This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
File: cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft (raw, json)
Hash identifier: CX3lPiMUvsZnBLgowGMy+AfrZhWwvJ07yQYi1/D0rcU=
Subject key identifier: 07:37:B0:81:0B:E3:A1:E7:E4:3F:2C:D2:E0:FF:BA:13:5F:FE:61:0E
Authority key identifier: 73:18:9D:26:BA:E7:F8:5C:B4:E0:6A:B5:AB:53:6D:E5:A8:0C:16:A1
Certificate issuer: /CN=73189d26bae7f85cb4e06ab5ab536de5a80c16a1
Certificate serial: 019C435921B38FDF5E9F2917D613D9980492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 17:00:40 +0000
Manifest this update: Mon 09 Feb 2026 17:00:40 +0000
Manifest next update: Tue 10 Feb 2026 17:00:40 +0000
Files and hashes: 1: StxoWp_RJ1797k0oHsjoVvZHf10.roa (hash: nD5a2Jb4fZiufTRyTRxdHS8BCxtbGh40rJHL37nPIac=)
2: cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl (hash: 5EW2lSWK7ntTnCb5QJ+yx/a8qlDGYFeIEIGkGSi3+Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:21:b3:8f:df:5e:9f:29:17:d6:13:d9:98:04:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73189d26bae7f85cb4e06ab5ab536de5a80c16a1
Validity
Not Before: Feb 9 17:00:40 2026 GMT
Not After : Feb 10 17:00:40 2026 GMT
Subject: CN=0737b0810be3a1e7e43f2cd2e0ffba135ffe610e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:95:e5:19:b1:e2:1e:f8:ab:48:9a:2f:46:f5:
93:bc:1d:7c:fc:29:ed:6c:ba:97:dc:c6:e1:a7:8e:
99:91:08:78:3e:af:96:ed:94:8d:7b:bc:74:db:b1:
53:10:da:c4:33:36:f0:6a:ee:5c:14:c0:4e:a3:98:
3a:49:cc:96:85:3f:e3:76:54:c2:d1:d3:6c:2e:c0:
a1:65:b3:29:2b:ce:78:3e:98:f8:a4:3e:a8:6a:73:
05:30:fb:48:3a:d0:f2:80:0c:c7:c5:6e:03:45:62:
4f:dc:4d:ab:66:61:f4:d6:60:5c:fb:23:bc:3e:b6:
33:7e:13:2b:02:86:af:90:b8:8b:7f:58:09:c7:d2:
6c:02:92:1a:94:d1:9d:4b:c0:7c:ce:46:d8:0f:ed:
b1:a6:06:10:3c:ad:e0:ed:75:13:b0:5a:ae:d8:2c:
6d:1e:a2:20:d8:d3:ae:00:e2:36:ae:4e:ee:18:8c:
59:e8:e2:be:a0:cb:01:cb:29:75:0b:bf:3f:33:16:
5e:e3:4a:cd:17:8d:da:9d:8e:ee:5a:3c:4e:85:e9:
cd:af:09:54:3e:7b:36:c5:dc:8a:f7:f3:ee:fa:61:
4c:89:13:28:fd:12:af:30:58:43:20:e8:bf:f0:3f:
d5:2e:ef:ec:aa:ef:04:1d:fb:79:de:53:06:69:25:
cc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:37:B0:81:0B:E3:A1:E7:E4:3F:2C:D2:E0:FF:BA:13:5F:FE:61:0E
X509v3 Authority Key Identifier:
keyid:73:18:9D:26:BA:E7:F8:5C:B4:E0:6A:B5:AB:53:6D:E5:A8:0C:16:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:68:14:b9:f5:28:d1:1c:e7:29:ed:a7:45:23:de:5f:b2:78:
b8:dc:77:04:c7:02:94:05:5f:d2:1b:54:bd:33:dd:51:b8:90:
9f:34:76:7a:6a:08:23:fa:c5:4f:2f:07:a7:7b:02:57:20:a6:
92:84:0a:9d:0a:1d:b4:c4:a7:e8:51:b3:45:08:62:0d:45:82:
71:6f:a3:b7:c1:57:03:b4:07:4f:5d:5e:27:41:18:ad:48:71:
22:5a:2e:f8:22:7a:eb:15:d3:f7:96:02:18:e9:6c:ad:49:f8:
6e:45:73:d6:26:8a:34:ce:5b:07:47:1f:9b:e7:e4:1b:dd:33:
99:ab:bd:68:58:19:e7:78:0c:66:bf:f5:7c:9a:01:55:0c:97:
01:77:bd:97:9e:cc:4c:33:f6:e7:81:67:43:20:52:10:51:a1:
4f:f6:ed:6c:56:51:cc:5b:78:a2:75:d5:de:13:8b:67:89:82:
ce:a0:38:56:ef:9c:ba:bd:06:c5:35:26:a7:1f:a5:33:bb:dd:
15:d5:05:29:63:4f:80:c0:5d:f0:7e:95:86:f3:17:90:c2:38:
f7:18:97:aa:b9:ab:a8:9f:b9:f3:ef:89:29:95:36:b0:5d:be:
72:c3:95:07:76:f9:eb:5a:e7:48:49:4a:b5:b3:92:83:3d:b4:
3e:91:a4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:34 2026 by rpki-client