This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
File: xtEbZP_hjvpC9DpsdlY53uONAn4.mft (raw, json)
Hash identifier: rlBryxX22FjF26ToRkFDPLFa3HH/tvhufS0HnveBoak=
Subject key identifier: D7:0A:0F:E5:2E:2C:B3:C5:C3:4F:98:45:41:A0:3D:A4:C6:72:59:88
Authority key identifier: C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
Certificate issuer: /CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Certificate serial: 019C43FE3EA68BD4B5FB75533251F31DE425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
Manifest number: 1098
Signing time: Mon 09 Feb 2026 20:01:01 +0000
Manifest this update: Mon 09 Feb 2026 20:01:01 +0000
Manifest next update: Tue 10 Feb 2026 20:01:01 +0000
Files and hashes: 1: 1HMsGfdsMj6bVCe_HqSPHKmPGQA.roa (hash: Aa+3horScinkb91IcV06nuOTEkzdcEAPUq8TBlQGMDg=)
2: Q6q5ifTmogwJicn2e4z2f5_1UN8.roa (hash: ZCT+LPivkmFqXHHIYRE3kEHzKOk9mVM2bvW0OtpppFg=)
3: xtEbZP_hjvpC9DpsdlY53uONAn4.crl (hash: plid/PmXdpxcEQQkplGpREBOYZGo0R5adsLXpdli2ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fe:3e:a6:8b:d4:b5:fb:75:53:32:51:f3:1d:e4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Validity
Not Before: Feb 9 20:01:01 2026 GMT
Not After : Feb 10 20:01:01 2026 GMT
Subject: CN=d70a0fe52e2cb3c5c34f984541a03da4c6725988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:24:9f:af:48:68:8c:d2:77:d5:0f:c9:bd:fd:
d5:b6:91:81:c5:c7:6b:9a:71:b6:9a:43:14:96:e2:
d6:0a:80:3f:38:cf:e2:ed:34:3e:26:02:ea:ac:16:
f5:20:58:58:4d:8e:db:1e:cd:c4:ca:ca:c1:72:af:
56:ff:86:10:df:13:1b:cd:0d:f6:f8:cb:b4:bc:59:
9f:5c:a4:e6:85:46:3e:3c:28:ca:10:02:90:83:f0:
0b:cb:ff:ba:b0:b0:24:5a:af:c8:90:c5:74:a3:11:
02:75:92:25:81:6a:75:ce:b2:b5:f9:4e:0d:f5:93:
15:e2:40:fc:12:cd:3b:71:69:44:8b:01:80:65:92:
84:a8:80:98:77:f5:70:10:6d:93:e9:6f:f3:c9:d8:
8a:28:d4:9c:85:4d:d4:57:5d:15:79:d4:6f:61:8d:
ab:51:c7:23:d4:cc:7d:b4:d8:c4:f5:b8:5f:21:84:
44:e3:f7:14:c3:6e:ba:0e:e0:59:59:28:88:6f:1d:
5a:02:df:1c:b3:d5:ad:6e:75:7f:e6:6f:0a:47:2f:
33:22:68:74:8b:43:a0:62:07:58:19:1e:8d:92:3a:
5c:71:09:fc:be:43:d8:7e:9c:49:da:07:e9:df:18:
f5:a6:16:c8:31:b6:0e:5b:dd:b4:eb:c0:c3:8d:04:
77:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0A:0F:E5:2E:2C:B3:C5:C3:4F:98:45:41:A0:3D:A4:C6:72:59:88
X509v3 Authority Key Identifier:
keyid:C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:05:65:65:0b:ab:6d:d4:e2:17:50:c6:12:68:ed:c9:c0:8b:
32:9c:bd:f2:c1:d8:8f:b9:f9:8c:e1:7d:85:01:e2:73:de:1a:
7d:7a:ef:51:08:eb:44:b0:43:e7:9b:09:05:3c:3b:8c:e5:b5:
67:b1:ab:38:7c:5e:3c:ca:e7:ee:df:a7:57:20:db:57:84:b3:
05:2a:34:5e:c0:7e:17:52:e1:41:1e:8e:b8:05:5a:27:b7:8f:
cb:2d:6a:5d:41:17:ce:8c:4b:24:f1:3a:4b:4e:d6:0c:66:8d:
3d:6c:d1:81:77:d7:0d:db:de:3b:07:c0:06:3d:91:b0:7f:fd:
df:f1:d4:62:76:41:ad:10:93:f2:36:62:13:90:d4:03:ee:51:
80:84:0f:6a:e0:06:fc:9d:88:2a:5a:65:b5:40:8c:a2:d3:f3:
a6:a2:b1:be:ca:32:82:7c:27:cc:62:22:b6:c8:20:c0:20:f2:
96:de:50:f4:63:a0:68:23:27:d4:b4:cc:89:76:80:fe:db:3c:
a8:83:a4:25:92:8f:a0:71:4e:b4:05:f9:b0:7b:ae:8c:8f:4f:
d7:13:b3:b9:75:9c:14:c3:61:c4:21:96:c1:16:10:0b:a3:2e:
42:13:25:0a:6b:d2:26:21:94:3f:0c:42:75:f2:af:2c:d5:0c:
9c:2e:33:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:58:56 2026 by rpki-client