This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
File: GvzYfmH5F2XCwQAgQUG1lNMsey4.mft (raw, json)
Hash identifier: sSig+2qRXQ2RxKhqVwv2Yeysh3wtbqELRIjjFmdeXIw=
Subject key identifier: 0F:2F:F2:0B:CA:7E:7C:4C:A9:63:7A:24:33:8A:E4:2A:C5:C1:80:68
Authority key identifier: 1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E
Certificate issuer: /CN=1afcd87e61f91765c2c100204141b594d32c7b2e
Certificate serial: 019C40FCC2500C25779DFB39CE2C9D3EE08C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
Manifest number: 0338
Signing time: Mon 09 Feb 2026 06:00:32 +0000
Manifest this update: Mon 09 Feb 2026 06:00:32 +0000
Manifest next update: Tue 10 Feb 2026 06:00:32 +0000
Files and hashes: 1: GvzYfmH5F2XCwQAgQUG1lNMsey4.crl (hash: kOOmtsPA+z/xLVE0l2fi2+dnY19faBoMOs8GP1zK0Ek=)
2: tW75xisNBw44jYns_Y3WtNvzf4M.roa (hash: 1hevvajdIYdR4n3mWoJRqh1PcCq2VWdl5U2HS1l2lMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:40:fc:c2:50:0c:25:77:9d:fb:39:ce:2c:9d:3e:e0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afcd87e61f91765c2c100204141b594d32c7b2e
Validity
Not Before: Feb 9 06:00:32 2026 GMT
Not After : Feb 10 06:00:32 2026 GMT
Subject: CN=0f2ff20bca7e7c4ca9637a24338ae42ac5c18068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:ea:b8:c9:16:f1:8a:12:84:f6:27:58:2d:
e7:7e:62:25:40:4d:49:67:7d:93:61:7d:fe:21:03:
46:55:35:b5:2e:5a:7d:29:92:31:77:29:37:66:3a:
48:bd:73:34:14:4f:ca:8a:db:9e:31:9e:a6:0e:45:
23:7e:00:0f:d1:96:af:9b:48:45:03:00:28:6a:5b:
f3:63:1f:e6:1b:9f:bf:29:75:95:40:d5:58:cb:0a:
8f:81:fe:91:29:b2:06:9c:cc:42:17:e7:48:3b:8d:
75:9f:8b:93:1a:08:3d:b0:cc:15:3c:54:ac:d8:36:
c9:c0:6a:10:d7:59:c5:d9:a2:ea:9d:fa:7d:89:a9:
71:69:16:3e:b3:da:73:49:43:0a:ab:34:9f:5c:fd:
ae:f4:d0:a7:a5:97:88:7e:5e:ec:cc:3b:14:6e:45:
3e:9f:8e:68:9d:4c:c6:dd:4e:9d:40:e4:e4:bb:bd:
84:3d:43:3f:eb:5e:16:87:16:28:7f:7b:7d:6f:14:
b0:53:ba:f1:7a:3b:31:c4:a8:8b:d3:58:6b:8f:c6:
29:d5:c1:a0:cb:2f:fe:6a:b2:61:16:b4:48:15:ec:
0c:e5:3e:a5:73:2d:95:9e:bc:ba:62:36:cf:2d:1c:
9a:d5:ca:ca:f2:cd:c0:6d:76:d1:78:01:68:ca:3e:
87:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2F:F2:0B:CA:7E:7C:4C:A9:63:7A:24:33:8A:E4:2A:C5:C1:80:68
X509v3 Authority Key Identifier:
keyid:1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:aa:dc:6c:34:35:1f:ca:26:67:86:eb:72:bb:88:39:2d:34:
0c:ac:c1:42:45:27:a5:cf:a8:df:82:99:ce:71:d3:6e:d0:39:
72:a9:11:68:6b:0b:fe:49:ac:db:68:82:61:c2:60:78:8d:cb:
46:7f:9f:52:7e:65:a4:35:04:68:71:e1:8e:ad:32:5a:78:ee:
1c:7b:35:67:80:d6:56:3e:f9:36:f6:75:df:28:a9:e3:84:a7:
29:cc:ff:90:82:e0:13:8b:55:3d:b0:d4:95:d5:02:89:d4:13:
f6:28:91:65:a2:ef:4d:5e:49:a8:4c:1c:63:2a:da:bb:fd:24:
75:44:3b:ca:a6:53:14:ee:2f:70:6f:e1:3f:21:de:04:18:c0:
13:7f:75:17:48:2f:46:0a:21:79:c4:b5:8c:b7:49:c9:01:f2:
ef:34:e9:f9:36:be:da:e1:82:84:24:b3:57:43:aa:97:d6:86:
0a:38:4e:a9:93:9d:e5:04:72:51:91:6a:74:ed:db:89:f5:ae:
f8:da:23:e6:a2:bb:1c:fd:8e:ab:6f:1a:1f:b4:7c:d5:97:dc:
6b:fd:32:7f:01:45:83:22:35:ce:1e:63:f4:9c:cc:42:29:0e:
49:2a:52:56:3a:fc:aa:c1:1b:5f:3a:a0:b0:5b:c6:2f:92:28:
96:34:ff:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:43 2026 by rpki-client