This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.mft
File: Gveb-Kq2vgFJ2NtcigztvJVw8W4.mft (raw, json)
Hash identifier: PajlyPUr/ow7JnUCeLKrBnoJ/2c0CegvNFgMYMjSLjQ=
Subject key identifier: EC:7A:74:22:A0:67:3F:2C:F8:20:AB:8B:6A:3B:2D:90:FD:02:B3:D6
Authority key identifier: 1A:F7:9B:F8:AA:B6:BE:01:49:D8:DB:5C:8A:0C:ED:BC:95:70:F1:6E
Certificate issuer: /CN=1af79bf8aab6be0149d8db5c8a0cedbc9570f16e
Certificate serial: 019C42B41AED852074D9B5CA64ACD52BED89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gveb-Kq2vgFJ2NtcigztvJVw8W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.mft
Manifest number: 02F6
Signing time: Mon 09 Feb 2026 14:00:25 +0000
Manifest this update: Mon 09 Feb 2026 14:00:25 +0000
Manifest next update: Tue 10 Feb 2026 14:00:25 +0000
Files and hashes: 1: Gveb-Kq2vgFJ2NtcigztvJVw8W4.crl (hash: ASjRj3OinneFbfIjLihrWPlS+AtcvqRV7+NPti9SrqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gveb-Kq2vgFJ2NtcigztvJVw8W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:1a:ed:85:20:74:d9:b5:ca:64:ac:d5:2b:ed:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1af79bf8aab6be0149d8db5c8a0cedbc9570f16e
Validity
Not Before: Feb 9 14:00:25 2026 GMT
Not After : Feb 10 14:00:25 2026 GMT
Subject: CN=ec7a7422a0673f2cf820ab8b6a3b2d90fd02b3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bf:ee:c3:35:c6:74:2c:97:8c:4e:10:ed:a2:
fe:ee:a2:09:97:d3:3a:0b:b5:a7:cd:ab:43:85:c8:
a7:fc:ca:5e:80:c8:11:4d:c8:4a:b7:aa:28:5c:2f:
71:da:c4:af:7c:5d:dd:66:0a:3b:2f:8a:5f:d0:dc:
f6:45:c5:fd:da:b4:a5:c5:82:39:2f:8c:46:0d:eb:
ce:d9:d5:9d:ac:2e:9c:fb:2d:01:cf:6d:3c:17:81:
b8:4f:c6:f7:54:7a:06:9c:c5:d3:d9:ef:22:f5:00:
a7:3b:a6:d3:9d:89:26:51:be:62:70:e1:2b:8a:cf:
16:a7:f5:7a:49:a6:91:19:99:33:7d:37:f8:c1:95:
99:ad:aa:8a:5f:9b:c1:2e:b8:53:ca:bb:37:58:fa:
65:dc:4a:4b:c1:fb:29:a0:31:9e:c3:82:cc:de:88:
b4:d7:93:c1:f3:12:b3:80:dd:dc:ec:e5:15:0b:08:
bb:51:af:5b:b1:2c:f5:19:7e:5f:52:71:ee:5d:aa:
c3:b7:5c:8e:eb:01:6f:32:b9:20:6c:88:6a:df:37:
82:36:f2:d3:f4:2b:12:ce:12:2f:38:f0:0d:34:69:
2c:ef:b9:ed:28:5b:c4:b8:a7:42:c7:d9:7a:41:2d:
4f:87:59:db:7d:de:72:0d:4c:10:9d:c3:29:08:5e:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7A:74:22:A0:67:3F:2C:F8:20:AB:8B:6A:3B:2D:90:FD:02:B3:D6
X509v3 Authority Key Identifier:
keyid:1A:F7:9B:F8:AA:B6:BE:01:49:D8:DB:5C:8A:0C:ED:BC:95:70:F1:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gveb-Kq2vgFJ2NtcigztvJVw8W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e3:ef:72:1f:b5:90:09:f4:eb:4c:2a:88:58:b5:0d:14:a0:
e4:77:f6:01:15:2f:02:7a:8a:d4:2f:ac:59:84:58:bd:5a:a6:
f3:51:13:fc:e3:ef:3d:30:e1:09:60:42:c6:12:03:b6:b8:b1:
ff:ca:d4:ee:13:5c:08:ac:d7:33:80:c7:10:14:95:49:e1:a6:
00:e4:15:89:38:c8:70:a7:4e:b6:d7:14:36:2b:6c:05:17:e2:
14:1e:a1:69:f2:59:4d:84:b7:ec:40:d8:36:56:55:54:5d:b0:
dc:44:8c:12:ac:5e:b0:99:87:69:a6:6f:f7:dd:92:0b:92:ad:
93:42:59:52:26:55:c8:33:10:ab:a5:75:04:49:4e:8d:68:24:
8d:96:19:f0:ab:4c:1b:a7:fd:91:e9:85:e5:67:4d:08:e7:ec:
3e:a6:f9:66:94:d7:e0:7c:e5:76:65:9e:00:c8:2c:69:1d:ef:
1a:d1:e7:72:d0:be:08:3c:30:f6:e2:1a:34:3f:a9:f7:e7:44:
94:f4:4f:ac:53:23:57:ee:dc:8a:32:ff:89:e3:4f:a6:5a:a1:
9a:8b:89:74:0d:38:09:4f:72:f0:43:bf:3b:cf:99:84:fa:08:
bd:62:de:7d:63:22:d7:2c:61:49:87:99:5b:14:68:25:7c:cc:
0f:78:99:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:45 2026 by rpki-client