This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
File: xIQvgmL-vSPQE9QKMU2I4lSypUI.mft (raw, json)
Hash identifier: hZ6JxCehQy6xgdMK0+MF8vcA8S/humyKq+FluBa6uEA=
Subject key identifier: 13:18:69:9D:11:9B:18:B0:0D:59:E2:F6:AF:3C:06:D3:54:0E:36:32
Authority key identifier: C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42
Certificate issuer: /CN=c4842f8262febd23d013d40a314d88e254b2a542
Certificate serial: 019C427D89CAC392FBB2698A9A54F5181C56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
Manifest number: 075D
Signing time: Mon 09 Feb 2026 13:00:49 +0000
Manifest this update: Mon 09 Feb 2026 13:00:49 +0000
Manifest next update: Tue 10 Feb 2026 13:00:49 +0000
Files and hashes: 1: kOwA2VMp0-d5NZ8ZjSEsa9A6-fM.roa (hash: ZSmsV9FGmLqKWen++kiAr3q47+GvBQzYyI0Yg4ZwozI=)
2: xIQvgmL-vSPQE9QKMU2I4lSypUI.crl (hash: YoS2v7tbsUctGZmc25p5yEy3qNuyyYaK3/7h/+QTb6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:89:ca:c3:92:fb:b2:69:8a:9a:54:f5:18:1c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4842f8262febd23d013d40a314d88e254b2a542
Validity
Not Before: Feb 9 13:00:49 2026 GMT
Not After : Feb 10 13:00:49 2026 GMT
Subject: CN=1318699d119b18b00d59e2f6af3c06d3540e3632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:20:fb:3b:7d:c6:a3:d7:d2:ec:2c:8c:8b:55:
85:16:a5:4c:e5:97:19:80:f0:2c:e1:48:c2:52:f1:
ec:36:93:60:b7:35:da:ec:ec:b1:ae:a0:d5:a0:f8:
6f:24:4d:3f:aa:4b:f8:3d:f0:97:99:a6:c3:6b:42:
87:7f:d5:17:b8:fc:7c:ca:3a:c7:fd:07:9b:58:f8:
e6:68:e5:03:4a:aa:77:b1:47:f1:0a:99:03:99:e8:
c8:38:76:5a:71:0c:56:5d:ce:20:e5:05:2e:55:fe:
09:c4:1e:80:46:68:fe:36:40:27:ba:05:86:7f:85:
eb:11:81:98:a5:f0:2e:45:4f:52:de:ab:f3:2c:13:
72:d3:7a:cc:b1:e8:0e:4f:be:80:87:6a:78:48:a3:
0c:4f:34:8c:26:64:b5:d6:cf:1a:ef:b6:96:9e:c1:
a3:cb:87:5d:4e:13:a5:90:ac:3d:22:a9:bb:dd:92:
a9:d2:26:f9:ee:78:cf:94:b0:f4:bf:27:d1:a7:a6:
78:a4:75:28:f0:22:c6:b4:f8:16:2a:36:72:88:3d:
16:75:85:75:8e:17:4b:ca:26:ec:27:32:6e:10:6a:
14:78:ae:5e:78:0b:45:6f:2f:45:e5:69:0b:1a:2e:
66:95:c1:8d:37:1a:4e:68:e6:d7:ec:93:53:4c:6a:
4e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:18:69:9D:11:9B:18:B0:0D:59:E2:F6:AF:3C:06:D3:54:0E:36:32
X509v3 Authority Key Identifier:
keyid:C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:4d:f4:39:9f:28:21:68:d6:72:06:15:36:ab:f6:c5:24:01:
b9:da:4b:7b:3b:d3:44:02:90:d5:5c:5a:f0:4a:9a:75:09:fd:
0e:62:ee:12:34:ca:6f:3c:1a:54:66:1b:9b:19:b2:76:a8:61:
67:f1:b6:80:00:68:5b:bf:88:a1:54:c4:cd:64:7d:fc:69:6f:
35:79:ca:d1:37:d0:51:7b:7c:cf:93:82:ea:6d:bb:13:2d:ba:
ff:e0:8b:d5:32:be:10:c1:0a:0d:d9:8e:90:4c:c9:36:c5:0d:
c7:60:b0:87:d4:cf:e7:85:28:87:9f:2f:9d:96:51:3c:1f:ef:
b9:d2:7b:72:5c:7f:03:43:fc:db:ad:bb:4d:fc:ab:6d:3f:af:
9f:4a:fc:04:2e:f7:6f:b0:8f:b8:28:a0:6a:4e:a9:bd:9d:0c:
63:3b:3b:9d:e6:d1:3d:f4:0f:82:78:06:e9:76:07:3f:c4:00:
3c:8c:0d:45:b6:98:2d:c0:de:38:91:3a:b6:85:4a:eb:0c:e0:
7a:b5:d5:94:49:64:c9:bd:4f:7a:4e:c1:4c:2c:c4:dd:49:1f:
6a:af:e8:80:f2:87:27:14:2d:6f:79:18:e3:19:01:fb:22:47:
89:07:90:5c:4b:a4:3b:dd:5b:69:d2:91:cc:43:28:5b:e7:0c:
29:58:3a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:40:43 2026 by rpki-client