This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft
File: xFyYQwiFYolxMHxZtc8kFoIQI3g.mft (raw, json)
Hash identifier: i9bHeoCqcr3W6Nv6sSzqTpWZQAl7HeyUGco+nalng3M=
Subject key identifier: 09:E6:C8:D0:94:9D:2A:8A:FB:E4:5D:00:ED:3E:39:02:95:3F:82:4F
Authority key identifier: C4:5C:98:43:08:85:62:89:71:30:7C:59:B5:CF:24:16:82:10:23:78
Certificate issuer: /CN=c45c98430885628971307c59b5cf241682102378
Certificate serial: 019C427D5D8EEE5E93935A6C572F91012218
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 13:00:38 +0000
Manifest this update: Mon 09 Feb 2026 13:00:38 +0000
Manifest next update: Tue 10 Feb 2026 13:00:38 +0000
Files and hashes: 1: ghzuYkE_gnJGPgiMxRgv65RQqec.roa (hash: 1+GlWtDdPLwRz4VbLN8GbkLKLROJEbW43VoOa31HX4g=)
2: xFyYQwiFYolxMHxZtc8kFoIQI3g.crl (hash: 1R3JmOdI4nPS0GXp/35zVmhZH3Fluf/ZUAzw/YIu1s0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:5d:8e:ee:5e:93:93:5a:6c:57:2f:91:01:22:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45c98430885628971307c59b5cf241682102378
Validity
Not Before: Feb 9 13:00:38 2026 GMT
Not After : Feb 10 13:00:38 2026 GMT
Subject: CN=09e6c8d0949d2a8afbe45d00ed3e3902953f824f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ca:27:6a:52:36:0c:0c:ce:11:f1:ab:5c:70:
42:c0:16:62:c0:38:49:82:99:d2:a5:f2:f8:80:e2:
bc:15:8b:f9:da:b5:5d:07:51:90:bb:9a:a1:fc:fb:
3a:70:bf:bd:67:a7:3b:49:4b:16:9c:39:84:b2:25:
2c:cd:00:96:f2:f7:c2:95:f5:43:6a:8d:f4:dd:b9:
55:26:bf:1d:af:32:9c:75:ee:f3:3e:f2:a8:1b:ec:
ce:23:3b:58:b8:85:6d:a3:14:ff:ba:b6:d1:12:ad:
11:43:39:01:6d:35:5a:b4:b2:0b:16:a5:e8:50:46:
16:f2:2a:a9:48:24:0e:5b:f7:bf:73:dc:8e:74:7f:
d9:ed:38:47:bb:13:fc:bf:78:fe:59:e6:ed:ec:4f:
eb:b5:2c:60:7b:7c:06:b6:56:8a:87:d2:b3:3a:86:
77:e5:5f:23:ad:bf:cb:e2:28:b0:a3:18:56:6c:e1:
15:86:4e:50:36:78:06:ee:4a:4b:12:c6:56:8a:3e:
5e:ad:f4:94:82:8f:55:97:dc:7a:5b:ec:63:60:6d:
1e:01:52:6f:73:1e:35:36:2f:d5:35:e0:9a:2b:b9:
01:88:44:99:b3:71:79:76:1f:b0:67:10:af:d7:d8:
95:b9:fc:8f:2b:76:0a:d4:4f:33:ae:a4:34:51:cc:
e9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E6:C8:D0:94:9D:2A:8A:FB:E4:5D:00:ED:3E:39:02:95:3F:82:4F
X509v3 Authority Key Identifier:
keyid:C4:5C:98:43:08:85:62:89:71:30:7C:59:B5:CF:24:16:82:10:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:91:f1:b7:ef:fe:38:34:42:0f:8d:3d:7f:9e:de:cc:ab:65:
fa:4b:43:7b:f0:70:b7:15:bf:f6:f1:82:2a:55:0b:06:94:5f:
0a:a0:46:55:67:30:5a:76:c2:5c:7c:b8:39:5e:62:25:20:c3:
a2:70:8e:11:71:c2:83:f7:6a:66:dd:e2:92:ea:f6:22:45:35:
20:f6:d7:03:a5:f7:c7:d9:dc:0f:4b:af:ec:28:12:90:e5:13:
dc:82:8d:b2:c8:6d:9b:20:d8:cb:76:59:55:0f:c7:38:93:1a:
6d:1d:88:66:d6:c9:54:54:70:59:45:57:1e:10:4b:a4:47:c9:
30:12:7e:61:a5:fe:3b:02:7b:66:58:b8:49:66:ea:c0:48:2d:
ee:cf:72:8f:0d:84:86:08:8a:62:71:d7:59:41:84:54:00:73:
99:7a:b6:62:ac:ba:87:ea:e0:31:25:78:93:8b:32:d2:fa:73:
78:19:e8:8f:56:4b:8d:62:95:b1:29:83:f3:d2:fe:33:3d:ae:
e8:4a:99:ca:83:ab:30:b3:d8:3c:94:41:0c:d0:27:b7:2d:7a:
a7:0d:af:55:53:dd:e4:2c:09:a9:9c:48:af:79:48:8b:be:84:
7b:15:ec:32:0b:b9:27:89:ea:ed:b4:71:f3:a0:d0:c1:23:70:
00:55:92:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:42 2026 by rpki-client