This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
File: xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft (raw, json)
Hash identifier: npwfnmgLyNw5XLyF40JwgUpX0LrNYFz1BXJlsu7cpTY=
Subject key identifier: 23:D7:E7:84:64:2A:06:C3:AB:A6:F7:AC:E0:85:1D:61:B7:4B:F1:64
Authority key identifier: C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
Certificate issuer: /CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Certificate serial: 019C427DFB0265A602442FEA6DDBD9153295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
Manifest number: 181C
Signing time: Mon 09 Feb 2026 13:01:18 +0000
Manifest this update: Mon 09 Feb 2026 13:01:18 +0000
Manifest next update: Tue 10 Feb 2026 13:01:18 +0000
Files and hashes: 1: 8149JdL_bdhKPVAGngPZY1WVUZc.roa (hash: Vqmxphay09Dowf+HIB9gAzSfzwRKej0t5zClWsx36sY=)
2: xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl (hash: NSeoBKpYVyepnUI2vcPlW8+tHx6ER9YpE3I+/Sy9LZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:fb:02:65:a6:02:44:2f:ea:6d:db:d9:15:32:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Validity
Not Before: Feb 9 13:01:18 2026 GMT
Not After : Feb 10 13:01:18 2026 GMT
Subject: CN=23d7e784642a06c3aba6f7ace0851d61b74bf164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a9:8e:64:45:c7:8c:18:13:5f:77:c0:31:36:
bf:c8:5b:5c:42:a6:9d:cd:84:21:b1:37:06:24:2d:
cd:3c:c0:ea:4b:a5:35:63:63:0a:55:1f:9c:20:43:
e7:a7:04:3b:49:1e:c2:16:d2:23:1d:78:94:fa:8c:
ed:dc:09:83:6a:48:0e:6a:55:21:02:37:d2:d1:dc:
d0:b5:e1:2e:0e:4c:38:2a:0a:c0:a5:21:79:2d:99:
97:2f:0b:46:43:d4:6d:ad:c4:64:01:10:26:d9:f1:
b3:84:7d:61:5e:dc:51:8f:1f:52:eb:35:be:10:6b:
84:3d:6d:25:e8:48:59:29:92:6a:54:78:6f:62:27:
c9:c4:6a:b1:9d:0e:97:d0:e8:0c:3c:c8:2b:69:50:
af:e2:2a:0b:ac:b9:29:61:93:49:e5:82:e2:bd:e2:
7b:0f:a8:de:01:1e:f6:8c:4d:48:0c:29:00:10:46:
a8:79:b6:82:8f:5f:c1:53:34:9e:0f:85:54:0a:de:
39:9a:50:0c:6f:f5:8b:77:f5:35:18:6a:76:d6:27:
a1:09:0c:0d:f1:f2:21:f9:90:d7:41:1a:e0:2d:d5:
44:fe:81:ac:93:bd:6a:44:ed:54:5d:6f:fa:f3:db:
62:14:88:16:19:df:1b:d6:e0:0b:de:cf:8c:a5:83:
5f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D7:E7:84:64:2A:06:C3:AB:A6:F7:AC:E0:85:1D:61:B7:4B:F1:64
X509v3 Authority Key Identifier:
keyid:C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:74:79:7d:41:d9:e1:aa:44:b0:a1:86:27:ad:05:dc:56:bc:
fa:a4:f7:38:9d:a8:59:5a:73:0d:77:58:4d:77:82:20:d3:5b:
d1:0f:1b:16:5a:21:ba:e5:21:e2:4c:43:99:77:f0:b4:cf:67:
82:75:84:57:86:75:58:1a:29:b3:c5:5b:e1:65:62:de:1c:33:
7a:f3:8e:ac:3c:45:f3:d8:8d:12:41:ad:9f:74:fb:3b:89:8f:
e9:d9:71:13:92:1c:5b:1a:f8:d8:13:f8:d8:9f:4d:65:cd:7c:
9f:58:40:2b:f7:73:6d:9c:32:12:7f:5b:25:72:6c:a5:6e:37:
0a:e8:86:69:d2:4f:d3:9f:94:17:b3:f9:0b:95:37:09:64:17:
18:72:7f:c7:94:47:4d:2e:e2:7e:06:38:9a:da:c0:1b:c9:cd:
1e:0e:13:d9:6f:6e:0d:1b:b4:65:22:7a:00:1c:fd:d6:ba:75:
fa:3f:d8:d4:21:ce:13:6a:cb:1b:5e:af:e4:b0:88:8b:ed:85:
1d:6c:15:a8:81:78:59:ff:a1:72:b6:15:7a:24:93:e0:6b:d6:
7e:4f:f3:40:db:eb:44:1c:9d:1e:2d:0b:e5:6c:1b:3d:bd:bd:
d3:72:1b:81:dc:34:d8:ea:d0:c5:bc:5f:56:95:d1:81:60:1a:
ea:c0:4d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:30 2026 by rpki-client