This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
File: X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft (raw, json)
Hash identifier: CyiWd57PQUwaYxwHes1C35zXCeOK8nIy95Mt9KrMbJ4=
Subject key identifier: 44:8D:C5:7C:2C:E4:A9:DE:45:12:B7:51:66:54:BF:DA:7D:E3:CA:64
Authority key identifier: 5F:45:B1:34:C0:91:41:0E:31:42:3E:AC:2C:CA:D0:AE:DB:8A:6E:C5
Certificate issuer: /CN=5f45b134c091410e31423eac2ccad0aedb8a6ec5
Certificate serial: 019C43C6F28D5483F855A4299530CB45CE16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
Manifest number: 0F39
Signing time: Mon 09 Feb 2026 19:00:37 +0000
Manifest this update: Mon 09 Feb 2026 19:00:37 +0000
Manifest next update: Tue 10 Feb 2026 19:00:37 +0000
Files and hashes: 1: X0WxNMCRQQ4xQj6sLMrQrtuKbsU.crl (hash: LjaFxU9N5cKJciH5lah5jBx7tDZ2k/u854wNulSN9Is=)
2: w0awLyAE7bpppRvJ-JMjMZHR1kw.roa (hash: 980Uh/mGmlulr/4a0C22VsIGO0hmRCY1rYF5n7rPjaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c6:f2:8d:54:83:f8:55:a4:29:95:30:cb:45:ce:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f45b134c091410e31423eac2ccad0aedb8a6ec5
Validity
Not Before: Feb 9 19:00:37 2026 GMT
Not After : Feb 10 19:00:37 2026 GMT
Subject: CN=448dc57c2ce4a9de4512b7516654bfda7de3ca64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6e:b2:81:0c:67:db:3e:a9:48:1a:73:10:d8:
03:77:34:69:a3:37:2a:60:09:3a:ae:b0:4e:53:03:
d8:cf:11:ae:3c:29:77:a3:53:4f:5e:45:91:7a:53:
5b:24:c0:78:c1:fb:44:af:46:90:44:96:e2:62:77:
df:e6:df:9f:c4:0b:d8:a7:15:43:4b:18:b2:ab:2b:
eb:43:54:1f:ec:d3:4e:82:4c:a9:5e:ff:e5:a9:4d:
d1:05:7f:70:81:5e:c1:a7:ee:dc:49:50:51:1f:0a:
46:6e:bd:8e:7e:ea:76:0f:43:5f:98:48:9c:98:1e:
b3:f0:f8:57:dc:93:ef:e5:ff:df:de:04:90:3d:7e:
71:64:96:4d:7d:b5:8a:1e:53:57:24:a5:a5:84:bf:
e8:98:1d:9d:f0:59:43:db:5f:b9:c6:dd:12:0c:3e:
09:48:8e:3e:cc:90:ab:df:12:22:00:2e:e7:7b:1b:
d8:92:b7:23:da:7d:4b:79:71:d1:01:c5:28:e8:3f:
f1:59:fb:71:ab:64:c6:8e:20:6a:96:30:a6:12:97:
d5:69:bf:5e:00:1f:d0:c8:25:00:10:23:10:0a:d5:
7b:cb:70:78:dc:72:df:6a:4b:7b:76:a6:ac:e3:35:
69:dd:09:44:db:02:d3:f2:06:c7:50:af:4a:52:da:
91:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8D:C5:7C:2C:E4:A9:DE:45:12:B7:51:66:54:BF:DA:7D:E3:CA:64
X509v3 Authority Key Identifier:
keyid:5F:45:B1:34:C0:91:41:0E:31:42:3E:AC:2C:CA:D0:AE:DB:8A:6E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:a5:a3:35:69:b4:2f:20:2d:f1:6b:1d:1d:04:24:18:30:38:
