This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
File: Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft (raw, json)
Hash identifier: +bhcGm55CXYDNGNA1ZenbcNpHWyechiDh2uhC2ESKxQ=
Subject key identifier: 7E:00:BE:BF:9A:41:37:2C:19:D9:27:DC:18:1D:6A:1E:D4:24:E3:79
Authority key identifier: 5E:6D:2C:2B:69:C2:48:51:62:3B:F9:14:76:90:26:35:A4:CE:09:EA
Certificate issuer: /CN=5e6d2c2b69c24851623bf91476902635a4ce09ea
Certificate serial: 019C420F63699DA471A4992CFC938961D8B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 11:00:30 +0000
Manifest this update: Mon 09 Feb 2026 11:00:30 +0000
Manifest next update: Tue 10 Feb 2026 11:00:30 +0000
Files and hashes: 1: Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl (hash: MWP5i5JnuASFxf8MTOGUW7+j8oSRNxxZW2a0BWfiSk8=)
2: m_R3fUozzL87EYeBBOJB4HDCEG0.roa (hash: Kb4aDfQxNlTgIE8pMcyu4olptfzwH607RGeuUZmL39o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:63:69:9d:a4:71:a4:99:2c:fc:93:89:61:d8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6d2c2b69c24851623bf91476902635a4ce09ea
Validity
Not Before: Feb 9 11:00:30 2026 GMT
Not After : Feb 10 11:00:30 2026 GMT
Subject: CN=7e00bebf9a41372c19d927dc181d6a1ed424e379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:de:41:49:5e:ba:52:54:a0:ba:37:65:24:
b4:8f:d1:0e:93:59:8c:15:19:f1:91:e8:14:3a:a2:
7d:d7:2a:db:20:42:f3:ee:17:87:6b:47:a3:ee:76:
76:f8:58:7e:50:ef:d9:21:7a:d9:49:1a:88:68:59:
b0:0a:9c:6b:d5:a1:91:c1:18:34:29:22:bb:8b:87:
be:6f:b9:8d:6c:cd:c7:18:fe:97:22:fc:79:78:14:
ea:9a:2b:c4:bc:e2:00:46:21:66:1e:63:f2:26:84:
09:a4:d4:b3:57:33:28:c9:94:40:97:24:26:7a:27:
74:d5:40:30:ab:76:1c:29:2e:2d:94:ea:6f:d5:c8:
84:42:f1:97:b8:a1:36:eb:05:00:d9:e1:52:8d:ae:
2a:5d:e3:07:d8:e4:84:87:86:0b:f6:36:98:51:2e:
11:cb:8b:6c:33:e4:6c:56:62:7d:58:89:b8:52:be:
86:54:fe:d2:a6:21:a2:48:3b:57:13:6e:f3:33:f4:
91:da:91:2d:04:df:24:bb:4d:1b:5a:98:90:4d:23:
05:9d:f5:64:28:e4:44:45:12:e7:7a:aa:05:6f:09:
0f:f4:29:29:f4:ac:ec:b5:48:84:81:1a:cc:63:a1:
40:81:2f:4b:70:37:af:01:2d:fb:05:30:55:42:69:
35:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:00:BE:BF:9A:41:37:2C:19:D9:27:DC:18:1D:6A:1E:D4:24:E3:79
X509v3 Authority Key Identifier:
keyid:5E:6D:2C:2B:69:C2:48:51:62:3B:F9:14:76:90:26:35:A4:CE:09:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8b:69:40:aa:e7:94:ef:ef:19:28:db:d6:50:bd:ed:89:24:
d7:57:68:3c:13:8d:97:d2:aa:91:b7:77:0c:5c:8f:5c:1f:67:
71:1f:b4:a9:ac:51:c5:0b:c5:8a:44:fd:4b:be:d4:81:8f:f5:
5e:3b:93:d8:a9:b9:a9:84:21:c4:00:f0:be:45:0c:d9:e8:71:
d4:aa:24:27:99:1a:46:ce:fe:dd:16:f0:2c:56:26:f5:f2:3b:
f6:60:43:36:39:f9:ca:1b:3a:7a:c1:fd:6d:d5:cb:4f:5f:71:
6e:81:db:b8:b2:57:03:59:54:e5:f3:20:05:0f:7a:80:d3:ed:
30:40:0a:2b:ba:ac:ee:43:1f:59:99:d4:20:9a:fe:50:a6:02:
9b:f0:8f:28:99:0e:58:b9:b3:f5:e1:66:86:33:ea:c8:57:5b:
17:10:f8:e1:6f:16:b2:91:0e:4b:e6:87:bb:c0:39:75:21:41:
06:75:be:40:d2:f0:43:6f:c2:f3:58:d6:53:88:6c:27:4a:d8:
c1:d3:05:ec:0c:60:08:51:44:b4:3d:b9:f5:3e:d1:03:0f:2f:
5a:d3:11:93:b9:e5:26:46:d9:bb:d6:37:6e:5c:79:5c:b5:bc:
aa:3b:52:ca:d5:06:72:5e:67:72:8b:66:a4:b5:63:a0:85:a2:
23:97:7e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:56 2026 by rpki-client