This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
File: xDwiL60sJ8phLJjCc9TxZQbhsuU.mft (raw, json)
Hash identifier: sBCPeTz4krW4DI8tS7i/avP5Bdxaj8VjrW+BOarjpas=
Subject key identifier: 6F:27:5B:7F:E5:7A:9B:10:42:55:65:69:90:96:A1:A6:AE:85:80:A3
Authority key identifier: C4:3C:22:2F:AD:2C:27:CA:61:2C:98:C2:73:D4:F1:65:06:E1:B2:E5
Certificate issuer: /CN=c43c222fad2c27ca612c98c273d4f16506e1b2e5
Certificate serial: 019C427D44689B0DBAAB33D79B993CD579F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
Manifest number: 1091
Signing time: Mon 09 Feb 2026 13:00:31 +0000
Manifest this update: Mon 09 Feb 2026 13:00:31 +0000
Manifest next update: Tue 10 Feb 2026 13:00:31 +0000
Files and hashes: 1: HwX_IRdskXcAV_np2ZkdO8Ut9Eo.roa (hash: YW9KO6pt+dk+m3/5lsQ1NeGU+nKFSfub7NQ+6nyySSs=)
2: xDwiL60sJ8phLJjCc9TxZQbhsuU.crl (hash: 2XAFh1GNdSRAYPukF2YIX8SNKg1vAauGLYEJqLmbhMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:44:68:9b:0d:ba:ab:33:d7:9b:99:3c:d5:79:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43c222fad2c27ca612c98c273d4f16506e1b2e5
Validity
Not Before: Feb 9 13:00:31 2026 GMT
Not After : Feb 10 13:00:31 2026 GMT
Subject: CN=6f275b7fe57a9b10425565699096a1a6ae8580a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dc:e6:70:03:92:7a:f8:28:dc:97:b8:ad:86:
be:0a:9e:5a:9d:e6:a7:18:9f:52:c1:64:d0:1d:5d:
47:73:53:63:93:01:c9:d9:1e:21:0e:c4:8b:0b:98:
4d:9f:56:8c:cf:d0:4e:fa:3b:ae:0e:fa:99:25:51:
ec:29:e1:9d:88:c1:83:93:b0:3b:ee:5c:16:bd:aa:
54:52:a7:0f:7f:88:60:5d:0f:80:a9:3f:ca:e9:b4:
f4:6f:c8:11:40:07:b7:26:71:54:a5:eb:90:09:3b:
51:94:fa:a6:2b:8a:03:6f:7d:e6:c5:1f:ac:11:cd:
95:c6:14:51:42:3a:bf:65:15:82:a7:3d:cf:a6:a6:
fa:f4:77:a0:ae:7e:cd:1c:54:9b:68:d6:3a:5d:a2:
2a:e0:74:93:45:17:62:f6:3b:36:12:08:42:de:85:
23:c3:60:f9:1e:28:fc:62:25:70:a1:d3:bc:3f:ea:
ee:a6:6f:a4:08:cd:2d:af:89:c7:0c:6b:4c:9f:d6:
4a:97:2e:8b:3d:90:a4:a2:53:c6:75:4c:79:7f:f0:
d1:0a:0b:cc:de:16:fc:5c:13:e5:0c:3b:7b:e3:94:
d0:94:07:74:dc:81:14:dd:8f:77:82:c1:0b:48:b1:
55:7d:a5:20:e6:9b:b1:2e:58:67:57:2f:41:ff:a6:
34:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:27:5B:7F:E5:7A:9B:10:42:55:65:69:90:96:A1:A6:AE:85:80:A3
X509v3 Authority Key Identifier:
keyid:C4:3C:22:2F:AD:2C:27:CA:61:2C:98:C2:73:D4:F1:65:06:E1:B2:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:1b:03:bd:69:31:08:aa:e7:06:ca:36:12:df:b0:bc:ae:28:
91:2d:67:bb:52:7c:8a:b1:40:8b:d4:a7:00:9c:01:96:0a:5c:
aa:01:80:b0:bc:fb:61:fb:83:3e:53:5a:45:aa:12:a0:82:19:
d9:e5:cb:f7:d1:31:e1:15:b7:13:da:9b:16:98:22:1d:ea:af:
ac:ba:d2:80:b6:f0:34:fc:c8:05:84:56:25:e1:75:01:79:4f:
fa:80:10:d3:23:95:69:6e:a4:05:1f:b4:77:39:0b:1e:72:5d:
72:34:30:e6:34:14:2d:f4:03:aa:5a:23:23:e6:4c:fe:a9:00:
20:cf:64:4f:70:97:d3:ea:c6:23:a7:58:e2:a5:25:57:f5:1b:
68:8f:b3:d3:83:0e:49:c4:f0:83:21:e7:5a:f3:05:ce:6f:bc:
1a:aa:97:81:f7:dd:7a:c6:50:62:a4:e1:3a:a0:26:df:28:db:
26:d5:12:88:4e:69:23:35:5e:60:83:d9:64:43:23:23:ea:87:
2a:dc:5f:a5:4c:8f:56:8b:64:fc:d5:be:9e:b7:cc:94:84:b5:
81:ea:f6:e4:6c:b0:d5:d9:0d:82:a5:bc:8f:4c:f8:63:34:37:
de:5c:4f:68:33:0c:43:0e:31:65:a4:b7:c8:ff:11:da:33:e2:
b5:f2:cf:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:49 2026 by rpki-client