This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
File: xSe66XlBtg89zTqgfixf2d0DpsE.mft (raw, json)
Hash identifier: ADEsYAE6c8O+qlpUhHDXo7McISGWp5NVaU0uwwrRbdM=
Subject key identifier: 69:92:CF:02:B7:59:3E:B6:EE:3B:B0:BE:D1:0E:11:65:7B:FE:B5:9B
Authority key identifier: C5:27:BA:E9:79:41:B6:0F:3D:CD:3A:A0:7E:2C:5F:D9:DD:03:A6:C1
Certificate issuer: /CN=c527bae97941b60f3dcd3aa07e2c5fd9dd03a6c1
Certificate serial: 019C41D8EBCC9539336D3B353EE77E289398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
Manifest number: 0E50
Signing time: Mon 09 Feb 2026 10:01:00 +0000
Manifest this update: Mon 09 Feb 2026 10:01:00 +0000
Manifest next update: Tue 10 Feb 2026 10:01:00 +0000
Files and hashes: 1: xSe66XlBtg89zTqgfixf2d0DpsE.crl (hash: 9rk/ShrDBGVHzUgYNs7YSQbG4dHZok7jt5rt22Bb3ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:eb:cc:95:39:33:6d:3b:35:3e:e7:7e:28:93:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c527bae97941b60f3dcd3aa07e2c5fd9dd03a6c1
Validity
Not Before: Feb 9 10:01:00 2026 GMT
Not After : Feb 10 10:01:00 2026 GMT
Subject: CN=6992cf02b7593eb6ee3bb0bed10e11657bfeb59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:98:4b:2f:7e:02:63:63:68:16:05:82:4e:25:
f5:d4:d1:3c:fb:6e:40:df:46:e8:ab:0e:50:bf:1f:
da:93:37:4c:be:40:4a:e8:ac:43:bb:85:a5:55:cc:
d4:56:86:bd:e6:53:6a:c1:68:0f:b2:03:8c:a8:f2:
96:86:8a:66:0b:2a:90:eb:ac:9d:ff:7f:43:0a:d8:
51:98:86:78:c1:1a:77:b3:c2:bf:c1:76:a3:29:76:
37:ae:ed:83:e1:80:33:65:1d:73:e0:f9:63:f5:dd:
fa:f7:51:b8:63:73:4e:16:f4:b8:16:ad:3e:21:8c:
8e:88:24:2d:d2:b5:ca:91:b8:f5:63:df:dc:31:07:
0b:d7:46:dd:bd:62:27:49:0f:77:39:d2:30:be:01:
8a:d0:8e:0e:e6:d9:42:44:27:1a:76:bd:91:21:7b:
2b:09:96:5a:15:82:40:56:84:c7:d0:4a:5b:72:30:
5f:98:ae:45:ff:1d:4d:df:c7:3e:4f:8e:2e:0a:69:
06:f1:9b:82:5f:ff:4d:0b:9c:21:88:17:10:bc:a7:
1d:f0:aa:40:60:e9:f6:2c:0f:3c:9d:e9:88:ee:1d:
86:20:5e:06:b1:96:a2:2a:07:97:98:5a:72:8e:80:
4d:e4:0e:03:f2:e1:4f:38:45:ce:90:2a:b2:03:68:
d4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:92:CF:02:B7:59:3E:B6:EE:3B:B0:BE:D1:0E:11:65:7B:FE:B5:9B
X509v3 Authority Key Identifier:
keyid:C5:27:BA:E9:79:41:B6:0F:3D:CD:3A:A0:7E:2C:5F:D9:DD:03:A6:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:eb:cb:69:e4:0b:57:49:ea:90:6e:39:ac:ac:6c:fb:a0:d5:
9e:4b:38:6c:99:b7:9a:35:91:83:40:17:6f:f5:4e:7b:42:45:
39:73:54:e1:af:07:c6:ca:5e:e5:29:f7:08:2d:40:af:3e:e5:
ea:5e:dc:56:ab:47:6f:c6:f1:85:dd:b1:b8:f8:fa:ae:4c:fe:
b5:13:10:c6:bd:9a:9a:27:f9:90:76:f0:e2:8a:9b:bc:bc:3a:
a7:c8:99:4b:87:2f:b6:5e:e3:80:3b:48:f9:f8:80:63:b1:42:
0a:d6:78:29:d4:bd:c0:62:80:ca:31:6a:11:bf:04:20:88:41:
88:a3:10:8a:76:a1:d9:6d:32:0f:95:45:8a:bc:a2:45:5b:2e:
97:bc:c5:48:83:39:1b:58:33:9c:a6:2a:74:7a:70:79:31:ff:
b5:cc:06:38:82:c4:a5:14:9a:5e:2b:b2:2e:6a:2f:4a:da:22:
2b:c6:5a:15:9a:cd:23:fb:fa:47:5f:0f:08:73:7b:c0:9e:d8:
4d:2f:06:80:d0:8a:75:a9:2f:c1:9c:cd:b0:a3:1e:16:6f:ed:
fd:0d:2c:95:c5:e5:4f:00:02:8c:37:33:e9:fb:5a:77:2b:bf:
ea:32:00:6a:e6:13:03:36:28:7d:4a:04:f7:ed:58:05:4d:88:
5f:4e:17:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:54 2026 by rpki-client