This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
File: xLG0WKv3l97cxmHlSmhfZRg0tdE.mft (raw, json)
Hash identifier: WWL3PnUWRvkJl9jevtyuATSTKTtw/kEUrTAhwgxF11Q=
Subject key identifier: 7F:B9:D4:32:18:E2:56:1D:43:A5:52:AC:68:E6:AB:6A:A1:83:A5:87
Authority key identifier: C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
Certificate issuer: /CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Certificate serial: 019BFA9C2950857A21FFF4BADE1649847783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
Manifest number: 14F2
Signing time: Mon 26 Jan 2026 14:01:36 +0000
Manifest this update: Mon 26 Jan 2026 14:01:36 +0000
Manifest next update: Tue 27 Jan 2026 14:01:36 +0000
Files and hashes: 1: Vu85Nu-HoLeRv_52CEznI8bQbss.roa (hash: c6ty/wCdDrBOcI9jUvVNl5APK8YZjil4x8ZlNRshHvo=)
2: hwEYkWKezFU1S6DS8A0TF6JXUos.roa (hash: dJKRSf7F67Dm6ZGKlb7G6KP8NQfxdE863RZT2JIwE9k=)
3: lo3R5w_kTel81Z1irkIbzAD6F8Q.roa (hash: PuU1Xdn3kY1LjMwZS3Qaqe5MniakxiQ+Y+f6yTPGRCQ=)
4: nb0hXlBPQhPWTuMEqZzkSxkwpXI.roa (hash: 55gzjqx5n4gyySLdEurC8vvFbXFEosab3sYhqOZ+WA8=)
5: xLG0WKv3l97cxmHlSmhfZRg0tdE.crl (hash: susny/QsmJi3AKsxEEb0sP29GtSLZTWldj19mHWfjxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 14:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fa:9c:29:50:85:7a:21:ff:f4:ba:de:16:49:84:77:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Validity
Not Before: Jan 26 14:01:36 2026 GMT
Not After : Jan 27 14:01:36 2026 GMT
Subject: CN=7fb9d43218e2561d43a552ac68e6ab6aa183a587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:c6:4d:88:01:2f:7d:a9:5c:16:46:70:db:
ce:cb:45:61:1c:dc:bc:8d:33:c2:2f:2d:7b:bd:01:
7d:f6:93:c2:2b:e1:2f:1e:70:d8:8e:9c:fe:19:b0:
6d:75:a2:51:6c:87:03:a5:f4:5e:19:fa:c6:61:ac:
14:fe:f8:4c:83:2d:df:6a:08:24:44:83:ec:ab:d2:
23:79:f5:26:48:2b:28:47:41:ce:08:87:10:d6:84:
a0:4e:f0:11:78:33:c1:a9:88:66:f8:ed:40:a4:ed:
dd:23:5c:fe:95:06:d8:8e:31:d2:8d:74:6e:42:e2:
33:c0:83:91:45:90:8c:b2:3d:e1:f5:a0:2a:06:44:
27:5d:c3:7d:69:71:c1:ee:bb:70:9e:37:97:d2:84:
a7:b2:01:13:92:d4:bf:a9:b5:03:cd:33:48:af:37:
7b:d2:84:52:ab:38:0e:ab:2e:5f:60:20:7d:61:f9:
61:56:2a:5c:cb:51:7a:c2:3d:86:7d:0d:f8:2c:84:
49:c8:27:25:3c:6a:0f:1a:2e:c1:09:d3:ec:b8:c1:
af:d6:af:24:30:81:11:45:02:20:94:38:03:ea:d0:
61:58:2f:6d:be:85:d7:dc:02:18:65:c3:74:b6:11:
44:75:70:02:d6:a3:f1:71:ec:e9:19:c7:90:f9:50:
3a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B9:D4:32:18:E2:56:1D:43:A5:52:AC:68:E6:AB:6A:A1:83:A5:87
X509v3 Authority Key Identifier:
keyid:C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:db:26:e8:04:da:2a:f6:2d:37:6b:fa:0c:b2:dc:6b:fc:1b:
9c:35:15:5a:36:c1:52:ad:c8:40:2d:26:08:26:71:8b:3e:a3:
cf:3f:d2:d1:f2:e8:e0:6d:6f:55:c3:83:8a:84:75:d4:e3:da:
2b:2a:d7:f8:fa:db:96:7b:28:46:3f:84:9b:1c:02:54:09:0d:
f1:66:f9:31:da:16:e7:d0:fb:89:13:59:ea:f7:7f:02:4f:65:
5e:8f:75:dd:5f:29:ed:5b:8a:f2:ef:1c:80:94:32:30:54:b1:
ee:db:72:d0:84:77:6d:fb:a6:60:a3:80:68:3b:71:52:a6:99:
0b:83:c0:ce:2d:ea:52:26:24:0a:e1:7a:9f:9f:4b:d2:c1:f8:
de:e2:f4:5b:02:6b:0d:31:e2:1a:46:b8:72:42:0c:ba:fe:9f:
ca:02:52:b2:a3:00:6b:1a:17:03:b9:4f:ad:92:d8:bf:9c:38:
8d:e7:07:a4:a0:92:74:01:6e:25:bc:67:41:4d:ec:2a:57:62:
d4:69:b9:cb:6d:58:35:83:e0:45:80:18:0f:47:e1:e1:71:b3:
47:bc:13:f6:69:ee:13:e8:c1:00:c5:6a:3d:50:dc:ad:8a:3e:
d8:a8:cc:26:23:b2:63:01:7d:72:9f:4e:98:2c:51:d7:bd:05:
2f:60:bc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 19:10:54 2026 by rpki-client