This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
File: grE25oINlPA7HF1x7uPUsiGRUo8.mft (raw, json)
Hash identifier: Sb1Di9IxEmmRMZZPPI1kNou97M7k3naNMv78hLctAGM=
Subject key identifier: 3A:E1:1A:10:98:1C:B4:C4:F1:AB:3B:DD:CF:C7:AB:6A:0A:37:BB:A5
Authority key identifier: 82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
Certificate issuer: /CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Certificate serial: 019C4358BE48F3E877B6F1320F8140BBCBAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
Manifest number: 13B7
Signing time: Mon 09 Feb 2026 17:00:14 +0000
Manifest this update: Mon 09 Feb 2026 17:00:14 +0000
Manifest next update: Tue 10 Feb 2026 17:00:14 +0000
Files and hashes: 1: RpMIwwKNDJ2StC4zRLgKJPlvR8w.roa (hash: cXPNnS64bUQTjJNvAeCad/jzk4TlUd0umXx2TLacFB0=)
2: grE25oINlPA7HF1x7uPUsiGRUo8.crl (hash: nqt0xto+vC/7Uw/bExIWpEJne9HDoguAS0SQsjWiia4=)
3: kp-VMkih7qc6B23hHp-3gThKHNw.roa (hash: bxojK3FurSVV0NeQ9kkDlIbku+sPTPShkBdp5lGAEYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:58:be:48:f3:e8:77:b6:f1:32:0f:81:40:bb:cb:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Validity
Not Before: Feb 9 17:00:14 2026 GMT
Not After : Feb 10 17:00:14 2026 GMT
Subject: CN=3ae11a10981cb4c4f1ab3bddcfc7ab6a0a37bba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:54:12:1d:ce:1c:3c:0e:01:16:d2:29:72:d4:
09:ac:fc:c0:b7:81:fe:d6:5f:32:5c:2b:90:c2:65:
27:35:f2:dc:76:87:89:2e:ef:09:ee:ba:6f:91:61:
be:61:33:ec:84:2d:48:fb:e6:4a:d0:53:34:ac:5f:
0d:f7:82:f4:fc:c6:09:01:c4:08:d4:6f:94:11:52:
6e:7d:88:90:07:f3:4e:db:26:88:70:db:2b:1a:a6:
67:21:bf:ca:86:aa:d0:16:71:b2:61:c6:24:3b:7c:
6f:15:1e:3e:61:1c:52:67:fe:db:d3:ce:0f:5a:42:
58:a6:1e:a4:38:53:0e:6d:e8:ef:05:86:46:a5:ab:
f9:5d:c4:cd:2a:d0:fe:9f:22:6a:a8:20:5d:f6:20:
59:0a:4a:1d:db:e0:d3:56:3f:d1:7e:e2:5e:d1:71:
07:09:9e:28:79:d6:d2:eb:9d:38:af:89:56:94:a9:
e9:2d:77:8f:8f:43:25:16:59:15:24:1d:c6:5e:ad:
a3:90:f3:da:20:00:53:c7:9d:c2:8c:db:6d:eb:05:
e4:f0:f3:70:31:ba:e4:08:df:7f:03:f8:a9:27:dc:
8c:2a:8f:b5:22:7c:86:8b:3e:86:5c:18:dd:87:ee:
6e:62:e2:0e:c2:89:0f:02:47:c1:f0:ed:1c:00:72:
84:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E1:1A:10:98:1C:B4:C4:F1:AB:3B:DD:CF:C7:AB:6A:0A:37:BB:A5
X509v3 Authority Key Identifier:
keyid:82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b7:c7:93:d7:ec:bc:af:fa:30:c5:01:be:f1:61:90:32:ea:
8d:7a:e7:1e:76:60:f5:ec:42:fb:d1:39:5b:f7:11:e2:e8:a4:
55:8e:ab:68:ef:00:fa:6e:81:0e:c4:fb:28:ca:f5:fe:40:d1:
e4:58:30:1f:9f:c3:88:14:b5:ad:06:61:b4:ad:ab:7c:21:33:
8d:92:74:6f:3e:22:9b:54:61:ce:5f:1b:0c:bb:cb:cb:43:d4:
dd:09:27:bb:f3:f9:bf:d5:3a:ba:9d:9b:29:d9:24:b0:1b:51:
e0:aa:af:86:a5:05:59:5a:01:7f:5a:f6:a1:4b:6a:46:20:91:
7d:40:4f:7d:e0:2e:3d:dd:6d:58:dd:38:70:85:1c:92:73:ce:
1a:f9:ba:83:ce:98:00:26:01:26:cd:6a:68:39:53:b4:49:b2:
1a:c9:96:e6:92:9a:76:67:33:68:bf:93:21:fc:57:df:13:04:
3c:b4:04:ec:3c:0d:e0:82:ca:c6:cb:28:50:fe:12:ee:21:41:
d8:b4:64:c2:78:5c:51:c8:13:4e:0a:93:6d:31:d9:0e:26:d3:
90:f3:af:eb:91:30:8f:17:4b:dc:94:0e:b3:96:66:31:2b:9d:
bc:cd:68:05:17:e6:f9:a4:6a:68:02:e4:60:bd:51:49:30:ed:
19:b5:b9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:40:42 2026 by rpki-client