This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.mft
File: xvYePrPLRHrKbZpDVs11cXp7fGg.mft (raw, json)
Hash identifier: Ggn04uO3/FXQ5gu14kcO8YqFmXQ6xz7NOntpYBkNaDU=
Subject key identifier: 37:13:AF:65:AC:5E:56:9D:76:64:3D:48:96:2B:CE:8F:0D:15:08:EF
Authority key identifier: C6:F6:1E:3E:B3:CB:44:7A:CA:6D:9A:43:56:CD:75:71:7A:7B:7C:68
Certificate issuer: /CN=c6f61e3eb3cb447aca6d9a4356cd75717a7b7c68
Certificate serial: 019C427D24D650C15128A0699FE9BB1C0216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvYePrPLRHrKbZpDVs11cXp7fGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.mft
Manifest number: 01C1
Signing time: Mon 09 Feb 2026 13:00:23 +0000
Manifest this update: Mon 09 Feb 2026 13:00:23 +0000
Manifest next update: Tue 10 Feb 2026 13:00:23 +0000
Files and hashes: 1: A69snNPiFFp-ZJHhhhFBxkLfqjc.roa (hash: VH0DEovfxx+abP3tX81hidYcbrd76YLHMgGtB2rBB34=)
2: xvYePrPLRHrKbZpDVs11cXp7fGg.crl (hash: sVpjxc9M5V1MV90ncdJe5SAn+vfEiy8yx/M7gWlhX9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xvYePrPLRHrKbZpDVs11cXp7fGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:24:d6:50:c1:51:28:a0:69:9f:e9:bb:1c:02:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6f61e3eb3cb447aca6d9a4356cd75717a7b7c68
Validity
Not Before: Feb 9 13:00:23 2026 GMT
Not After : Feb 10 13:00:23 2026 GMT
Subject: CN=3713af65ac5e569d76643d48962bce8f0d1508ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3f:f0:65:38:2f:1a:34:50:5b:2b:7e:a4:6b:
eb:ca:e4:7b:3c:f6:fd:40:63:1a:4e:b2:8b:de:ec:
af:04:1b:e7:fe:72:03:42:83:41:13:5b:b1:1d:2b:
60:48:c5:81:a8:02:9d:ce:a2:a3:c7:45:7e:ff:80:
03:d0:cd:87:ad:5b:ec:03:ca:45:46:00:a9:09:ab:
dc:a3:e0:78:8c:11:9c:b5:b6:ed:b8:99:39:d0:28:
33:ce:86:45:5c:c2:75:49:5c:c1:94:36:ac:9b:e2:
44:9b:5c:ed:71:8d:d2:6f:df:83:ca:0b:68:79:2f:
3b:2a:d0:aa:d8:20:cc:30:4e:a3:cf:30:57:18:21:
8a:08:1a:8c:6e:91:6d:25:f0:0f:20:ed:2a:22:c7:
f0:8e:36:bf:96:f0:6a:76:3a:cb:61:25:a3:b9:91:
ad:63:10:11:50:a1:fa:5b:69:44:1a:da:3a:76:07:
7b:e0:22:8d:b0:82:7e:a8:55:c9:f6:11:89:4f:bd:
28:62:99:94:ac:ea:e3:74:ea:24:b9:f0:30:36:0c:
f9:56:88:67:49:a2:2a:f4:57:db:c0:bc:f4:0a:59:
5b:14:a5:49:a3:81:3d:67:68:09:6d:8a:d0:78:5d:
7b:06:f1:9a:04:bb:79:5d:16:0a:74:1f:af:2d:21:
8d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:13:AF:65:AC:5E:56:9D:76:64:3D:48:96:2B:CE:8F:0D:15:08:EF
X509v3 Authority Key Identifier:
keyid:C6:F6:1E:3E:B3:CB:44:7A:CA:6D:9A:43:56:CD:75:71:7A:7B:7C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvYePrPLRHrKbZpDVs11cXp7fGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b9:f6:ec:8b:f1:51:91:7c:73:68:0b:de:cf:32:45:5a:a0:
43:cc:81:cb:11:1e:50:6d:aa:79:2b:79:c4:87:19:b5:2c:92:
d9:e4:b5:00:7b:b6:2f:e0:66:c2:5c:f4:8d:3a:fa:00:6c:b6:
b7:a2:d5:c3:49:71:65:f6:83:1d:58:e1:cf:27:28:c8:76:d5:
e4:c7:c7:7c:f1:cc:49:49:13:12:68:f5:9f:4a:b5:f8:80:c1:
2a:6c:01:46:05:23:0b:8b:dc:27:5f:94:05:12:a0:b8:ab:6a:
e8:d5:4a:84:d7:e0:7b:02:98:0e:ff:0d:ee:62:d5:e8:82:4d:
fe:f5:0d:1e:89:32:7e:30:4f:ce:a4:3c:d7:51:7e:f7:4e:1a:
52:81:e4:16:1c:10:02:36:c7:e7:61:f5:48:dc:54:8a:d1:70:
a7:8c:77:ab:c7:84:ef:3b:db:3f:fd:3a:c4:4d:66:50:52:5e:
67:11:7c:f8:4f:07:04:ce:eb:d3:bc:79:27:cb:6d:8d:33:b2:
63:68:e3:09:be:81:c5:0b:c9:2f:65:18:9f:94:35:11:21:d8:
03:b7:91:ef:5e:e2:9e:b5:20:42:d7:b3:98:8e:38:cd:ea:4f:
cd:3a:9c:be:dd:55:54:a4:9f:81:b1:b8:c8:74:60:d0:01:5e:
d8:64:66:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:32 2026 by rpki-client