This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
File: xpWUB18xxROhM36RdZKQA35me_k.mft (raw, json)
Hash identifier: TbKgUGg9kFqYPv7PBxtTQGEhMgkMh98PewFl5tOZiFI=
Subject key identifier: CE:CD:A9:BD:F3:01:29:35:B0:D1:E7:55:CF:19:6A:B1:70:F9:74:A6
Authority key identifier: C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
Certificate issuer: /CN=c69594075f31c513a1337e91759290037e667bf9
Certificate serial: 019C44D987F3BF42F05AD41CC22ADC89F636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
Manifest number: 0477
Signing time: Tue 10 Feb 2026 00:00:32 +0000
Manifest this update: Tue 10 Feb 2026 00:00:32 +0000
Manifest next update: Wed 11 Feb 2026 00:00:32 +0000
Files and hashes: 1: 1JH1P29Kf09zWZrF1xe3ZZfCieI.roa (hash: DhT9OAA9PZuMRclwlwztAMTiBJcJK2NakyvCDwGRGYc=)
2: xpWUB18xxROhM36RdZKQA35me_k.crl (hash: 1PP9ypkwPJ9MhZrlSRd6cn8l2grczD+iqyTAW1BKTkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:d9:87:f3:bf:42:f0:5a:d4:1c:c2:2a:dc:89:f6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69594075f31c513a1337e91759290037e667bf9
Validity
Not Before: Feb 10 00:00:32 2026 GMT
Not After : Feb 11 00:00:32 2026 GMT
Subject: CN=cecda9bdf3012935b0d1e755cf196ab170f974a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:70:6b:91:ac:35:a4:ec:90:57:3d:c4:35:46:
0b:1b:65:83:02:a1:7c:34:e1:2c:1e:85:76:9d:e0:
87:15:6d:b8:fc:92:41:fa:de:04:f3:9d:62:a8:bf:
10:b6:84:5b:a2:4f:ed:76:89:a2:91:0c:a6:23:28:
7e:47:03:0e:e9:aa:06:d2:92:19:e7:3a:99:e6:57:
0e:5a:69:54:20:af:52:70:fd:04:ad:03:18:32:3a:
bc:df:d3:2c:8d:f8:57:99:85:bf:9d:59:18:d0:fa:
61:20:3a:9f:60:71:c6:95:e4:6f:fb:19:ed:b3:e8:
31:28:05:77:3c:22:55:8e:a3:82:f2:2e:0e:c8:d2:
22:6c:7a:ea:58:a4:d7:d1:04:d3:3b:ea:fb:af:f6:
23:c2:50:b9:63:47:b5:66:ba:2e:04:07:74:c0:85:
2d:69:c4:a7:e2:75:c9:3c:bd:9e:a8:47:bb:2f:2a:
98:ca:22:8c:06:13:a1:fd:a4:cf:30:27:7c:ad:97:
98:57:ce:6c:ff:cb:c1:3d:3c:7e:6b:f9:90:36:8c:
94:d5:83:6d:dc:e4:bc:0d:65:8a:1a:eb:ec:fd:6e:
ae:a5:af:15:42:4f:1d:38:42:c9:63:2b:bc:d2:9b:
dc:bc:2c:90:43:9a:8a:e2:56:6e:43:b7:af:9d:a9:
1f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CD:A9:BD:F3:01:29:35:B0:D1:E7:55:CF:19:6A:B1:70:F9:74:A6
X509v3 Authority Key Identifier:
keyid:C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:45:ac:a5:74:7b:da:27:7e:5e:65:eb:76:7f:f7:5e:bd:00:
d8:c2:f2:74:f6:82:8d:92:d6:9e:d0:03:02:57:42:8a:93:03:
d3:a8:c1:85:9c:33:55:16:5d:67:79:62:7e:b3:81:2d:3a:5e:
dc:db:1d:4b:ec:58:d8:96:bc:36:4e:5a:5c:4c:09:fc:e5:cd:
b8:41:9f:9e:94:99:c2:48:09:84:f5:49:64:04:36:72:0f:b3:
93:ec:6e:38:da:08:6e:c5:1e:56:a5:f4:42:9c:6e:c1:09:98:
f9:1e:d2:01:bf:70:1d:f1:c5:29:48:a6:69:12:f0:30:dc:83:
ba:c9:40:d3:35:0a:8c:50:61:f1:8d:25:66:46:2a:63:a0:e1:
3c:ea:e0:16:5f:a4:33:f9:97:20:a7:7b:d4:e9:cc:4b:3a:fd:
d1:fb:96:bb:4c:28:7d:11:dd:91:ec:00:95:21:95:ae:b0:dc:
4d:8a:50:13:bc:cc:1d:72:88:98:c2:be:9b:a3:d7:55:3b:41:
e3:15:1a:26:99:70:fd:58:f5:92:43:97:2c:88:6e:b6:d1:23:
1a:8e:9a:2c:6e:91:c6:35:0c:31:5d:6b:a7:70:13:ec:6b:85:
0b:88:36:a2:66:dd:e3:25:ef:6e:05:65:3a:6d:73:4c:1a:82:
35:72:ba:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:49:00 2026 by rpki-client