This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
File: xw2_VVhwtVas-rQox06s7lb3siI.mft (raw, json)
Hash identifier: YgUI/HMMcfOYmjTcu277AL5xKSy+Jf116hN6lk4bKsA=
Subject key identifier: D7:E8:B2:FB:38:E7:9D:3A:EA:9F:55:66:CE:63:E9:46:33:19:E1:33
Authority key identifier: C7:0D:BF:55:58:70:B5:56:AC:FA:B4:28:C7:4E:AC:EE:56:F7:B2:22
Certificate issuer: /CN=c70dbf555870b556acfab428c74eacee56f7b222
Certificate serial: 019C41A1C68FE3B10B21AC589CA1CC567326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 09:00:46 +0000
Manifest this update: Mon 09 Feb 2026 09:00:46 +0000
Manifest next update: Tue 10 Feb 2026 09:00:46 +0000
Files and hashes: 1: UVWbdtgMtPSlXPD-ljLhVUXQTLI.roa (hash: 0y9dv3rbyul1H/gRs5dF3tqgdi9jkPTntAurTA6guBk=)
2: xw2_VVhwtVas-rQox06s7lb3siI.crl (hash: VX3lOAJ7PUh00C/EA/M/ZRI4ZFOQ36OlV8eBBE63JtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:c6:8f:e3:b1:0b:21:ac:58:9c:a1:cc:56:73:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c70dbf555870b556acfab428c74eacee56f7b222
Validity
Not Before: Feb 9 09:00:46 2026 GMT
Not After : Feb 10 09:00:46 2026 GMT
Subject: CN=d7e8b2fb38e79d3aea9f5566ce63e9463319e133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6d:2f:e9:3f:83:ae:ee:f0:9a:cb:fc:e8:db:
c6:90:20:5a:23:27:9c:c3:65:02:1f:c3:79:62:c1:
32:ce:02:91:bd:55:53:9f:14:6f:53:d2:69:66:65:
fe:23:bf:50:d4:75:be:cb:56:70:d3:b5:01:5e:39:
e7:fe:d8:6b:20:9c:44:04:2f:a7:db:ce:2d:78:76:
d5:4e:96:85:3f:17:ed:89:c9:4d:d8:1f:63:eb:43:
5f:95:54:b4:74:27:f8:7d:03:ad:2a:6e:2f:e1:1a:
cb:b7:03:2a:57:f6:99:6f:2a:98:98:a6:73:22:93:
3c:33:22:22:e2:44:7c:87:a4:f6:c6:a2:cd:2d:4c:
c8:d7:da:a3:fe:c8:66:69:28:ea:20:fb:7f:4e:11:
bd:6f:86:90:12:a9:17:72:68:69:78:1f:e5:e8:d5:
5d:51:b4:78:96:08:49:9d:bc:b8:05:d8:1e:43:35:
be:0f:2e:a3:43:b3:32:d2:88:39:c8:39:66:84:05:
d3:ce:01:99:58:e9:f6:c2:e1:fb:57:fe:de:33:5a:
69:12:d4:8e:99:6c:d3:93:7f:74:b4:28:02:e4:68:
69:63:78:e8:d2:4a:1f:a0:f0:1c:cd:f2:41:ed:91:
2f:07:87:d2:a0:10:d4:86:83:b8:c8:82:08:57:4c:
59:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E8:B2:FB:38:E7:9D:3A:EA:9F:55:66:CE:63:E9:46:33:19:E1:33
X509v3 Authority Key Identifier:
keyid:C7:0D:BF:55:58:70:B5:56:AC:FA:B4:28:C7:4E:AC:EE:56:F7:B2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:21:26:92:47:35:9c:7a:7a:34:ab:fb:46:8d:60:de:ec:65:
90:f1:ac:4b:0e:2d:5e:f1:93:70:89:39:40:5d:34:e2:07:17:
