This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
File: GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft (raw, json)
Hash identifier: YGa/64T3ioOYF3KeQcAZusvFFl9Sqmjimz3jEgOjX6o=
Subject key identifier: 33:9E:6B:9B:22:5E:DD:5B:EC:74:AD:D6:A4:E8:ED:5C:13:E0:82:18
Authority key identifier: 19:F5:E0:4B:65:55:F1:E2:C9:2D:7A:41:AC:10:6A:75:DE:A9:28:A2
Certificate issuer: /CN=19f5e04b6555f1e2c92d7a41ac106a75dea928a2
Certificate serial: 019C427D0129F13737758525D64008F156C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
Manifest number: 16B0
Signing time: Mon 09 Feb 2026 13:00:14 +0000
Manifest this update: Mon 09 Feb 2026 13:00:14 +0000
Manifest next update: Tue 10 Feb 2026 13:00:14 +0000
Files and hashes: 1: GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl (hash: ioJ5Xpn1DOW7+2hMLakflnMG8+89BbhW1E0Ugy8ATrs=)
2: ddzzutA4t5_bTS59x-ViP0VnX0A.roa (hash: LM9NwYw2Z3ZadyCbFgStTauj7LtTwJI2w9ItE8haIGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:01:29:f1:37:37:75:85:25:d6:40:08:f1:56:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f5e04b6555f1e2c92d7a41ac106a75dea928a2
Validity
Not Before: Feb 9 13:00:14 2026 GMT
Not After : Feb 10 13:00:14 2026 GMT
Subject: CN=339e6b9b225edd5bec74add6a4e8ed5c13e08218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c2:53:0d:ec:13:29:a0:9d:3d:f3:e7:d6:1d:
b0:81:78:f0:42:f4:d2:96:94:a0:ef:fb:ec:05:37:
c7:06:83:16:05:bd:43:f1:0c:69:88:fa:bb:20:78:
80:88:5a:02:7a:6e:39:1c:50:cb:30:07:58:6a:ae:
5f:43:f4:51:bf:9a:c3:13:fb:8f:5e:e8:68:03:37:
6b:c5:b0:a2:9a:1e:9b:fd:3f:e3:a2:de:3f:46:67:
68:2c:10:e0:8d:6f:7f:0c:cf:a8:81:77:5e:9c:d0:
95:01:46:1d:0d:51:3d:96:6f:1f:0e:4f:d9:f2:5b:
a3:99:29:2f:a1:39:4c:86:e2:36:4b:98:d9:83:53:
cd:0f:ce:fe:1d:2f:3e:43:39:d8:9d:02:a6:a1:35:
c7:bb:ef:9e:82:dd:54:af:49:5f:da:30:a9:4a:49:
7a:b3:e9:36:d2:31:05:aa:40:51:2a:8a:36:43:16:
2c:99:32:10:02:0b:7f:3b:94:01:0c:1c:01:55:77:
8e:01:e8:88:26:f7:80:bf:79:c9:f9:3e:45:b0:1f:
2c:5f:6a:26:d9:82:85:66:56:03:31:57:85:cf:20:
83:95:06:37:01:6f:67:88:73:18:fd:ab:0d:62:9b:
04:74:ad:c3:57:86:43:1a:75:5f:f0:95:51:da:55:
23:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9E:6B:9B:22:5E:DD:5B:EC:74:AD:D6:A4:E8:ED:5C:13:E0:82:18
X509v3 Authority Key Identifier:
keyid:19:F5:E0:4B:65:55:F1:E2:C9:2D:7A:41:AC:10:6A:75:DE:A9:28:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:de:73:93:d3:df:75:22:31:30:b3:2e:31:db:2f:38:3f:1b:
ff:7f:d9:8e:1e:13:ff:da:65:80:f7:9a:8a:5e:61:a8:f8:26:
88:e5:47:fd:63:cf:5f:3b:f2:4a:bd:a0:a9:ff:61:61:d2:ea:
8a:01:83:97:2c:58:cf:9b:4d:11:0a:6f:bd:96:00:41:16:cb:
39:10:7a:56:9b:33:fa:58:c9:2a:27:2a:40:98:7b:b5:0b:f1:
51:9c:cf:a8:8b:93:b9:94:3f:73:6d:75:0d:f9:79:23:18:4f:
af:0a:85:2b:26:c5:40:88:86:9a:f5:55:6a:7b:fa:ff:17:28:
be:ca:b8:58:28:80:df:85:9e:4f:87:55:6d:ad:75:ec:86:77:
89:63:27:56:e4:c6:35:79:38:15:4b:43:50:95:84:88:a5:41:
ff:4e:ea:68:92:4d:89:3d:2c:34:dc:c4:08:c2:c0:25:3e:60:
d8:33:85:78:30:9b:0d:81:31:d0:fd:04:ec:3a:be:cf:5f:74:
a8:d1:db:05:e3:e8:be:b5:1f:eb:a8:38:83:df:d8:0d:b3:91:
dc:04:f7:22:0c:a2:02:3e:74:12:0e:54:59:9b:df:86:26:74:
f4:8f:80:be:63:b2:32:c1:86:e7:69:3e:57:70:9f:59:8d:48:
0e:1b:fd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:32 2026 by rpki-client