This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
File: XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json)
Hash identifier: Q3Aok5lo12ev5RdzTEIsP65Dxn/I4LOfehiI52jHy7I=
Subject key identifier: 93:CB:B5:54:E8:D1:96:62:1C:FB:C7:C9:DD:FC:81:A7:27:27:26:46
Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Certificate serial: 019C41A19D5D576817E78956899EB13D4D50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
Manifest number: 180E
Signing time: Mon 09 Feb 2026 09:00:36 +0000
Manifest this update: Mon 09 Feb 2026 09:00:36 +0000
Manifest next update: Tue 10 Feb 2026 09:00:36 +0000
Files and hashes: 1: Rjq8qMoUVTv8QuPKAfl_sw6bDWA.roa (hash: Ykk34DqNXHApsE9nxxAgQ38pONoyVUESYWMP39kBFzk=)
2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: UHyW5EmfWucpOBmPYhM8Xu+QkNgpbtC7x9cl+HwxFXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:9d:5d:57:68:17:e7:89:56:89:9e:b1:3d:4d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Validity
Not Before: Feb 9 09:00:36 2026 GMT
Not After : Feb 10 09:00:36 2026 GMT
Subject: CN=93cbb554e8d196621cfbc7c9ddfc81a727272646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:56:53:c4:3c:1a:75:ed:ad:0e:54:54:9f:cc:
00:b5:67:d7:79:8e:93:5d:86:62:90:a9:e0:cb:30:
50:a5:97:16:45:82:26:9d:9e:e1:07:eb:bc:15:1a:
69:28:30:9c:21:07:7f:05:b8:2e:53:80:83:2b:54:
96:21:cf:2d:a8:75:d9:d9:e2:45:ed:24:ad:8b:15:
92:4e:44:63:fd:0a:1b:68:e5:54:41:99:e2:0c:fc:
4f:ce:dd:b4:68:5a:95:a2:89:6a:24:ec:d9:c7:1a:
86:03:96:dc:9b:a1:4a:d7:83:da:c0:c7:58:75:dd:
00:fd:7a:35:bf:25:8b:c1:da:13:64:82:81:63:75:
5b:9c:bc:13:27:c8:87:27:85:93:42:af:f7:10:f4:
cb:a8:ff:b7:2f:7a:fa:4d:73:39:66:70:ca:b6:4b:
79:ca:1e:2d:81:9a:e6:b3:48:d4:00:1b:b5:a4:19:
33:41:59:32:af:46:fc:8d:db:1b:3d:7c:d3:61:6a:
07:aa:3f:d8:d4:b6:bc:6f:a9:23:8d:d7:74:50:c0:
d1:58:80:25:70:c6:58:ab:de:b3:00:8a:e4:37:f5:
23:0d:7d:31:26:af:dd:86:9e:93:82:26:40:70:e2:
47:d9:21:4e:0f:3c:fd:54:2f:39:08:1f:57:4c:df:
83:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CB:B5:54:E8:D1:96:62:1C:FB:C7:C9:DD:FC:81:A7:27:27:26:46
X509v3 Authority Key Identifier:
keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:04:c9:1a:37:79:d6:2f:f8:b6:2b:47:55:2d:47:28:cd:52:
ca:66:e8:3d:9f:60:89:1b:9f:a9:29:ea:20:25:56:66:ad:fc:
b2:39:e5:d1:ff:27:7b:8d:e0:67:b9:59:01:90:0a:99:8c:1b:
c1:84:19:d2:e6:3b:b2:8a:7f:e9:a5:f3:21:5a:3e:e9:7d:96:
72:d9:4d:e8:bd:d1:cc:a4:29:2d:4a:74:da:de:18:2f:e8:6d:
f5:41:4a:28:18:58:9d:d5:a2:ff:13:1e:33:7a:9c:89:02:02:
f5:ad:75:89:b7:00:56:b3:d4:d9:c2:f7:c9:8d:36:51:7f:b0:
81:c6:c3:75:16:fd:8a:04:56:ca:ca:f3:9f:4e:a0:60:17:9c:
27:20:8e:bd:1a:8f:2b:9e:48:e9:65:8c:94:0e:cc:a2:77:73:
62:dd:b8:6f:61:85:63:7e:1b:9f:4c:98:ea:5b:05:96:f6:6e:
63:3c:76:20:0d:dd:37:9f:40:ad:eb:66:be:00:d9:a0:21:3e:
cf:3a:9f:99:d5:bc:c2:6c:69:1e:fd:26:fd:8c:04:5f:c8:0e:
e2:1d:7c:f7:3c:8a:f4:a1:8a:48:e2:7c:4f:17:de:ba:4e:fe:
83:e4:65:f2:bd:d5:67:78:84:a7:7c:89:8c:c8:cb:e9:d4:3e:
48:f9:37:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:48 2026 by rpki-client