This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
File: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft (raw, json)
Hash identifier: 3MZvYunpp4NpptQEDfd1l0F7dWVcu54riUPso+72nw0=
Subject key identifier: 2F:02:59:7F:8A:78:71:5E:33:65:D6:5B:92:8C:E1:DD:F3:A6:8E:F5
Authority key identifier: E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
Certificate issuer: /CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Certificate serial: 019C4358F1E0983F27D62A7A23433B6D8254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 17:00:28 +0000
Manifest this update: Mon 09 Feb 2026 17:00:28 +0000
Manifest next update: Tue 10 Feb 2026 17:00:28 +0000
Files and hashes: 1: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl (hash: KPzDfaBuAwEL5/RwkQXuQOnyl8hZMcga4qRT0Qo+Ows=)
2: cPmuXHtpdWHOv_IohN-yvdSZh00.roa (hash: uWWYQC9FttyGHNgD7wIoeeDy1sX/WMjKSFeXWzNylw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:58:f1:e0:98:3f:27:d6:2a:7a:23:43:3b:6d:82:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Validity
Not Before: Feb 9 17:00:28 2026 GMT
Not After : Feb 10 17:00:28 2026 GMT
Subject: CN=2f02597f8a78715e3365d65b928ce1ddf3a68ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:74:9e:47:cb:52:b8:9e:36:83:69:2c:74:21:
40:41:87:e7:95:8a:dc:10:c9:8d:1a:3d:87:c7:9b:
11:76:06:03:d0:5f:42:bf:d0:26:42:af:33:d0:2a:
42:72:1b:f1:08:87:62:81:78:9e:b8:e1:7a:12:13:
39:33:76:79:d4:fc:f0:46:8d:fd:c0:a4:38:ce:14:
d7:c3:64:04:f7:16:4e:ce:6f:8d:c2:e2:3c:1a:29:
18:f5:96:ac:61:3c:40:5c:1a:30:c6:a8:77:b3:39:
c3:d1:93:2b:2b:5d:21:3c:30:e7:a9:7c:e2:2d:20:
c4:12:96:d9:55:dd:97:45:c3:8f:e2:88:f8:a3:9e:
b4:43:1c:f1:55:10:65:41:81:e7:ec:75:0e:ea:1a:
e7:c1:bf:a8:3c:ee:4d:89:ab:ce:9e:ce:44:ee:06:
de:95:98:9c:ab:48:0f:92:85:54:ff:da:60:2f:1d:
17:9d:97:79:12:91:09:f6:ad:97:c9:29:2e:cb:dd:
5d:74:b7:24:d3:0c:f3:86:5a:2c:71:22:02:10:8d:
05:58:23:8c:c1:4f:63:d5:de:34:2e:aa:1e:31:34:
48:7f:e7:e5:39:af:96:b5:79:9f:19:4e:38:12:8b:
56:5e:12:65:16:b2:3e:6c:b9:e5:e5:75:4d:21:eb:
45:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:02:59:7F:8A:78:71:5E:33:65:D6:5B:92:8C:E1:DD:F3:A6:8E:F5
X509v3 Authority Key Identifier:
keyid:E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:69:80:12:da:da:b6:21:93:f9:70:3d:95:f8:e5:2d:b9:2c:
98:e0:38:12:b4:34:5f:9b:e3:b6:cf:4a:3e:94:75:30:97:8f:
c6:63:37:fe:54:57:0d:36:1c:11:35:f2:99:6e:44:de:fe:ac:
79:34:cf:6a:68:27:ad:dc:19:ad:85:44:f4:0a:4d:bd:a5:e2:
88:fb:e1:df:46:6c:8f:61:da:9d:94:cc:e7:4b:89:d1:5a:c1:
6a:c5:bd:3e:47:cb:9a:01:ad:1f:6f:d8:4b:3b:d0:5b:c8:d3:
4b:d6:d4:0d:68:8b:1e:3d:fa:64:c8:9a:67:e9:41:8c:8d:f2:
4a:c4:15:19:c4:99:62:80:0a:c0:02:80:48:7b:41:c5:6a:a7:
c3:cd:72:04:db:78:d8:5b:b3:f6:63:f4:bf:d1:42:18:9b:ae:
6d:06:0d:19:c8:06:5d:c3:30:02:59:c9:37:39:bf:8f:c7:62:
44:bc:ec:72:8c:34:c4:d4:61:ba:91:78:91:7a:f9:a1:62:72:
81:04:b4:21:64:f6:10:40:f6:50:4b:06:f0:d0:f8:4b:1c:c8:
da:ff:a0:51:9f:32:91:58:3f:11:14:de:ef:32:16:4f:33:1f:
91:54:50:e8:5e:c3:fe:d6:ac:a7:e2:75:e5:ac:6a:bc:12:54:
31:ec:3b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:13:25 2026 by rpki-client