This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.mft
File: sxwNSGRgtxY3A-X_TYre2XiIx00.mft (raw, json)
Hash identifier: YCydQXdigmV26O4JhOqEwkg4Q6vYfnpVh5LUA3hoLk4=
Subject key identifier: 9B:CD:80:A5:F5:85:D5:36:0E:25:0D:CD:2D:A4:4F:A0:8A:01:C3:8F
Authority key identifier: B3:1C:0D:48:64:60:B7:16:37:03:E5:FF:4D:8A:DE:D9:78:88:C7:4D
Certificate issuer: /CN=b31c0d486460b7163703e5ff4d8aded97888c74d
Certificate serial: 019C427D9038BF9BAD18B205C97F0BC3B14E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxwNSGRgtxY3A-X_TYre2XiIx00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.mft
Manifest number: 09C4
Signing time: Mon 09 Feb 2026 13:00:51 +0000
Manifest this update: Mon 09 Feb 2026 13:00:51 +0000
Manifest next update: Tue 10 Feb 2026 13:00:51 +0000
Files and hashes: 1: sxwNSGRgtxY3A-X_TYre2XiIx00.crl (hash: nUs3ijsTeOl5l626Zod7+qNQqpRG0JqPF+RQck1XB70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxwNSGRgtxY3A-X_TYre2XiIx00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:90:38:bf:9b:ad:18:b2:05:c9:7f:0b:c3:b1:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c0d486460b7163703e5ff4d8aded97888c74d
Validity
Not Before: Feb 9 13:00:51 2026 GMT
Not After : Feb 10 13:00:51 2026 GMT
Subject: CN=9bcd80a5f585d5360e250dcd2da44fa08a01c38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:cd:65:84:e6:b8:d3:e1:ce:5a:db:44:21:
ad:a2:0f:db:dd:af:af:4b:35:6e:99:76:43:ae:c5:
b6:08:2f:2c:7e:8a:32:7c:49:77:9b:e2:06:5d:50:
d9:73:27:00:5b:38:9c:8a:c2:98:a6:a7:60:54:9e:
f1:23:94:ba:9b:ee:8b:f6:e8:41:b1:d2:4d:b0:53:
76:bb:6b:6f:42:8b:f0:d1:48:f2:65:a8:41:6e:d6:
55:0f:9e:73:01:e9:f4:db:39:5e:04:63:3e:90:ff:
a0:a5:e3:36:3f:9b:75:6b:94:83:46:b1:8f:a3:8a:
dc:4a:72:40:57:a8:bf:90:14:51:1c:8f:a4:9a:20:
bd:d9:95:87:a3:61:f9:a2:63:a0:30:5e:2d:4d:13:
91:38:b5:26:d8:27:64:b1:dd:c8:43:0d:32:ed:91:
53:86:c1:54:21:e7:c1:9a:2b:98:c3:f7:5c:cb:d3:
0e:df:98:ab:9f:e0:90:0a:a7:b1:4a:9c:c1:fc:b0:
af:f6:f5:e2:f0:5f:d3:fb:b6:51:f7:1b:d6:1b:12:
90:ca:ee:32:42:ff:e4:79:89:8c:4e:38:bc:fb:63:
8f:24:82:d7:eb:96:f4:8c:3c:75:78:6e:e7:f9:d0:
99:2b:02:0a:b4:94:d5:97:46:e4:f4:15:cb:75:48:
b3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CD:80:A5:F5:85:D5:36:0E:25:0D:CD:2D:A4:4F:A0:8A:01:C3:8F
X509v3 Authority Key Identifier:
keyid:B3:1C:0D:48:64:60:B7:16:37:03:E5:FF:4D:8A:DE:D9:78:88:C7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxwNSGRgtxY3A-X_TYre2XiIx00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:75:94:64:d4:08:4c:73:1d:02:e0:64:fb:70:be:90:59:a5:
