This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
File: xZR6QUqIMFFWVtc4p4OCiQFgN30.mft (raw, json)
Hash identifier: e85rzBmK/aBKz+RMwXD0kk/YkzjqIYCr8k6hbYSkf5Y=
Subject key identifier: 23:A5:1E:71:75:CF:0F:AF:6A:AB:E4:BB:81:8A:95:DC:83:0A:BC:18
Authority key identifier: C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
Certificate issuer: /CN=c5947a414a8830515656d738a78382890160377d
Certificate serial: 019C421055B9618CBD15101D8F05BDF520BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
Manifest number: 074E
Signing time: Mon 09 Feb 2026 11:01:32 +0000
Manifest this update: Mon 09 Feb 2026 11:01:32 +0000
Manifest next update: Tue 10 Feb 2026 11:01:32 +0000
Files and hashes: 1: xZR6QUqIMFFWVtc4p4OCiQFgN30.crl (hash: rGWmjudFcttr9BRY8oBHt13FCmx2djhd/vdlytbB57s=)
2: yPfyngOSudI1ySWIfQxdWtyiNIs.roa (hash: 5dFd12MxUEVgWmbdpshfSJRZnDjbazIniCXkVZMmEDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:10:55:b9:61:8c:bd:15:10:1d:8f:05:bd:f5:20:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5947a414a8830515656d738a78382890160377d
Validity
Not Before: Feb 9 11:01:32 2026 GMT
Not After : Feb 10 11:01:32 2026 GMT
Subject: CN=23a51e7175cf0faf6aabe4bb818a95dc830abc18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c8:88:d6:29:ad:03:fc:84:da:74:4d:5d:67:
33:44:e7:10:e4:60:31:eb:64:25:fd:e8:a9:bd:38:
3c:01:7b:d0:70:49:76:b7:bb:a2:1a:0c:d7:a0:2a:
01:9f:20:0d:cd:72:88:80:d3:71:f3:dc:13:1c:0f:
7b:ea:3a:b2:7f:f5:25:6c:a4:2e:42:51:89:83:20:
f0:fd:49:7a:f1:a8:75:c7:3f:eb:74:e6:d3:9c:78:
18:ee:b9:54:9d:64:90:94:41:ac:33:39:07:a9:fc:
1f:e0:ba:0b:e4:33:68:e5:35:38:0a:de:a0:66:f5:
c3:f7:95:ce:8b:73:40:37:bf:d7:36:96:12:40:4e:
b1:c2:6d:08:9b:d6:b8:94:4f:35:6d:34:42:f7:68:
4b:ee:de:fe:17:2f:b7:e3:b1:e6:30:63:41:8a:7b:
85:c4:0e:93:d6:6e:47:2d:dc:a5:5f:3b:da:d5:b8:
04:16:5c:a7:c8:c8:85:b9:48:de:8f:d8:61:c7:c8:
d4:d7:5c:80:a6:df:25:30:43:f3:7a:94:3a:cd:6b:
12:d1:a3:54:5e:2c:53:07:87:77:16:81:9b:d3:00:
49:cc:6d:5d:0f:72:f1:01:37:48:08:1d:92:a1:47:
59:33:52:45:7e:77:1c:1d:7e:11:20:a9:0a:ae:40:
4e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A5:1E:71:75:CF:0F:AF:6A:AB:E4:BB:81:8A:95:DC:83:0A:BC:18
X509v3 Authority Key Identifier:
keyid:C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:6e:2d:21:23:24:4d:fa:ea:85:51:d6:6f:16:88:4a:38:d8:
e0:e7:2c:92:42:c0:1a:17:e9:e3:13:4a:35:fa:7e:13:2e:d3:
