This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
File: XK56oVlNiZKbERo3Hw_ybyAvWOI.mft (raw, json)
Hash identifier: m/s8563rcs2XZ/2LqblDx8BYS9z88GCrSm1xe5YSko4=
Subject key identifier: 64:29:C6:2F:29:7E:DE:92:3C:B9:8E:69:5D:E5:06:17:F5:51:61:8D
Authority key identifier: 5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
Certificate issuer: /CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Certificate serial: 019C42EADB08A357B67ED553ED3A7C86585B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
Manifest number: 1701
Signing time: Mon 09 Feb 2026 15:00:13 +0000
Manifest this update: Mon 09 Feb 2026 15:00:13 +0000
Manifest next update: Tue 10 Feb 2026 15:00:13 +0000
Files and hashes: 1: Oanj9HZBO6pjmAia4pctaEcwILk.roa (hash: XGqLRhTKxqFHvcnOJ1VVsX5xFgoIImSw0HHatVrIKYA=)
2: XK56oVlNiZKbERo3Hw_ybyAvWOI.crl (hash: 33NHgMlVAnHta/eO22sRyLWfiJ5qedK6BMMAgvmNvZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:ea:db:08:a3:57:b6:7e:d5:53:ed:3a:7c:86:58:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Validity
Not Before: Feb 9 15:00:13 2026 GMT
Not After : Feb 10 15:00:13 2026 GMT
Subject: CN=6429c62f297ede923cb98e695de50617f551618d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:45:98:3f:77:3d:8b:7e:b7:eb:da:aa:ef:7d:
9e:17:44:f5:8f:1f:a4:d5:ea:c9:33:09:25:47:a8:
45:11:af:b1:c9:73:0c:ee:55:2e:89:b1:7c:26:c6:
6c:f2:9c:b3:7a:99:c7:4c:d6:00:25:32:95:e7:af:
5a:d0:0b:d3:b2:98:57:0a:1f:85:9f:56:4c:58:83:
45:90:20:ff:4e:14:19:bc:e5:9b:29:3a:b4:22:8d:
58:85:68:a9:9b:4a:91:0d:05:71:8c:a3:13:0e:0c:
7d:81:6d:7f:d2:83:e0:c0:28:3f:ca:71:88:d1:4f:
6d:d3:54:e8:cd:67:57:69:23:f9:4d:69:da:96:f5:
26:98:0f:c5:71:24:7c:43:b5:42:04:86:55:02:ec:
59:62:cb:b1:f1:f5:65:b8:fa:b1:78:1a:e0:26:d2:
7c:4d:16:60:df:fb:e8:8a:32:9d:6f:cc:16:05:90:
62:cd:14:d4:5b:47:5f:55:22:38:f6:77:46:ba:e2:
82:41:21:54:d1:65:52:a3:63:08:8c:b9:37:d2:41:
5e:d2:38:44:ca:4b:23:af:c3:70:93:ee:20:f1:aa:
66:66:9e:66:f1:79:e8:09:0b:3b:e3:e3:08:ac:fa:
61:32:71:c7:bc:63:76:4b:7c:70:c3:a0:e1:6c:e5:
7f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:29:C6:2F:29:7E:DE:92:3C:B9:8E:69:5D:E5:06:17:F5:51:61:8D
X509v3 Authority Key Identifier:
keyid:5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:40:9a:13:ea:7e:b4:b3:56:7b:07:b1:ca:3a:a5:65:52:35:
75:08:ad:75:2f:70:e8:46:90:ec:11:89:b3:4a:d4:af:02:8c:
