This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
File: X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft (raw, json)
Hash identifier: SwdxzbMZWWBKMIhy8sYe4888ONmUidl6n67c1YGxPlw=
Subject key identifier: 2F:BF:95:A4:32:48:1A:E3:7A:3A:2E:13:96:24:3A:1C:04:62:9D:29
Authority key identifier: 5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1
Certificate issuer: /CN=5fab019d98b88c585d5f016204113c839ae067d1
Certificate serial: 019C42EB0B13B760A63AD8F8F9975071420B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
Manifest number: 0636
Signing time: Mon 09 Feb 2026 15:00:25 +0000
Manifest this update: Mon 09 Feb 2026 15:00:25 +0000
Manifest next update: Tue 10 Feb 2026 15:00:25 +0000
Files and hashes: 1: X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl (hash: vjLwcR3goOAmEU8soesF/dAaeI2r1xGQsYEoip3Ml+Q=)
2: hZfrHQXQ9gJ1CBuZbvb4HTnn7x8.roa (hash: s7Q9n6FVyTwioyvvcuH0Je0WpF9fajbCSSnTwOxPywE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:0b:13:b7:60:a6:3a:d8:f8:f9:97:50:71:42:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fab019d98b88c585d5f016204113c839ae067d1
Validity
Not Before: Feb 9 15:00:25 2026 GMT
Not After : Feb 10 15:00:25 2026 GMT
Subject: CN=2fbf95a432481ae37a3a2e1396243a1c04629d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b4:a6:b7:80:73:28:2c:9c:63:12:66:96:94:
4c:78:ac:7e:fb:53:08:1f:9b:e9:14:b6:99:65:24:
a6:6f:28:50:79:25:9e:58:96:07:84:2b:35:77:84:
ae:63:e8:bc:21:87:43:eb:a6:72:89:7a:16:10:55:
83:68:09:12:c1:60:f0:3d:1a:2e:c3:d9:54:72:85:
66:24:a8:31:0c:11:23:90:06:0d:b8:e2:a0:23:9b:
85:b8:00:52:e3:ca:b4:98:7b:8a:0e:d1:27:a8:25:
d5:9e:66:1b:36:74:d9:d3:7e:71:04:c4:7e:49:6e:
9a:13:5b:12:50:b6:68:ab:42:f3:8b:f2:0f:09:c4:
b0:a7:ef:eb:40:ef:bc:2c:f4:3b:33:41:fa:ad:b5:
ce:a7:cd:ca:bc:99:90:76:1b:96:ec:35:d6:7f:35:
53:27:5e:10:00:29:a4:8d:2c:85:d0:e0:73:34:66:
0d:a2:04:da:1a:54:d8:83:87:49:ed:6b:95:2c:f7:
8d:e3:c3:71:27:44:bd:04:5a:6c:87:a8:d7:f2:aa:
d3:97:51:78:7d:01:71:b7:7e:3f:87:19:d8:f1:e2:
97:18:23:12:f3:bd:9c:ba:cd:bd:7c:24:7f:d0:89:
b0:22:cc:b8:a5:f6:c3:a0:c7:74:76:d9:06:8f:69:
c9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BF:95:A4:32:48:1A:E3:7A:3A:2E:13:96:24:3A:1C:04:62:9D:29
X509v3 Authority Key Identifier:
keyid:5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d5:f8:7c:a8:5f:cf:d4:da:18:da:20:19:50:42:54:0e:4e:
a4:94:bb:02:06:b8:62:72:17:d0:77:fc:06:ed:5c:ca:89:97:
db:ba:9b:f8:1d:5f:1b:94:60:25:fd:85:2b:38:25:50:3f:c4:
d5:6d:db:08:41:4d:bd:72:b4:75:a4:18:de:8a:00:43:84:ca:
88:af:31:f3:00:01:89:93:34:bb:2d:8c:53:63:3c:0e:ec:dd:
47:90:b4:39:ad:7a:ad:85:31:9d:b3:a9:ab:f6:d9:dc:e3:e2:
82:13:6c:a3:46:0e:ec:de:40:ec:74:5a:e5:be:4f:cd:ee:a4:
28:d6:08:e3:a6:85:ed:f4:61:a4:bb:40:a6:da:a1:25:be:a7:
70:5a:9d:ae:21:80:23:b6:55:ff:b2:1d:75:3f:8b:83:fc:ec:
e9:2f:0b:01:18:31:aa:f3:74:56:3c:fb:d8:ee:ac:24:76:e6:
e6:93:4b:76:04:01:57:e0:bf:df:0d:b9:cb:40:91:bb:2c:fd:
03:6f:56:71:53:fa:cf:3b:20:ad:a3:75:5b:24:2a:33:c6:b1:
48:4c:45:1a:51:c7:80:0e:4c:41:be:c0:c0:d0:b0:22:6e:15:
de:1d:4c:ea:ac:5d:9c:9a:07:00:60:69:e8:94:ca:ac:d5:15:
95:6d:c4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:18 2026 by rpki-client