This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
File: XYLKb462haVz5dHZH48GEhqwKjc.mft (raw, json)
Hash identifier: eUhS0O9hhtWN+omb7JHia3OZrnKY3TAu97UXqrLsVjI=
Subject key identifier: 81:67:4C:5C:57:36:EA:93:79:CB:30:75:44:EC:9F:0D:D5:D4:9A:A8
Authority key identifier: 5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
Certificate issuer: /CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Certificate serial: 019C41A1FD7BB6DB7171DF87B57E643E18E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
Manifest number: 1447
Signing time: Mon 09 Feb 2026 09:01:01 +0000
Manifest this update: Mon 09 Feb 2026 09:01:01 +0000
Manifest next update: Tue 10 Feb 2026 09:01:01 +0000
Files and hashes: 1: Sg_4XUAI-4zoY2AzgRoGFITRYgE.roa (hash: J1EWDPsgpuehOfFX0CglsLJx+tt5cw97sY3WgurbJXo=)
2: TeQy6kFDHKNYmWvI94KK1SajumM.roa (hash: 9uvICF7tqz4KyCQG2zRzp+9JspsGn3aZOu1Zg1a40nY=)
3: XYLKb462haVz5dHZH48GEhqwKjc.crl (hash: LtW3Z13WXSjHXaoLVYdtfjezYAl7MDh0CReOWf74oTE=)
4: dhOZf_4fAgQZi4_moQSI8o9EFj0.roa (hash: 5T/3rUQwrhAAxuFwErHVP6jvrc57b61OVidSPKCnMBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:fd:7b:b6:db:71:71:df:87:b5:7e:64:3e:18:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Validity
Not Before: Feb 9 09:01:01 2026 GMT
Not After : Feb 10 09:01:01 2026 GMT
Subject: CN=81674c5c5736ea9379cb307544ec9f0dd5d49aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:6f:b8:88:e1:de:06:ce:ec:50:37:a0:61:
08:c2:34:ba:ab:bb:c1:ec:d0:62:5f:47:70:86:5d:
ea:95:5c:9c:5f:c2:35:6b:0a:b1:2e:92:c3:f8:72:
f3:20:28:5d:92:e1:4f:53:26:b8:b7:5b:93:03:f5:
db:47:19:56:5d:d7:02:94:70:f5:dd:b1:1a:6e:8e:
b3:a8:02:a4:a5:3f:26:b3:85:a4:52:cf:8d:13:3e:
44:00:4d:18:1e:0f:63:57:21:cc:cc:a3:dd:1c:e0:
2f:ca:2b:0d:5f:7e:8d:ae:2a:e9:06:47:64:e7:f8:
d9:72:38:ce:84:7c:a8:84:f7:12:3c:b7:d5:49:a8:
cd:f2:29:ed:5f:ce:ba:b1:f2:cb:ef:fa:05:9f:83:
bb:fd:ca:56:b1:72:e9:a8:76:79:c8:fb:5a:c3:28:
4f:71:67:2a:00:43:9b:a6:9c:36:14:c4:85:7d:34:
4b:9e:74:8c:29:12:e2:76:58:3a:d3:8a:60:2f:30:
14:b2:82:fb:94:33:1b:dd:10:33:e7:ac:23:43:21:
c1:03:d2:45:7e:8c:92:86:44:5c:b5:7d:55:da:1a:
0c:22:63:e3:35:ad:c0:a8:b6:a3:06:38:f3:b8:65:
18:1d:6f:54:a2:ff:89:8e:1b:01:cd:48:bb:37:2c:
90:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:67:4C:5C:57:36:EA:93:79:CB:30:75:44:EC:9F:0D:D5:D4:9A:A8
X509v3 Authority Key Identifier:
keyid:5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:40:16:de:c2:48:2c:b6:18:52:ed:9c:2c:dc:a1:56:5e:81:
c7:f5:4c:43:55:f1:73:99:f5:27:8a:c1:b5:2a:47:4d:63:0d:
2b:20:94:3a:b9:b0:b6:f5:13:73:88:62:2c:c2:8a:da:84:11:
14:c1:b9:c9:7f:49:74:e2:23:d8:6e:c5:0f:b9:21:a2:c6:62:
5d:e4:10:b0:8a:c0:01:31:0b:7b:56:eb:0a:d7:51:4a:7c:f3:
f4:56:3e:cb:3c:a4:51:83:f7:e4:bb:cb:7f:0c:91:0f:66:2b:
d7:4f:02:fd:08:16:aa:02:96:18:55:87:a4:28:e0:c8:55:8f:
c0:d9:8b:0f:dc:79:6e:e0:e9:93:da:44:f2:8d:bf:af:81:29:
1c:b3:e5:18:7c:0f:9b:f0:d1:ab:f5:cc:33:ee:70:b7:7c:6f:
01:5c:21:9c:c7:f8:b7:99:30:76:b4:77:41:c2:3f:02:5d:72:
e7:4d:ee:eb:45:07:b0:65:51:12:1c:0e:a6:a1:ca:2d:b5:3a:
d8:ee:b9:23:61:33:98:70:32:64:da:82:0d:69:46:cf:cc:a3:
83:25:19:cf:43:85:f8:b3:dc:64:23:7c:63:6d:61:1c:86:86:
19:e6:56:e1:78:46:19:63:04:e8:53:d5:d7:a4:b1:ce:5a:f0:
31:11:64:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:57:12 2026 by rpki-client