This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
File: x5g7OpdY_L54cz2RVa7SZsiCojw.mft (raw, json)
Hash identifier: yW+nP559nboEyfgB/RMmJ8W3EXubDRsHHcH+ise3/FY=
Subject key identifier: A3:85:D1:BD:94:C4:3E:D3:BA:8D:55:BC:24:E4:F2:11:B2:B9:67:24
Authority key identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
Certificate issuer: /CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Certificate serial: 019C4390A294787EE838C84DD9476AA21131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
Manifest number: 1523
Signing time: Mon 09 Feb 2026 18:01:18 +0000
Manifest this update: Mon 09 Feb 2026 18:01:18 +0000
Manifest next update: Tue 10 Feb 2026 18:01:18 +0000
Files and hashes: 1: INecSgDNWHvp6sU-WpJihfiFh4s.roa (hash: PMEEstkE23N+oMl4zNZYpTJcYs3rPhZEK/XuV630Gno=)
2: f25A04rpXtD2_br_jQIVVfQ8etM.roa (hash: iSZljQkRURevE7K28zcSzw6RdndhY9rvXLjgdmSdTqY=)
3: ggUa6LfIuLLVR5P1Qr24VmoyZso.roa (hash: rdmuXEokTMYqrj4xUmy2EZVO5gA++Wv14CxkDlRPOSQ=)
4: gnB4DwAgCjyQcWFzJEdE7GWr73o.roa (hash: HW/BGej/dJUcVDYCwLRVJHa3/FSej9vAGH4VzbSF+To=)
5: tmpjXkdMeErzXzSF-Knv6lEK4MM.roa (hash: 59w580G8bYKyMW9mWYISKVPkaSir7aOf2hHeB7WsN6s=)
6: w_ptOPR66g-2hUDEWzrs74clcAE.roa (hash: 6vuuqzAxRKqIgwnNrTyFV+eVf/OZTeXgi5JQBVeXXCI=)
7: x5g7OpdY_L54cz2RVa7SZsiCojw.crl (hash: pMHPkZMk+OvD7atBRaNFFbXrxwcZlfavsEWn429/JfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:a2:94:78:7e:e8:38:c8:4d:d9:47:6a:a2:11:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Validity
Not Before: Feb 9 18:01:18 2026 GMT
Not After : Feb 10 18:01:18 2026 GMT
Subject: CN=a385d1bd94c43ed3ba8d55bc24e4f211b2b96724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:89:50:84:0a:0e:08:bf:cb:ee:80:45:12:66:
c0:85:76:13:8b:8c:e6:bb:12:18:cf:16:31:cf:e5:
ab:9e:b9:f2:5a:76:1f:ec:73:98:dc:11:dd:e3:78:
7c:e5:85:7b:a1:2f:c1:8a:80:06:be:d3:ac:ef:26:
12:5e:ef:00:f1:31:10:5d:b1:a9:a5:00:3c:03:4f:
49:cf:83:53:6c:e3:d9:28:2f:b7:48:c8:71:26:40:
f4:92:ec:19:ca:ac:79:bd:e2:98:6b:e6:92:b7:90:
b1:5d:f6:31:c1:4f:e5:f5:c1:98:79:95:d8:51:51:
95:c6:5f:92:4a:61:c0:fe:24:90:25:b8:c6:f6:b2:
5e:c0:95:4f:33:94:11:fe:df:7a:f1:88:ad:9f:a1:
d8:0b:cd:8e:ad:ca:c8:de:71:c5:df:6d:f2:8f:ed:
95:53:de:ec:ee:ad:8d:42:57:80:d7:98:7d:9f:8d:
b2:a9:4c:dc:e5:66:0f:5d:2d:b6:8e:cd:19:47:f4:
c4:8a:22:63:0e:35:5c:cd:9d:88:d9:36:d0:62:cb:
bc:e7:8a:c9:97:7b:af:49:dc:6c:e8:08:4c:c9:b5:
f5:d3:c3:95:30:ec:7f:20:34:38:2a:70:fc:51:9d:
07:9a:db:1e:94:70:a7:7c:6b:85:a0:eb:8e:86:a1:
77:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:85:D1:BD:94:C4:3E:D3:BA:8D:55:BC:24:E4:F2:11:B2:B9:67:24
X509v3 Authority Key Identifier:
keyid:C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:72:f7:e6:af:82:f1:f4:01:28:2d:5f:33:5d:27:5e:9e:61:
61:20:c4:a0:b6:7e:af:ab:24:81:cf:29:6b:32:82:a1:6f:66:
a9:c3:1c:4d:d5:78:75:13:a6:f5:4c:5e:c4:9a:85:ed:77:74:
42:24:12:a7:77:8a:18:1d:5e:32:69:5b:cc:06:63:fd:c7:ea:
c3:b3:c1:0c:a7:c4:64:90:5a:c1:65:c2:e6:23:73:f7:17:09:
cd:76:81:a6:6a:6f:e3:05:1f:54:7d:d7:34:02:ba:82:e8:13:
cb:f5:11:b5:27:75:46:b0:10:65:91:09:4a:25:2f:b5:e1:57:
07:65:0e:3a:b3:32:cb:e5:c0:20:90:80:eb:57:4d:5f:44:b0:
a7:80:ef:a4:3b:9f:01:f7:e5:02:9f:d1:35:e2:2e:0d:90:e3:
34:03:94:8e:7a:86:06:b5:00:59:49:03:cb:56:6b:63:ba:10:
6f:e9:14:72:61:75:0a:ce:d2:4d:7d:ca:ce:0a:61:cd:67:90:
cd:dc:2b:b9:20:a5:8a:4b:ea:ac:95:14:74:59:51:2b:28:28:
9e:5d:f6:fd:f8:f4:bf:dc:0f:26:bc:be:90:1a:cf:ca:e7:32:
b1:4d:0a:63:43:51:79:a0:4f:00:af:59:0f:b4:58:4b:72:c3:
79:54:7d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:09 2026 by rpki-client