This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
File: RXqhx49syrxHtVEho1_zDZmCfuk.mft (raw, json)
Hash identifier: 8ftx9Tnk4pBK5tsszh2eeXmRnQ5EI6AfG7US513vrDg=
Subject key identifier: 37:A5:FC:80:82:C0:ED:38:AF:FB:04:74:BB:7C:72:56:4E:BA:E6:96
Authority key identifier: 45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9
Certificate issuer: /CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9
Certificate serial: 019C427CFF90B27E9D5569C09852795B6B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
Manifest number: 0ADF
Signing time: Mon 09 Feb 2026 13:00:13 +0000
Manifest this update: Mon 09 Feb 2026 13:00:13 +0000
Manifest next update: Tue 10 Feb 2026 13:00:13 +0000
Files and hashes: 1: 42mOJ3kHdwuFCzoSOI3N3ulVxfY.roa (hash: eqCYV3DSa0ilBw3MnAd/50LEsSGMdE5H8gvqRFLf8cs=)
2: RXqhx49syrxHtVEho1_zDZmCfuk.crl (hash: 9OOHT0aMpaUyJvB5EJFOhH/TnSTBU/zvU+nGCcAKBZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7c:ff:90:b2:7e:9d:55:69:c0:98:52:79:5b:6b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9
Validity
Not Before: Feb 9 13:00:13 2026 GMT
Not After : Feb 10 13:00:13 2026 GMT
Subject: CN=37a5fc8082c0ed38affb0474bb7c72564ebae696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5e:05:a9:93:fc:e9:d7:78:4a:f3:9d:72:a7:
60:86:04:75:be:a7:53:03:6b:c5:ae:6a:16:1a:01:
e3:d6:37:b8:96:51:ec:d5:98:33:13:6c:aa:e5:95:
df:93:2a:7a:73:99:1c:46:0c:2c:31:cb:9a:d8:c9:
e6:7b:95:4f:36:78:a3:2a:80:e9:31:86:b8:75:19:
ba:2b:48:6e:e6:90:8c:15:a7:ee:38:80:9b:da:fd:
54:2b:64:1b:ed:19:23:08:ea:39:70:39:a2:29:fc:
63:2f:f9:8d:16:f4:37:50:be:d9:92:3a:a0:02:f2:
81:2d:24:dc:e8:15:db:a4:1a:bc:4f:30:c8:99:eb:
ce:4c:86:05:31:4c:7c:9a:71:0c:24:22:86:ea:e3:
a6:dc:df:1e:09:d5:c7:5b:4b:4a:51:69:09:8c:b7:
96:5e:ec:62:d8:26:c4:5f:87:36:49:74:f1:e6:04:
f1:be:02:62:d2:83:5d:f9:81:9a:f0:99:d8:d8:df:
fb:87:c9:19:cc:85:e5:19:8f:f3:f9:12:13:f2:bd:
cf:a5:28:ac:ee:37:4d:d2:74:7b:b8:43:4c:7a:78:
65:da:b8:a9:d5:88:d0:57:49:4d:5c:e4:53:96:2c:
7a:dd:99:22:5c:3e:4b:0e:a4:10:35:b5:b8:83:79:
3c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A5:FC:80:82:C0:ED:38:AF:FB:04:74:BB:7C:72:56:4E:BA:E6:96
X509v3 Authority Key Identifier:
keyid:45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:45:f0:d5:75:ce:cf:23:af:f9:37:64:81:90:05:40:16:f3:
84:77:b2:9e:a5:0e:61:41:c1:37:e5:04:74:ff:98:65:a1:23:
1f:30:d0:f8:5a:7d:b4:0c:19:6b:ab:e7:28:77:77:af:11:64:
75:03:fe:a4:e9:78:af:bc:d3:cd:69:a0:91:9f:ed:1c:94:12:
47:5d:b0:cf:d1:cd:9d:09:c3:06:a2:ec:29:7e:f4:5c:5b:77:
f6:76:7f:71:11:ed:2c:dd:f4:cd:e7:0d:f7:bd:87:e2:ff:e6:
78:ca:51:50:a2:7b:bb:11:29:3e:0b:ed:12:76:91:32:04:e0:
b4:cb:7b:b4:87:63:26:3c:d6:e1:0d:32:b1:00:e5:56:94:18:
ee:fb:73:36:87:6b:06:51:86:e8:c0:27:26:cf:c0:f2:4e:0e:
44:60:a3:52:09:cb:fa:1e:9f:57:3c:fc:48:8f:7c:6f:06:be:
6d:d5:02:07:a5:e6:e2:37:39:b6:c4:d3:be:b9:3f:26:e1:8a:
30:ab:d3:ac:06:51:18:fb:aa:cf:d5:fc:28:f4:7a:2f:de:87:
76:70:c0:43:81:09:6b:84:10:90:65:40:c5:4d:85:bd:99:bd:
cc:44:bb:3a:1b:75:54:c7:b1:33:e0:19:7a:2a:92:42:fe:f5:
b9:62:31:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:38 2026 by rpki-client