This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
File: XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft (raw, json)
Hash identifier: XgZfIRjHtT4XlHSpwjgPY/DfKdcOn/cTBA00bT545p0=
Subject key identifier: 19:C1:50:85:11:8E:CC:76:0F:34:7C:52:C4:C1:59:E7:32:05:D9:5A
Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Certificate issuer: /CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Certificate serial: 019C45B5CD8EA52275FCFC7596739CF7397A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
Manifest number: 1851
Signing time: Tue 10 Feb 2026 04:01:08 +0000
Manifest this update: Tue 10 Feb 2026 04:01:08 +0000
Manifest next update: Wed 11 Feb 2026 04:01:08 +0000
Files and hashes: 1: CZ1LSUniiHGNKwvHak6fSDmBxdc.roa (hash: Mosbvu2i3W9lRSEMHDa5n4kbGcSkA8mN4bx3wDReYfc=)
2: JhlPUIaiuE2YohDfzMjZESoyDBM.roa (hash: 7exMhOdMj9M/aNI0j3yYX3O6VN6kNC8RAmHhooROzJc=)
3: XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl (hash: /pF6zcZjdevDvW9bQiLwd+rdupCtQbLu0sAJVIKDsLc=)
4: i9Jjligy-EqoCiaFX_JoZgf9dZ4.roa (hash: XW8rc6v037pilJaZxg9f1SStjDu20ZBHUdc/h3ZDPqs=)
5: j2M12KSK7yupbk2QrIFnkpZ-KPM.roa (hash: yQynIUWOty/ocy5JzISGlHN5/AewbIRpARiMe1+4m+I=)
6: kSIrlNkYtxjevrUOWqXwGaCeFxQ.roa (hash: P1EFKe/doBtEMdSkydhZWieCIypvlDRY3TVJIkRt4p8=)
7: rgypQg1mq_y1PkBJTzbgugJszfU.roa (hash: 2UJiTYNC2SMcM+K20BC59uzzBZrc7ob9nA7WO1YUWjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:45:b5:cd:8e:a5:22:75:fc:fc:75:96:73:9c:f7:39:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Validity
Not Before: Feb 10 04:01:08 2026 GMT
Not After : Feb 11 04:01:08 2026 GMT
Subject: CN=19c15085118ecc760f347c52c4c159e73205d95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:16:b7:6f:0a:13:ae:a9:e9:1e:8a:c5:0a:d6:
c8:d7:2f:8b:08:51:3c:b1:fd:30:23:f1:f9:aa:66:
5f:d8:78:2e:71:be:3e:1f:49:45:87:b6:fc:db:c0:
3c:0b:ac:22:61:17:c4:f8:d1:1d:85:e0:4b:15:0a:
f1:f3:60:4d:fe:a4:e6:bd:5a:28:85:2d:72:77:b0:
d5:17:fe:8e:42:5d:e4:9a:d6:80:9c:24:c1:c3:6e:
54:be:99:b2:0b:61:99:17:4d:d1:d4:c9:a5:81:c7:
40:43:7c:c1:e5:a5:8e:6f:8c:2e:8e:0f:f4:fa:7b:
91:9c:5c:d4:b6:00:a1:e6:e3:a0:3d:57:9c:ee:06:
a8:6d:46:c2:55:f4:8c:d7:25:b3:8e:71:45:b5:7e:
31:f9:4a:ee:63:c3:73:1d:9c:9f:7b:df:b5:77:13:
c4:6b:fc:f5:3d:0d:3a:c8:b2:08:6c:85:c4:80:42:
6c:ce:49:59:9b:d8:a5:d4:54:7e:63:a6:a8:db:3b:
7c:d1:eb:e0:42:80:b2:34:29:2b:8f:d0:d8:52:8f:
05:96:27:66:7e:df:ee:82:38:4c:04:84:cd:8e:8f:
5b:e4:80:55:c9:31:a6:9d:d0:b0:0f:d7:37:9b:80:
ce:d1:ab:c5:c3:d6:28:03:3a:62:0d:cb:7a:84:75:
dc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C1:50:85:11:8E:CC:76:0F:34:7C:52:C4:C1:59:E7:32:05:D9:5A
X509v3 Authority Key Identifier:
keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e9:55:25:f9:4a:07:67:f0:63:62:91:36:ff:89:e8:33:bc:
a7:97:df:4c:c6:d6:1d:a6:2e:45:5f:29:72:2b:ff:19:bc:27:
64:da:2b:5b:19:33:42:f8:bd:29:9f:25:7e:d0:06:e2:0a:df:
78:ca:e0:8d:5c:f4:c2:23:b9:0e:b4:9f:e3:6f:86:a6:a4:8a:
95:f5:d1:6a:a1:33:08:24:0e:d6:5a:e6:c8:57:b8:e0:50:fa:
a6:76:2d:10:87:15:e9:e9:d5:a9:0d:2a:77:04:18:0b:23:8d:
97:27:b8:66:a7:47:ea:29:9e:72:ac:27:04:71:11:af:20:71:
a1:72:a0:f0:55:db:28:76:72:26:4a:39:75:49:d2:c2:45:b7:
e9:fc:83:cf:f4:9a:77:d2:56:85:9d:e1:40:93:1f:ad:5b:ef:
01:f8:48:c1:76:f4:77:41:c5:f8:02:07:55:ce:4c:44:d4:41:
68:e2:39:a3:e7:05:bb:61:32:3a:65:72:46:a7:85:90:98:43:
04:cb:9b:44:de:f0:dd:c4:cc:03:8d:9c:da:ad:19:e2:6f:7a:
da:17:98:b0:8a:e9:80:b5:0b:15:97:3b:50:3e:53:fa:f3:68:
d8:f2:7b:ed:65:9c:05:35:41:f4:3c:8f:b8:75:89:5f:93:b9:
9a:60:12:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 07:13:16 2026 by rpki-client