This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
File: xuHIxlyG6NJt2-toZYo5p6jieGY.mft (raw, json)
Hash identifier: nhJVNb1V3JA6na0w5kbNhmlbSJPu/rk778NDSAj1tGY=
Subject key identifier: 56:8C:5B:47:F5:6A:39:B7:A3:FC:45:5D:F6:E8:4C:14:4E:47:B2:B5
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 019BF49989BE6F2230CB0B4C391BCB7789F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
Manifest number: 181E
Signing time: Sun 25 Jan 2026 10:01:01 +0000
Manifest this update: Sun 25 Jan 2026 10:01:01 +0000
Manifest next update: Mon 26 Jan 2026 10:01:01 +0000
Files and hashes: 1: 1EIifzqC9fxhvzHEAG7QPCN3vdM.roa (hash: /bNgUImtZ/hoObEbk4Hpdq72dE66Rz6ysZMoo9cn3i8=)
2: TdF0Q3UgTm4iRlwq3nTlXHaVATI.roa (hash: OQ2zCDNUEEm/t4Dk7N3CDcwyQKDc+o2YA3IhBjZrGzM=)
3: bnPEqM7jNSwDSsLoYqaQdeOAVmc.roa (hash: RzuAcC2bIf2stLK6Oo7aC6xahH/u0bP2SAQTbqYBz+Q=)
4: gFBkxLXifB1pizDwpQxGt50lx-w.roa (hash: CRzzcHfWnFO/NYye+zBKmrkrfDfUSQ88HqZjIhac8Z8=)
5: l85MsveVC4VRyta1Pr3Wv2Mz9Uc.roa (hash: 1339z7QQmPfUk60TSdZgZE0hq+KiRCqz1Ride8dk8So=)
6: xuHIxlyG6NJt2-toZYo5p6jieGY.crl (hash: 4CZZiFeJAu6oCI9Zk+Nyw3EiXIH5OvkAdGF4xHvcaQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:99:89:be:6f:22:30:cb:0b:4c:39:1b:cb:77:89:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: Jan 25 10:01:01 2026 GMT
Not After : Jan 26 10:01:01 2026 GMT
Subject: CN=568c5b47f56a39b7a3fc455df6e84c144e47b2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:cd:13:33:ed:6a:15:de:dd:3f:30:73:d8:5f:
35:9f:4b:a3:85:12:59:c9:25:0c:60:c8:87:23:68:
45:4d:49:90:e5:2f:a3:28:ea:4e:7c:72:61:d8:ae:
77:b5:ab:bd:d6:10:93:4a:51:dd:4d:5a:62:90:a2:
af:43:6d:bf:a5:36:e1:dc:9d:05:f3:97:06:c9:75:
07:5f:45:df:9a:da:f7:55:ea:61:9d:de:e7:fd:2e:
e5:a4:14:a5:30:fb:9f:40:80:a4:20:9c:96:98:61:
08:a9:dd:61:08:07:50:75:ba:ea:64:58:ea:0b:43:
53:dc:f8:cd:ae:99:b1:45:f0:5d:62:f6:f8:00:cc:
b3:d9:ce:9c:60:86:92:a0:50:a7:21:53:ee:89:07:
1d:b7:7a:00:e5:2e:37:20:8a:69:aa:a9:8e:e8:bf:
1a:c6:10:6d:dd:f3:c5:00:57:9a:ae:7a:f1:52:6e:
8f:c1:57:60:8d:92:20:f9:ba:79:36:c2:64:34:88:
0c:61:99:59:94:6d:f1:78:7b:9c:64:ca:d3:9e:8f:
3e:29:34:ea:0a:a1:2e:b9:3d:aa:77:b3:65:44:f3:
c2:88:1e:64:52:db:c3:da:02:e8:39:09:35:5d:49:
93:00:2a:62:ae:6f:08:1b:23:5e:09:ca:93:51:84:
b1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8C:5B:47:F5:6A:39:B7:A3:FC:45:5D:F6:E8:4C:14:4E:47:B2:B5
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e4:2e:cd:35:31:43:1a:7a:70:ac:dd:de:de:b5:8d:c0:e3:
40:c5:ff:aa:91:5c:fb:8d:48:57:64:af:0a:b7:a8:eb:b3:5c:
95:29:fb:83:17:5c:c5:fe:e2:94:29:c5:74:7c:ba:0d:9d:b1:
f2:fe:07:fe:76:1d:03:c5:58:2d:65:cc:65:bf:e3:2c:f3:71:
d7:28:1c:5a:27:11:78:ea:26:cd:e1:32:47:42:54:2b:43:3f:
cd:21:0d:9e:b1:da:be:35:22:60:ac:a1:52:e8:8e:00:03:07:
8e:11:1a:19:f4:aa:53:dd:63:81:ec:34:7b:06:2f:dd:c4:c2:
41:f4:68:2a:16:b3:bb:e5:00:3e:66:c7:ca:35:c0:25:84:41:
4a:de:3b:e0:06:13:a0:0e:8c:3c:d3:d3:67:39:8b:9f:02:39:
43:1b:ed:a5:2a:7b:5a:6c:a1:ca:ac:d3:59:d8:94:0d:13:41:
cb:6e:e7:1f:b2:22:95:de:c1:25:ac:b9:21:7a:41:97:c3:62:
29:d3:3a:31:16:28:bb:f3:94:a9:83:3d:d9:e5:5e:a8:61:a9:
28:40:a3:73:db:e1:76:e0:e1:8f:72:6d:27:62:0a:fa:61:23:
77:13:2e:16:2d:30:52:c7:bd:57:29:a0:2e:05:d1:7d:7f:07:
8a:a9:eb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:46:42 2026 by rpki-client