This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
File: Xq_GD000CftGyKW_ldOYHxShQ7A.mft (raw, json)
Hash identifier: sQ9ZaSvDSaOIbYWTLS1rYP46L1xGdj2tV2dtHAJxcmo=
Subject key identifier: 7B:3C:61:DE:75:ED:E8:47:74:D0:19:7F:06:F6:33:D1:C1:7F:1A:DA
Authority key identifier: 5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0
Certificate issuer: /CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0
Certificate serial: 019C42EB9BCA62470B84BE6AB4FC48BA3377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 15:01:02 +0000
Manifest this update: Mon 09 Feb 2026 15:01:02 +0000
Manifest next update: Tue 10 Feb 2026 15:01:02 +0000
Files and hashes: 1: GUgLg3-BRyvvd7IU0mKTRz8HLQo.roa (hash: QrRBGrDD9ZKqKp1YwsfRb3TUqSdKHluo6aJuZoI6754=)
2: Xq_GD000CftGyKW_ldOYHxShQ7A.crl (hash: ku9XxwjtYdhnaXWNgtuC3DpysnIqd6yptEPIfZGc54o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:9b:ca:62:47:0b:84:be:6a:b4:fc:48:ba:33:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0
Validity
Not Before: Feb 9 15:01:02 2026 GMT
Not After : Feb 10 15:01:02 2026 GMT
Subject: CN=7b3c61de75ede84774d0197f06f633d1c17f1ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cf:a4:1b:37:8d:c0:33:9f:43:d6:0c:6e:ec:
d6:d7:92:7c:91:e9:5f:bb:69:63:e4:61:0c:5e:05:
bb:57:72:c9:73:aa:77:fc:90:78:bf:06:0f:ed:c4:
af:a5:88:18:ef:59:6d:13:97:31:c4:db:dd:84:fc:
36:ab:80:05:c8:e0:8e:18:7b:c5:82:6e:33:c9:3d:
94:73:8d:f1:5a:3d:16:ce:20:b7:1e:54:7f:6f:3e:
38:60:9b:d5:f0:21:dc:ad:9b:74:e2:a6:9e:1e:70:
f6:54:07:8f:46:8a:0d:9f:82:ad:c7:1b:3e:c9:de:
b5:22:fd:5e:89:0a:07:26:ef:3d:f7:0a:5a:bc:17:
8f:1d:a2:95:d0:6f:38:c6:40:9c:16:35:a3:3d:66:
42:cf:8d:09:05:69:33:56:28:af:de:3a:25:e9:cb:
18:94:90:de:e8:24:0f:3d:08:28:4e:64:a4:82:2f:
0b:56:4b:ee:8a:97:fb:fa:fb:14:28:c3:e3:93:02:
42:94:c4:76:75:21:c0:37:8f:d2:57:ea:6e:c8:1a:
f5:d3:42:b2:93:d2:c5:ef:69:89:7c:39:55:8c:09:
ed:72:6f:40:55:08:59:ff:5e:3b:77:6b:19:97:d6:
95:5a:63:93:54:89:69:17:9a:7b:03:98:ec:41:c4:
c8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3C:61:DE:75:ED:E8:47:74:D0:19:7F:06:F6:33:D1:C1:7F:1A:DA
X509v3 Authority Key Identifier:
keyid:5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5b:80:31:fa:1d:8b:47:5c:c5:c7:0c:83:be:f0:30:ca:f8:
2d:ab:f8:d7:d4:eb:89:60:d2:e6:34:64:eb:be:c7:83:32:8f:
c0:61:67:8a:19:0b:ce:29:de:3e:2f:32:47:e2:fd:31:f4:63:
82:5c:c4:72:43:de:d5:79:d3:87:08:18:d0:88:80:ec:f9:0e:
1a:17:26:b0:12:09:81:24:74:a5:5a:78:ed:36:ad:ce:61:2f:
4b:21:53:8d:51:8f:3a:ff:9c:71:89:6f:84:2f:71:ce:d1:7b:
3c:9b:a1:03:54:20:5a:05:b5:e1:ff:e9:fd:85:bb:97:09:cc:
34:61:2a:c0:4b:9c:00:4c:9d:a4:23:d5:5e:32:01:6b:07:d8:
58:ef:5b:2c:e2:56:3d:76:8a:c2:f7:8c:28:8c:c9:c9:2d:f9:
b1:bf:f0:43:2d:49:98:01:51:f5:5e:07:84:fa:2d:b6:14:85:
2b:c9:06:52:a8:80:d5:77:05:f5:4c:8e:46:fb:ba:53:17:c8:
1d:e5:92:75:c5:00:cc:d5:8d:38:5c:83:61:73:e4:d1:5f:c7:
35:b7:89:d6:33:2d:96:47:bf:fe:a0:32:c7:d4:99:40:e0:c9:
a4:9c:58:b9:c3:52:e1:ac:74:5c:6d:a3:df:09:b4:69:4d:c7:
cd:37:53:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:43 2026 by rpki-client