04:bb:0e:50:d2:cf:eb:86:df:cc:f7:ea:e6:c5:8d:7e:70:23:
d7:1f:86:26:38:04:31:14:58:e0:d1:f5:ec:86:20:5b:4d:c3:
8a:30:84:42:2e:2e:27:3a:ed:d3:a4:c0:d2:99:03:ee:d1:fb:
d1:21:37:60:08:f4:fc:0e:d6:05:64:20:b0:1a:4b:1a:9f:58:
54:b1:cd:ba:79:43:09:b7:46:20:42:d1:69:fe:38:18:53:c6:
3a:fc:6a:9d:cf:c4:fb:1a:f9:92:35:e6:b5:8c:fe:93:50:b9:
b2:d4:e0:96:fc:30:47:49:96:5c:71:ba:e7:75:05:81:11:15:
13:10:9f:8e:a2:b0:a0:24:4c:b2:17:6c:88:cf:22:f0:5d:0e:
3c:0c:ed:57:91:99:c6:a5:f8:12:65:7a:74:d4:c7:fe:b7:54:
65:30:73:6e:5b:c6:d5:d5:f9:d7:71:57:68:48:1c:db:2e:75:
1c:2c:28:22:06:ad:70:2f:56:a4:ad:8b:ca:6e:6e:56:1e:28:
a5:8c:56:fe:b6:fd:c7:5c:33:bf:45:d9:e3:fe:11:f9:05:f9:
85:2e:bb:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCEFW5YYy9FRAdjwW99SC/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1OTQ3YTQxNGE4ODMwNTE1NjU2ZDczOGE3ODM4Mjg5MDE2
MDM3N2QwHhcNMjYwMjA5MTEwMTMyWhcNMjYwMjEwMTEwMTMyWjAzMTEwLwYDVQQD
EygyM2E1MWU3MTc1Y2YwZmFmNmFhYmU0YmI4MThhOTVkYzgzMGFiYzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ciI1imtA/yE2nRNXWczROcQ5GAx
62Ql/eipvTg8AXvQcEl2t7uiGgzXoCoBnyANzXKIgNNx89wTHA976jqyf/UlbKQu
QlGJgyDw/Ul68ah1xz/rdObTnHgY7rlUnWSQlEGsMzkHqfwf4LoL5DNo5TU4Ct6g
ZvXD95XOi3NAN7/XNpYSQE6xwm0Im9a4lE81bTRC92hL7t7+Fy+347HmMGNBinuF
xA6T1m5HLdylXzva1bgEFlynyMiFuUjej9hhx8jU11yApt8lMEPzepQ6zWsS0aNU
XixTB4d3FoGb0wBJzG1dD3LxATdICB2SoUdZM1JFfnccHX4RIKkKrkBOEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOlHnF1zw+vaqvku4GKldyDCrwYMB8GA1UdIwQY
MBaAFMWUekFKiDBRVlbXOKeDgokBYDd9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFpSNlFVcUlNRkZXVnRjNHA0T0NpUUZnTjMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85MmUwYTYtYjNlMy00NTVkLTkyY2Yt
MGU1NDk0YWY1ODQwLzEveFpSNlFVcUlNRkZXVnRjNHA0T0NpUUZnTjMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS85MmUwYTYtYjNlMy00NTVkLTkyY2YtMGU1NDk0YWY1ODQw
LzEveFpSNlFVcUlNRkZXVnRjNHA0T0NpUUZnTjMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgW4tISMk
TfrqhVHWbxaISjjY4OcskkLAGhfp4xNKNfp+Ey7TBLsOUNLP64bfzPfq5sWNfnAj
1x+GJjgEMRRY4NH17IYgW03DijCEQi4uJzrt06TA0pkD7tH70SE3YAj0/A7WBWQg
sBpLGp9YVLHNunlDCbdGIELRaf44GFPGOvxqnc/E+xr5kjXmtYz+k1C5stTglvww
R0mWXHG653UFgREVExCfjqKwoCRMshdsiM8i8F0OPAztV5GZxqX4EmV6dNTH/rdU
ZTBzblvG1dX513FXaEgc2y51HCwoIgatcC9WpK2Lym5uVh4opYxW/rb9x1wzv0XZ
4/4R+QX5hS67rQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:32 2026 by rpki-client