76:9f:45:e4:96:ba:a2:fc:80:a8:7f:66:08:cf:d0:df:b4:ad:
12:10:e2:44:c9:3e:cc:fe:ed:33:86:42:4c:df:45:25:2d:37:
b1:1e:9b:d6:7b:d2:7b:a5:62:2d:05:06:7a:56:88:0f:84:0c:
04:db:7e:38:81:1e:90:8d:6b:d6:26:fd:4c:35:0b:f0:7a:be:
01:91:bb:6c:d7:72:c5:34:9f:1e:18:e3:4e:82:54:6f:72:27:
99:11:30:43:32:57:07:e9:79:a2:a4:98:1c:fb:66:83:37:e5:
46:50:5e:7d:3a:60:a1:ed:a1:b7:6c:c4:f7:84:be:81:54:a9:
b9:0b:3e:2d:4c:93:3f:e1:ab:ca:21:51:a3:ba:bf:02:c2:6f:
2e:da:7d:cd:96:27:36:3a:82:44:43:7e:43:bf:b9:20:4c:47:
9a:c0:4e:e6:f0:d0:22:be:9e:c7:e6:4e:f5:e3:db:56:e1:0d:
56:9b:a4:73:d1:97:5c:94:69:ab:0d:5c:30:4a:97:3a:81:b0:
9d:c6:47:8d:7f:ec:13:54:ad:3b:cb:4a:c0:05:ce:ec:10:82:
22:3d:6f:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC6tsIo1e2ftVT7Tp8hlhbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYWU3YWExNTk0ZDg5OTI5YjExMWEzNzFmMGZmMjZmMjAy
ZjU4ZTIwHhcNMjYwMjA5MTUwMDEzWhcNMjYwMjEwMTUwMDEzWjAzMTEwLwYDVQQD
Eyg2NDI5YzYyZjI5N2VkZTkyM2NiOThlNjk1ZGU1MDYxN2Y1NTE2MThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EWYP3c9i36369qq732eF0T1jx+k
1erJMwklR6hFEa+xyXMM7lUuibF8JsZs8pyzepnHTNYAJTKV569a0AvTsphXCh+F
n1ZMWINFkCD/ThQZvOWbKTq0Io1YhWipm0qRDQVxjKMTDgx9gW1/0oPgwCg/ynGI
0U9t01TozWdXaSP5TWnalvUmmA/FcSR8Q7VCBIZVAuxZYsux8fVluPqxeBrgJtJ8
TRZg3/voijKdb8wWBZBizRTUW0dfVSI49ndGuuKCQSFU0WVSo2MIjLk30kFe0jhE
yksjr8Nwk+4g8apmZp5m8XnoCQs74+MIrPphMnHHvGN2S3xww6DhbOV/DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQpxi8pft6SPLmOaV3lBhf1UWGNMB8GA1UdIwQY
MBaAFFyueqFZTYmSmxEaNx8P8m8gL1jiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEs1Nm9WbE5pWktiRVJvM0h3X3lieUF2V09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81ZTZiYWUtOTYyZi00MDU3LThlYzUt
Mjc5ZjU5NGIzYTJmLzEvWEs1Nm9WbE5pWktiRVJvM0h3X3lieUF2V09JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81ZTZiYWUtOTYyZi00MDU3LThlYzUtMjc5ZjU5NGIzYTJm
LzEvWEs1Nm9WbE5pWktiRVJvM0h3X3lieUF2V09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIECaE+p+
tLNWewexyjqlZVI1dQitdS9w6EaQ7BGJs0rUrwKMdp9F5Ja6ovyAqH9mCM/Q37St
EhDiRMk+zP7tM4ZCTN9FJS03sR6b1nvSe6ViLQUGelaID4QMBNt+OIEekI1r1ib9
TDUL8Hq+AZG7bNdyxTSfHhjjToJUb3InmREwQzJXB+l5oqSYHPtmgzflRlBefTpg
oe2ht2zE94S+gVSpuQs+LUyTP+GryiFRo7q/AsJvLtp9zZYnNjqCREN+Q7+5IExH
msBO5vDQIr6ex+ZO9ePbVuENVpukc9GXXJRpqw1cMEqXOoGwncZHjX/sE1StO8tK
wAXO7BCCIj1vtg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:32 2026 by rpki-client