This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
File: xNN466ZI9D5TpKQeE0uQExypPNg.mft (raw, json)
Hash identifier: SdCLLbskCfkspVLgsw78IqhNSEh+PS/BVKIjpy3b9BI=
Subject key identifier: 26:38:65:42:D1:E3:9B:DE:12:D6:C0:C1:06:83:59:93:B2:F1:3F:7B
Authority key identifier: C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
Certificate issuer: /CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Certificate serial: 019C40FD4C91C66CE9CEB8E46B8306AAD99F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
Manifest number: 0D50
Signing time: Mon 09 Feb 2026 06:01:07 +0000
Manifest this update: Mon 09 Feb 2026 06:01:07 +0000
Manifest next update: Tue 10 Feb 2026 06:01:07 +0000
Files and hashes: 1: LTb5vPloqkbClBKB9zASxlBnfTI.roa (hash: UXcXLrrBaIHA3rxo2Vg1OLmswtJ0WJsGAG20BgieLSw=)
2: xNN466ZI9D5TpKQeE0uQExypPNg.crl (hash: hnwouKgr3pT2DIWsovWOwwnRyASHgPh/osR0GX4bR1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:40:fd:4c:91:c6:6c:e9:ce:b8:e4:6b:83:06:aa:d9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Validity
Not Before: Feb 9 06:01:07 2026 GMT
Not After : Feb 10 06:01:07 2026 GMT
Subject: CN=26386542d1e39bde12d6c0c106835993b2f13f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cf:17:c8:02:37:86:9f:df:64:93:59:b7:a9:
ab:8f:32:16:aa:b3:16:2b:0b:9a:eb:ba:0c:8a:d3:
77:ec:32:f1:73:fb:a1:9e:f3:ba:bb:76:c3:38:63:
40:04:62:b4:3b:fd:e0:56:b9:53:19:e6:fe:67:b4:
db:63:66:84:be:3c:9f:7f:10:65:48:2b:7a:78:f2:
4c:1d:17:c3:c8:4f:14:29:a2:b0:1a:4e:f9:9c:ef:
e9:ff:3c:d0:5f:f1:02:88:e7:da:ce:e1:10:62:92:
22:9d:39:92:63:41:aa:6c:4f:22:bd:57:55:59:36:
31:f0:78:7e:6c:1d:5d:76:5a:3c:37:c6:3e:e8:77:
4a:bd:4d:ab:81:36:e7:7b:32:fb:cb:63:e4:4e:4b:
9a:4c:75:21:f2:55:06:90:86:28:f6:33:ff:bf:17:
ac:93:28:b2:25:1a:26:7f:bc:48:b5:e4:19:bd:a4:
fd:fb:13:62:92:9f:0f:8d:47:34:5f:5b:30:b0:48:
e8:f3:88:5c:5d:9e:ae:78:6b:e6:f4:be:bc:55:23:
3a:75:8d:26:39:6c:34:c3:27:eb:3b:b8:d3:63:3d:
d2:9e:ea:bb:98:99:78:d6:1e:20:91:ad:8b:ea:5d:
db:e1:f7:66:b3:41:4c:6c:2a:fb:d3:0d:c2:20:6d:
38:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:38:65:42:D1:E3:9B:DE:12:D6:C0:C1:06:83:59:93:B2:F1:3F:7B
X509v3 Authority Key Identifier:
keyid:C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:71:09:8d:91:9a:ea:06:f5:83:4f:c4:92:7c:9b:0c:68:5e:
46:dc:f1:25:7f:ea:2a:5c:44:94:11:61:11:07:89:09:ec:83:
96:f6:7a:ac:b9:33:c3:62:a5:f4:aa:c7:b3:03:47:eb:36:d2:
bb:15:47:09:40:01:5b:cc:d2:cb:7a:f6:6c:f9:34:8f:c3:84:
78:0e:d2:cc:03:3a:19:90:96:f0:92:63:18:6b:c3:e2:a1:ae:
60:79:5e:d0:84:a8:59:52:47:2d:f4:26:96:c6:da:45:d6:f2:
45:dc:46:6b:29:3d:50:ce:ba:48:ef:51:cb:67:ed:a8:23:0f:
51:0e:a5:af:26:b0:6d:f8:ea:5e:ec:7b:57:e2:8a:a6:b7:74:
77:6e:5b:63:4f:65:7a:93:fe:c8:7d:be:52:eb:9c:aa:e8:58:
d2:69:1a:4f:4e:bd:cf:01:e4:2f:8e:3d:e0:f6:b0:49:cc:3f:
86:1c:bf:1a:2b:e3:b5:0b:48:ea:7b:ea:17:de:e1:12:16:a4:
a2:4b:74:5f:e5:a3:34:b5:bc:7d:5d:51:91:74:43:ca:9a:5a:
e5:ca:50:75:b4:38:d6:62:41:59:a8:45:f7:db:94:16:17:ac:
e7:da:75:2b:c5:84:6d:77:98:97:1c:b5:5f:ca:e6:72:1e:6d:
86:f4:e0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:39 2026 by rpki-client