This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
File: xMAyk16WM9-LGZJd8L0luBxoY7c.mft (raw, json)
Hash identifier: +U4op0Sr5+yLtDmP3YVSqF5/E+PM2B6h93i9YsDL/Y4=
Subject key identifier: F8:A3:D4:01:B3:29:DB:2B:63:17:5A:2E:A9:DD:41:7C:5C:E8:EF:F6
Authority key identifier: C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
Certificate issuer: /CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Certificate serial: 019C435948742777CF075D6D08F50CE1243E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 17:00:50 +0000
Manifest this update: Mon 09 Feb 2026 17:00:50 +0000
Manifest next update: Tue 10 Feb 2026 17:00:50 +0000
Files and hashes: 1: tXhKuNb4B-Nkw-Ko0kv7aBe86Mo.roa (hash: nAgAkoHpMUFVWXw/y+ljVkLkx6oi2l2uF+ZlnoJC4s8=)
2: xMAyk16WM9-LGZJd8L0luBxoY7c.crl (hash: 1/6uTmO4dgIrpmartAyaDqN+SC2Dhb9oi6yKg0N3Eqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:48:74:27:77:cf:07:5d:6d:08:f5:0c:e1:24:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Validity
Not Before: Feb 9 17:00:50 2026 GMT
Not After : Feb 10 17:00:50 2026 GMT
Subject: CN=f8a3d401b329db2b63175a2ea9dd417c5ce8eff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:47:8f:a1:9f:c9:bb:2e:cc:81:70:9f:b1:49:
25:8b:d6:c9:30:a2:e0:8d:d1:b7:bc:3b:c7:43:72:
a3:55:bd:8c:c3:c6:73:49:db:28:d9:ce:c7:9f:a5:
50:4d:e6:c3:e9:0f:10:4f:74:fd:36:d1:86:fc:61:
cf:00:a0:91:6b:3f:ca:92:fb:f2:57:71:44:31:1e:
5d:6b:2b:19:4c:fe:fa:bd:8d:84:00:ba:3f:8b:dc:
d3:42:ad:ca:f7:ae:cd:6c:8e:2c:c8:df:11:ce:d9:
96:79:b1:bc:3f:48:69:62:92:0f:03:b4:d8:5d:9c:
1d:0a:11:8d:ad:82:57:1d:f8:ff:9a:cc:d0:50:67:
0b:9e:1a:d1:8b:96:21:57:2e:5b:72:b4:d7:80:9b:
49:56:1f:a3:ef:f7:b7:41:3d:c9:20:7f:0a:fc:cc:
8d:7d:94:b2:86:a8:c6:b2:ef:0a:be:a5:ac:dc:b9:
8d:30:16:83:f0:7e:17:fd:48:bf:e5:92:1e:7f:5f:
af:14:99:63:a3:87:93:fc:17:e6:c8:2b:8a:b0:4f:
4b:62:9a:88:60:c0:7a:62:12:32:92:e0:4b:79:eb:
13:dd:d3:bf:88:ce:d7:cc:9b:49:a2:de:61:3d:41:
39:3a:ca:50:58:94:f8:0b:29:5b:af:53:ee:d3:11:
97:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A3:D4:01:B3:29:DB:2B:63:17:5A:2E:A9:DD:41:7C:5C:E8:EF:F6
X509v3 Authority Key Identifier:
keyid:C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:4f:c1:53:16:19:7b:d5:3c:0e:02:50:38:bb:ed:89:7d:13:
8f:8b:1b:49:16:9f:30:c8:d6:1a:71:fe:3c:45:af:ab:60:5b:
4d:32:04:26:e8:87:9e:14:d2:05:12:b4:97:7f:87:e2:66:10:
