This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
File: g7d8noEHbPS0zv7V7vIQf3UsNjA.mft (raw, json)
Hash identifier: AEHBCoc4bEp0blfYiBY6ByF4MrLeSUOajWjgac0aNgU=
Subject key identifier: 95:5F:23:39:9E:90:ED:C1:36:4C:17:47:A7:12:C7:AB:C4:E3:1F:8F
Authority key identifier: 83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
Certificate issuer: /CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Certificate serial: 019C42EB6C43D0145ABDCAC5D0FC5BA9EB7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 15:00:50 +0000
Manifest this update: Mon 09 Feb 2026 15:00:50 +0000
Manifest next update: Tue 10 Feb 2026 15:00:50 +0000
Files and hashes: 1: GHGkwEVylqYxr15hWfLzxHp9MA0.roa (hash: 6MgKNZ/wr6UP8/R75FjFSF75c2qdb4J/GZr8B0Cgj+s=)
2: g7d8noEHbPS0zv7V7vIQf3UsNjA.crl (hash: KoAUhvg5uJ1bJFHIe1BaQxi8HUjBJKv4wR6O5Bc2ius=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:6c:43:d0:14:5a:bd:ca:c5:d0:fc:5b:a9:eb:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Validity
Not Before: Feb 9 15:00:50 2026 GMT
Not After : Feb 10 15:00:50 2026 GMT
Subject: CN=955f23399e90edc1364c1747a712c7abc4e31f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c7:63:34:a3:ab:97:d2:06:3a:70:74:52:22:
9d:d1:bc:6c:63:35:4d:84:f0:ff:22:92:59:1f:8d:
a2:5a:d2:05:4e:dd:1c:e8:94:d4:1a:02:9f:d0:f8:
ce:22:45:7b:20:7b:a4:67:d3:66:55:64:f4:ee:e2:
c7:af:ba:fa:53:21:e6:2f:73:43:cc:64:02:40:69:
84:6c:9e:b4:1f:ab:ab:b9:5c:97:d6:87:06:30:cb:
71:91:d2:25:ec:45:b1:51:4b:16:8d:7f:4a:c6:69:
0e:b9:16:23:a4:ea:35:3e:eb:69:96:a1:c1:63:f8:
f7:b3:4e:e2:c2:26:d7:73:aa:bb:a7:60:f2:91:b2:
34:35:e6:2a:9e:b9:4d:a1:bd:e9:72:59:ce:78:17:
b9:b1:3f:a9:82:ad:75:d6:a0:78:9f:5e:7b:c1:b1:
c8:95:7f:2a:04:37:5c:0f:d7:b6:92:d3:e1:64:1d:
77:f7:a5:90:a8:d2:5a:5e:bd:ca:97:56:db:7e:d3:
23:4a:91:41:33:99:88:25:7b:e7:c1:4c:b4:a5:19:
a6:66:04:5c:06:d3:82:e2:0a:cc:78:4c:c1:10:5a:
df:30:e0:c3:8e:d5:ca:35:00:43:a6:75:bd:7b:56:
27:ff:a3:fe:35:2f:7b:5d:47:7d:40:d3:36:7c:7d:
10:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5F:23:39:9E:90:ED:C1:36:4C:17:47:A7:12:C7:AB:C4:E3:1F:8F
X509v3 Authority Key Identifier:
keyid:83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:9d:57:d2:04:47:35:f5:ff:ea:7a:8d:c8:ad:d5:4b:7f:d6:
dc:60:f1:ed:42:32:6c:c2:10:92:78:77:bc:f5:00:85:e7:a2:
4d:b0:db:d3:bb:c8:37:88:13:cd:30:fd:2c:51:1f:7f:b9:e6:
d1:69:88:fd:b7:ca:72:ed:06:8e:d5:2d:c4:3e:3c:4e:25:72:
99:3a:08:89:ea:2f:8a:c3:f6:ff:c0:ab:d1:b7:dd:7e:df:91:
7f:fb:7e:bd:b0:47:4e:09:d9:23:d2:56:1d:31:9a:97:a0:c2:
96:50:12:fd:7f:77:4d:83:75:35:e3:43:32:36:e0:64:e3:fe:
9f:38:88:a3:49:0b:73:d6:59:79:1c:b1:39:7c:9c:93:d2:22:
fd:be:4b:0f:a9:db:ba:ca:7b:d2:1f:da:6a:48:45:56:e0:8b:
2c:e9:b4:6d:15:6f:38:c1:c3:73:eb:11:f3:cd:f3:96:8e:2c:
17:06:9a:38:d7:53:9e:1a:18:26:40:11:b8:35:fa:20:f0:47:
f9:53:f1:44:8d:2f:9d:5c:12:2e:be:3b:f8:eb:bf:41:ef:6f:
92:64:88:91:61:c3:fc:42:0e:1e:70:66:60:c9:a4:5b:0a:52:
bd:d9:74:29:06:23:43:24:eb:bf:9a:dc:2f:d9:09:bf:38:d0:
98:3e:ae:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:34 2026 by rpki-client