This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.mft
File: DxgybgAap_xW-DUxMVN2-equCYg.mft (raw, json)
Hash identifier: LYQgSq61pclINbnCmetP3jBWMDGYKtMG1y29PBF9FIE=
Subject key identifier: 6E:D5:66:53:1E:C8:73:E7:E4:8E:59:19:1A:49:1B:2C:29:AD:86:F9
Authority key identifier: 0F:18:32:6E:00:1A:A7:FC:56:F8:35:31:31:53:76:F9:EA:AE:09:88
Certificate issuer: /CN=0f18326e001aa7fc56f83531315376f9eaae0988
Certificate serial: 019C427E0221534E9F5B6EA7B89193E5B7BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DxgybgAap_xW-DUxMVN2-equCYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.mft
Manifest number: 0A87
Signing time: Mon 09 Feb 2026 13:01:20 +0000
Manifest this update: Mon 09 Feb 2026 13:01:20 +0000
Manifest next update: Tue 10 Feb 2026 13:01:20 +0000
Files and hashes: 1: 64Gcj0h8vNXf7GFNZxmMm2mfr1E.roa (hash: pu8wgjr4VrA4g+LsPAV0cojDn7FfUUvf2NSJDNpkiw8=)
2: DxgybgAap_xW-DUxMVN2-equCYg.crl (hash: iKqVEcmX4sbthS3LhWAVVawylmd2VH06p0QWdzVKeo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DxgybgAap_xW-DUxMVN2-equCYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7e:02:21:53:4e:9f:5b:6e:a7:b8:91:93:e5:b7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f18326e001aa7fc56f83531315376f9eaae0988
Validity
Not Before: Feb 9 13:01:20 2026 GMT
Not After : Feb 10 13:01:20 2026 GMT
Subject: CN=6ed566531ec873e7e48e59191a491b2c29ad86f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:76:b3:70:8b:3d:83:ca:05:49:61:1c:37:df:
3f:fd:ee:3d:fe:1f:7b:27:58:15:94:5e:31:03:f3:
42:2a:35:81:ea:d4:0f:0f:cf:b7:12:d3:d9:f0:a7:
05:3e:fe:69:ec:ac:09:82:da:f8:24:42:d2:b4:63:
00:11:1c:04:59:4f:a5:ad:ca:3a:0c:01:83:7c:86:
6b:c0:d9:b4:8e:b0:3f:80:90:ec:0e:27:0a:dd:81:
23:c0:cd:5d:c1:f6:30:52:91:51:8c:e7:22:b3:2b:
f3:ad:77:a5:ce:e9:95:e6:51:38:64:16:2b:ef:41:
bb:54:c5:bf:26:4c:27:15:ce:d8:28:4e:2d:bd:25:
a8:71:17:bc:f4:7f:f3:2b:35:90:cf:ca:66:43:cc:
ea:b6:a5:a4:fb:cd:ca:cc:27:47:04:7e:33:a8:66:
26:7d:c7:ce:25:e6:6d:b6:a3:4f:bf:f7:80:9a:5e:
da:53:56:bd:fe:0e:83:b5:06:a5:b8:6b:81:ab:d3:
e4:cf:e7:8f:64:93:b1:1d:82:7c:74:3c:3b:69:0b:
b6:19:b4:23:c2:a0:2e:09:6c:08:3c:27:e7:59:f1:
68:cc:8a:33:a4:b6:2b:a4:58:2b:01:13:ad:00:d5:
0a:3a:cb:1d:ef:be:a1:c7:92:34:e3:88:79:36:a4:
85:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D5:66:53:1E:C8:73:E7:E4:8E:59:19:1A:49:1B:2C:29:AD:86:F9
X509v3 Authority Key Identifier:
keyid:0F:18:32:6E:00:1A:A7:FC:56:F8:35:31:31:53:76:F9:EA:AE:09:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DxgybgAap_xW-DUxMVN2-equCYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:94:9a:6b:41:ca:65:d5:cf:a0:cb:ce:e3:82:91:d7:f0:f7:
5f:4b:f6:5d:37:7b:fb:4f:84:89:1c:4a:f2:82:04:9d:02:4a:
33:9e:cb:cd:da:32:d8:46:2c:ee:4c:bc:01:2d:eb:d3:9d:22:
a7:99:06:9b:5d:25:f0:d7:a8:e4:c4:1e:92:db:f9:db:f7:0e:
04:14:dc:be:f4:2e:a9:46:9a:02:1e:d2:50:89:3f:75:aa:83:
08:22:12:26:b3:31:0a:a1:fe:e6:cc:2f:ec:6a:fb:ec:e1:a3:
4a:14:63:b4:b8:eb:f2:85:37:09:62:f7:45:15:ed:e6:d3:bd:
3b:1c:c6:65:30:60:d2:9b:b3:eb:29:7d:80:a8:cf:93:0b:eb:
e7:45:19:08:b0:b8:67:56:98:57:55:ed:b4:91:5c:e7:9e:d6:
ed:7c:f2:a3:01:27:7a:64:81:cb:6b:0d:cb:e1:8d:1f:b4:3a:
35:4c:9c:cd:1d:9f:4d:23:59:02:d3:a5:06:47:6b:17:f0:b7:
88:27:be:52:75:e2:a4:e7:00:4c:63:8a:17:a3:da:fb:8d:f5:
ab:85:dc:e7:f9:1e:33:3c:99:f1:06:3a:1d:78:59:6a:16:81:
92:e1:b4:3d:f2:29:2f:78:fa:9d:5f:7a:01:44:8a:2b:8d:74:
d2:2b:71:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:57:08 2026 by rpki-client