This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
File: xX5Yw0bntBVVDBOurdLPkO3QeJU.mft (raw, json)
Hash identifier: Kw4iTZ4cHLrWdME9M9GXPUogQE1YbqSZ2tfflHTwjcc=
Subject key identifier: 52:B3:3D:92:B8:A6:E0:2F:11:CA:26:B6:91:81:38:1D:36:59:A2:0F
Authority key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
Certificate issuer: /CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Certificate serial: 019C42EB5A9B62AC0A2F0238ACF4B4E349B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
Manifest number: 1814
Signing time: Mon 09 Feb 2026 15:00:46 +0000
Manifest this update: Mon 09 Feb 2026 15:00:46 +0000
Manifest next update: Tue 10 Feb 2026 15:00:46 +0000
Files and hashes: 1: 1kAOPGpT_yO1V9aiYjzOs8fosJ4.roa (hash: uKDlJs0NDCjfdYnB+MfIB/jlA65konDisvJIGcTDJUU=)
2: 9j1B5LLZDXYRtu0JrlF53YNgDew.roa (hash: enCaw1pzt1wj9vxuJHJ4PKIp1awPrJly1Aljj7nxS5c=)
3: xX5Yw0bntBVVDBOurdLPkO3QeJU.crl (hash: P3VaM4Di8+S+T6BRnVKJZoiGhPfXw7Edl73BTNN3teo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:5a:9b:62:ac:0a:2f:02:38:ac:f4:b4:e3:49:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Validity
Not Before: Feb 9 15:00:46 2026 GMT
Not After : Feb 10 15:00:46 2026 GMT
Subject: CN=52b33d92b8a6e02f11ca26b69181381d3659a20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bd:7e:af:b7:eb:2e:ca:dc:14:01:10:80:01:
74:1d:a0:17:3a:7d:95:56:a1:83:9a:a9:ed:31:27:
43:c2:35:c9:95:8d:b3:fe:c4:f2:32:d9:6b:53:7b:
75:07:e7:28:7e:ef:18:a2:55:3a:37:fe:0c:4b:09:
b3:96:c2:71:99:51:75:e1:c7:fd:35:22:de:29:10:
4e:a4:1f:ee:27:dd:63:55:2e:f3:1a:cc:f8:17:d9:
7f:10:13:14:20:01:88:ce:ae:e7:b8:65:6a:66:a9:
6a:a8:87:58:2d:31:24:96:7b:d2:85:fd:ce:50:5d:
2e:2d:a8:9f:49:b4:4e:3d:0e:98:f5:5d:a5:8e:0e:
a7:69:63:b5:1c:c7:93:62:6b:ea:17:d3:4e:3a:ab:
09:fb:5a:58:1f:80:0d:7b:ec:f3:b5:60:0b:31:12:
b4:21:5b:3a:51:70:e7:35:d6:da:bb:60:fa:b3:75:
10:cc:a0:b0:df:66:78:dc:64:06:6a:6f:73:99:3f:
24:ad:2f:1c:63:bb:63:f8:d1:41:78:8b:61:1d:a0:
f1:83:8f:37:40:06:0a:95:01:02:30:db:7e:40:6f:
78:79:f5:92:64:18:1a:47:bf:fd:0a:1c:87:35:41:
ff:48:fe:9a:2f:a9:6a:d9:52:2b:1c:0c:e3:5b:26:
bf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B3:3D:92:B8:A6:E0:2F:11:CA:26:B6:91:81:38:1D:36:59:A2:0F
X509v3 Authority Key Identifier:
keyid:C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:0b:f3:44:80:2c:d7:fd:0b:da:33:1f:93:2d:7f:f6:01:86:
16:36:cb:30:aa:b5:8d:27:f3:9d:65:a2:12:aa:4a:20:27:c1:
35:05:aa:8a:d7:df:7d:15:0a:4e:c2:14:e1:5e:b0:d6:b5:e0:
b3:1b:bf:b2:fe:ab:30:3f:18:d4:66:cd:d8:03:de:b4:2b:d7:
49:1b:6b:c1:00:0d:c7:7b:eb:93:d0:28:c2:89:1e:5d:30:bf:
14:64:20:2c:80:f8:11:36:ad:7a:ff:ba:52:5c:1c:de:d0:c5:
b7:7c:ac:6d:7e:d9:35:5b:47:8a:bd:d2:cd:a7:55:02:09:6b:
6b:62:5f:0a:2d:2a:19:7a:0e:2b:38:ab:96:18:f1:fd:bc:90:
1a:63:3d:61:62:17:a1:79:4e:8c:79:79:d6:45:b5:c2:f1:94:
39:d0:a5:85:74:30:55:8f:11:6e:57:1b:d7:b6:da:8e:36:d1:
ea:a2:0c:a4:3b:e7:99:7d:6c:16:65:fe:b3:8b:f5:34:5a:65:
01:38:ec:42:a6:1e:fc:4a:15:bc:1f:21:50:33:f9:9f:d0:1a:
7d:fb:7f:f2:d1:57:6e:f9:ea:cf:61:70:17:a1:12:ff:47:c7:
81:cf:fe:7c:95:e9:8d:13:9f:db:d6:4b:4f:52:52:d6:83:b5:
fd:5d:a4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:01 2026 by rpki-client