This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
File: 1GbRcMgQujTELpIOhNQmKEWXf4U.mft (raw, json)
Hash identifier: qcmGuHUYzJnG78U1iZzbo9+cyUNOaWm+arGcOW4+s/o=
Subject key identifier: 0A:28:67:D6:E1:83:B2:7E:6E:44:F7:54:0A:59:5C:7D:F7:00:85:D9
Authority key identifier: D4:66:D1:70:C8:10:BA:34:C4:2E:92:0E:84:D4:26:28:45:97:7F:85
Certificate issuer: /CN=d466d170c810ba34c42e920e84d4262845977f85
Certificate serial: 019C416A8431F46E6E6CC9BB04B5B0A3CDE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
Manifest number: 0723
Signing time: Mon 09 Feb 2026 08:00:25 +0000
Manifest this update: Mon 09 Feb 2026 08:00:25 +0000
Manifest next update: Tue 10 Feb 2026 08:00:25 +0000
Files and hashes: 1: 1GbRcMgQujTELpIOhNQmKEWXf4U.crl (hash: oBTvuWUj0oGFaxiqPw3K1C/o6rBg3KNT7PXYftP6zpk=)
2: XyvlakrX669O27yJ8vUEJgcOTBA.roa (hash: bXnP/tpzRgnQjjCGNcc58oyJ9DS3aNnplVA7Ww2qw84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:6a:84:31:f4:6e:6e:6c:c9:bb:04:b5:b0:a3:cd:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d466d170c810ba34c42e920e84d4262845977f85
Validity
Not Before: Feb 9 08:00:25 2026 GMT
Not After : Feb 10 08:00:25 2026 GMT
Subject: CN=0a2867d6e183b27e6e44f7540a595c7df70085d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1b:bd:2c:24:6d:87:30:d2:10:89:bb:71:c3:
b6:d5:cb:70:62:85:66:f9:e4:dc:69:28:cb:d4:35:
20:53:93:bf:83:c4:45:60:02:93:bf:b1:2a:62:2e:
5d:31:40:fc:4b:82:fc:cf:3b:4c:df:bb:fc:ed:40:
85:b9:59:47:ab:4a:5d:16:e7:68:d9:bd:34:de:7b:
4e:18:96:11:b7:ec:67:7b:3b:64:5a:2c:2b:8c:f7:
74:65:94:15:ee:99:ed:c0:f0:71:a3:46:78:85:53:
91:36:80:89:74:7e:78:94:67:45:44:45:86:e8:a4:
29:65:6b:ab:5b:70:31:39:fb:b3:7a:63:93:d2:f3:
9b:ea:53:9f:94:47:f3:7a:8a:5b:b7:08:f8:11:4c:
5f:c5:c1:1a:57:09:de:33:e7:54:fe:03:26:b4:aa:
65:83:7e:dc:4e:c0:61:e2:7e:70:d3:61:1c:0d:f1:
67:8d:28:0d:74:99:29:19:fd:50:57:7c:7c:1c:60:
a3:d1:4d:c4:0e:30:31:33:6b:54:20:fc:28:f1:b0:
7b:d6:87:f8:7a:8e:0e:01:a5:0c:b7:98:ff:d0:fb:
2c:b7:af:00:0b:d8:f2:87:11:33:53:4a:78:1b:e0:
fa:1c:53:db:a4:1e:17:c9:8d:67:87:f5:85:2b:c8:
8f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:28:67:D6:E1:83:B2:7E:6E:44:F7:54:0A:59:5C:7D:F7:00:85:D9
X509v3 Authority Key Identifier:
keyid:D4:66:D1:70:C8:10:BA:34:C4:2E:92:0E:84:D4:26:28:45:97:7F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:05:3e:96:9e:93:26:60:22:ad:38:07:5d:e5:7c:e3:6c:cd:
