This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
File: XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft (raw, json)
Hash identifier: urGPO4E+pxD5nmiuGhgF8qxwghOhLLQCUy+j3S1axX4=
Subject key identifier: B8:51:70:A9:E6:69:AF:15:36:FC:C3:A3:FD:D3:A8:D3:56:16:60:14
Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
Certificate issuer: /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Certificate serial: 019C44D991E7AE29BC3CAEBEC549F571E2C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
Manifest number: 1811
Signing time: Tue 10 Feb 2026 00:00:35 +0000
Manifest this update: Tue 10 Feb 2026 00:00:35 +0000
Manifest next update: Wed 11 Feb 2026 00:00:35 +0000
Files and hashes: 1: 0m0w4NNU4NOo-8_y3zxSZs-Hcdw.roa (hash: d/QLJQ6M0z3RViK7W5MP6w1Y/VAa68ow0nmGzD8+98w=)
2: HKYjGRXbhcsbgj-zO-lhhp8iHf4.roa (hash: r0qRRb9G05Y3zjQIakuz14pzZ5PruwE51RJizxy5NMg=)
3: OXzsf9355x_Po1YlBAMmXxH7YfM.roa (hash: HyUx0AM/t82HDbhNTlK93mKwtwtfVGbEby4qtiM7vwI=)
4: XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl (hash: 4ubZ+MhPac/CkYR655kkZ0sUQ6lIMUAZmOFBLIBk8nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:d9:91:e7:ae:29:bc:3c:ae:be:c5:49:f5:71:e2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Validity
Not Before: Feb 10 00:00:35 2026 GMT
Not After : Feb 11 00:00:35 2026 GMT
Subject: CN=b85170a9e669af1536fcc3a3fdd3a8d356166014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:ec:f0:f9:a2:85:25:d6:cf:dc:98:93:cc:
ec:bc:38:59:b1:c9:58:4b:cc:94:a7:8f:5b:f5:cd:
a7:91:11:c5:5d:3c:bf:5c:7f:c1:64:5b:7b:f4:d9:
68:0b:1f:9b:35:5f:ba:d6:bf:5e:71:2d:2e:5c:bd:
aa:d2:e8:34:f4:9e:64:c1:23:18:f0:3b:1d:25:4c:
c3:07:44:21:8d:57:4d:87:9e:bc:7c:e9:09:19:7e:
af:69:a6:91:fd:4d:a3:c3:21:15:8d:c8:68:e2:28:
c6:b9:4c:54:f0:5f:e0:8f:bc:84:42:08:3f:f8:c6:
97:0d:7a:05:0e:af:eb:0d:f3:b1:11:a4:5c:40:61:
da:d1:31:bd:11:e6:e1:dd:1f:ed:c1:51:ba:88:36:
fe:71:3a:24:0c:10:1c:3e:5f:e6:f3:80:64:af:e2:
a5:45:26:cc:9c:49:8b:56:28:4e:d4:41:a3:e4:89:
ec:9d:52:ea:5b:af:fd:3d:ec:75:5c:0e:98:3d:9e:
75:94:69:e0:bf:ea:00:a6:3d:e9:5a:3b:2c:b3:5f:
fc:17:af:a3:88:a3:40:49:d1:82:67:cb:36:ed:96:
6c:96:59:a3:1b:f7:f6:f6:9e:bc:45:cc:01:a3:a8:
1c:52:81:71:ec:f5:42:41:2a:4e:28:85:43:c6:2f:
d5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:51:70:A9:E6:69:AF:15:36:FC:C3:A3:FD:D3:A8:D3:56:16:60:14
X509v3 Authority Key Identifier:
keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4b:f6:b1:df:1d:b6:d0:6e:1f:c8:fd:d3:6e:cc:43:30:a3:
eb:3d:cd:05:60:ea:a2:3d:64:c0:a2:df:90:17:f6:22:57:4a:
3e:28:27:43:c5:b5:8a:cc:43:e9:a0:16:25:71:78:09:60:d4:
f1:31:80:cc:b1:c2:af:45:c2:1c:63:1f:0c:59:b3:83:94:a3:
1c:62:72:3d:8e:88:25:6b:5a:51:07:b4:da:6d:47:5a:fe:34:
a3:3f:00:81:69:68:62:dd:a6:ae:9d:b9:0f:15:1f:af:72:2b:
e3:fc:be:62:aa:37:64:2b:f5:2b:e6:5e:ac:2b:28:71:b1:a3:
14:4b:78:7e:19:11:e3:9f:d5:34:7e:10:c9:ba:9b:fe:ed:c1:
71:36:e2:91:d4:fb:94:55:71:61:6c:37:db:db:3a:b5:54:22:
50:85:9d:f4:07:b0:47:99:50:df:53:2c:36:55:09:08:88:9b:
81:92:b9:38:05:00:aa:38:78:5d:a7:64:88:73:0b:4d:03:f5:
9d:31:98:87:a4:5e:a1:d8:89:ea:ce:f1:bd:c2:67:37:53:84:
20:36:a5:ab:70:32:c3:da:c2:95:25:24:32:e0:6b:0a:3a:40:
25:f6:30:ec:47:cb:96:2c:3a:56:44:bc:ce:87:d0:d3:a3:bc:
04:69:9b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 05:54:30 2026 by rpki-client