This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
File: GxISDDUcFO7CIQn2AySfzawdMyE.mft (raw, json)
Hash identifier: o3R7i6DiI0sbinjNIOCzCJQVSxZov/+B4nud7mmUpZs=
Subject key identifier: FC:D0:DA:FE:84:26:AE:A6:5E:A3:90:B5:20:09:1F:DE:E5:55:70:39
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial: 019C2962A96D4A74493E788E017259EFD9B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
Manifest number: 0390
Signing time: Wed 04 Feb 2026 16:00:57 +0000
Manifest this update: Wed 04 Feb 2026 16:00:57 +0000
Manifest next update: Thu 05 Feb 2026 16:00:57 +0000
Files and hashes: 1: 0Hde166TZ8cOeYRDZBvGcnkowsw.roa (hash: qHe/Fb1SXZPDfsFybAYuKlH/X0tukUHCuNBNiEKAWfI=)
2: 1N12BIRxHI41mSTm69ziM417BQM.roa (hash: NWf2Ua6LuyO93ISX0t9PKrDP/YCuJk+SJvYdsbwbYYE=)
3: 6LIia5tMqbvxBKtY8BThO4xtAtc.roa (hash: +QLjKfCjIW6L5WkiIdYTEn/5q6ZYatBqzC1HJld3e54=)
4: FfkicRnds0SyM8Ri9Cp-q39uDR8.roa (hash: biBnPAucsy15z3WhNtWi3egdIRrJTjNrL9lhRCi/Suk=)
5: GxISDDUcFO7CIQn2AySfzawdMyE.crl (hash: cWr4EAFDxKsMxcx6R/rZ2HK3xy0zhexex9ds/xd6uyU=)
6: NWaj7UwQJNpphq6A0KnyXEoRFy0.roa (hash: m2ilvS5ZvsuV1nGSihhJAUP32WTnDiYym9uVmCodM6s=)
7: X6Wyo1Nxo3DvPC0B0Jf1i8G3hqI.roa (hash: Kov0ii0fyGyD54eIG6eszxy4Wp/ixqF+zLVhtmB6pGk=)
8: g26RPZK6YExXyAYxiox0pH5Upvk.roa (hash: vtcEdbjodmT9ogpS1TjT9OhkB3pBDSvD+MwrAzlPjuc=)
9: pfe5B0ql1R3jCYK4fGz5CtLrWdM.roa (hash: HWDJb2FM7pBuEZ/mgtOH62KOhrf0YhTnBeYZLVDImO0=)
10: ryQMgFWZ3jNBbogxwI7g21J7R8Y.roa (hash: I6znAGDxaUZ6tiOUv1X3x50QNtWRlxAeBxeiC8CikHg=)
11: yhRIOnTpPbWhti1RrtqQMliwotE.roa (hash: sPDOjagJPBV8blENyQcTrbddZKQCM0gJadLIMm2Nmh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Feb 2026 16:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:29:62:a9:6d:4a:74:49:3e:78:8e:01:72:59:ef:d9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
Validity
Not Before: Feb 4 16:00:57 2026 GMT
Not After : Feb 5 16:00:57 2026 GMT
Subject: CN=fcd0dafe8426aea65ea390b520091fdee5557039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:25:38:2d:d8:c6:b9:93:41:17:64:62:a5:6a:
a5:91:e0:cf:46:8c:2b:d8:90:e4:f9:6d:0c:96:8e:
f3:17:cf:b0:28:71:e5:ad:cf:00:3b:b7:57:d9:cf:
e6:4a:8a:9e:50:a8:17:90:25:f9:eb:f2:e2:4e:88:
c0:21:6e:da:55:ea:ac:5a:4d:ba:59:d3:95:88:49:
69:1c:26:3d:b9:17:a1:fd:e1:4a:c3:46:d2:ba:dd:
64:82:5d:e2:0d:99:fb:fc:2b:09:88:92:2c:60:3c:
ac:6e:d4:5d:c3:8b:f1:66:9e:67:d5:c6:0f:e1:2e:
e1:83:df:9a:15:58:b3:e3:db:ac:eb:d0:c0:4d:6b:
44:e9:89:eb:03:55:64:6c:ff:a5:d6:c9:83:c4:2e:
cd:df:a6:5b:7f:7e:9e:94:92:57:48:49:ed:5a:e8:
a4:c9:cd:9b:d0:71:80:b4:98:d2:07:80:09:f7:d8:
72:f8:bb:67:d8:ad:da:66:a7:73:e1:5a:1a:f1:f2:
48:c8:35:fc:bc:48:bb:22:80:77:e5:9e:09:da:dc:
7c:ba:dd:49:33:90:9e:b8:d3:03:88:76:0b:d6:9d:
d9:0c:84:dc:5d:5f:fa:4f:a9:e0:84:da:34:17:5e:
7e:93:80:56:d4:c1:64:6f:0b:60:ad:e8:92:e6:c3:
fd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D0:DA:FE:84:26:AE:A6:5E:A3:90:B5:20:09:1F:DE:E5:55:70:39
X509v3 Authority Key Identifier:
keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:8e:2f:0a:24:25:30:8a:7e:cb:48:8c:22:62:32:36:91:36:
a5:10:73:5d:ca:7f:54:ef:ef:cd:73:cd:0e:f7:7e:3f:20:09:
43:e7:cf:47:a1:c8:2a:b3:1c:15:28:72:91:c5:14:f8:24:4d:
6d:13:c7:63:db:c8:c2:21:81:14:b6:5d:40:6a:4a:71:61:92:
3e:a4:b9:9b:1d:3f:fb:e4:3f:5d:c3:b8:1c:9e:9b:40:01:0a:
e9:9e:47:b9:ab:51:7c:eb:9e:52:60:ac:a0:c6:f2:fc:6f:98:
8b:e2:b7:47:d8:76:3a:5b:7a:52:bb:a7:c0:5e:e7:20:31:11:
8e:7f:3f:90:e2:38:02:e5:f3:00:af:85:ee:14:a0:b4:78:fd:
25:d9:da:b4:b6:9a:3d:a9:2a:c2:d8:23:41:dc:b0:78:ea:b0:
72:d4:a7:b5:cb:01:f4:61:a7:7c:c4:a7:9d:90:08:9b:57:f1:
34:89:7b:24:17:f0:37:50:c9:c5:0f:9f:30:7e:08:54:be:f9:
4a:4a:89:cf:67:56:4a:00:13:3f:39:d8:e9:cb:83:b8:78:76:
6e:1f:c6:e0:ce:ad:b3:0f:14:38:f6:e3:79:27:d6:1c:46:b5:
06:b9:d6:c9:b2:01:a3:0f:6f:df:42:f1:35:77:91:05:6d:4b:
74:cc:d4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 03:23:42 2026 by rpki-client