This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
File: XPVjIet-o-5Fze0ChmhCDjf6L6w.mft (raw, json)
Hash identifier: NsVm3mLj0xMdiZ9KuV7/vRqU81SSwkIcoURLe4uWIzc=
Subject key identifier: 56:D3:0D:3E:59:F5:E5:FF:AC:CB:D0:D3:12:52:D8:26:5E:16:38:B7
Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
Certificate issuer: /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Certificate serial: 019C44A2DA20CBCA1F776D92407EEC6EC13E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
Manifest number: 1522
Signing time: Mon 09 Feb 2026 23:00:49 +0000
Manifest this update: Mon 09 Feb 2026 23:00:49 +0000
Manifest next update: Tue 10 Feb 2026 23:00:49 +0000
Files and hashes: 1: F7EvqKPuCJrRbauscLqXiKU0tSU.roa (hash: Rn1QP+hzXdWW26eL4q5uEtv+FD1RDx8ao69irkAES9U=)
2: XPVjIet-o-5Fze0ChmhCDjf6L6w.crl (hash: F7RPXvoINGu5qxgVMcTrYu8E6qJB4IkQrcI6rGXe0Go=)
3: a7oKAtXpujbjcSp7xIWIBbpbuwo.roa (hash: uOToHNzKGxHUJP96PSZDBVfJ0h4D91Ag2KcuZFpXViQ=)
4: bklYzzrT2LyqE_eolbd4uJqpn88.roa (hash: hL8JImvIqT8exdBOwwwQRZtRNMgq3QcD8ZDf3TXxPgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:a2:da:20:cb:ca:1f:77:6d:92:40:7e:ec:6e:c1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Validity
Not Before: Feb 9 23:00:49 2026 GMT
Not After : Feb 10 23:00:49 2026 GMT
Subject: CN=56d30d3e59f5e5ffaccbd0d31252d8265e1638b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:85:7b:af:5f:12:80:0d:59:12:bc:6e:fe:ad:
46:10:5b:76:68:dd:11:18:75:24:2d:98:dd:28:f1:
e1:15:91:9b:3a:1e:25:41:48:cb:e6:1d:04:01:9b:
03:16:9f:80:68:a0:c4:fe:ee:80:71:18:97:a8:f1:
80:94:09:c7:f5:02:e5:58:81:0c:36:78:c4:84:ab:
3e:c3:4b:06:42:a2:cf:38:90:07:8d:9c:76:18:bc:
05:9e:35:ba:af:73:4c:b7:63:3c:6b:9b:cb:03:9b:
27:d0:ca:2d:9a:7e:06:95:47:45:6e:18:04:98:af:
23:fd:5a:f1:cf:68:3e:50:49:cf:ce:4c:23:1f:7c:
8d:00:de:8e:11:d9:78:3e:0c:e6:f1:9e:b6:bb:cd:
8f:ec:ae:6d:be:82:9b:9c:05:40:a6:3d:91:a5:c2:
a0:77:01:d8:cd:c2:15:e1:32:15:0f:e0:a0:02:86:
fd:86:25:25:d8:8a:7d:4b:23:c0:fd:15:b1:29:25:
1a:c7:4d:7f:6b:74:d4:89:88:b7:fa:51:c9:d8:f8:
07:3f:db:5d:47:f7:41:04:ff:77:ac:2a:d3:65:2c:
76:8e:0b:6f:1a:03:34:be:14:b8:b9:7a:f2:12:68:
99:4f:04:31:54:13:36:a0:74:0f:9b:ca:9b:ab:de:
7c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D3:0D:3E:59:F5:E5:FF:AC:CB:D0:D3:12:52:D8:26:5E:16:38:B7
X509v3 Authority Key Identifier:
keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:a3:17:8d:43:37:23:fb:38:67:93:f7:85:a6:a2:b3:a0:d7:
65:04:87:0e:c9:fd:ba:a7:5c:eb:8b:b8:bb:78:bf:6a:b1:03:
5c:bd:55:bd:f7:62:47:b0:1b:13:b8:cc:7c:c5:81:e2:ff:99:
0c:97:c3:ce:60:3e:ad:ef:44:22:38:dc:60:2f:c4:82:39:0a:
11:c8:a3:ed:9c:9c:07:83:4e:e8:e7:84:95:66:13:85:98:52:
ee:a2:58:59:b6:da:1b:d9:30:d8:d2:f5:b5:12:bb:c3:b9:5b:
88:00:87:85:1b:19:3d:38:f4:6a:ce:ab:5b:5a:e9:5b:69:72:
73:64:4e:85:52:71:3e:8d:bb:59:b1:ab:73:df:b1:22:9b:bf:
cc:38:f1:e5:19:8c:94:3f:d2:05:db:fb:47:dd:6d:2f:f8:15:
4d:ba:b6:5f:d6:13:c7:03:10:e4:47:ca:9b:86:57:53:58:a2:
a7:6d:eb:f3:89:10:d5:62:1f:7b:f5:a4:a3:eb:14:32:bf:c5:
57:0b:d9:87:48:55:dc:eb:67:f1:46:23:21:6a:5a:50:4c:6b:
b1:53:37:bd:dc:da:c2:2b:9c:55:84:26:e2:e2:e4:2b:c9:98:
87:93:9a:d7:1c:63:9b:f7:32:2f:b9:6c:62:15:ce:ff:53:dc:
56:ff:75:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:15:40 2026 by rpki-client