This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
File: XXg76LX3rdAI1xK0N72fmXwIT98.mft (raw, json)
Hash identifier: LQSbVABeQMvbx7AZJCs4X08PJOJ3IRjviw9VjL66W5M=
Subject key identifier: B3:7A:A6:EB:03:6D:12:1A:ED:3C:37:29:88:B6:84:88:39:95:D0:0D
Authority key identifier: 5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
Certificate issuer: /CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Certificate serial: 019C41D8E3A5CE50AEC21A5D29501ED8BFC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
Manifest number: 1813
Signing time: Mon 09 Feb 2026 10:00:58 +0000
Manifest this update: Mon 09 Feb 2026 10:00:58 +0000
Manifest next update: Tue 10 Feb 2026 10:00:58 +0000
Files and hashes: 1: 80ddEu08r1uFh6uix50N7d9F0o8.roa (hash: DtyowyLw2dVPCBg0r3cdDO/1HWaqkm/fNKE6IcB/i2Y=)
2: XXg76LX3rdAI1xK0N72fmXwIT98.crl (hash: 6uwRIRcQr9jMwGMd6y5ozQ+OhLOVto8CEcvQ8V5c7Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:e3:a5:ce:50:ae:c2:1a:5d:29:50:1e:d8:bf:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Validity
Not Before: Feb 9 10:00:58 2026 GMT
Not After : Feb 10 10:00:58 2026 GMT
Subject: CN=b37aa6eb036d121aed3c372988b684883995d00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:64:f1:b9:ce:63:e7:ab:16:61:2a:2f:6f:bf:
bd:b7:d7:cc:3c:39:c7:d4:9b:e4:15:e1:75:a4:1d:
6a:3f:cb:6e:f2:fd:72:35:0b:32:8f:91:44:4d:fa:
8d:3a:93:a7:21:99:57:48:d4:de:93:f1:0d:3d:a0:
7c:90:6d:05:c5:3f:d6:7a:78:18:a9:dd:14:40:f0:
80:b0:bc:e6:64:3b:5c:96:04:1d:44:f0:71:22:ca:
a5:b1:a1:43:ef:4c:60:7f:24:fb:4e:f5:86:f9:3a:
5b:7b:6f:c7:18:d5:08:c4:61:d7:f7:3a:e7:8d:d4:
e8:c3:5f:49:c7:c1:3a:36:d5:54:b4:70:9b:14:54:
0a:f8:52:d1:77:9c:88:1f:73:00:3d:cc:29:53:19:
8c:33:cd:37:27:1d:41:e1:48:a0:87:bc:89:c4:c3:
eb:2c:09:6b:6c:73:9b:02:ae:de:64:b4:8a:41:38:
11:1e:be:1a:fc:08:0d:11:57:58:3e:26:81:21:58:
64:8f:50:87:a0:c3:0a:6b:23:67:bf:86:97:0e:02:
53:dd:09:5d:d3:14:07:d0:35:2c:2a:a9:d5:7d:e0:
9e:16:5f:85:08:51:0e:b3:f2:e0:ad:50:34:9c:05:
57:6c:61:a1:8b:a7:2a:ee:19:47:10:50:5f:95:cc:
ac:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7A:A6:EB:03:6D:12:1A:ED:3C:37:29:88:B6:84:88:39:95:D0:0D
X509v3 Authority Key Identifier:
keyid:5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:78:a3:86:15:9d:d5:33:71:28:36:cc:f7:4a:ff:b7:26:61:
ee:6d:ad:fa:f4:3b:60:d4:5a:a5:6a:71:c5:3b:02:8d:d5:41:
45:10:98:a9:ef:cf:cc:dd:3a:82:61:30:b5:ff:c2:b1:1d:bf:
d5:35:93:dd:c5:bf:79:4f:5f:15:15:b5:43:fe:96:77:65:e8:
6c:a0:34:8a:3e:f8:72:7a:18:81:89:6a:26:c4:84:e4:3b:7c:
b1:cf:52:33:da:c9:91:2c:e7:3d:63:10:08:98:5f:7a:7d:36:
23:c3:f1:20:68:20:31:40:07:43:79:07:a7:24:99:70:74:41:
57:ef:f5:be:15:8a:1c:5c:49:ab:95:88:c6:7e:8f:f3:c4:c8:
02:a9:2e:0c:59:0c:33:28:2e:d2:14:63:c8:2c:9a:d2:6a:c0:
a3:ff:a6:60:c7:67:11:d4:e3:ba:99:4b:d1:54:bc:09:6e:28:
f4:bc:97:2c:10:56:57:5e:2b:c6:ba:df:cd:42:7f:18:d6:6a:
3c:62:f4:7a:68:1d:35:c0:49:80:57:68:c2:aa:05:a0:64:a8:
ec:1a:ff:01:cd:dc:5b:64:fc:03:d9:4e:bf:ec:c8:07:24:2a:
36:43:91:75:20:f9:c8:f7:d5:e6:a0:6c:27:5d:cf:8d:a0:3b:
b2:d4:26:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:30 2026 by rpki-client