This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
File: xZKgYJDwFpQNMesbCbrhLZSxlbA.mft (raw, json)
Hash identifier: JLWwVlFWkODXdCbEzynJW025sfm8iYZF2+WsbMG/BdI=
Subject key identifier: AC:5A:38:B8:64:A8:1D:D6:64:50:44:72:39:5D:0C:12:DD:54:E9:8D
Authority key identifier: C5:92:A0:60:90:F0:16:94:0D:31:EB:1B:09:BA:E1:2D:94:B1:95:B0
Certificate issuer: /CN=c592a06090f016940d31eb1b09bae12d94b195b0
Certificate serial: 019C427D2E82C7080D56329827D8F27FD8BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
Manifest number: 06F0
Signing time: Mon 09 Feb 2026 13:00:25 +0000
Manifest this update: Mon 09 Feb 2026 13:00:25 +0000
Manifest next update: Tue 10 Feb 2026 13:00:25 +0000
Files and hashes: 1: pdjWyCsS6vRt3qgRpmz1-t9Lw4w.roa (hash: iNpMVvC5UiWrjFC/YV4kYZVM+3Z5N79XJuNaeg291pc=)
2: xZKgYJDwFpQNMesbCbrhLZSxlbA.crl (hash: UT9oA/IsFAZKU2kZJUP3G22xGHPdDE/uglXZxym2tjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:2e:82:c7:08:0d:56:32:98:27:d8:f2:7f:d8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592a06090f016940d31eb1b09bae12d94b195b0
Validity
Not Before: Feb 9 13:00:25 2026 GMT
Not After : Feb 10 13:00:25 2026 GMT
Subject: CN=ac5a38b864a81dd664504472395d0c12dd54e98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e0:7d:ee:81:66:1b:c3:ac:bb:99:80:90:db:
bd:a6:a0:42:72:57:ae:99:4d:b1:2c:06:7b:e2:16:
a5:08:11:f4:ea:aa:b4:3c:11:a3:a2:e7:46:bc:3a:
ef:37:52:7f:c6:fa:db:1e:ed:39:f8:9f:f7:c7:21:
d9:c3:37:99:79:b5:b6:4b:aa:ec:d2:d4:40:ef:d7:
62:87:57:60:68:d7:90:11:ca:8b:0e:94:10:a5:c4:
5b:e0:21:ac:9d:84:24:ca:6f:cb:4d:c0:1f:08:21:
51:9f:79:51:f8:58:50:f5:d6:e2:f8:d5:dc:4f:0c:
84:5e:a8:80:76:4e:aa:4a:41:2a:db:c4:83:d9:63:
55:a5:b1:c8:b2:b2:ef:8f:e5:5c:59:76:58:c9:88:
ed:2b:9e:58:5a:28:a1:2d:9e:24:43:66:6c:38:43:
d1:0c:60:25:48:56:fc:56:40:0d:f8:36:9d:20:f0:
a0:83:17:24:5c:c4:83:90:7a:57:5f:d8:4e:52:2c:
5b:ba:37:ae:c2:fb:52:00:9e:33:0d:9f:f0:0d:05:
77:27:bb:d2:31:17:d8:3b:d2:ba:ef:43:ae:30:71:
d6:94:b3:6b:3b:a4:76:7a:c3:bd:df:72:6e:03:a8:
a9:8d:1c:81:81:c3:a7:3d:2b:d5:c1:7b:be:dd:31:
8b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5A:38:B8:64:A8:1D:D6:64:50:44:72:39:5D:0C:12:DD:54:E9:8D
X509v3 Authority Key Identifier:
keyid:C5:92:A0:60:90:F0:16:94:0D:31:EB:1B:09:BA:E1:2D:94:B1:95:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f1:50:7f:fd:c2:11:1d:8d:8e:db:2a:aa:8a:fd:d9:c7:45:
ae:9d:66:52:44:bc:be:34:88:b8:74:1f:e8:75:c0:45:bf:c4:
36:5f:6c:0c:50:79:5e:d2:05:82:e1:4d:6d:0d:b8:66:4f:39:
98:78:1d:cc:89:82:8e:1a:e3:ff:cc:a5:7a:32:0f:c4:d4:a6:
2a:82:f2:e9:fe:d8:01:58:07:b2:99:17:30:ea:d0:e2:9a:6a:
c8:b3:95:8e:71:d9:08:8f:30:b9:c0:95:60:17:9f:b2:1f:b0:
00:80:a0:10:82:9e:3e:ea:5f:28:89:8b:e7:96:b4:6c:7b:9c:
4f:bf:b3:b5:8a:79:95:b6:f2:09:9d:20:08:6d:7d:14:32:6c:
c0:3f:13:c0:13:c8:35:5c:84:37:85:47:1e:34:f0:75:c8:24:
6d:b1:03:06:f5:63:b4:1b:27:37:cc:4f:42:58:0f:15:8b:5c:
08:04:fb:8d:ed:f9:43:e0:3d:2d:e1:fd:a5:64:26:08:9f:9f:
00:5c:73:8a:09:2c:d4:8e:5e:f7:6c:51:dd:3b:47:43:dd:2f:
cb:f7:3d:9e:9e:a2:d4:57:ae:49:98:1e:d2:72:e0:7e:ec:6d:
8e:76:43:e5:0d:a4:a1:62:d3:0a:f7:3a:be:20:05:f0:78:b4:
58:a0:43:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:20 2026 by rpki-client