This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft
File: GPijrw2MDVHeLd0mWtVNq5e95s4.mft (raw, json)
Hash identifier: Maq1QzV2TLN2fljjjTq1E6ztiEJ17eBZripnA6XnZD8=
Subject key identifier: B0:83:F3:3C:3E:D3:EF:36:2F:43:39:9D:80:3A:BB:40:A3:EE:23:91
Authority key identifier: 18:F8:A3:AF:0D:8C:0D:51:DE:2D:DD:26:5A:D5:4D:AB:97:BD:E6:CE
Certificate issuer: /CN=18f8a3af0d8c0d51de2ddd265ad54dab97bde6ce
Certificate serial: 019C420F2854A91B95F381F69AEEFE62049E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft
Manifest number: BD
Signing time: Mon 09 Feb 2026 11:00:15 +0000
Manifest this update: Mon 09 Feb 2026 11:00:15 +0000
Manifest next update: Tue 10 Feb 2026 11:00:15 +0000
Files and hashes: 1: GPijrw2MDVHeLd0mWtVNq5e95s4.crl (hash: 680AXTu6jToWO+n8ArA+6sDfV7OhjEiHcqF3eTur6OU=)
2: q-3PkcuXvbxG2AJOGo6sUKyZOAU.roa (hash: a1DkrhlznASzhUP99TVl/s5bY4rDfTZ4JGlmLv4QaHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:28:54:a9:1b:95:f3:81:f6:9a:ee:fe:62:04:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f8a3af0d8c0d51de2ddd265ad54dab97bde6ce
Validity
Not Before: Feb 9 11:00:15 2026 GMT
Not After : Feb 10 11:00:15 2026 GMT
Subject: CN=b083f33c3ed3ef362f43399d803abb40a3ee2391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:49:a4:d4:7c:c8:a8:0d:a5:8a:52:12:a9:30:
d2:a4:4c:52:00:9e:13:00:9d:0d:9e:b2:31:52:ed:
24:bf:d3:49:99:a9:85:c9:27:b9:4f:ca:75:0a:67:
63:de:e2:7d:0e:be:bb:fd:55:0b:a5:4d:a7:6b:cb:
44:f1:d0:29:16:cf:d8:cc:2d:ad:10:49:35:aa:44:
e5:58:42:7d:ae:a1:c4:5b:9d:11:82:7d:c8:be:ec:
ae:bd:cd:09:2c:2b:b2:00:99:63:a1:7c:b0:69:05:
e8:2b:3b:2c:62:fd:49:11:47:8a:d8:cd:c3:6b:69:
5f:c4:2a:62:12:0a:db:9b:44:5d:00:ae:1c:66:7f:
ed:2d:be:bd:ef:76:a9:a8:f6:d1:55:c1:a9:7a:f4:
a4:02:00:31:c8:7f:25:e3:72:da:e2:1d:6a:f1:bf:
50:81:03:01:49:46:66:5e:f4:14:8f:59:96:2b:53:
2c:53:0d:73:68:d4:5d:08:9d:ff:ba:d4:07:4d:ff:
b2:88:7f:e3:39:25:bc:c1:1c:f4:bf:54:35:67:ea:
b2:0e:a4:3c:42:c4:e8:56:02:6d:e1:c5:49:25:c0:
ca:5c:1f:ef:5c:60:a9:47:91:5c:5e:cc:c0:c0:2b:
7b:4a:ed:61:0e:90:9b:72:a9:a3:ba:f9:a9:6e:80:
95:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:83:F3:3C:3E:D3:EF:36:2F:43:39:9D:80:3A:BB:40:A3:EE:23:91
X509v3 Authority Key Identifier:
keyid:18:F8:A3:AF:0D:8C:0D:51:DE:2D:DD:26:5A:D5:4D:AB:97:BD:E6:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:fe:72:15:94:ed:ef:44:5f:65:ac:fc:9b:48:33:1f:ee:94:
2e:47:69:04:be:9a:79:61:27:97:92:05:0e:20:4d:0e:02:57:
8f:7f:1b:ed:1e:be:24:b9:17:d0:b5:02:3a:40:f6:26:50:36:
6a:eb:f2:15:19:80:21:bb:ea:c5:3d:f3:7b:83:1a:ee:aa:d0:
c4:67:ff:24:2e:fb:51:d4:64:ee:15:54:e7:41:94:67:db:7a:
82:92:e7:26:2f:10:65:7a:1e:21:45:19:7b:c9:60:d9:ae:bd:
e7:04:af:90:44:ea:cc:7e:e8:c0:85:2f:9b:91:e7:fd:67:1c:
a2:db:48:1a:cd:98:92:63:44:49:92:55:61:11:fa:25:bb:06:
64:4e:1b:00:b3:4f:62:c5:a4:fa:3b:e7:36:c8:e6:13:b5:6e:
5b:68:57:ec:e4:06:08:dc:f5:aa:ea:2a:dd:3f:b5:58:70:ec:
56:68:93:1c:de:38:5f:e2:14:be:8a:07:1e:41:53:a8:1d:b2:
cc:9c:ba:3c:d3:6b:69:97:8a:07:15:f5:92:73:87:a5:88:86:
68:ad:94:e6:b2:90:3c:1b:94:e4:85:bd:f0:bc:ae:d9:56:ea:
d9:2e:0a:6f:46:5e:6a:8e:c0:bd:35:1f:d6:fa:be:93:e6:23:
a0:f4:31:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:44 2026 by rpki-client