This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
File: Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft (raw, json)
Hash identifier: 5lKYrS/TqPfnLXRtI30+W04qDF8/3dK75IlRzDFkAXs=
Subject key identifier: F9:CB:EC:19:A5:B5:5B:02:48:D1:7D:34:F6:D3:69:12:22:2C:6B:E5
Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
Certificate issuer: /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Certificate serial: 019C5C062FE2F9C8C640463F1A5CAAB06436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
Manifest number: 0D0F
Signing time: Sat 14 Feb 2026 12:00:35 +0000
Manifest this update: Sat 14 Feb 2026 12:00:35 +0000
Manifest next update: Sun 15 Feb 2026 12:00:35 +0000
Files and hashes: 1: RrwlRSSdwln9HbzArcN9f7ThR9c.roa (hash: Ic3y0/hXv+5FL5zNAqt7WX+ncQH0cGC5wuQsjbsXF7I=)
2: Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl (hash: 1ir744SxzzLYzfayDF64/3jJQXRMl248GRKEACNhUFc=)
3: fWpL_ta7aXoIKT8lwYmDL0nQegU.roa (hash: r+7J0jRgrAdlkGpSk5T7jtJhr78GxAY9zYWBhS85+uQ=)
4: l5tw0iDO7abT_AibKjZJaQ4nwWc.roa (hash: r+71S+WnEwowT4NhvO1eI4eYiERh6tzaeOlSbc80Img=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Feb 2026 10:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:5c:06:2f:e2:f9:c8:c6:40:46:3f:1a:5c:aa:b0:64:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Validity
Not Before: Feb 14 12:00:35 2026 GMT
Not After : Feb 15 12:00:35 2026 GMT
Subject: CN=f9cbec19a5b55b0248d17d34f6d36912222c6be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e4:95:67:dc:8d:6d:c5:f9:04:48:dd:98:71:
15:4d:15:aa:65:89:c6:d0:f3:10:46:3e:a9:6b:6a:
ca:6f:41:81:39:36:81:69:09:85:c7:cc:15:2c:01:
f5:29:66:b8:f6:44:9d:4a:1b:0c:18:c8:c3:83:4d:
c0:9b:d7:d5:f0:0a:a3:c0:24:77:f9:a4:11:55:7c:
0f:15:cd:c0:2a:30:80:c8:20:7d:17:93:12:26:83:
73:20:e9:05:e4:f4:a8:73:df:25:d5:97:77:af:a0:
7f:a6:72:0e:47:69:32:4f:ef:44:8f:b7:72:ff:72:
f0:4e:e6:44:10:7d:7a:85:74:ba:83:75:d8:cd:68:
4c:08:a7:9a:74:76:18:7e:78:89:8a:57:d4:38:98:
cb:b4:6d:5b:a3:f9:bb:a5:64:7a:02:1e:40:1b:11:
cb:af:b1:67:c3:a4:18:01:88:34:e2:c3:6b:5b:f7:
cb:cd:ff:53:ac:9f:c2:1f:a1:96:8a:ab:54:78:c7:
ed:30:2d:0e:48:f5:20:c0:28:64:18:f3:41:75:db:
5a:fd:80:af:12:00:37:cb:2e:32:d1:f4:2c:0c:fa:
b5:b0:77:66:4b:ec:02:3a:58:7e:7b:1a:f6:2d:4f:
92:d9:bd:dd:ef:ff:63:de:e0:86:47:ac:c5:0e:9b:
ce:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CB:EC:19:A5:B5:5B:02:48:D1:7D:34:F6:D3:69:12:22:2C:6B:E5
X509v3 Authority Key Identifier:
keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:20:45:21:45:6b:b2:e2:a8:4a:5c:db:38:f2:10:68:7d:3f:
3e:30:c3:a6:cd:5c:b8:52:2a:c6:3f:97:44:2e:3c:38:26:74:
e7:43:7c:96:7e:4d:e8:26:e7:8a:2d:7b:a9:26:48:a0:73:23:
ad:a6:d6:e0:12:38:be:cf:86:20:80:ea:9d:b7:9f:e7:2b:37:
6a:f7:bf:3c:bc:f4:bc:b9:90:1f:9a:1f:c4:2a:ec:90:51:e3:
53:f9:66:93:7c:34:ec:cb:54:68:27:1d:ae:1e:c5:73:da:b7:
4a:21:c5:fb:46:ae:60:30:86:f6:13:4a:1c:37:ee:11:af:25:
4b:bd:f8:17:21:53:cb:d8:b9:7a:9a:fd:5a:8c:54:c7:fc:f5:
c5:30:56:9a:9d:db:0d:39:05:38:93:55:99:bb:eb:02:9d:5e:
a5:59:f5:78:23:82:28:b5:69:cd:aa:be:53:0a:1c:d3:ab:af:
18:ce:3f:a4:27:05:fd:72:6a:52:e6:f5:06:26:5f:48:e3:f0:
af:0f:3e:8c:45:77:8d:0d:07:e4:ec:ce:c3:25:81:a6:d6:68:
50:b7:21:bd:9f:ac:99:32:3a:77:ca:38:9e:4d:10:f7:e3:fe:
7c:09:d0:b7:94:32:91:e8:a7:c1:d8:b7:12:6c:ad:95:a3:4a:
a3:20:e0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 20:06:57 2026 by rpki-client