This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
File: mXwn0VtG2xhLwCswPIa0fEScG1Q.mft (raw, json)
Hash identifier: qMYTp0BgOhRbnaMTx9vQYunhf+VEkbbMVnyf1q5HSBU=
Subject key identifier: 15:E1:9F:61:07:98:7B:CF:D8:1E:00:36:CA:63:20:61:B2:35:EA:17
Authority key identifier: 99:7C:27:D1:5B:46:DB:18:4B:C0:2B:30:3C:86:B4:7C:44:9C:1B:54
Certificate issuer: /CN=997c27d15b46db184bc02b303c86b47c449c1b54
Certificate serial: 019C42EADDBE4F586EE1D8EA78D3BA7E0920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXwn0VtG2xhLwCswPIa0fEScG1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
Manifest number: 10D5
Signing time: Mon 09 Feb 2026 15:00:14 +0000
Manifest this update: Mon 09 Feb 2026 15:00:14 +0000
Manifest next update: Tue 10 Feb 2026 15:00:14 +0000
Files and hashes: 1: I7V5V1cM7CVsM1y0YVXX0evu4RA.roa (hash: 3YvBTIxXWovXFR/5L6HbEj29abytJrCEZQSlYTFVAvk=)
2: mXwn0VtG2xhLwCswPIa0fEScG1Q.crl (hash: kqXiNyCKDwBoYT6ZPhStKh7hoZzrm5Ot3FvIwzaZt/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXwn0VtG2xhLwCswPIa0fEScG1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:ea:dd:be:4f:58:6e:e1:d8:ea:78:d3:ba:7e:09:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997c27d15b46db184bc02b303c86b47c449c1b54
Validity
Not Before: Feb 9 15:00:14 2026 GMT
Not After : Feb 10 15:00:14 2026 GMT
Subject: CN=15e19f6107987bcfd81e0036ca632061b235ea17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f7:c1:a7:b5:8f:e8:e4:14:b9:d6:f7:17:a6:
97:ff:a6:75:aa:ca:e5:3b:16:4c:4a:cb:6d:d3:32:
12:92:ec:8a:8d:58:24:71:bb:3b:26:0d:6e:31:29:
85:46:4f:3e:1e:c7:4f:8e:49:c0:8c:b2:e2:40:b6:
36:80:03:78:78:e4:17:68:92:69:f7:9d:b1:68:6a:
21:6f:28:b3:5a:e8:bb:fd:06:73:c2:e8:30:76:83:
fb:0c:be:86:3d:a5:37:03:bf:b3:a0:a8:16:78:bf:
6d:66:b6:40:4b:cf:2b:70:10:27:a1:d3:dd:67:cf:
6c:46:1d:cb:35:9d:e4:2d:51:aa:44:33:ee:6c:9e:
bc:15:d2:4b:78:b5:f0:d5:5d:c0:ba:18:6c:01:fc:
67:f9:e6:f8:dd:39:22:5b:a3:c9:47:0f:ef:be:4f:
b6:c5:9d:10:1e:73:25:b8:87:46:f9:2e:58:99:d6:
c4:d5:69:c7:4b:9e:6f:46:3c:73:71:9c:4a:28:2a:
7a:f4:65:90:9d:62:2a:5e:14:56:e4:39:ca:f4:b1:
04:19:16:b7:5e:4d:23:ea:b3:ef:e8:1c:cf:b9:64:
4d:52:16:f3:90:49:87:23:62:5d:6d:78:ff:45:70:
39:64:82:2f:ff:79:7a:91:92:4d:a4:9c:0a:c2:70:
35:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E1:9F:61:07:98:7B:CF:D8:1E:00:36:CA:63:20:61:B2:35:EA:17
X509v3 Authority Key Identifier:
keyid:99:7C:27:D1:5B:46:DB:18:4B:C0:2B:30:3C:86:B4:7C:44:9C:1B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXwn0VtG2xhLwCswPIa0fEScG1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:1c:7f:6a:c9:bb:e1:c2:4b:20:0a:1f:67:57:2a:90:2e:43:
05:05:a3:b6:cd:4c:fb:a7:a6:34:9c:79:d8:a3:5c:15:d1:37:
b1:b1:92:bd:7d:6b:6b:7b:bd:2e:00:53:dd:37:7d:9e:7c:f4:
6f:72:f1:e0:fd:bb:8f:40:82:9d:8d:d5:8d:bd:47:35:17:8b:
75:c1:d7:43:d6:56:72:e4:10:54:2e:7e:15:37:e3:32:3c:88:
9d:aa:f3:d1:03:e7:95:9b:35:1f:a9:d0:55:19:b0:80:41:ca:
3b:ed:ed:bc:00:00:05:7d:ea:6f:54:86:a0:2b:fc:84:e8:30:
0f:64:ce:88:8a:92:e3:72:12:80:30:1c:f2:68:bf:35:27:c6:
bb:aa:1c:51:c3:a8:75:3e:3b:d8:df:95:49:a1:b4:23:e2:8d:
a4:fb:40:93:3a:b3:0b:67:d0:76:38:b5:44:02:b4:6d:d8:00:
9e:98:16:f3:bc:35:2f:5c:7d:ad:ee:d9:4b:66:e5:13:51:56:
b1:67:93:83:ea:0a:b9:d6:28:25:e0:30:c7:05:65:36:8f:8b:
1a:9b:a0:d0:32:02:cc:4e:9c:7f:58:1a:c7:5f:de:83:f0:3b:
27:83:9f:43:06:0c:dc:9d:20:1d:1a:48:8c:6f:99:b2:a7:c1:
8c:61:d8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:53:20 2026 by rpki-client