This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
File: G7yEG3eaK7LCio2u4rLRDVp8NNU.mft (raw, json)
Hash identifier: SKT8FhVKLP2wwCNH3LU0nAnPZxiFACYhATg9xs4IPnQ=
Subject key identifier: 28:1C:2A:F1:12:8B:FB:E9:E3:1F:98:22:A1:54:11:BC:92:55:69:7C
Authority key identifier: 1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5
Certificate issuer: /CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5
Certificate serial: 019C40FD1B32AD4EBEE522B630A053646A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 06:00:55 +0000
Manifest this update: Mon 09 Feb 2026 06:00:55 +0000
Manifest next update: Tue 10 Feb 2026 06:00:55 +0000
Files and hashes: 1: G7yEG3eaK7LCio2u4rLRDVp8NNU.crl (hash: S+lvHtoFDTMap6SE1ekP9C3LuxqiE0cCa9/6HdXo9Zk=)
2: deE75SevBPoLBBV-kYApKEjzkBY.roa (hash: iHy3btB3fLg5S2KEubTWq3Yf0aElaQLO6vxuJIQCC3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:40:fd:1b:32:ad:4e:be:e5:22:b6:30:a0:53:64:6a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5
Validity
Not Before: Feb 9 06:00:55 2026 GMT
Not After : Feb 10 06:00:55 2026 GMT
Subject: CN=281c2af1128bfbe9e31f9822a15411bc9255697c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:96:ec:9f:a2:65:a7:15:8e:11:df:a6:f5:ad:
5f:7d:48:24:86:5c:73:a9:b8:0f:4d:23:1b:6f:a3:
d1:d1:91:a9:3c:11:bc:1f:4a:78:41:50:1d:83:5a:
eb:99:46:f1:07:4d:5e:1f:ed:87:6c:ce:b1:86:cd:
e8:39:db:6b:4a:22:55:c2:3c:ea:f7:ff:4f:83:3c:
d5:46:13:11:0c:25:e1:c4:57:da:d1:5b:5e:25:2b:
7a:6f:4e:b9:4a:ab:c3:16:b4:8a:b3:46:2b:85:14:
16:56:e6:05:84:33:20:cb:72:0c:36:bf:84:00:35:
1a:b3:7d:4c:40:b3:25:8d:88:97:66:6d:62:be:93:
f7:08:6c:92:31:c1:ed:0b:b8:84:2a:ad:6b:98:67:
82:63:22:d8:25:97:9a:bb:d7:ae:c1:0f:77:01:67:
6d:69:cd:05:03:5a:f7:25:69:c4:a4:8e:e8:d6:09:
70:63:dd:b0:2a:c0:28:fa:1b:79:e8:3d:a5:25:4e:
d9:85:ef:00:3c:96:f8:1f:bf:14:f6:2a:91:f2:3c:
8a:09:1a:b3:15:20:e4:82:8a:2c:e1:c4:ff:bc:72:
b3:3a:09:51:9b:d9:e1:18:cf:d2:a9:b9:f7:88:7e:
99:75:05:d9:bf:c0:19:5d:5a:c4:95:a4:36:aa:8b:
e1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1C:2A:F1:12:8B:FB:E9:E3:1F:98:22:A1:54:11:BC:92:55:69:7C
X509v3 Authority Key Identifier:
keyid:1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:fd:c9:4e:66:d5:31:f9:d1:fc:72:d9:d4:10:76:3c:fb:eb:
80:2d:24:31:be:26:b1:81:4b:74:12:8e:c3:44:2b:26:55:94:
78:d4:a3:98:35:2b:71:7e:97:ea:75:30:41:ae:1a:ce:42:36:
87:ca:99:21:84:1a:58:0f:4e:e6:c1:a4:95:12:58:d5:00:fc:
19:f6:03:ed:b1:ec:02:61:ee:a9:88:79:cd:94:b7:da:88:32:
1a:29:8a:47:ed:ca:d3:92:9b:75:f0:be:d5:7d:98:b1:8f:0c:
bb:76:8b:24:77:db:29:a5:fa:18:9c:87:aa:65:7b:f1:ed:a6:
05:76:b8:50:4a:9f:5d:ff:0c:5c:b3:d4:8f:9c:12:44:32:d0:
95:70:6e:aa:10:89:00:73:98:27:79:90:b7:7a:c1:28:5d:b4:
0e:20:f5:bb:11:6a:e8:3e:4d:45:6d:29:e4:75:19:e1:36:09:
c5:83:ff:08:d1:d8:45:98:04:bf:60:d9:86:94:da:e2:1f:d2:
34:b0:c6:c4:d4:c8:f8:5a:9b:1e:b2:2b:4f:1a:58:be:0d:f1:
0b:48:d6:8a:9e:dc:c1:ba:85:78:d5:75:78:7d:7a:43:94:00:
cf:bc:d0:17:58:ac:a9:e6:69:e2:68:6c:c0:3f:76:94:68:9c:
ce:63:e5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:14 2026 by rpki-client