This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft
File: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft (raw, json)
Hash identifier: goi2iVbHIf/1KyH0XCmFxd+DXz3lvXYTP8kBaHmztyU=
Subject key identifier: 0F:4D:51:50:28:FB:8D:BE:9F:DA:00:C5:0E:03:8F:6A:07:32:B6:09
Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Certificate serial: 019C4246B88A19E5F7007DC76E2A57D5C4F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft
Manifest number: 16F2
Signing time: Mon 09 Feb 2026 12:00:56 +0000
Manifest this update: Mon 09 Feb 2026 12:00:56 +0000
Manifest next update: Tue 10 Feb 2026 12:00:56 +0000
Files and hashes: 1: 47SPVD5eRBRtQOdhkPJLtKlWVtw.roa (hash: bKkMN0a5lRYs5L43ucFGHo3R0nOeIgw+eg3xKbAgfAc=)
2: 5nKxR0LJgs98nQ711prCkE12LNA.roa (hash: JIisZ4jB4MLoM1hM7ofWzH6YaAn+TmQso/C3gjZUBsg=)
3: Fa0yONavCjEAe1Eohi0yspGlhxQ.roa (hash: 3eZFK3rqXv1duhuoTsoGkRZWH46FcIWfv4LFjn6GgpQ=)
4: G9wXGz-V7z9N06IYkFQbWaikBuw.roa (hash: ubDv7Y8gDrp5CpRZSNK8ngDSPY4+mdKXB2Ipp8o2szI=)
5: S713gcjdnkNzN7yc5DeAIIBw450.roa (hash: o4Y3l1bMTiDxCyLlapaxwgYpQHnFJpp2OPyiWQGZU7Y=)
6: Uhtjh5h2mIHR4xqSRaIoSxiMlak.roa (hash: W2vJvNYSDyVMMDF76X044/wyGHHTKZcbe3dNyRLN5sw=)
7: WlUxWyqXuixA56b_z1i_j2g049k.roa (hash: D1Aaq4FWu3ElR+k2lZzxzPcMWSdaLUSSN7wh4AD3Jps=)
8: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl (hash: Rc1la4la3PTBYrnEPWFeMglScEBnbMqyvqMYAkvaOoY=)
9: cO3L_O9iH3CpAb6wfKqnzexaiZw.roa (hash: pj94KMfhjICUsVaoxZhEfK8uuBzuqSDVbcY5a+83gKk=)
10: icZTPv9OR5OTnhr1rHGcxCJ58Ak.roa (hash: arprUL7p8dPltybL9Ima2iSVJ5V28bMQjBY9hAOORcM=)
11: t79xap_1Ai1eIDAVN_obgOAxh8I.roa (hash: SQqzbufQ2nobJI4V5WArtaMZb1xgFTHwnAl8dSm/a14=)
12: xS4Yp_ovY5BJPOyOqhKksJ1wnhc.roa (hash: QTJziojzNwwsyc85fUJ9i4BbVboJ8JdEekV7rnyN4Jo=)
13: yjtEzt4tnzwXqCj-rSCSkNIP_AU.roa (hash: ZAuaryY8xWTB7SixfOw56hlgIMJUsLPsIWvOz+XwlGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:b8:8a:19:e5:f7:00:7d:c7:6e:2a:57:d5:c4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Validity
Not Before: Feb 9 12:00:56 2026 GMT
Not After : Feb 10 12:00:56 2026 GMT
Subject: CN=0f4d515028fb8dbe9fda00c50e038f6a0732b609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6a:f9:74:95:8f:10:98:e3:4f:36:81:8c:a9:
79:b8:bb:a4:ac:95:bd:eb:e8:aa:c4:6f:87:53:a4:
80:b7:c9:cc:e7:45:78:66:75:66:29:bb:80:53:39:
62:c8:44:74:6d:1c:d4:8b:59:d3:d7:d0:00:76:30:
a7:f8:7b:f4:86:e4:08:73:0f:ca:da:53:70:84:da:
e8:ce:e1:95:2d:5e:bf:28:2b:3c:9b:35:27:c8:de:
9a:86:c2:34:5b:45:1b:dc:a7:62:f1:d8:3b:d8:39:
c1:fd:72:6b:2c:b2:37:bd:b4:34:aa:7e:57:b6:fb:
3f:84:79:8d:fc:e7:31:17:dc:94:2b:b7:c4:69:49:
ce:e4:63:bc:99:13:00:0a:b2:03:39:c0:0e:d3:31:
e2:6e:ca:0a:2b:55:ed:57:e3:c3:15:5d:90:bf:4c:
50:d9:8c:82:56:64:e8:f2:aa:70:2c:f9:65:8c:d0:
41:33:40:20:3d:82:5f:c5:9f:4e:ae:1b:a5:26:d6:
b7:6c:de:9a:6e:5f:4f:df:d2:8b:8e:9e:7c:3c:6a:
28:f4:8f:c0:e4:1d:e4:ac:01:94:14:f5:61:63:6e:
69:b1:5d:f0:69:ba:64:10:ec:36:7f:e2:1b:3a:a4:
54:dd:d2:10:d8:61:bb:2d:13:b5:2b:70:ec:4d:e1:
7f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4D:51:50:28:FB:8D:BE:9F:DA:00:C5:0E:03:8F:6A:07:32:B6:09
X509v3 Authority Key Identifier:
keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:36:e8:61:da:2e:52:1c:d0:94:45:1f:ed:59:6f:56:31:92:
ff:21:b6:b4:4c:88:5e:fa:4c:b6:39:40:3e:55:21:db:46:4e:
98:34:24:e1:50:d7:a2:bd:78:36:25:02:ee:ca:15:f1:6e:5a:
5d:d9:69:7e:74:b1:04:8c:71:43:5d:da:a9:a4:1a:c1:eb:7f:
32:3e:22:a9:6a:f2:e1:8d:ac:45:53:b0:19:86:89:ec:87:54:
e0:02:52:7b:2e:7a:1d:43:de:ac:60:07:be:e6:22:aa:77:90:
6c:0c:d9:37:fc:c9:47:32:01:74:75:71:e7:71:63:bb:6f:ae:
26:84:1b:35:51:3c:c7:7d:91:e6:46:e4:63:06:26:ed:bc:37:
dc:fe:2f:35:76:45:c6:e4:df:49:fd:08:69:75:43:ac:eb:88:
0f:49:30:b7:b2:8d:5e:37:2d:17:50:be:56:97:d9:00:f7:f5:
35:f3:52:9b:5e:38:fc:29:5e:64:d4:32:a1:76:56:1e:4d:bc:
5c:7c:a7:58:df:9a:aa:62:96:d2:24:03:da:a9:09:4f:47:a6:
26:2b:dd:0b:3e:09:d7:51:da:98:e5:6f:37:6b:b2:c7:8d:b9:
9d:b2:df:4d:7a:6d:05:52:bb:3c:09:1a:66:ad:89:ea:25:fe:
53:4c:43:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:18 2026 by rpki-client