This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
File: XxaylLGmR79tZ2g7UWFEl-dR8h8.mft (raw, json)
Hash identifier: w4KJCib5/FRQjuIghOKcPsDbOGg3lVG/mnqaIZHVs5o=
Subject key identifier: AC:84:3F:D4:87:2E:EC:7E:7F:B4:D3:AD:8E:69:8C:26:BF:7E:4A:1F
Authority key identifier: 5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
Certificate issuer: /CN=5f16b294b1a647bf6d67683b51614497e751f21f
Certificate serial: 019C42B44FBED7BF088E481EF0A9BF5E168C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 14:00:38 +0000
Manifest this update: Mon 09 Feb 2026 14:00:38 +0000
Manifest next update: Tue 10 Feb 2026 14:00:38 +0000
Files and hashes: 1: NKg93JWQUnBu80RX13MwmqJxvVc.roa (hash: nG4jnHVVr/B/zg5snhsHaHEVH2wq5BQYMoc/wJLZKCM=)
2: XxaylLGmR79tZ2g7UWFEl-dR8h8.crl (hash: rmeV/6hRa+i8Rgh1bxhucv8DCsQL68oo9A7I9bHRMlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:4f:be:d7:bf:08:8e:48:1e:f0:a9:bf:5e:16:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f16b294b1a647bf6d67683b51614497e751f21f
Validity
Not Before: Feb 9 14:00:38 2026 GMT
Not After : Feb 10 14:00:38 2026 GMT
Subject: CN=ac843fd4872eec7e7fb4d3ad8e698c26bf7e4a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:85:b5:14:65:f4:ac:6f:ca:39:bb:64:47:21:
da:2e:fe:55:20:a5:4f:0a:f6:c0:32:93:80:44:3c:
ec:51:7d:12:18:d1:a9:da:86:bd:b0:43:bc:72:59:
09:87:b9:bf:a1:cd:55:ea:dd:aa:25:38:9f:92:f6:
03:f3:09:30:de:89:74:ee:f1:e2:8c:4f:3c:a9:66:
98:93:3e:7e:3b:e9:92:32:8d:79:53:13:40:bc:c9:
03:bd:05:4e:c2:7a:a4:1d:66:d0:ff:02:da:57:75:
6b:d9:72:39:ca:18:1d:35:c0:be:84:62:07:92:f9:
b6:95:fd:5e:6d:b2:69:af:f8:67:b2:4c:fb:e6:24:
e2:c8:ff:8c:4f:b0:3d:d9:d2:ce:e6:96:c6:a1:d0:
8a:31:80:c8:43:ff:66:5d:31:5f:dd:eb:d3:12:85:
89:11:e7:b3:c1:29:b3:38:bb:31:8b:e6:ef:48:3a:
10:df:03:78:e2:c7:1f:d9:ac:59:42:e9:bd:91:d3:
db:bc:64:24:5c:e5:29:2a:60:03:0a:3f:ba:da:f8:
0e:17:41:80:02:71:e2:6c:65:ab:70:c9:af:55:fb:
1d:a3:f8:23:fe:38:ab:93:f2:ac:05:a4:0e:ae:14:
ab:2d:db:25:d2:39:48:91:67:b5:2a:60:95:08:fb:
b8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:84:3F:D4:87:2E:EC:7E:7F:B4:D3:AD:8E:69:8C:26:BF:7E:4A:1F
X509v3 Authority Key Identifier:
keyid:5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:75:1a:d7:cc:a0:61:65:61:a2:fb:0d:9e:af:3a:37:f5:b9:
eb:34:3b:21:38:6a:a2:2f:cb:a4:43:ac:98:49:5a:d0:04:a3:
e0:57:fb:45:34:dc:df:53:55:09:74:40:26:9f:2b:37:72:35:
b8:c5:30:ff:67:91:8f:34:d1:86:3a:d5:06:fb:0b:4b:30:2a:
c1:74:d4:af:f9:25:b4:f1:6a:ea:cd:f5:d3:03:9b:dc:ec:74:
32:7d:a9:3d:a7:79:55:36:9a:0d:c9:f6:99:b0:a8:ca:1e:a5:
3e:d8:d8:4c:97:1a:80:d9:03:a7:7d:d0:a0:13:e7:25:34:7e:
2b:f2:cd:2d:7c:58:89:3e:fd:db:58:7b:bd:52:72:dc:40:1a:
85:e2:c8:75:81:e7:e6:34:9c:0f:ce:6a:a0:c3:33:0c:84:4f:
af:4f:fe:bd:e6:1a:b8:1c:d0:8f:32:c8:a1:f0:0c:79:be:18:
b2:4c:f4:94:33:b2:4c:bb:a2:01:54:ff:c5:1e:6a:f8:70:de:
75:d7:71:76:c3:6d:7f:b2:82:31:36:ea:9b:f2:ac:b8:70:87:
6c:a3:b4:a4:29:eb:3b:ee:1d:4f:7b:3a:ad:1e:56:a4:06:be:
d4:18:c8:c7:c4:22:9b:8d:5a:ed:08:f6:2c:c5:5f:2d:fd:01:
c5:0d:20:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:46 2026 by rpki-client