e3:29:72:a7:b2:d5:94:43:50:f9:3d:ec:35:fe:21:be:d5:d2:
34:d6:4f:47:b4:50:ab:70:0c:bb:77:fb:f4:cc:77:e5:b2:1e:
ac:78:73:9a:c0:a9:42:ab:d6:cc:20:65:61:b6:1d:a3:07:a4:
9f:8d:21:6e:80:cc:62:07:ae:b4:c3:da:16:c6:67:c1:f8:4b:
cb:ed:b7:b8:76:df:7d:82:1a:4f:4f:68:4b:ba:f0:c9:48:99:
74:18:e0:82:63:cd:6b:57:54:2d:05:49:f6:d2:ba:3b:9a:5c:
47:ef:bb:48:cc:1e:10:a0:c5:2d:79:8a:0c:7c:ca:0e:f6:a0:
54:e5:38:a7:c7:b3:a8:22:fa:b4:71:bd:f0:a2:21:09:a5:bc:
e8:5e:35:38:24:fa:22:d8:54:17:b7:9d:47:d9:ae:8e:18:12:
ed:66:d1:58:1a:4b:b1:0f:65:42:b9:7d:9a:1c:a7:76:8d:3c:
ee:76:8c:01:54:cc:82:f1:3a:8f:e6:9d:2d:39:58:69:85:a0:
51:54:e3:00:71:04:37:de:b2:70:22:89:8b:98:34:af:24:7d:
d5:2c:79:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBocaP47ELIaxYnKHMVnMmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MGRiZjU1NTg3MGI1NTZhY2ZhYjQyOGM3NGVhY2VlNTZm
N2IyMjIwHhcNMjYwMjA5MDkwMDQ2WhcNMjYwMjEwMDkwMDQ2WjAzMTEwLwYDVQQD
EyhkN2U4YjJmYjM4ZTc5ZDNhZWE5ZjU1NjZjZTYzZTk0NjMzMTllMTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW0v6T+Dru7wmsv86NvGkCBaIyec
w2UCH8N5YsEyzgKRvVVTnxRvU9JpZmX+I79Q1HW+y1Zw07UBXjnn/thrIJxEBC+n
284teHbVTpaFPxfticlN2B9j60NflVS0dCf4fQOtKm4v4RrLtwMqV/aZbyqYmKZz
IpM8MyIi4kR8h6T2xqLNLUzI19qj/shmaSjqIPt/ThG9b4aQEqkXcmhpeB/l6NVd
UbR4lghJnby4BdgeQzW+Dy6jQ7My0og5yDlmhAXTzgGZWOn2wuH7V/7eM1ppEtSO
mWzTk390tCgC5GhpY3jo0kofoPAczfJB7ZEvB4fSoBDUhoO4yIIIV0xZUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfosvs455066p9VZs5j6UYzGeEzMB8GA1UdIwQY
MBaAFMcNv1VYcLVWrPq0KMdOrO5W97IiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHcyX1ZWaHd0VmFzLXJRb3gwNnM3bGIzc2lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ODJiN2YtNjBjMy00MTFhLTk2MjUt
MzJkYTFkYjRiMjAzLzEveHcyX1ZWaHd0VmFzLXJRb3gwNnM3bGIzc2lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS81ODJiN2YtNjBjMy00MTFhLTk2MjUtMzJkYTFkYjRiMjAz
LzEveHcyX1ZWaHd0VmFzLXJRb3gwNnM3bGIzc2lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSEmkkc1
nHp6NKv7Ro1g3uxlkPGsSw4tXvGTcIk5QF004gcX4ylyp7LVlENQ+T3sNf4hvtXS
NNZPR7RQq3AMu3f79Mx35bIerHhzmsCpQqvWzCBlYbYdowekn40hboDMYgeutMPa
FsZnwfhLy+23uHbffYIaT09oS7rwyUiZdBjggmPNa1dULQVJ9tK6O5pcR++7SMwe
EKDFLXmKDHzKDvagVOU4p8ezqCL6tHG98KIhCaW86F41OCT6IthUF7edR9mujhgS
7WbRWBpLsQ9lQrl9mhyndo087naMAVTMgvE6j+adLTlYaYWgUVTjAHEEN96ycCKJ
i5g0ryR91Sx54g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:57:15 2026 by rpki-client