This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
File: GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft (raw, json)
Hash identifier: Ia+XWqLISha2Gu6/J3RPo8zzD5b5JEdvZOPF8qXYPSo=
Subject key identifier: 1D:95:02:2C:16:1A:D3:50:3C:65:D3:B9:3E:5A:B8:8E:0C:C0:40:8C
Authority key identifier: 19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4
Certificate issuer: /CN=194f0b272e243acfaf36346094e58395cc1383b4
Certificate serial: 019C43FE292AD33FFBF3806112F4E46D54E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
Manifest number: 1387
Signing time: Mon 09 Feb 2026 20:00:55 +0000
Manifest this update: Mon 09 Feb 2026 20:00:55 +0000
Manifest next update: Tue 10 Feb 2026 20:00:55 +0000
Files and hashes: 1: GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl (hash: t/E6vbovHRb4/AC0ft5GVNcJKRg19Mi2UZ3SLpkRETY=)
2: WssjpVtFq9SbbTrTZ-iHVvx9vP0.roa (hash: 8JmzB8yBULopBubbEFm3Pf3YeySRdQmevymiDMry08o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fe:29:2a:d3:3f:fb:f3:80:61:12:f4:e4:6d:54:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194f0b272e243acfaf36346094e58395cc1383b4
Validity
Not Before: Feb 9 20:00:55 2026 GMT
Not After : Feb 10 20:00:55 2026 GMT
Subject: CN=1d95022c161ad3503c65d3b93e5ab88e0cc0408c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:f6:da:2d:13:9e:bc:26:db:e4:08:87:19:
08:7c:15:19:03:c0:47:bd:0a:37:a7:85:4d:eb:67:
01:90:f0:2b:f9:67:1c:bf:9f:fa:94:3a:a2:b5:4a:
af:87:a8:07:74:7b:7a:5c:a0:cb:4f:da:1a:58:d8:
40:cd:7b:32:f0:d7:d4:e5:7c:96:a9:42:10:54:d8:
3b:4c:04:6c:43:e6:d2:a3:44:ec:f6:04:ef:67:68:
41:93:6f:a0:0f:5f:a0:fa:16:98:43:e0:4a:b0:93:
c2:04:b5:00:35:64:0c:14:9b:fe:ea:aa:b3:21:74:
a4:c2:24:e7:54:56:36:23:3f:72:e0:d4:61:61:6e:
4a:a5:6f:fe:a7:2e:ac:69:b4:88:25:eb:4e:5a:ac:
6c:07:c3:e9:04:04:4f:47:19:78:f5:3b:7d:33:f1:
2c:e9:f7:0d:57:a9:4c:78:f2:34:9a:fd:f4:1f:c0:
f5:f8:a2:be:84:f4:5b:5e:ff:c3:fe:60:5c:39:46:
52:83:fb:8a:20:f2:d1:dc:4a:ab:0f:bf:e7:fa:9f:
5f:a0:a4:b3:f7:51:18:12:c8:86:84:eb:71:2e:ed:
1c:98:84:dd:4a:27:dd:f0:72:90:25:da:7d:fb:10:
95:66:4b:3f:37:c0:53:fd:eb:93:fd:41:09:15:d0:
15:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:95:02:2C:16:1A:D3:50:3C:65:D3:B9:3E:5A:B8:8E:0C:C0:40:8C
X509v3 Authority Key Identifier:
keyid:19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:74:8b:a0:c7:3d:cd:87:8e:90:79:2c:41:a3:ba:47:13:9e:
eb:27:be:c4:58:72:5b:ba:08:c8:a2:c1:b5:8b:8f:15:16:1e:
ce:e5:94:f5:ba:e2:84:82:c0:ba:71:71:5c:35:16:d1:fe:01:
30:13:76:cb:2c:a5:76:6b:64:e6:e8:bf:92:1d:87:9c:65:97:
71:4d:91:64:01:fb:66:25:ba:45:22:80:f9:2f:ca:32:72:f2:
8b:29:6c:e3:87:9a:0f:24:25:ab:93:ed:9c:f5:5b:2b:6a:b0:
74:96:2b:aa:23:e0:75:fc:6c:f9:94:2b:30:7e:1f:10:62:b3:
be:4c:8d:e9:a1:ad:db:c7:50:3a:ef:fb:74:e6:65:85:22:4c:
b7:6e:37:9b:0a:e5:c8:97:04:5d:66:11:eb:28:85:fb:63:d8:
80:04:eb:83:02:78:da:e7:fe:e3:ad:16:d8:d4:98:1c:e9:cf:
b9:1b:d1:b5:77:ac:6e:75:70:3c:92:ec:e2:b8:80:51:10:98:
e4:d4:f6:29:6c:5e:a6:8e:e4:33:46:69:ef:ed:c2:54:7a:f2:
5d:ea:e5:be:e1:9a:13:9a:c3:03:ba:f5:68:10:f2:f5:7f:21:
6c:73:48:9c:02:ee:92:e3:37:70:f7:3e:e2:bd:13:22:16:54:
a5:cf:f7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:44:57 2026 by rpki-client