This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
File: xJsfdrtbrG0MeWukcTDHaLHHOxw.mft (raw, json)
Hash identifier: qeKXqdIOszB0Te6myRbIq5VQudH1UAckewKra8KMDHg=
Subject key identifier: EA:06:47:7E:17:17:6C:E4:44:DA:20:69:22:84:CE:DB:3F:49:69:7A
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial: 019BFD6596B301EE9013540014745A2D7F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
Manifest number: 17EB
Signing time: Tue 27 Jan 2026 03:00:51 +0000
Manifest this update: Tue 27 Jan 2026 03:00:51 +0000
Manifest next update: Wed 28 Jan 2026 03:00:51 +0000
Files and hashes: 1: Ng0DQWDHTBmFSx5wv3FJ35llgcs.roa (hash: rjml5J5gqgFMe9KzjlWTkxUk0orx3tU+r2zl+R9xROo=)
2: wcLWWQG314JWSm8pfpN9yL_5EII.roa (hash: D4VS38hxLq9k1urmiJ5Azd8OYDvuYJ5hUnqD5WiA9F0=)
3: xJsfdrtbrG0MeWukcTDHaLHHOxw.crl (hash: 3nl4RA8+b5Qf2kXgsxfe5I/+1j1hQaNxPMfRCuYX0S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 20:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fd:65:96:b3:01:ee:90:13:54:00:14:74:5a:2d:7f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Validity
Not Before: Jan 27 03:00:51 2026 GMT
Not After : Jan 28 03:00:51 2026 GMT
Subject: CN=ea06477e17176ce444da20692284cedb3f49697a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7b:bf:87:9f:7d:7a:49:93:d1:d9:8f:9f:44:
3a:a5:91:1d:f6:5b:3b:ac:47:b9:a7:c9:d2:0c:34:
12:56:54:0b:44:6a:ad:46:d0:4b:e9:18:f1:96:fc:
3c:bc:1a:0a:e8:01:39:f2:3b:a9:f4:b4:17:bb:d2:
ac:8b:06:43:b4:ba:f9:1c:ab:ea:46:3e:c1:52:b9:
26:c2:99:09:b4:2a:32:19:fe:73:f6:14:f0:17:62:
82:05:86:35:6a:d2:50:77:59:82:96:ea:34:59:09:
0b:c9:c6:88:37:91:88:59:33:6f:ec:ca:6c:4b:e1:
7f:b9:4e:02:82:79:e8:eb:51:6c:84:b7:4c:38:28:
15:70:da:62:9b:3f:45:76:c0:cf:53:68:a0:34:c3:
b2:a1:28:74:b2:ef:f1:7a:5b:e4:bf:6f:af:7c:4a:
26:1d:dd:09:bd:f4:d4:15:b7:1c:6e:24:61:e8:3e:
9b:3e:c4:22:50:a2:37:39:bd:f1:08:f1:4d:8b:39:
a0:09:82:33:76:fb:37:2b:66:58:de:2b:63:f9:3b:
b8:48:1b:98:68:cd:d4:db:a2:dc:a0:be:aa:da:31:
8d:8a:a6:99:67:a7:93:7a:5b:c1:6f:1a:74:d6:0c:
a8:a2:4b:3d:09:9b:b0:5f:62:4e:09:68:52:6e:0b:
08:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:06:47:7E:17:17:6C:E4:44:DA:20:69:22:84:CE:DB:3F:49:69:7A
X509v3 Authority Key Identifier:
keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:5a:ad:28:dc:21:b5:01:01:76:4f:cf:5e:c1:51:4e:58:4e:
ed:5b:c7:6b:6c:ab:5d:c8:70:14:21:f3:1e:08:80:c8:70:c5:
e9:58:dd:a0:0f:23:99:fc:7e:77:16:f1:f5:e7:20:66:5f:63:
a9:ee:74:64:98:9f:3a:e2:1e:97:e3:0b:5e:a1:94:45:ae:5e:
55:5c:97:f6:48:1d:85:33:b6:05:d1:f6:ba:27:d4:8c:60:08:
f3:ed:c8:38:b7:e2:c2:eb:d4:8d:71:27:3d:76:e4:f0:ad:af:
ef:4e:c3:76:a4:97:32:4a:8b:5c:7c:28:96:0b:e7:6d:76:4c:
7b:ba:6c:54:f4:22:cf:29:84:73:40:e7:97:0f:ac:40:b7:a7:
18:d8:27:31:7e:09:e4:01:6c:9d:09:bc:9c:e7:ce:77:c8:a4:
b0:e0:8a:48:52:eb:db:46:2f:eb:8d:c2:2d:c1:b5:2f:ac:21:
1e:81:f6:db:af:ff:70:38:10:e2:b2:27:8a:2b:25:51:d3:2e:
45:b7:aa:68:c3:d0:c1:9a:1e:4a:42:fd:04:51:d4:e6:38:b2:
70:1d:24:19:24:c2:7a:f9:bc:d3:cb:bf:31:88:9d:cc:6b:a7:
2f:9a:17:61:1f:d1:d2:aa:14:2a:af:64:2c:82:f0:c2:2f:ce:
a7:ab:0a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 06:06:55 2026 by rpki-client