d1:68:81:d3:ae:0c:65:db:b5:78:ec:a9:76:a0:26:26:d8:1a:
a1:65:c9:4d:30:a1:af:7f:17:f2:8d:55:72:dc:bf:21:3e:72:
09:67:61:9f:51:f1:32:42:fb:1b:ee:9c:e9:bb:5a:5c:28:73:
29:7f:64:6f:05:7d:b6:a7:cb:6f:07:57:ca:dd:fa:0b:d7:2b:
06:78:ab:21:76:f3:16:d4:c9:cf:9a:64:ca:5f:04:f4:ce:c8:
fc:5e:7f:07:45:e0:1a:d2:00:35:e7:f6:bb:12:f1:2a:9d:39:
82:ab:c8:ea:bc:fc:14:ae:0a:c1:66:73:5a:42:14:42:e6:51:
01:6c:74:19:02:13:04:98:0c:98:ca:a5:94:7c:a8:88:b3:70:
67:65:d4:d8:a2:cc:d8:cf:89:12:b9:a7:98:99:34:95:9e:b0:
02:f0:88:e2:21:ee:33:02:58:91:93:9e:88:9a:17:f0:54:52:
78:6f:72:b6:63:1f:75:69:5c:e6:44:2f:54:80:90:ff:45:b5:
64:9c:f7:30:46:86:03:1f:05:06:89:a5:a6:4d:21:bb:eb:8a:
d5:56:cf:d4:99:12:30:61:a4:f1:31:6a:db:7f:0f:35:55:f8:
c1:4f:81:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBaoQx9G5ubMm7BLWwo83pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NjZkMTcwYzgxMGJhMzRjNDJlOTIwZTg0ZDQyNjI4NDU5
NzdmODUwHhcNMjYwMjA5MDgwMDI1WhcNMjYwMjEwMDgwMDI1WjAzMTEwLwYDVQQD
EygwYTI4NjdkNmUxODNiMjdlNmU0NGY3NTQwYTU5NWM3ZGY3MDA4NWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Ru9LCRthzDSEIm7ccO21ctwYoVm
+eTcaSjL1DUgU5O/g8RFYAKTv7EqYi5dMUD8S4L8zztM37v87UCFuVlHq0pdFudo
2b003ntOGJYRt+xneztkWiwrjPd0ZZQV7pntwPBxo0Z4hVORNoCJdH54lGdFREWG
6KQpZWurW3AxOfuzemOT0vOb6lOflEfzeopbtwj4EUxfxcEaVwneM+dU/gMmtKpl
g37cTsBh4n5w02EcDfFnjSgNdJkpGf1QV3x8HGCj0U3EDjAxM2tUIPwo8bB71of4
eo4OAaUMt5j/0Psst68AC9jyhxEzU0p4G+D6HFPbpB4XyY1nh/WFK8iPAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAooZ9bhg7J+bkT3VApZXH33AIXZMB8GA1UdIwQY
MBaAFNRm0XDIELo0xC6SDoTUJihFl3+FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUdiUmNNZ1F1alRFTHBJT2hOUW1LRVdYZjRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8yMzA2ZjYtNmNjMC00OTgyLWE1MjMt
MTY4NDJiZGFkOTI1LzEvMUdiUmNNZ1F1alRFTHBJT2hOUW1LRVdYZjRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8yMzA2ZjYtNmNjMC00OTgyLWE1MjMtMTY4NDJiZGFkOTI1
LzEvMUdiUmNNZ1F1alRFTHBJT2hOUW1LRVdYZjRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAigU+lp6T
JmAirTgHXeV842zN0WiB064MZdu1eOypdqAmJtgaoWXJTTChr38X8o1Vcty/IT5y
CWdhn1HxMkL7G+6c6btaXChzKX9kbwV9tqfLbwdXyt36C9crBnirIXbzFtTJz5pk
yl8E9M7I/F5/B0XgGtIANef2uxLxKp05gqvI6rz8FK4KwWZzWkIUQuZRAWx0GQIT
BJgMmMqllHyoiLNwZ2XU2KLM2M+JErmnmJk0lZ6wAvCI4iHuMwJYkZOeiJoX8FRS
eG9ytmMfdWlc5kQvVICQ/0W1ZJz3MEaGAx8FBomlpk0hu+uK1VbP1JkSMGGk8TFq
238PNVX4wU+BDQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:48 2026 by rpki-client