This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.mft
File: 9495A81626FCF6E79CAFB0FC7266C5A770B457F3.mft (raw, json)
Hash identifier: c5MLAXhlvKhYbPyO7RUbpkU7isjxLg22w0ig7Nk8TpY=
Subject key identifier: E9:1F:79:6A:5C:18:EF:FC:1F:05:91:22:D1:2E:49:35:3D:E7:E8:E5
Authority key identifier: 94:95:A8:16:26:FC:F6:E7:9C:AF:B0:FC:72:66:C5:A7:70:B4:57:F3
Certificate issuer: /CN=9495A81626FCF6E79CAFB0FC7266C5A770B457F3
Certificate serial: 6D30D45FB19DCB0CE59680D82034E18EE95A2305
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.cer
Subject info access: rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.mft
Manifest number: 67
Signing time: Tue 20 Jan 2026 14:03:17 +0000
Manifest this update: Tue 20 Jan 2026 13:58:17 +0000
Manifest next update: Wed 21 Jan 2026 15:04:17 +0000
Files and hashes: 1: 326131343a373538303a336666643a3a2f34382d3438203d3e203434383232.roa (hash: B+B2Yl/O36Gn5Y+oNxHVV8LhWuDlCy4ZF9J305MP6uY=)
2: 326131343a373538303a336666663a3a2f34382d3438203d3e203434383232.roa (hash: Kicy9HxyZzEtWNVt6uGQnpFMpN2VWc9gbNotwWywYxs=)
3: 326131343a373538303a336666653a3a2f34382d3438203d3e203434383232.roa (hash: fOomgPnkxPgBzURmASJKUZ+RYP9k6NrKcBNGVrv8WMY=)
4: 326131343a373538303a333033303a3a2f34382d3438203d3e203434383232.roa (hash: Z8b3CXR+NYpLiWL8vo85cxs+rnI+69wtmeZr+Sekgos=)
5: 9495A81626FCF6E79CAFB0FC7266C5A770B457F3.crl (hash: DtvY2KevA+46JG0Iw6Mjh7Mw199Ep1wEntHKn9L1C+g=)
Validation: OK
Signature path: rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.crl
rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 15:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:30:d4:5f:b1:9d:cb:0c:e5:96:80:d8:20:34:e1:8e:e9:5a:23:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9495A81626FCF6E79CAFB0FC7266C5A770B457F3
Validity
Not Before: Jan 20 13:58:17 2026 GMT
Not After : Jan 21 15:04:17 2026 GMT
Subject: CN=E91F796A5C18EFFC1F059122D12E49353DE7E8E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3a:02:c7:fe:ee:79:c9:bd:28:71:42:16:ec:
39:e5:22:d0:25:eb:80:fe:4c:fe:b9:54:5e:3c:c0:
45:bf:c9:5c:fe:65:e2:58:5c:7b:bb:bc:d3:a4:53:
cd:65:85:9b:cf:7e:ec:b1:f3:0b:c5:25:ba:21:d5:
02:69:2f:49:7a:08:bf:16:13:5b:08:8f:25:72:3a:
2b:fd:d4:71:dd:e9:e9:4d:83:ce:2f:7b:07:fd:84:
a4:87:5f:67:29:dd:5c:67:17:47:3a:f9:4b:0d:c7:
7e:5d:4e:37:f9:45:37:15:d2:c5:5d:9e:41:fa:5a:
42:43:bf:52:34:8a:ca:00:55:76:7f:53:63:81:32:
79:9f:e6:8b:50:2a:63:3a:58:c4:d0:d1:f8:02:e0:
dd:ea:a3:14:d3:ab:46:28:5e:63:37:94:83:a1:dd:
a4:95:37:18:19:90:ae:f3:a4:ad:3e:da:5b:02:30:
6b:f6:95:97:f5:45:50:78:a2:0b:ba:f2:06:a2:18:
25:b0:b5:5b:f2:47:5e:ea:d0:0e:2c:36:df:d4:75:
d0:cc:bd:a5:82:aa:30:8b:47:6d:fc:5a:e2:02:b3:
57:78:f1:79:79:f7:93:a9:75:19:39:45:0f:e4:0d:
5e:26:2d:3c:21:c2:8f:57:30:02:2d:d6:c6:8f:61:
45:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1F:79:6A:5C:18:EF:FC:1F:05:91:22:D1:2E:49:35:3D:E7:E8:E5
X509v3 Authority Key Identifier:
keyid:94:95:A8:16:26:FC:F6:E7:9C:AF:B0:FC:72:66:C5:A7:70:B4:57:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d6:42:54:57:b0:ef:39:08:48:75:84:85:7f:7f:d0:51:3b:
e5:4f:a7:ca:70:76:50:7c:73:1e:92:f2:05:45:57:d8:d5:e1:
3c:37:5c:43:d9:bb:2f:c1:cd:be:83:92:75:57:5d:7b:f1:81:
96:c6:b3:12:53:c8:78:5e:fc:a2:b9:66:66:ba:db:65:60:b8:
86:f6:52:c4:af:d4:ea:c4:0e:66:f4:04:f9:cc:71:fc:d6:4c:
fd:99:25:2f:06:ba:a2:38:d5:6b:b0:57:fb:8a:b1:55:8b:86:
ca:90:0f:2a:64:c6:fc:b6:4e:53:bb:a5:6b:a6:40:78:98:f6:
35:e8:ea:3f:cd:33:76:ab:34:fc:e8:4d:87:c6:00:4c:fe:13:
cf:08:71:d9:7a:ee:42:14:e5:e3:32:85:54:44:b1:f5:1c:3b:
7d:1e:94:3a:1e:e2:5c:a8:e2:26:4d:8d:02:39:37:20:b3:be:
e5:c7:87:10:5d:45:cd:96:3e:ae:58:f7:47:31:f0:77:04:41:
d2:c6:68:a4:f5:b4:a3:ac:fc:f7:34:16:5f:8d:c9:fc:ae:1d:
ca:ea:47:00:2b:f4:67:bb:64:0e:77:da:f1:0f:29:c0:9f:d1:
8d:87:0a:cd:94:38:14:e1:f3:c2:f7:09:50:ba:e9:a7:17:c0:
bc:d6:e0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 23:52:09 2026 by rpki-client