33:7c:fd:b1:7a:42:35:de:e7:15:cb:4e:9d:52:ae:25:22:4c:
c6:de:a8:ae:b0:5f:f3:22:7b:5e:f1:56:8b:f6:d6:9b:95:39:
55:2a:b9:e6:8f:0d:7d:a7:89:f2:7b:9c:3c:1e:63:9d:2e:53:
43:5f:66:5a:9e:8c:1a:5d:a6:cb:0f:fb:91:b5:03:18:10:b3:
74:b3:d7:31:ea:98:3b:69:81:88:7c:76:6e:ca:df:41:99:23:
5d:22:83:61:c5:dd:b0:b7:5f:5a:a7:44:d1:fb:44:f6:2f:c0:
53:8a:83:e1:f1:89:4c:e9:23:4c:24:27:7e:db:21:b8:57:d2:
10:9c:bf:b9:49:bc:a7:fe:33:29:a5:33:b6:d3:57:93:5e:e6:
bd:a5:8b:2a:cc:2a:df:b1:61:db:f8:ac:f4:83:41:aa:7b:e6:
3b:4c:8e:4c:1f:78:0b:1c:10:17:0f:c0:00:a5:79:0a:19:12:
bc:91:68:d8:ad:17:7a:77:24:5f:d7:b7:a8:11:3a:e5:db:80:
b6:af:e7:75:64:1c:3b:e4:b3:f1:fc:c8:7f:d1:d6:b1:cf:c2:
c6:18:e4:be:d6:da:fc:26:02:72:f8:49:40:61:89:28:86:87:
c9:b6:df:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDxvKNVIP4VaQplTDLRc4WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNDViMTM0YzA5MTQxMGUzMTQyM2VhYzJjY2FkMGFlZGI4
YTZlYzUwHhcNMjYwMjA5MTkwMDM3WhcNMjYwMjEwMTkwMDM3WjAzMTEwLwYDVQQD
Eyg0NDhkYzU3YzJjZTRhOWRlNDUxMmI3NTE2NjU0YmZkYTdkZTNjYTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm6ygQxn2z6pSBpzENgDdzRpozcq
YAk6rrBOUwPYzxGuPCl3o1NPXkWRelNbJMB4wftEr0aQRJbiYnff5t+fxAvYpxVD
SxiyqyvrQ1Qf7NNOgkypXv/lqU3RBX9wgV7Bp+7cSVBRHwpGbr2Ofup2D0NfmEic
mB6z8PhX3JPv5f/f3gSQPX5xZJZNfbWKHlNXJKWlhL/omB2d8FlD21+5xt0SDD4J
SI4+zJCr3xIiAC7nexvYkrcj2n1LeXHRAcUo6D/xWftxq2TGjiBqljCmEpfVab9e
AB/QyCUAECMQCtV7y3B43HLfakt7dqas4zVp3QlE2wLT8gbHUK9KUtqRhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESNxXws5KneRRK3UWZUv9p948pkMB8GA1UdIwQY
MBaAFF9FsTTAkUEOMUI+rCzK0K7bim7FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDBXeE5NQ1JRUTR4UWo2c0xNclFydHVLYnNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xYmQxYmUtY2RkZS00NWFlLWExMjQt
YTdiZDgzYThmNTZjLzEvWDBXeE5NQ1JRUTR4UWo2c0xNclFydHVLYnNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8xYmQxYmUtY2RkZS00NWFlLWExMjQtYTdiZDgzYThmNTZj
LzEvWDBXeE5NQ1JRUTR4UWo2c0xNclFydHVLYnNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuKWjNWm0
LyAt8WsdHQQkGDA4M3z9sXpCNd7nFctOnVKuJSJMxt6orrBf8yJ7XvFWi/bWm5U5
VSq55o8NfaeJ8nucPB5jnS5TQ19mWp6MGl2myw/7kbUDGBCzdLPXMeqYO2mBiHx2
bsrfQZkjXSKDYcXdsLdfWqdE0ftE9i/AU4qD4fGJTOkjTCQnftshuFfSEJy/uUm8
p/4zKaUzttNXk17mvaWLKswq37Fh2/is9INBqnvmO0yOTB94CxwQFw/AAKV5ChkS
vJFo2K0XenckX9e3qBE65duAtq/ndWQcO+Sz8fzIf9HWsc/Cxhjkvtba/CYCcvhJ
QGGJKIaHybbfWA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:38 2026 by rpki-client