This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
File: G1WOmRP2tWzD1WD5T_E38s1vSGI.mft (raw, json)
Hash identifier: 3b8BTDaA7m+ob1xjs9+2fzCrq79gUw0t78ebANguG+o=
Subject key identifier: CA:E2:A3:C0:7A:54:FE:91:84:13:F8:80:9B:51:D0:9F:F2:D2:F1:1F
Authority key identifier: 1B:55:8E:99:13:F6:B5:6C:C3:D5:60:F9:4F:F1:37:F2:CD:6F:48:62
Certificate issuer: /CN=1b558e9913f6b56cc3d560f94ff137f2cd6f4862
Certificate serial: 019C4246B3714B32A814DFABEA1E5B8E58BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
Manifest number: 0827
Signing time: Mon 09 Feb 2026 12:00:55 +0000
Manifest this update: Mon 09 Feb 2026 12:00:55 +0000
Manifest next update: Tue 10 Feb 2026 12:00:55 +0000
Files and hashes: 1: G1WOmRP2tWzD1WD5T_E38s1vSGI.crl (hash: uEZlGMe+OFvgULJJkcr489GZeAzz/AwUaCBQ4Kd4qMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:b3:71:4b:32:a8:14:df:ab:ea:1e:5b:8e:58:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b558e9913f6b56cc3d560f94ff137f2cd6f4862
Validity
Not Before: Feb 9 12:00:55 2026 GMT
Not After : Feb 10 12:00:55 2026 GMT
Subject: CN=cae2a3c07a54fe918413f8809b51d09ff2d2f11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:8c:9c:7f:9e:6c:09:b0:01:43:0a:75:a4:
c2:9e:0e:d7:f1:f7:2f:c9:c6:f1:41:10:33:50:d1:
29:27:d4:7f:3c:5c:50:4d:06:90:78:fd:bd:84:49:
26:e5:02:2d:b2:e3:77:43:85:7f:72:9d:ca:f8:84:
6f:0d:dd:a2:74:98:a6:5a:82:65:95:69:a8:64:6f:
6e:ca:18:cb:4e:2e:ae:3b:f6:6c:16:2b:4d:38:00:
25:66:3f:05:00:f9:cc:22:f5:12:e5:18:57:2a:54:
b1:ba:08:76:d9:eb:78:89:81:6e:3d:cc:8b:73:9b:
bf:79:2d:90:b0:7e:2e:53:d4:51:74:ad:ce:c3:9f:
ea:19:17:36:d8:da:71:f3:38:18:2d:41:5b:2a:5c:
64:09:52:7e:e1:96:1f:7c:1d:5b:6f:b2:e3:1e:11:
2c:88:89:54:de:1e:95:99:03:a9:39:66:0b:f0:59:
91:3d:10:4b:bc:7a:18:19:fb:1d:ea:e4:ba:35:66:
ea:e1:c1:a9:ec:dc:81:cd:32:0f:7c:8e:16:1c:cc:
29:41:6e:06:60:d3:a1:4e:89:05:0f:a5:ba:6f:fd:
38:30:bf:18:5c:3b:79:1f:e0:a9:1e:35:46:d3:b1:
fd:39:75:ca:fc:0e:c6:9e:e3:44:a5:87:6c:f0:80:
56:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E2:A3:C0:7A:54:FE:91:84:13:F8:80:9B:51:D0:9F:F2:D2:F1:1F
X509v3 Authority Key Identifier:
keyid:1B:55:8E:99:13:F6:B5:6C:C3:D5:60:F9:4F:F1:37:F2:CD:6F:48:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:36:73:01:5d:9c:c2:f6:5e:1f:ea:e6:6f:a6:a6:fb:ff:de:
fd:24:40:a8:ab:bb:bd:c4:33:ab:fb:65:02:c1:94:d3:3c:80:
e6:f9:10:6a:a2:a1:63:1b:68:ca:8c:ec:91:88:fe:43:4c:2a:
53:70:72:0e:86:1b:ea:2d:1f:61:8e:d0:c7:7f:66:8f:55:88:
cc:1a:1d:15:30:f0:ea:2d:21:5d:da:a4:a8:2a:df:7f:e8:3a:
48:2a:a0:75:b9:95:e2:5e:61:7c:cc:e1:25:47:80:98:3e:60:
27:7f:f0:dc:17:be:0c:02:11:b4:ab:58:4d:4b:0b:02:64:a2:
74:c4:75:88:81:fe:95:1a:d3:19:27:c7:e7:5e:36:2d:ab:3e:
c8:a9:d9:15:df:ef:f4:c9:5a:12:b2:12:48:30:f7:53:ae:74:
51:1a:e7:a2:84:2e:82:ce:e5:f0:04:ba:11:85:2f:2b:8e:b3:
86:e6:bd:b2:f8:6f:e9:2d:53:ec:0a:da:5a:c3:51:5a:49:38:
5a:eb:1e:dd:5b:91:da:24:ec:77:10:54:8e:c5:d0:8b:ab:dd:
77:bd:16:f2:ad:1c:b1:3d:a4:1c:39:c5:cc:b2:d5:09:73:8f:
44:81:9f:4f:f0:d5:ed:31:1f:09:48:8d:94:eb:3a:e4:1f:9b:
93:00:9b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:58 2026 by rpki-client