This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
File: GXSZvpe8wyf2Tp64xCOUUIygbWU.mft (raw, json)
Hash identifier: eQCiqFxHI7pKhTxz3Z21r5bQRtQLRKDlG4SNq8CX/rY=
Subject key identifier: 68:0F:7C:4E:56:76:90:4A:E2:49:74:71:11:06:6D:EA:7E:DC:5E:C7
Authority key identifier: 19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65
Certificate issuer: /CN=197499be97bcc327f64e9eb8c42394508ca06d65
Certificate serial: 019C43906AAB9674B14F5C3B38B6A503143B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
Manifest number: 0E67
Signing time: Mon 09 Feb 2026 18:01:03 +0000
Manifest this update: Mon 09 Feb 2026 18:01:03 +0000
Manifest next update: Tue 10 Feb 2026 18:01:03 +0000
Files and hashes: 1: GXSZvpe8wyf2Tp64xCOUUIygbWU.crl (hash: fBgOg/xq9TDA8bzawgPnROKwiA7zQ8nehmUmsoOAUrU=)
2: qGxTxAsu5FkWitZ0KPLQqCXDGFM.roa (hash: zXhXvgnmYSnohs5FpeFJ6bYBqVk7H7oowzouCmYZY/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:6a:ab:96:74:b1:4f:5c:3b:38:b6:a5:03:14:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=197499be97bcc327f64e9eb8c42394508ca06d65
Validity
Not Before: Feb 9 18:01:03 2026 GMT
Not After : Feb 10 18:01:03 2026 GMT
Subject: CN=680f7c4e5676904ae249747111066dea7edc5ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:55:95:ab:1e:ba:44:af:58:d1:0b:7f:df:39:
e8:08:91:a9:e7:0b:3e:c5:29:00:44:89:5b:c6:eb:
9c:19:61:e6:dd:a4:f4:7d:88:cd:a6:56:c4:de:9f:
81:01:cd:1e:32:68:1b:f9:b2:d5:df:7b:84:17:e2:
b6:7e:ee:81:2e:29:87:43:5e:49:d8:20:2f:8b:32:
2d:ae:f3:da:9c:9f:ef:34:96:b4:f6:5f:72:9e:ea:
0c:08:cb:2a:70:e8:36:fd:03:c3:8c:aa:d9:0f:53:
28:4b:b0:bd:5b:ff:fa:30:2b:42:f3:c5:88:d7:f2:
a9:76:15:0e:a5:87:3a:06:b1:61:f1:55:a7:d4:a5:
7f:3f:a3:cb:5c:74:48:7b:df:3e:ed:96:e4:6a:04:
5f:51:9e:26:47:d7:86:14:b0:1d:02:9d:07:f2:da:
98:06:2f:0f:16:60:f3:7a:98:a0:b0:f0:89:14:eb:
12:26:57:48:90:cc:f8:a1:26:f6:55:b0:5f:75:18:
0f:9a:fd:ad:e3:55:6b:d1:4d:e3:0b:30:06:df:8b:
27:93:a8:e6:86:b3:83:64:82:13:02:3d:73:d8:4c:
71:59:7b:27:50:eb:b2:22:1c:41:25:2e:e8:d2:da:
e4:1a:38:25:04:f3:8e:4b:3e:76:25:ae:40:bf:c0:
de:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0F:7C:4E:56:76:90:4A:E2:49:74:71:11:06:6D:EA:7E:DC:5E:C7
X509v3 Authority Key Identifier:
keyid:19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ca:7c:f4:c9:c2:38:8d:37:ab:2b:b6:f3:fa:0c:8d:63:7a:
c1:44:88:29:80:3d:0c:49:91:fe:23:1a:51:6d:c7:36:a3:23:
13:e4:2e:c9:c2:82:5c:b4:da:10:c8:3a:bb:d5:d7:df:84:22:
e4:ce:56:b9:d0:1b:2d:78:2c:52:78:f6:4d:63:bc:eb:e7:9a:
75:39:65:a7:11:5e:ad:be:f7:43:88:b3:0c:07:db:4a:1c:61:
a6:9c:13:a4:a0:5f:33:0a:21:aa:6f:96:b7:3f:b0:61:28:85:
95:74:06:7b:94:b8:92:40:e7:ce:21:a2:17:90:5d:0c:94:eb:
d3:65:38:89:ec:9f:92:ac:4e:63:a5:cc:b3:fc:0c:70:50:fc:
c4:70:76:d2:5c:b8:bd:e4:2b:d8:89:a8:d2:bc:dc:f5:93:ef:
9c:69:a4:55:22:3d:03:a0:49:af:a5:bc:00:96:3f:04:47:45:
3b:23:2d:33:67:ab:e9:25:0d:a0:9f:79:91:b8:46:d8:df:1f:
a6:20:76:dc:21:d6:bf:e0:03:5f:17:4d:d1:d9:eb:08:e9:57:
88:4b:1f:c1:24:a7:0c:ff:33:1d:1e:83:af:8f:3e:f6:7e:aa:
47:de:be:65:bd:ef:0b:57:cd:ed:c3:d4:31:7c:2c:99:ef:93:
84:40:69:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:34 2026 by rpki-client