This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
File: gWZdbPJtk3SE27RjN0PgZX7M3F4.mft (raw, json)
Hash identifier: 9X2Knqs8psUl+Kkzg+8suNDhMotc1reFkgzPM04PS9k=
Subject key identifier: C5:AD:65:3E:A3:A1:E0:B8:AA:61:0E:71:8E:33:40:55:C2:9A:71:62
Authority key identifier: 81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E
Certificate issuer: /CN=81665d6cf26d937484dbb4633743e0657eccdc5e
Certificate serial: 019C45B57E03624F689DE64640EF8400D49E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
Manifest number: 17DF
Signing time: Tue 10 Feb 2026 04:00:48 +0000
Manifest this update: Tue 10 Feb 2026 04:00:48 +0000
Manifest next update: Wed 11 Feb 2026 04:00:48 +0000
Files and hashes: 1: 5st_HHpLD54WE6_4L8XNFgUjL_w.roa (hash: JHjXO9P1p0iqaGPwSoXPmKvMaRiV2yvxi6yn0kC2stg=)
2: gWZdbPJtk3SE27RjN0PgZX7M3F4.crl (hash: QFfmpdozEedWJU6NQZHmsMQLHTypri5DZJPhqnjzauI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:45:b5:7e:03:62:4f:68:9d:e6:46:40:ef:84:00:d4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81665d6cf26d937484dbb4633743e0657eccdc5e
Validity
Not Before: Feb 10 04:00:48 2026 GMT
Not After : Feb 11 04:00:48 2026 GMT
Subject: CN=c5ad653ea3a1e0b8aa610e718e334055c29a7162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:16:09:4b:de:05:e3:52:4c:57:7a:e4:45:
63:a4:35:29:21:d9:02:6a:a2:a6:cc:db:3b:9e:7a:
4c:f4:18:8f:0a:e7:3d:c3:86:39:a3:90:8d:bf:ae:
3c:16:fe:5d:30:74:e0:c3:e1:fe:11:96:a1:a5:0f:
07:26:0e:45:43:be:f9:30:d6:cc:30:f2:12:80:94:
07:e0:fd:74:ec:e1:e3:4e:d2:d8:a0:88:33:27:0c:
1a:fb:ae:8a:b8:60:ce:fc:85:e4:bc:11:57:5d:5a:
15:ad:70:84:ed:9c:eb:3d:ca:d1:83:23:fc:ab:af:
46:8b:17:8f:6e:a0:e5:1e:75:23:ba:1d:5d:cc:bb:
62:44:ed:b9:a0:23:50:fd:3b:1b:0e:03:16:50:5e:
26:1d:de:dd:d8:25:77:f6:50:f3:87:73:cd:79:3b:
b1:83:be:d1:f7:a9:ff:30:de:79:5f:0d:a0:3f:3c:
12:9e:09:30:c1:50:87:fd:75:cc:8d:c4:03:56:09:
45:85:a6:b4:29:6c:8e:96:77:e6:98:8d:83:95:c3:
c0:80:8e:3d:04:cd:39:d4:b5:b0:07:ec:ae:3f:bd:
df:ba:2e:7a:e4:9c:96:32:a6:f7:bf:01:70:f6:3e:
73:09:58:08:94:36:7b:d8:24:fc:4f:25:6e:a7:49:
15:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AD:65:3E:A3:A1:E0:B8:AA:61:0E:71:8E:33:40:55:C2:9A:71:62
X509v3 Authority Key Identifier:
keyid:81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1d:f0:5c:9f:a2:f1:da:31:52:36:30:97:5f:08:80:bc:90:
dc:df:a3:8c:9b:59:2d:0d:9a:c4:29:d1:c3:a5:d2:83:3f:90:
61:46:c4:8c:a0:77:35:da:1b:44:9a:9a:43:f2:2e:e3:ae:72:
46:1b:c5:62:8d:7c:e6:a3:ab:a0:d6:72:88:94:bd:15:1b:e8:
98:fb:07:40:1f:64:89:9c:21:87:82:db:2d:e2:72:26:69:6f:
43:35:b8:b7:b2:ed:17:53:17:01:5a:37:49:e3:1b:06:3a:d3:
6c:ab:b4:54:c8:26:e2:98:ee:7f:9a:72:55:44:1e:b2:9c:05:
fd:b2:d5:64:5d:22:29:54:93:f3:87:fc:fa:a2:95:7f:1e:1d:
00:3e:b7:04:76:c6:48:c1:4b:d6:00:d5:ee:48:7c:b8:02:a6:
1e:2e:a3:a1:62:68:9b:02:dc:e6:b1:62:c2:85:3d:f0:b7:80:
04:bc:9b:2e:41:35:cd:e8:7b:3a:08:28:54:dd:4a:af:ae:e4:
03:d8:fd:29:0c:5a:b9:ed:f0:f8:78:e8:f2:06:f8:4f:13:e9:
40:97:8f:3a:1e:d2:fe:71:65:86:75:39:37:b2:2d:22:60:13:
4a:d5:3a:8d:02:13:52:5c:16:62:a0:3c:8d:d6:ce:e6:ef:22:
56:b8:b6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 05:54:30 2026 by rpki-client