41:b3:7c:4b:74:19:b8:fe:87:78:b6:89:45:68:7c:5e:00:ec:
8a:9d:9b:9f:9c:40:06:cf:c9:d4:26:a2:22:e2:96:19:c5:0b:
79:3f:14:a6:b4:3c:18:cc:26:13:61:70:d5:5b:64:66:12:dd:
42:e6:76:45:14:ac:b7:bd:d8:da:d5:13:5f:f7:9a:17:2c:bb:
12:4d:87:58:48:83:85:64:a4:ce:3d:85:9d:53:20:ff:2f:3c:
06:5d:7c:c1:4a:73:1f:08:14:24:6c:0b:2e:55:fb:ab:37:cf:
1d:4d:6c:ba:70:0a:63:d4:30:44:7f:af:58:a7:a2:88:12:32:
cd:55:e4:94:44:55:58:9b:d1:3c:ee:00:da:b0:42:64:a8:6e:
20:84:b8:5d:e4:11:ae:58:6e:8b:31:27:57:4d:97:10:3a:ed:
83:44:73:c7:eb:2e:19:6f:b4:a0:0a:cc:28:7e:10:0c:2d:34:
39:21:bf:bf:25:d1:7e:ea:9c:db:63:1b:13:4b:1e:43:66:5d:
ec:9e:46:be:79:3e:77:ef:d4:70:e6:89:a0:cf:11:1c:38:3f:
0e:dd:f5:2c:62:ba:f4:fe:c4:ca:be:43:d7:d6:9a:0a:ce:6a:
cb:45:0a:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfZA4v5utGLIFyX8Lw7FOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMWMwZDQ4NjQ2MGI3MTYzNzAzZTVmZjRkOGFkZWQ5Nzg4
OGM3NGQwHhcNMjYwMjA5MTMwMDUxWhcNMjYwMjEwMTMwMDUxWjAzMTEwLwYDVQQD
Eyg5YmNkODBhNWY1ODVkNTM2MGUyNTBkY2QyZGE0NGZhMDhhMDFjMzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxfNZYTmuNPhzlrbRCGtog/b3a+v
SzVumXZDrsW2CC8sfooyfEl3m+IGXVDZcycAWzicisKYpqdgVJ7xI5S6m+6L9uhB
sdJNsFN2u2tvQovw0UjyZahBbtZVD55zAen02zleBGM+kP+gpeM2P5t1a5SDRrGP
o4rcSnJAV6i/kBRRHI+kmiC92ZWHo2H5omOgMF4tTROROLUm2Cdksd3IQw0y7ZFT
hsFUIefBmiuYw/dcy9MO35irn+CQCqexSpzB/LCv9vXi8F/T+7ZR9xvWGxKQyu4y
Qv/keYmMTji8+2OPJILX65b0jDx1eG7n+dCZKwIKtJTVl0bk9BXLdUizWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvNgKX1hdU2DiUNzS2kT6CKAcOPMB8GA1UdIwQY
MBaAFLMcDUhkYLcWNwPl/02K3tl4iMdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3h3TlNHUmd0eFkzQS1YX1RZcmUyWGlJeDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yOTQ0MWMtMjgxYy00ZTAyLTlhOTEt
ODI0M2I3ZGIxMDVlLzEvc3h3TlNHUmd0eFkzQS1YX1RZcmUyWGlJeDAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8yOTQ0MWMtMjgxYy00ZTAyLTlhOTEtODI0M2I3ZGIxMDVl
LzEvc3h3TlNHUmd0eFkzQS1YX1RZcmUyWGlJeDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3WUZNQI
THMdAuBk+3C+kFmlQbN8S3QZuP6HeLaJRWh8XgDsip2bn5xABs/J1CaiIuKWGcUL
eT8UprQ8GMwmE2Fw1VtkZhLdQuZ2RRSst73Y2tUTX/eaFyy7Ek2HWEiDhWSkzj2F
nVMg/y88Bl18wUpzHwgUJGwLLlX7qzfPHU1sunAKY9QwRH+vWKeiiBIyzVXklERV
WJvRPO4A2rBCZKhuIIS4XeQRrlhuizEnV02XEDrtg0Rzx+suGW+0oArMKH4QDC00
OSG/vyXRfuqc22MbE0seQ2Zd7J5Gvnk+d+/UcOaJoM8RHDg/Dt31LGK69P7Eyr5D
19aaCs5qy0UK7A==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:25 2026 by rpki-client