkLSy/iDk0FedjX2ULXLOFxRrp1UNuaF2l98B3TuAuaefIjb8
2z4EbtMLqSue9kaVGSfY2MCvAeHoPZf2yDclvmobJUlQGAL1TIloGZaQmMEla/kw
1gUbMLCeo3rfJH4A1GzWS4LkJBdrtetht3/CdxnZJXi7tuRgt17J9M5clSCpOegI
m19b8mTN8eLQyyi4PU9a88MN32C8bl0EcUSKKnFkWc6PJCt+V1xTbJjSAkPQwdaf
+m6HPpUol0n1/okSJXewA9ju/hbxvoH2b3/nqhwB42gorfF0dwL2hI8iEEVGkEe3
zxTtp9X9a1nMTQ==
-----END CERTIFICATE-----
Generated at Tue Feb 10 03:15:01 2026 by rpki-client