c7:a4:38:48:1e:90:74:ce:1c:4a:2b:bc:6f:8c:8b:93:d0:6a:
3c:a5:d9:31:89:00:60:0f:aa:a7:f4:b7:9c:4a:be:81:a0:a4:
8a:1f:e4:30:3f:8e:cd:90:0e:42:6a:2b:bb:07:69:ae:68:a6:
28:68:e0:ab:c0:3c:74:f7:22:d2:6b:a6:93:ea:c2:28:6f:66:
c1:93:f0:ba:73:d4:28:e8:44:85:50:c2:05:1c:14:5f:34:51:
b9:dc:a7:6c:29:4d:04:a0:c4:6d:29:7d:be:48:ce:49:f3:0c:
da:f0:dc:3b:86:de:93:bf:c8:41:7b:c9:31:ad:dd:c6:06:bf:
1b:5e:81:e4:15:4a:21:22:6c:8b:ec:61:5c:0a:23:28:e5:00:
14:56:79:28:c3:fb:d7:fa:bd:27:35:a0:a8:4e:b2:8b:d2:5d:
28:6a:7b:2a:c2:3b:68:fd:f2:fa:8a:5c:5b:66:b7:49:7a:d3:
30:08:3f:f8:dd:ed:93:a7:e4:8b:dd:ab:2f:83:1a:24:66:2d:
28:59:4c:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWUh0J3fPB11tCPUM4SQ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YzAzMjkzNWU5NjMzZGY4YjE5OTI1ZGYwYmQyNWI4MWM2
ODYzYjcwHhcNMjYwMjA5MTcwMDUwWhcNMjYwMjEwMTcwMDUwWjAzMTEwLwYDVQQD
EyhmOGEzZDQwMWIzMjlkYjJiNjMxNzVhMmVhOWRkNDE3YzVjZThlZmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UePoZ/Juy7MgXCfsUkli9bJMKLg
jdG3vDvHQ3KjVb2Mw8ZzSdso2c7Hn6VQTebD6Q8QT3T9NtGG/GHPAKCRaz/Kkvvy
V3FEMR5daysZTP76vY2EALo/i9zTQq3K967NbI4syN8RztmWebG8P0hpYpIPA7TY
XZwdChGNrYJXHfj/mszQUGcLnhrRi5YhVy5bcrTXgJtJVh+j7/e3QT3JIH8K/MyN
fZSyhqjGsu8KvqWs3LmNMBaD8H4X/Ui/5ZIef1+vFJljo4eT/BfmyCuKsE9LYpqI
YMB6YhIykuBLeesT3dO/iM7XzJtJot5hPUE5OspQWJT4Cylbr1Pu0xGX1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPij1AGzKdsrYxdaLqndQXxc6O/2MB8GA1UdIwQY
MBaAFMTAMpNeljPfixmSXfC9JbgcaGO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE1BeWsxNldNOS1MR1pKZDhMMGx1QnhvWTdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lMDAxMzktZWRiNi00MTFiLWE5YjIt
OWVhOWNhMTc0MmRiLzEveE1BeWsxNldNOS1MR1pKZDhMMGx1QnhvWTdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lMDAxMzktZWRiNi00MTFiLWE5YjItOWVhOWNhMTc0MmRi
LzEveE1BeWsxNldNOS1MR1pKZDhMMGx1QnhvWTdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjk/BUxYZ
e9U8DgJQOLvtiX0Tj4sbSRafMMjWGnH+PEWvq2BbTTIEJuiHnhTSBRK0l3+H4mYQ
x6Q4SB6QdM4cSiu8b4yLk9BqPKXZMYkAYA+qp/S3nEq+gaCkih/kMD+OzZAOQmor
uwdprmimKGjgq8A8dPci0mumk+rCKG9mwZPwunPUKOhEhVDCBRwUXzRRudynbClN
BKDEbSl9vkjOSfMM2vDcO4bek7/IQXvJMa3dxga/G16B5BVKISJsi+xhXAojKOUA
FFZ5KMP71/q9JzWgqE6yi9JdKGp7KsI7aP3y+opcW2a3SXrTMAg/+N3tk6fki92r
L4MaJGYtKFlMmw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:24 2026 by rpki-client