This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
File: Xh1AYP1QHrrpPtRNprennmZwWy8.mft (raw, json)
Hash identifier: MKobqFgDe4I7d0XmzzXveUhelVGfdoweM1I3E+xqP2Y=
Subject key identifier: 72:13:24:F5:DB:16:B5:38:6D:F6:50:7D:2A:36:30:15:23:12:F4:88
Authority key identifier: 5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F
Certificate issuer: /CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f
Certificate serial: 019C4322645F86D085C095E32540A98B40FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
Manifest number: 1813
Signing time: Mon 09 Feb 2026 16:00:53 +0000
Manifest this update: Mon 09 Feb 2026 16:00:53 +0000
Manifest next update: Tue 10 Feb 2026 16:00:53 +0000
Files and hashes: 1: JQHrdWqlz2UqGKCLzlTiY4SvfH4.roa (hash: bwaVBJc44mNBjusS1vQzeOwmOeBHHl10XyVb8yiVdpw=)
2: Xh1AYP1QHrrpPtRNprennmZwWy8.crl (hash: xaL7zF/93viT8o9O6oaYTfQ/wqXGVRvuqoP46cgSAlc=)
3: ZjTRqjLbUrNz2NUC-0NUb8hGxVI.roa (hash: lNRVW6GevA3klBK1hehDwbl+8Dt78Jzm0k/Uol69mug=)
4: euXoJUWr3F0_dXowhJbULwFHFkA.roa (hash: cczTixdHtcVBoqBRLYhdFy/dK3Tmrb19hmQ27lh4fQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:64:5f:86:d0:85:c0:95:e3:25:40:a9:8b:40:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f
Validity
Not Before: Feb 9 16:00:53 2026 GMT
Not After : Feb 10 16:00:53 2026 GMT
Subject: CN=721324f5db16b5386df6507d2a3630152312f488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:58:c0:1e:75:e1:f2:61:98:1d:ef:f9:c2:85:
0c:4e:5b:f5:22:8b:a0:0a:64:7d:36:85:fa:56:70:
17:9e:4c:5c:4b:70:0a:04:e3:fd:c9:52:66:72:75:
87:8f:af:b2:68:40:6a:aa:ad:67:07:25:69:94:cb:
95:26:7f:90:9f:b5:af:02:b5:b2:b6:e8:65:ef:70:
5b:72:da:49:e4:13:ee:77:2a:1d:a6:cd:60:02:cc:
5a:5c:38:2f:db:54:22:2e:75:1f:6b:5e:21:6b:56:
4f:b0:49:4e:20:c0:22:16:8b:05:b1:39:a5:96:61:
cf:24:06:a8:7a:e8:10:f7:39:f7:f8:9f:6e:b4:cd:
07:3a:91:b7:dd:24:27:bd:1e:78:2a:4d:c1:49:55:
85:75:fa:fd:8a:ce:a4:8e:90:3b:14:60:7e:60:88:
5e:c8:07:00:ce:24:eb:00:d6:f2:1f:d6:d9:aa:9d:
dc:b5:a8:f4:22:3a:39:2d:01:5f:d7:48:a9:1b:e0:
cc:0c:6a:2b:c0:35:e5:a6:9a:93:7f:11:3d:01:e1:
ff:30:57:bf:6a:41:32:b3:63:d1:8f:f0:72:05:fc:
d9:c3:a4:b8:6d:ab:bb:13:39:9a:36:c5:3d:87:2c:
bd:bb:86:2b:7c:f9:47:89:78:eb:02:0b:bc:6d:08:
2c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:13:24:F5:DB:16:B5:38:6D:F6:50:7D:2A:36:30:15:23:12:F4:88
X509v3 Authority Key Identifier:
keyid:5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:92:56:5a:dc:a9:c7:82:ed:7f:42:6c:29:f6:28:f5:89:20:
13:67:da:04:08:0e:1a:69:01:72:13:e9:9d:a7:0b:02:42:ef:
79:bf:32:29:ff:dd:38:bf:e0:1a:0e:17:f5:3a:3a:01:c1:11:
67:6a:97:5e:c9:8f:c6:9e:84:c0:82:58:17:60:8e:33:c7:b9:
d6:2a:f1:7a:9b:bd:ca:c2:9b:63:07:1e:ab:7b:aa:fd:80:48:
64:d3:74:18:55:b5:91:60:68:a0:98:59:ed:a4:d2:05:90:7b:
28:80:70:a8:71:6e:e7:d4:2c:3d:10:86:af:dd:c8:9b:b8:86:
2c:16:4a:9e:d3:46:6d:37:37:5c:49:1a:14:d9:88:83:7c:21:
be:d2:19:57:0b:07:80:7b:92:eb:c1:a2:d4:69:6a:d9:38:97:
f3:5d:b4:ce:08:a4:22:30:ad:b9:01:7b:76:d5:cb:33:10:1f:
45:63:ce:f9:70:4e:e9:52:50:f3:3c:ae:b5:f1:63:ef:06:0c:
01:67:12:86:dc:7a:d0:f9:e7:67:2b:33:94:75:08:79:d4:18:
1e:ae:dc:16:de:c9:8f:4d:83:96:93:6e:1a:47:88:70:64:67:
48:16:6b:39:57:48:f5:48:15:49:fb:2b:1f:7e:fe:29:18:6c:
fe:3f:8e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:46:38 2026 by rpki-client