This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
File: xBOLshC3wajwZm4HWfR18AZN8fc.mft (raw, json)
Hash identifier: jUuOgAqHp85T6OE4xwTKmUjT+00tgZeT5maTq7Wu25w=
Subject key identifier: C3:F1:BB:AE:C4:3E:19:9E:21:91:AD:D8:7D:6D:DC:AB:6C:1C:A7:00
Authority key identifier: C4:13:8B:B2:10:B7:C1:A8:F0:66:6E:07:59:F4:75:F0:06:4D:F1:F7
Certificate issuer: /CN=c4138bb210b7c1a8f0666e0759f475f0064df1f7
Certificate serial: 019C2661691DA3D1D8E6B79B063E32051827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
Manifest number: 19
Signing time: Wed 04 Feb 2026 02:00:43 +0000
Manifest this update: Wed 04 Feb 2026 02:00:43 +0000
Manifest next update: Thu 05 Feb 2026 02:00:43 +0000
Files and hashes: 1: 7h5eSPNlffr_391YlxjHN1ItANQ.roa (hash: XEuG2vwGeCYbNa542z5LaRxd5TGJ34KJdQn28qGEDr0=)
2: xBOLshC3wajwZm4HWfR18AZN8fc.crl (hash: CgNEPkywXkPnFYGdXPprcuUMckKq83LCfJ4+NXt4e/I=)
3: yRWW-moCgPUIO1qGpfD2Ai-UULY.roa (hash: Nrjz7sO2yA4cZKnrgRighLexSPRAMLTfxywMQlg7oPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Feb 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:26:61:69:1d:a3:d1:d8:e6:b7:9b:06:3e:32:05:18:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4138bb210b7c1a8f0666e0759f475f0064df1f7
Validity
Not Before: Feb 4 02:00:43 2026 GMT
Not After : Feb 5 02:00:43 2026 GMT
Subject: CN=c3f1bbaec43e199e2191add87d6ddcab6c1ca700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:28:bc:b9:20:b5:13:52:9c:48:5d:19:2e:b3:
d7:a3:b7:25:ec:22:f2:c7:a3:ca:93:1d:6e:b4:15:
d4:4a:d3:9e:bc:b0:86:41:45:4a:98:b6:84:55:dc:
51:99:ab:5d:3a:79:de:3a:06:ab:ef:20:60:d7:05:
0b:88:0f:da:da:9f:bc:c3:4f:08:3e:11:35:a6:30:
51:eb:8f:df:19:e3:59:bc:b0:83:47:53:25:f4:a0:
90:a6:bf:22:4f:bf:56:99:67:7e:69:dd:c5:48:cf:
ae:f1:72:a6:06:db:a4:1a:60:69:62:c3:5d:d8:d4:
c3:b6:b6:17:46:4e:17:91:e6:cc:13:eb:bb:aa:51:
d1:ae:6e:f0:b7:b1:e5:14:de:cf:e6:b1:a8:3e:4d:
06:60:83:5e:2b:60:74:83:56:e8:94:95:1d:6e:a1:
9b:43:f8:3f:14:84:b9:46:a6:a5:80:80:07:b4:db:
7b:35:12:16:b3:89:7a:ea:8b:75:58:09:60:19:b9:
88:7f:d8:2a:bc:d5:f4:64:da:fa:da:ba:15:91:ef:
47:13:19:ba:92:14:b8:62:f9:b5:96:66:d1:2b:be:
77:da:4e:10:45:91:64:7c:a3:c4:5f:e9:dc:ac:35:
a3:71:c5:41:fd:32:dd:c3:71:ba:f9:48:7a:6a:50:
c1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F1:BB:AE:C4:3E:19:9E:21:91:AD:D8:7D:6D:DC:AB:6C:1C:A7:00
X509v3 Authority Key Identifier:
keyid:C4:13:8B:B2:10:B7:C1:A8:F0:66:6E:07:59:F4:75:F0:06:4D:F1:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:37:e2:04:07:76:7c:33:9b:db:66:9a:4b:e6:7f:34:22:81:
67:8b:e3:51:3d:f1:ba:e8:81:f6:0b:06:a1:43:24:bb:cb:14:
52:f9:29:08:b6:16:62:39:4f:96:b7:87:93:2a:8f:0d:76:b1:
aa:81:88:40:d7:fe:27:c3:cd:32:61:e7:3e:54:13:bb:92:1a:
57:78:34:a8:58:9c:93:4b:10:cb:2a:e4:16:7e:f7:ce:89:39:
3f:5b:e0:b4:29:74:01:d6:c0:9c:29:f1:0d:35:03:a6:63:59:
92:01:97:2d:1d:8c:8e:f5:32:5a:eb:88:6b:80:9d:2d:ba:4c:
a7:55:d6:b3:1a:18:d2:ab:4d:85:f3:2f:ef:63:e7:a3:09:d4:
1d:b3:71:5b:5c:6b:78:bf:96:86:0c:11:d3:c1:88:f1:f1:67:
79:86:06:40:58:80:e5:a8:87:89:08:c7:58:86:5f:83:bf:95:
35:e9:d2:41:27:e5:dc:d5:3c:2e:c9:26:e2:bc:9a:f8:ed:34:
9e:cc:7c:b4:44:92:d2:bf:25:d2:d8:20:fe:66:0a:d5:c7:9b:
60:f3:d6:26:14:50:98:55:6f:9f:c2:49:66:e8:ab:e9:36:ec:
b6:6e:a3:a9:11:cd:95:1f:a0:a4:4f:9a:0a:6e:29:e2:4f:8b:
78:d9:14:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 10:50:43 2026 by rpki-client